| Field name | Type | Description | Versions |
|---|---|---|---|
| nt.access_mask | Unsigned 32-bit integer | Access required | 0.10.6 to 0.99.0 |
| nt.access_mask.access_sacl | Boolean | Access SACL | 0.9.10 to 0.99.0 |
| nt.access_mask.delete | Boolean | Delete | 0.9.10 to 0.99.0 |
| nt.access_mask.generic_all | Boolean | Generic all | 0.9.10 to 0.99.0 |
| nt.access_mask.generic_execute | Boolean | Generic execute | 0.9.10 to 0.99.0 |
| nt.access_mask.generic_read | Boolean | Generic read | 0.9.10 to 0.99.0 |
| nt.access_mask.generic_write | Boolean | Generic write | 0.9.10 to 0.99.0 |
| nt.access_mask.maximum_allowed | Boolean | Maximum allowed | 0.9.10 to 0.99.0 |
| nt.access_mask.read_control | Boolean | Read control | 0.9.10 to 0.99.0 |
| nt.access_mask.specific_0 | Boolean | Specific access, bit 0 | 0.9.10 to 0.99.0 |
| nt.access_mask.specific_1 | Boolean | Specific access, bit 1 | 0.9.10 to 0.99.0 |
| nt.access_mask.specific_10 | Boolean | Specific access, bit 10 | 0.9.10 to 0.99.0 |
| nt.access_mask.specific_11 | Boolean | Specific access, bit 11 | 0.9.10 to 0.99.0 |
| nt.access_mask.specific_12 | Boolean | Specific access, bit 12 | 0.9.10 to 0.99.0 |
| nt.access_mask.specific_13 | Boolean | Specific access, bit 13 | 0.9.10 to 0.99.0 |
| nt.access_mask.specific_14 | Boolean | Specific access, bit 14 | 0.9.10 to 0.99.0 |
| nt.access_mask.specific_15 | Boolean | Specific access, bit 15 | 0.9.10 to 0.99.0 |
| nt.access_mask.specific_2 | Boolean | Specific access, bit 2 | 0.9.10 to 0.99.0 |
| nt.access_mask.specific_3 | Boolean | Specific access, bit 3 | 0.9.10 to 0.99.0 |
| nt.access_mask.specific_4 | Boolean | Specific access, bit 4 | 0.9.10 to 0.99.0 |
| nt.access_mask.specific_5 | Boolean | Specific access, bit 5 | 0.9.10 to 0.99.0 |
| nt.access_mask.specific_6 | Boolean | Specific access, bit 6 | 0.9.10 to 0.99.0 |
| nt.access_mask.specific_7 | Boolean | Specific access, bit 7 | 0.9.10 to 0.99.0 |
| nt.access_mask.specific_8 | Boolean | Specific access, bit 8 | 0.9.10 to 0.99.0 |
| nt.access_mask.specific_9 | Boolean | Specific access, bit 9 | 0.9.10 to 0.99.0 |
| nt.access_mask.synchronise | Boolean | Synchronise | 0.9.10 to 0.99.0 |
| nt.access_mask.write_dac | Boolean | Write DAC | 0.9.10 to 0.99.0 |
| nt.access_mask.write_owner | Boolean | Write owner | 0.9.10 to 0.99.0 |
| nt.ace.flags.container_inherit | Boolean | Container Inherit | 0.10.6 to 0.99.0 |
| nt.ace.flags.failed_access | Boolean | Audit Failed Accesses | 0.10.6 to 0.99.0 |
| nt.ace.flags.inherit_only | Boolean | Inherit Only | 0.10.6 to 0.99.0 |
| nt.ace.flags.inherited_ace | Boolean | Inherited ACE | 0.10.6 to 0.99.0 |
| nt.ace.flags.non_propagate_inherit | Boolean | Non-Propagate Inherit | 0.10.6 to 0.99.0 |
| nt.ace.flags.object_inherit | Boolean | Object Inherit | 0.10.6 to 0.99.0 |
| nt.ace.flags.successful_access | Boolean | Audit Successful Accesses | 0.10.6 to 0.99.0 |
| nt.ace.size | Unsigned 16-bit integer | Size | 0.10.6 to 0.99.0 |
| nt.ace.type | Unsigned 8-bit integer | Type | 0.10.6 to 0.99.0 |
| nt.acl.num_aces | Unsigned 32-bit integer | Num ACEs | 0.10.6 to 0.99.0 |
| nt.acl.revision | Unsigned 16-bit integer | Revision | 0.10.6 to 0.99.0 |
| nt.acl.size | Unsigned 16-bit integer | Size | 0.10.6 to 0.99.0 |
| nt.sec_desc.revision | Unsigned 16-bit integer | Revision | 0.10.6 to 0.99.0 |
| nt.sec_desc.type.dacl_auto_inherit_req | Boolean | DACL Auto Inherit Required | 0.10.6 to 0.99.0 |
| nt.sec_desc.type.dacl_auto_inherited | Boolean | DACL Auto Inherited | 0.10.6 to 0.99.0 |
| nt.sec_desc.type.dacl_defaulted | Boolean | DACL Defaulted | 0.10.6 to 0.99.0 |
| nt.sec_desc.type.dacl_present | Boolean | DACL Present | 0.10.6 to 0.99.0 |
| nt.sec_desc.type.dacl_protected | Boolean | DACL Protected | 0.10.6 to 0.99.0 |
| nt.sec_desc.type.dacl_trusted | Boolean | DACL Trusted | 0.10.10 to 0.99.0 |
| nt.sec_desc.type.group_defaulted | Boolean | Group Defaulted | 0.10.6 to 0.99.0 |
| nt.sec_desc.type.owner_defaulted | Boolean | Owner Defaulted | 0.10.6 to 0.99.0 |
