2.2.8.1.3 SMB_INFO_QUERY_EAS_FROM_LIST

This information level structure is used in TRANS2_FIND_FIRST2 (section 2.2.6.2) and TRANS2_FIND_NEXT2 (section 2.2.6.3) responses to return the SMB_INFO_QUERY_EA_SIZE data along with a specific list of EAs for all files that match the request's search criteria. The requested EAs are provided in the Trans2_Data block of the request.

 SMB_INFO_QUERY_EAS_FROM_LIST[SearchCount]
   {
   ULONG               ResumeKey (optional);
   SMB_DATE            CreationDate;
   SMB_TIME            CreationTime;
   SMB_DATE            LastAccessDate;
   SMB_TIME            LastAccessTime;
   SMB_DATE            LastWriteDate;
   SMB_TIME            LastWriteTime;
   ULONG               FileDataSize;
   ULONG               AllocationSize;
   SMB_FILE_ATTRIBUTES Attributes;
   SMB_FEA_LIST        ExtendedAttributeList;
   UCHAR               FileNameLength;
   UCHAR               FileName[];
   } 
  

ResumeKey: (4 bytes): This field is optional. If the SMB_FIND_RETURN_RESUME_KEYS bit is set in the Flags field of the TRANS2_FIND_FIRST2 Request (section 2.2.6.2.1) parameters, this field MUST contain the server-generated resume key. The resume key MUST be supplied in subsequent TRANS2_FIND_NEXT2 Requests (section 2.2.6.3.1) to continue the search. If the SMB_FIND_RETURN_RESUME_KEYS bit is not set, the server MUST NOT include this field.

CreationDate: (2 bytes): This field contains the date when the file was created.

CreationTime: (2 bytes): This field contains the time when the file was created.

LastAccessDate: (2 bytes): This field contains the date when the file was last accessed.

LastAccessTime: (2 bytes): This field contains the time when the file was last accessed.

LastWriteDate: (2 bytes): This field contains the date when data was last written to the file.

LastWriteTime: (2 bytes): This field contains the time when data was last written to the file.

FileDataSize: (4 bytes): This field contains the file size, in filesystem allocation units.

AllocationSize: (4 bytes): This field contains the size of the filesystem allocation unit, in bytes.

Attributes: (2 bytes): This field contains the file attributes.

ExtendedAttributeList: (variable): A list of all of the extended attribute (EA) name/value pairs assigned to the file.

FileNameLength: (1 byte): This field contains the length of the FileName field, in bytes.<155>

FileName: (variable): This field contains the name of the file.<156>