Ronnie,
> 0x0c is Cancel
> 0x0f is Notify
ahh, thanks
I've now written a getinfo level scanner, and got the following:
Running SMB2-SCANGETINFO
level 0x0401 is 40 bytes
level 0x0501 is 24 bytes
level 0x0601 is 8 bytes
level 0x0701 is 4 bytes
level 0x0801 is 4 bytes
level 0x0e01 is 8 bytes
level 0x1001 is 4 bytes
level 0x1101 is 4 bytes
level 0x1201 is 144 bytes
level 0x1501 is 28 bytes
level 0x1601 is 38 bytes
level 0x1c01 is 16 bytes
level 0x2201 is 56 bytes
level 0x2301 is 8 bytes
level 0x0102 is 18 bytes
level 0x0302 is 24 bytes
level 0x0402 is 8 bytes
level 0x0502 is 20 bytes
level 0x0602 is 48 bytes
level 0x0702 is 32 bytes
level 0x0802 is 64 bytes
level 0x0003 is 20 bytes
SMB2-SCANGETINFO took 1.36644 secs
I've matched the hex output to the closest levels I recognise in SMB,
and have come up with the following names:
/* fs information levels */
#define SMB2_GETINFO_FS_01 0x0102
#define SMB2_GETINFO_FS_03 0x0302
#define SMB2_GETINFO_FS_04 0x0402
#define SMB2_GETINFO_FS_ATTRIB_INFO 0x0502
#define SMB2_GETINFO_FS_06 0x0602
#define SMB2_GETINFO_FS_07 0x0702
#define SMB2_GETINFO_FS_08 0x0802
/* class 3 levels */
#define SMB2_GETINFO_3_00 0x0003
/* file information levels */
#define SMB2_GETINFO_FILE_BASIC_INFO 0x0401
#define SMB2_GETINFO_FILE_05 0x0501
#define SMB2_GETINFO_FILE_06 0x0601
#define SMB2_GETINFO_FILE_07 0x0701
#define SMB2_GETINFO_FILE_ACCESS_INFO 0x0801
#define SMB2_GETINFO_FILE_0E 0x0e01
#define SMB2_GETINFO_FILE_10 0x1001
#define SMB2_GETINFO_FILE_11 0x1101
#define SMB2_GETINFO_FILE_ALL_INFO 0x1201
#define SMB2_GETINFO_FILE_NAME_INFO 0x1501
#define SMB2_GETINFO_FILE_STREAM_INFO 0x1601
#define SMB2_GETINFO_FILE_1C 0x1c01
#define SMB2_GETINFO_FILE_STANDARD_INFO 0x2201
#define SMB2_GETINFO_FILE_ATTRIB_INFO 0x2301