| nt.sec_desc.type.rm_control_valid | Boolean | RM Control Valid | 0.10.10 to 0.99.0 |
| nt.sec_desc.type.sacl_auto_inherit_req | Boolean | SACL Auto Inherit Required | 0.10.6 to 0.99.0 |
| nt.sec_desc.type.sacl_auto_inherited | Boolean | SACL Auto Inherited | 0.10.6 to 0.99.0 |
| nt.sec_desc.type.sacl_defaulted | Boolean | SACL Defaulted | 0.10.6 to 0.99.0 |
| nt.sec_desc.type.sacl_present | Boolean | SACL Present | 0.10.6 to 0.99.0 |
| nt.sec_desc.type.sacl_protected | Boolean | SACL Protected | 0.10.6 to 0.99.0 |
| nt.sec_desc.type.self_relative | Boolean | Self Relative | 0.10.6 to 0.99.0 |
| nt.sec_desc.type.server_security | Boolean | Server Security | 0.10.10 to 0.99.0 |
| nt.sid | String | SID | 0.10.6 to 0.99.0 |
| nt.sid.num_auth | Unsigned 8-bit integer | Num Auth | 0.10.6 to 0.99.0 |
| nt.sid.revision | Unsigned 8-bit integer | Revision | 0.10.6 to 0.99.0 |
| smb.access.append | Boolean | Append | 0.9.0 to 0.99.0 |
| smb.access.caching | Boolean | Caching | 0.9.0 to 0.99.0 |
| smb.access.delete | Boolean | Delete | 0.9.0 to 0.99.0 |
| smb.access.delete_child | Boolean | Delete Child | 0.9.0 to 0.99.0 |
| smb.access.execute | Boolean | Execute | 0.9.0 to 0.99.0 |
| smb.access.generic_all | Boolean | Generic All | 0.9.0 to 0.99.0 |
| smb.access.generic_execute | Boolean | Generic Execute | 0.9.0 to 0.99.0 |
| smb.access.generic_read | Boolean | Generic Read | 0.9.0 to 0.99.0 |
| smb.access.generic_write | Boolean | Generic Write | 0.9.0 to 0.99.0 |
| smb.access.locality | Unsigned 16-bit integer | Locality | 0.9.0 to 0.99.0 |
| smb.access.maximum_allowed | Boolean | Maximum Allowed | 0.9.0 to 0.99.0 |
| smb.access.mode | Unsigned 16-bit integer | Access Mode | 0.9.0 to 0.99.0 |
| smb.access.read | Boolean | Read | 0.9.0 to 0.99.0 |
| smb.access.read_attributes | Boolean | Read Attributes | 0.9.0 to 0.99.0 |
| smb.access.read_control | Boolean | Read Control | 0.9.0 to 0.99.0 |
| smb.access.read_ea | Boolean | Read EA | 0.9.0 to 0.99.0 |
| smb.access.sharing | Unsigned 16-bit integer | Sharing Mode | 0.9.0 to 0.99.0 |
| smb.access.smb.date | Unsigned 16-bit integer | Last Access Date | 0.9.0 to 0.99.0 |
| smb.access.smb.time | Unsigned 16-bit integer | Last Access Time | 0.9.0 to 0.99.0 |
| smb.access.synchronize | Boolean | Synchronize | 0.9.0 to 0.99.0 |
| smb.access.system_security | Boolean | System Security | 0.9.0 to 0.99.0 |
| smb.access.time | Date/Time stamp | Last Access | 0.9.0 to 0.99.0 |
| smb.access.write | Boolean | Write | 0.9.0 to 0.99.0 |
| smb.access.write_attributes | Boolean | Write Attributes | 0.9.0 to 0.99.0 |
| smb.access.write_dac | Boolean | Write DAC | 0.9.0 to 0.99.0 |
| smb.access.write_ea | Boolean | Write EA | 0.9.0 to 0.99.0 |
| smb.access.write_owner | Boolean | Write Owner | 0.9.0 to 0.99.0 |
| smb.access.writethrough | Boolean | Writethrough | 0.9.0 to 0.99.0 |
| smb.access_mask | Unsigned 32-bit integer | Access required | 0.9.10 to 0.10.6 |
| smb.account | String | Account | 0.9.0 to 0.99.0 |
| smb.ace.flags.container_inherit | Boolean | Container Inherit | 0.9.0 to 0.10.6 |
| smb.ace.flags.failed_access | Boolean | Audit Failed Accesses | 0.9.0 to 0.10.6 |
| smb.ace.flags.inherit_only | Boolean | Inherit Only | 0.9.0 to 0.10.6 |
| smb.ace.flags.inherited_ace | Boolean | Inherited ACE | 0.9.0 to 0.10.6 |
| smb.ace.flags.non_propagate_inherit | Boolean | Non-Propagate Inherit | 0.9.0 to 0.10.6 |
| smb.ace.flags.object_inherit | Boolean | Object Inherit | 0.9.0 to 0.10.6 |
| smb.ace.flags.successful_access | Boolean | Audit Successful Accesses | 0.9.0 to 0.10.6 |
| smb.ace.size | Unsigned 16-bit integer | Size | 0.9.0 to 0.10.6 |
| smb.ace.type | Unsigned 8-bit integer | Type | 0.9.0 to 0.10.6 |
| smb.acl.num_aces | Unsigned 32-bit integer | Num ACEs | 0.9.0 to 0.10.6 |
| smb.acl.revision | Unsigned 8-bit integer | Revision | 0.9.0 to 0.10.6 |
| smb.acl.size | Unsigned 16-bit integer | Size | 0.9.0 to 0.10.6 |
| smb.actual_free_alloc_units | Unsigned 64-bit integer | Actual Free Units | 0.9.4 to 0.99.0 |
| smb.alignment | Unsigned 32-bit integer | Alignment | 0.9.0 to 0.99.0 |
| smb.alloc.count | Unsigned 32-bit integer | Allocation Block Count | 0.9.7 to 0.99.0 |
| smb.alloc.size | Unsigned 32-bit integer | Allocation Block Count | 0.9.7 to 0.99.0 |
| smb.alloc_size | Unsigned 32-bit integer | Allocation Size | 0.9.0 to 0.99.0 |
| smb.andxoffset | Unsigned 16-bit integer | AndXOffset | 0.9.0 to 0.99.0 |
| smb.ansi_password | Byte array | ANSI Password | 0.9.0 to 0.99.0 |
| smb.ansi_pwlen | Unsigned 16-bit integer | ANSI Password Length | 0.9.0 to 0.99.0 |
| smb.attribute | Unsigned 32-bit integer | Attribute | 0.10.14 to 0.99.0 |
| smb.avail.units | Unsigned 32-bit integer | Available Units | 0.9.0 to 0.99.0 |
| smb.backup.time | Date/Time stamp | Backed-up | 0.9.7 to 0.99.0 |
| smb.bcc | Unsigned 16-bit integer | Byte Count (BCC) | 0.9.0 to 0.99.0 |
| smb.blocksize | Unsigned 16-bit integer | Block Size | 0.9.0 to 0.99.0 |
| smb.bpu | Unsigned 16-bit integer | Blocks Per Unit | 0.9.0 to 0.99.0 |
| smb.buffer_format | Unsigned 8-bit integer | Buffer Format | 0.9.0 to 0.99.0 |
| smb.caller_free_alloc_units | Unsigned 64-bit integer | Caller Free Units | 0.9.4 to 0.99.0 |
| smb.cancel_to | Frame number | Cancel to | 0.9.0 to 0.99.0 |
| smb.change.time | Date/Time stamp | Change | 0.9.0 to 0.99.0 |
| smb.change_count | Unsigned 16-bit integer | Change Count | 0.9.5 to 0.99.0 |
| smb.cmd | Unsigned 8-bit integer | SMB Command | 0.9.0 to 0.99.0 |
| smb.compressed.chunk_shift | Unsigned 8-bit integer | Chunk Shift | 0.9.0 to 0.99.0 |
| smb.compressed.cluster_shift | Unsigned 8-bit integer | Cluster Shift | 0.9.0 to 0.99.0 |
| smb.compressed.file_size | Unsigned 64-bit integer | Compressed Size | 0.9.0 to 0.99.0 |
| smb.compressed.format | Unsigned 16-bit integer | Compression Format | 0.9.0 to 0.99.0 |
| smb.compressed.unit_shift | Unsigned 8-bit integer | Unit Shift | 0.9.0 to 0.99.0 |
| smb.connect.flags.dtid | Boolean | Disconnect TID | 0.9.0 to 0.99.0 |
| smb.connect.support.dfs | Boolean | In Dfs | 0.9.0 to 0.99.0 |
| smb.connect.support.search | Boolean | Search Bits | 0.9.0 to 0.99.0 |
| smb.continuation_to | Frame number | Continuation to | 0.9.0 to 0.99.0 |
| smb.copy.flags.dest_mode | Boolean | Destination mode | 0.9.5 to 0.99.0 |
| smb.copy.flags.dir | Boolean | Must be directory | 0.9.5 to 0.99.0 |
| smb.copy.flags.ea_action | Boolean | EA action if EAs not supported on dest | 0.9.5 to 0.99.0 |
| smb.copy.flags.file | Boolean | Must be file | 0.9.5 to 0.99.0 |
| smb.copy.flags.source_mode | Boolean | Source mode | 0.9.5 to 0.99.0 |
| smb.copy.flags.tree_copy | Boolean | Tree copy | 0.9.5 to 0.99.0 |
| smb.copy.flags.verify | Boolean | Verify writes | 0.9.5 to 0.99.0 |
| smb.count | Unsigned 32-bit integer | Count | 0.9.0 to 0.99.0 |
| smb.count_high | Unsigned 16-bit integer | Count High (multiply with 64K) | 0.9.15 to 0.99.0 |
| smb.count_low | Unsigned 16-bit integer | Count Low | 0.9.15 to 0.99.0 |
| smb.create.action | Unsigned 32-bit integer | Create action | 0.9.0 to 0.99.0 |
| smb.create.disposition | Unsigned 32-bit integer | Disposition | 0.9.0 to 0.99.0 |
| smb.create.file_id | Unsigned 32-bit integer | Server unique file ID | 0.9.5 to 0.99.0 |
| smb.create.smb.date | Unsigned 16-bit integer | Create Date | 0.9.0 to 0.99.0 |
| smb.create.smb.time | Unsigned 16-bit integer | Create Time | 0.9.0 to 0.99.0 |
| smb.create.time | Date/Time stamp | Created | 0.9.0 to 0.99.0 |
| smb.data_disp | Unsigned 16-bit integer | Data Displacement | 0.9.0 to 0.99.0 |
| smb.data_len | Unsigned 16-bit integer | Data Length | 0.9.0 to 0.99.0 |
| smb.data_len_high | Unsigned 16-bit integer | Data Length High (multiply with 64K) | 0.9.15 to 0.99.0 |
| smb.data_len_low | Unsigned 16-bit integer | Data Length Low | 0.9.15 to 0.99.0 |
| smb.data_offset | Unsigned 16-bit integer | Data Offset | 0.9.0 to 0.99.0 |
| smb.data_size | Unsigned 32-bit integer | Data Size | 0.9.0 to 0.99.0 |
| smb.dc | Unsigned 16-bit integer | Data Count | 0.9.0 to 0.99.0 |
| smb.dcm | Unsigned 16-bit integer | Data Compaction Mode | 0.9.0 to 0.99.0 |
| smb.delete_pending | Unsigned 16-bit integer | Delete Pending | 0.9.0 to 0.99.0 |
| smb.destination_name | String | Destination Name | 0.9.5 to 0.99.0 |
| smb.device.floppy | Boolean | Floppy | 0.9.0 to 0.99.0 |
| smb.device.mounted | Boolean | Mounted | 0.9.0 to 0.99.0 |
| smb.device.read_only | Boolean | Read Only | 0.9.0 to 0.99.0 |
| smb.device.remote | Boolean | Remote | 0.9.0 to 0.99.0 |
| smb.device.removable | Boolean | Removable | 0.9.0 to 0.99.0 |
| smb.device.type | Unsigned 32-bit integer | Device Type | 0.9.0 to 0.99.0 |
| smb.device.virtual | Boolean | Virtual | 0.9.0 to 0.99.0 |
| smb.device.write_once | Boolean | Write Once | 0.9.0 to 0.99.0 |
| smb.dfs.flags.fielding | Boolean | Fielding | 0.9.0 to 0.99.0 |
| smb.dfs.flags.server_hold_storage | Boolean | Hold Storage | 0.9.0 to 0.99.0 |
| smb.dfs.num_referrals | Unsigned 16-bit integer | Num Referrals | 0.9.0 to 0.99.0 |
| smb.dfs.path_consumed | Unsigned 16-bit integer | Path Consumed | 0.9.0 to 0.99.0 |
| smb.dfs.referral.alt_path | String | Alt Path | 0.9.0 to 0.99.0 |
| smb.dfs.referral.alt_path_offset | Unsigned 16-bit integer | Alt Path Offset | 0.9.0 to 0.99.0 |
| smb.dfs.referral.flags.strip | Boolean | Strip | 0.9.0 to 0.99.0 |
| smb.dfs.referral.node | String | Node | 0.9.0 to 0.99.0 |
| smb.dfs.referral.node_offset | Unsigned 16-bit integer | Node Offset | 0.9.0 to 0.99.0 |
| smb.dfs.referral.path | String | Path | 0.9.0 to 0.99.0 |
| smb.dfs.referral.path_offset | Unsigned 16-bit integer | Path Offset | 0.9.0 to 0.99.0 |
| smb.dfs.referral.proximity | Unsigned 16-bit integer | Proximity | 0.9.0 to 0.99.0 |
| smb.dfs.referral.server.type | Unsigned 16-bit integer | Server Type | 0.9.0 to 0.99.0 |
| smb.dfs.referral.size | Unsigned 16-bit integer | Size | 0.9.0 to 0.99.0 |
| smb.dfs.referral.ttl | Unsigned 16-bit integer | TTL | 0.9.0 to 0.99.0 |
| smb.dfs.referral.version | Unsigned 16-bit integer | Version | 0.9.0 to 0.99.0 |
| smb.dialect.index | Unsigned 16-bit integer | Selected Index | 0.9.0 to 0.99.0 |
| smb.dialect.name | String | Name | 0.9.0 to 0.99.0 |
| smb.dir.count | Unsigned 32-bit integer | Root Directory Count | 0.9.7 to 0.99.0 |
| smb.dir_name | String | Directory | 0.9.0 to 0.99.0 |
| smb.disposition.delete_on_close | Boolean | Delete on close | 0.10.13 to 0.99.0 |
| smb.ea.data | Byte array | EA Data | 0.9.13 to 0.99.0 |
| smb.ea.data_length | Unsigned 16-bit integer | EA Data Length | 0.9.13 to 0.99.0 |
| smb.ea.error_offset | Unsigned 32-bit integer | EA Error offset | 0.9.0 to 0.99.0 |
| smb.ea.flags | Unsigned 8-bit integer | EA Flags | 0.9.13 to 0.99.0 |
| smb.ea.length | Unsigned 32-bit integer | EA Length | 0.9.0 to 0.9.13 |
| smb.ea.list_length | Unsigned 32-bit integer | EA List Length | 0.9.13 to 0.99.0 |
| smb.ea.name | String | EA Name | 0.9.13 to 0.99.0 |
| smb.ea.name_length | Unsigned 8-bit integer | EA Name Length | 0.9.13 to 0.99.0 |
| smb.ea_size | Unsigned 32-bit integer | EA Size | 0.9.0 to 0.9.13 |
| smb.echo.count | Unsigned 16-bit integer | Echo Count | 0.9.0 to 0.99.0 |
| smb.echo.data | Byte array | Echo Data | 0.9.0 to 0.99.0 |
| smb.echo.seq_num | Unsigned 16-bit integer | Echo Seq Num | 0.9.0 to 0.99.0 |
| smb.encryption_key | Byte array | Encryption Key | 0.9.0 to 0.99.0 |
| smb.encryption_key_length | Unsigned 16-bit integer | Key Length | 0.9.0 to 0.99.0 |
| smb.end_of_file | Unsigned 64-bit integer | End Of File | 0.9.0 to 0.99.0 |
| smb.end_of_search | Unsigned 16-bit integer | End Of Search | 0.9.0 to 0.99.0 |
| smb.error_class | Unsigned 8-bit integer | Error Class | 0.9.0 to 0.99.0 |
| smb.error_code | Unsigned 16-bit integer | Error Code | 0.9.0 to 0.99.0 |
| smb.ext_attr | Byte array | Extended Attributes | 0.9.0 to 0.99.0 |
| smb.ff2_loi | Unsigned 16-bit integer | Level of Interest | 0.9.0 to 0.99.0 |
| smb.fid | Unsigned 16-bit integer | FID | 0.9.0 to 0.99.0 |
| smb.file | String | File Name | 0.9.0 to 0.99.0 |
| smb.file.attribute.archive | Boolean | Archive | 0.9.0 to 0.9.1 |
| smb.file.attribute.backup_semantics | Boolean | Backup | 0.9.0 to 0.9.1 |
| smb.file.attribute.compressed | Boolean | Compressed | 0.9.0 to 0.9.1 |
| smb.file.attribute.delete_on_close | Boolean | Delete on Close | 0.9.0 to 0.9.1 |
| smb.file.attribute.device | Boolean | Device | 0.9.0 to 0.9.1 |
| smb.file.attribute.directory | Boolean | Directory | 0.9.0 to 0.9.1 |
| smb.file.attribute.encrypted | Boolean | Encrypted | 0.9.0 to 0.9.1 |
| smb.file.attribute.hidden | Boolean | Hidden | 0.9.0 to 0.9.1 |
| smb.file.attribute.no_buffering | Boolean | No Buffering | 0.9.0 to 0.9.1 |
| smb.file.attribute.normal | Boolean | Normal | 0.9.0 to 0.9.1 |
| smb.file.attribute.not_content_indexed | Boolean | Content Indexed | 0.9.0 to 0.9.1 |
| smb.file.attribute.offline | Boolean | Offline | 0.9.0 to 0.9.1 |
| smb.file.attribute.posix_semantics | Boolean | Posix | 0.9.0 to 0.9.1 |
| smb.file.attribute.random_access | Boolean | Random Access | 0.9.0 to 0.9.1 |
| smb.file.attribute.read_only | Boolean | Read Only | 0.9.0 to 0.9.1 |
| smb.file.attribute.reparse | Boolean | Reparse Point | 0.9.0 to 0.9.1 |
| smb.file.attribute.sequential_scan | Boolean | Sequential Scan | 0.9.0 to 0.9.1 |
| smb.file.attribute.sparse | Boolean | Sparse | 0.9.0 to 0.9.1 |
| smb.file.attribute.system | Boolean | System | 0.9.0 to 0.9.1 |
| smb.file.attribute.temporary | Boolean | Temporary | 0.9.0 to 0.9.1 |
| smb.file.attribute.volume | Boolean | Volume ID | 0.9.0 to 0.9.1 |
| smb.file.attribute.write_through | Boolean | Write Through | 0.9.0 to 0.9.1 |
| smb.file.count | Unsigned 32-bit integer | Root File Count | 0.9.7 to 0.99.0 |
| smb.file.data | Byte array | File Data | 0.9.0 to 0.9.1 |
| smb.file.size | Unsigned 32-bit integer | File Size | 0.9.0 to 0.9.1 |
| smb.file_attribute.archive | Boolean | Archive | 0.9.1 to 0.99.0 |
| smb.file_attribute.backup_semantics | Boolean | Backup | 0.9.1 to 0.9.8 |
| smb.file_attribute.compressed | Boolean | Compressed | 0.9.1 to 0.99.0 |
| smb.file_attribute.delete_on_close | Boolean | Delete on Close | 0.9.1 to 0.9.8 |
| smb.file_attribute.device | Boolean | Device | 0.9.1 to 0.99.0 |
| smb.file_attribute.directory | Boolean | Directory | 0.9.1 to 0.99.0 |
| smb.file_attribute.encrypted | Boolean | Encrypted | 0.9.1 to 0.99.0 |
| smb.file_attribute.hidden | Boolean | Hidden | 0.9.1 to 0.99.0 |
| smb.file_attribute.no_buffering | Boolean | No Buffering | 0.9.1 to 0.9.8 |
| smb.file_attribute.normal | Boolean | Normal | 0.9.1 to 0.99.0 |
| smb.file_attribute.not_content_indexed | Boolean | Content Indexed | 0.9.1 to 0.99.0 |
| smb.file_attribute.offline | Boolean | Offline | 0.9.1 to 0.99.0 |
| smb.file_attribute.posix_semantics | Boolean | Posix | 0.9.1 to 0.9.8 |
| smb.file_attribute.random_access | Boolean | Random Access | 0.9.1 to 0.9.8 |
| smb.file_attribute.read_only | Boolean | Read Only | 0.9.1 to 0.99.0 |
| smb.file_attribute.reparse | Boolean | Reparse Point | 0.9.1 to 0.99.0 |
| smb.file_attribute.sequential_scan | Boolean | Sequential Scan | 0.9.1 to 0.9.8 |
| smb.file_attribute.sparse | Boolean | Sparse | 0.9.1 to 0.99.0 |
| smb.file_attribute.system | Boolean | System | 0.9.1 to 0.99.0 |
| smb.file_attribute.temporary | Boolean | Temporary | 0.9.1 to 0.99.0 |
| smb.file_attribute.volume | Boolean | Volume ID | 0.9.1 to 0.99.0 |
| smb.file_attribute.write_through | Boolean | Write Through | 0.9.1 to 0.9.8 |
| smb.file_data | Byte array | File Data | 0.9.1 to 0.99.0 |
| smb.file_index | Unsigned 32-bit integer | File Index | 0.9.0 to 0.99.0 |
| smb.file_name_len | Unsigned 32-bit integer | File Name Len | 0.9.0 to 0.99.0 |
| smb.file_size | Unsigned 32-bit integer | File Size | 0.9.1 to 0.99.0 |
| smb.file_type | Unsigned 16-bit integer | File Type | 0.9.0 to 0.99.0 |
| smb.files_moved | Unsigned 16-bit integer | Files Moved | 0.9.5 to 0.99.0 |
| smb.find_first2.flags.backup | Boolean | Backup Intent | 0.9.0 to 0.99.0 |
| smb.find_first2.flags.close | Boolean | Close | 0.9.0 to 0.99.0 |
| smb.find_first2.flags.continue | Boolean | Continue | 0.9.0 to 0.99.0 |
| smb.find_first2.flags.eos | Boolean | Close on EOS | 0.9.0 to 0.99.0 |
| smb.find_first2.flags.resume | Boolean | Resume | 0.9.0 to 0.99.0 |
| smb.flags.canon | Boolean | Canonicalized Pathnames | 0.9.0 to 0.99.0 |
| smb.flags.caseless | Boolean | Case Sensitivity | 0.9.0 to 0.99.0 |
| smb.flags.lock | Boolean | Lock and Read | 0.9.0 to 0.99.0 |
| smb.flags.notify | Boolean | Notify | 0.9.0 to 0.99.0 |
| smb.flags.oplock | Boolean | Oplocks | 0.9.0 to 0.99.0 |
| smb.flags.receive_buffer | Boolean | Receive Buffer Posted | 0.9.0 to 0.99.0 |
| smb.flags.response | Boolean | Request/Response | 0.9.0 to 0.99.0 |
| smb.flags2.dfs | Boolean | Dfs | 0.9.0 to 0.99.0 |
| smb.flags2.ea | Boolean | Extended Attributes | 0.9.0 to 0.99.0 |
| smb.flags2.esn | Boolean | Extended Security Negotiation | 0.9.0 to 0.99.0 |
| smb.flags2.long_names_allowed | Boolean | Long Names Allowed | 0.9.0 to 0.99.0 |
| smb.flags2.long_names_used | Boolean | Long Names Used | 0.9.0 to 0.99.0 |
| smb.flags2.nt_error | Boolean | Error Code Type | 0.9.0 to 0.99.0 |
| smb.flags2.roe | Boolean | Execute-only Reads | 0.9.0 to 0.99.0 |
| smb.flags2.sec_sig | Boolean | Security Signatures | 0.9.0 to 0.99.0 |
| smb.flags2.string | Boolean | Unicode Strings | 0.9.0 to 0.99.0 |
| smb.fn_loi | Unsigned 16-bit integer | Level of Interest | 0.9.5 to 0.99.0 |
| smb.forwarded_name | String | Forwarded Name | 0.9.5 to 0.99.0 |
| smb.free_alloc_units | Unsigned 64-bit integer | Free Units | 0.9.0 to 0.99.0 |
| smb.free_block.count | Unsigned 32-bit integer | Free Block Count | 0.9.7 to 0.99.0 |
| smb.free_units | Unsigned 16-bit integer | Free Units | 0.9.0 to 0.99.0 |
| smb.fs.attr.cpn | Boolean | Case Preserving | 0.9.0 to 0.9.1 |
| smb.fs.attr.css | Boolean | Case Sensitive Search | 0.9.0 to 0.9.1 |
| smb.fs.attr.dim | Boolean | Mounted | 0.9.0 to 0.9.1 |
| smb.fs.attr.fc | Boolean | Compression | 0.9.0 to 0.9.1 |
| smb.fs.attr.pacls | Boolean | Persistent ACLs | 0.9.0 to 0.9.1 |
| smb.fs.attr.vic | Boolean | Compressed | 0.9.0 to 0.9.1 |
| smb.fs.attr.vq | Boolean | Volume Quotas | 0.9.0 to 0.9.1 |
| smb.fs.bytes_per_sector | Unsigned 32-bit integer | Bytes per Sector | 0.9.0 to 0.9.1 |
| smb.fs.id | Unsigned 32-bit integer | FS Id | 0.9.0 to 0.9.1 |
| smb.fs.max_name_len | Unsigned 32-bit integer | Max name length | 0.9.0 to 0.9.1 |
| smb.fs.name | String | FS Name | 0.9.0 to 0.9.1 |
| smb.fs.name.len | Unsigned 32-bit integer | Label Length | 0.9.0 to 0.9.1 |
| smb.fs.sector_per_unit | Unsigned 32-bit integer | Sectors/Unit | 0.9.0 to 0.9.1 |
| smb.fs.units | Unsigned 32-bit integer | Total Units | 0.9.0 to 0.9.1 |
| smb.fs_attr.cpn | Boolean | Case Preserving | 0.9.1 to 0.99.0 |
| smb.fs_attr.css | Boolean | Case Sensitive Search | 0.9.1 to 0.99.0 |
| smb.fs_attr.dim | Boolean | Mounted | 0.9.1 to 0.10.7 |
| smb.fs_attr.fc | Boolean | Compression | 0.9.1 to 0.99.0 |
| smb.fs_attr.ns | Boolean | Named Streams | 0.10.7 to 0.99.0 |
| smb.fs_attr.pacls | Boolean | Persistent ACLs | 0.9.1 to 0.99.0 |
| smb.fs_attr.rov | Boolean | Read Only Volume | 0.10.7 to 0.99.0 |
| smb.fs_attr.se | Boolean | Supports Encryption | 0.10.7 to 0.99.0 |
| smb.fs_attr.sla | Boolean | LFN APIs | 0.10.7 to 0.99.0 |
| smb.fs_attr.soids | Boolean | Supports OIDs | 0.10.7 to 0.99.0 |
| smb.fs_attr.srp | Boolean | Reparse Points | 0.10.7 to 0.99.0 |
| smb.fs_attr.srs | Boolean | Remote Storage | 0.10.7 to 0.99.0 |
| smb.fs_attr.ssf | Boolean | Sparse Files | 0.10.7 to 0.99.0 |
| smb.fs_attr.uod | Boolean | Unicode On Disk | 0.10.7 to 0.99.0 |
| smb.fs_attr.vic | Boolean | Compressed | 0.9.1 to 0.10.7 |
| smb.fs_attr.vis | Boolean | Volume Is Compressed | 0.10.7 to 0.99.0 |
| smb.fs_attr.vq | Boolean | Volume Quotas | 0.9.1 to 0.99.0 |
| smb.fs_bytes_per_sector | Unsigned 32-bit integer | Bytes per Sector | 0.9.1 to 0.99.0 |
| smb.fs_guid | String | FS GUID | 0.9.15 to 0.10.14 |
| smb.fs_id | Unsigned 32-bit integer | FS Id | 0.9.1 to 0.99.0 |
| smb.fs_max_name_len | Unsigned 32-bit integer | Max name length | 0.9.1 to 0.99.0 |
| smb.fs_name | String | FS Name | 0.9.1 to 0.99.0 |
| smb.fs_name.len | Unsigned 32-bit integer | Label Length | 0.9.1 to 0.99.0 |
| smb.fs_sector_per_unit | Unsigned 32-bit integer | Sectors/Unit | 0.9.1 to 0.99.0 |
| smb.fs_units | Unsigned 32-bit integer | Total Units | 0.9.1 to 0.99.0 |
| smb.group_id | Unsigned 16-bit integer | Group ID | 0.9.12 to 0.99.0 |
| smb.impersonation.level | Unsigned 32-bit integer | Impersonation | 0.9.0 to 0.99.0 |
| smb.index_number | Unsigned 64-bit integer | Index Number | 0.9.0 to 0.99.0 |
| smb.ipc_state.endpoint | Unsigned 16-bit integer | Endpoint | 0.9.0 to 0.99.0 |
| smb.ipc_state.icount | Unsigned 16-bit integer | Icount | 0.9.0 to 0.99.0 |
| smb.ipc_state.nonblocking | Boolean | Nonblocking | 0.9.0 to 0.99.0 |
| smb.ipc_state.pipe_type | Unsigned 16-bit integer | Pipe Type | 0.9.0 to 0.99.0 |
| smb.ipc_state.read_mode | Unsigned 16-bit integer | Read Mode | 0.9.0 to 0.99.0 |
| smb.is_directory | Unsigned 8-bit integer | Is Directory | 0.9.0 to 0.99.0 |
| smb.key | Unsigned 32-bit integer | Key | 0.9.12 to 0.99.0 |
| smb.last_name_offset | Unsigned 16-bit integer | Last Name Offset | 0.9.0 to 0.99.0 |
| smb.last_write.smb.date | Unsigned 16-bit integer | Last Write Date | 0.9.0 to 0.99.0 |
| smb.last_write.smb.time | Unsigned 16-bit integer | Last Write Time | 0.9.0 to 0.99.0 |
| smb.last_write.time | Date/Time stamp | Last Write | 0.9.0 to 0.99.0 |
| smb.link_count | Unsigned 32-bit integer | Link Count | 0.9.0 to 0.99.0 |
| smb.list_len | Unsigned 32-bit integer | ListLength | 0.9.0 to 0.9.13 |
| smb.lock.length | Unsigned 64-bit integer | Length | 0.9.0 to 0.99.0 |
| smb.lock.offset | Unsigned 64-bit integer | Offset | 0.9.0 to 0.99.0 |
| smb.lock.type.cancel | Boolean | Cancel | 0.9.0 to 0.99.0 |
| smb.lock.type.change | Boolean | Change | 0.9.0 to 0.99.0 |
| smb.lock.type.large | Boolean | Large Files | 0.9.0 to 0.99.0 |
| smb.lock.type.oplock_release | Boolean | Oplock Break | 0.9.0 to 0.99.0 |
| smb.lock.type.shared | Boolean | Shared | 0.9.0 to 0.99.0 |
| smb.locking.num_locks | Unsigned 16-bit integer | Number of Locks | 0.9.0 to 0.99.0 |
| smb.locking.num_unlocks | Unsigned 16-bit integer | Number of Unlocks | 0.9.0 to 0.99.0 |
| smb.locking.oplock.level | Unsigned 8-bit integer | Oplock Level | 0.9.0 to 0.99.0 |
| smb.loi | Unsigned 16-bit integer | Level of Interest | 0.9.0 to 0.9.13 |
| smb.mac.access_control | Boolean | Mac Access Control | 0.9.7 to 0.99.0 |
| smb.mac.desktop_db_calls | Boolean | Desktop DB Calls | 0.9.7 to 0.99.0 |
| smb.mac.finderinfo | Byte array | Finder Info | 0.9.7 to 0.99.0 |
| smb.mac.get_set_comments | Boolean | Get Set Comments | 0.9.7 to 0.99.0 |
| smb.mac.streams_support | Boolean | Mac Streams | 0.9.7 to 0.99.0 |
| smb.mac.support.flags | Unsigned 32-bit integer | Mac Support Flags | 0.9.7 to 0.99.0 |
| smb.mac.uids | Boolean | Macintosh Unique IDs | 0.9.7 to 0.99.0 |
| smb.machine_name | String | Machine Name | 0.9.5 to 0.99.0 |
| smb.marked_for_deletion | Boolean | Marked for Deletion | 0.9.13 to 0.99.0 |
| smb.max_buf | Unsigned 16-bit integer | Max Buffer | 0.9.0 to 0.99.0 |
| smb.max_bufsize | Unsigned 32-bit integer | Max Buffer Size | 0.9.0 to 0.99.0 |
| smb.max_mpx_count | Unsigned 16-bit integer | Max Mpx Count | 0.9.0 to 0.99.0 |
| smb.max_raw | Unsigned 32-bit integer | Max Raw Buffer | 0.9.0 to 0.99.0 |
| smb.max_referral_level | Unsigned 16-bit integer | Max Referral Level | 0.9.0 to 0.99.0 |
| smb.max_vcs | Unsigned 16-bit integer | Max VCs | 0.9.0 to 0.99.0 |
| smb.maxcount | Unsigned 16-bit integer | Max Count | 0.9.0 to 0.99.0 |
| smb.maxcount_high | Unsigned 16-bit integer | Max Count High (multiply with 64K) | 0.9.15 to 0.99.0 |
| smb.maxcount_low | Unsigned 16-bit integer | Max Count Low | 0.9.15 to 0.99.0 |
| smb.mdc | Unsigned 32-bit integer | Max Data Count | 0.9.0 to 0.99.0 |
| smb.message | String | Message | 0.9.5 to 0.99.0 |
| smb.message.len | Unsigned 16-bit integer | Message Len | 0.9.5 to 0.99.0 |
| smb.mgid | Unsigned 16-bit integer | Message Group ID | 0.9.5 to 0.99.0 |
| smb.mid | Unsigned 16-bit integer | Multiplex ID | 0.9.0 to 0.99.0 |
| smb.mincount | Unsigned 16-bit integer | Min Count | 0.9.0 to 0.99.0 |
| smb.mode | Unsigned 32-bit integer | Mode | 0.10.14 to 0.99.0 |
| smb.modify.time | Date/Time stamp | Modified | 0.9.7 to 0.99.0 |
| smb.monitor_handle | Unsigned 16-bit integer | Monitor Handle | 0.9.5 to 0.99.0 |
| smb.move.files_moved | Unsigned 16-bit integer | Files Moved | 0.9.0 to 0.9.5 |
| smb.move.flags.dir | Boolean | Must be directory | 0.9.0 to 0.99.0 |
| smb.move.flags.file | Boolean | Must be file | 0.9.0 to 0.99.0 |
| smb.move.flags.verify | Boolean | Verify writes | 0.9.0 to 0.99.0 |
| smb.mpc | Unsigned 32-bit integer | Max Parameter Count | 0.9.0 to 0.99.0 |
| smb.msc | Unsigned 8-bit integer | Max Setup Count | 0.9.0 to 0.99.0 |
| smb.native_fs | String | Native File System | 0.9.0 to 0.99.0 |
| smb.native_lanman | String | Native LAN Manager | 0.9.0 to 0.99.0 |
| smb.native_os | String | Native OS | 0.9.0 to 0.99.0 |
| smb.next_entry_offset | Unsigned 32-bit integer | Next Entry Offset | 0.9.0 to 0.99.0 |
| smb.nt.create.batch_oplock | Boolean | Batch Oplock | 0.9.0 to 0.99.0 |
| smb.nt.create.dir | Boolean | Create Directory | 0.9.0 to 0.99.0 |
| smb.nt.create.ext | Boolean | Extended Response | 0.9.12 to 0.99.0 |
| smb.nt.create.oplock | Boolean | Exclusive Oplock | 0.9.0 to 0.99.0 |
| smb.nt.create_options.backup_intent | Boolean | Backup Intent | 0.10.14 to 0.99.0 |
| smb.nt.create_options.complete_if_oplocked | Boolean | Complete If Oplocked | 0.99.0 |
| smb.nt.create_options.create_tree_connection | Boolean | Create Tree Connection | 0.99.0 |
| smb.nt.create_options.delete_on_close | Boolean | Delete On Close | 0.9.0 to 0.99.0 |
| smb.nt.create_options.directory | Boolean | Directory | 0.9.0 to 0.99.0 |
| smb.nt.create_options.eight_dot_three_only | Boolean | 8.3 Only | 0.9.0 to 0.99.0 |
| smb.nt.create_options.intermediate_buffering | Boolean | Intermediate Buffering | 0.99.0 |
| smb.nt.create_options.no_compression | Boolean | No Compression | 0.99.0 |
| smb.nt.create_options.no_ea_knowledge | Boolean | No EA Knowledge | 0.9.0 to 0.99.0 |
| smb.nt.create_options.non_directory | Boolean | Non-Directory | 0.9.0 to 0.99.0 |
| smb.nt.create_options.open_by_fileid | Boolean | Open By FileID | 0.10.14 to 0.99.0 |
| smb.nt.create_options.open_for_free_space_query | Boolean | Open For Free Space query | 0.99.0 |
| smb.nt.create_options.open_no_recall | Boolean | Open No Recall | 0.99.0 |
| smb.nt.create_options.open_reparse_point | Boolean | Open Reparse Point | 0.99.0 |
| smb.nt.create_options.random_access | Boolean | Random Access | 0.9.0 to 0.99.0 |
| smb.nt.create_options.reserve_opfilter | Boolean | Reserve Opfilter | 0.99.0 |
| smb.nt.create_options.sequential_only | Boolean | Sequential Only | 0.9.0 to 0.99.0 |
| smb.nt.create_options.sync_io_alert | Boolean | Sync I/O Alert | 0.9.0 to 0.99.0 |
| smb.nt.create_options.sync_io_nonalert | Boolean | Sync I/O Nonalert | 0.9.0 to 0.99.0 |
| smb.nt.create_options.write_through | Boolean | Write Through | 0.9.0 to 0.99.0 |
| smb.nt.function | Unsigned 16-bit integer | Function | 0.9.0 to 0.99.0 |
| smb.nt.ioctl.data | Byte array | IOCTL Data | 0.9.0 to 0.99.0 |
| smb.nt.ioctl.flags.root_handle | Boolean | Root Handle | 0.9.0 to 0.99.0 |
| smb.nt.ioctl.function | Unsigned 32-bit integer | Function | 0.9.0 to 0.99.0 |
| smb.nt.ioctl.isfsctl | Unsigned 8-bit integer | IsFSctl | 0.9.0 to 0.99.0 |
| smb.nt.notify.action | Unsigned 32-bit integer | Action | 0.9.0 to 0.99.0 |
| smb.nt.notify.attributes | Boolean | Attribute Change | 0.9.0 to 0.99.0 |
| smb.nt.notify.creation | Boolean | Created Change | 0.9.0 to 0.99.0 |
| smb.nt.notify.dir_name | Boolean | Directory Name Change | 0.9.0 to 0.99.0 |
| smb.nt.notify.ea | Boolean | EA Change | 0.9.0 to 0.99.0 |
| smb.nt.notify.file_name | Boolean | File Name Change | 0.9.0 to 0.99.0 |
| smb.nt.notify.last_access | Boolean | Last Access Change | 0.9.0 to 0.99.0 |
| smb.nt.notify.last_write | Boolean | Last Write Change | 0.9.0 to 0.99.0 |
| smb.nt.notify.security | Boolean | Security Change | 0.9.0 to 0.99.0 |
| smb.nt.notify.size | Boolean | Size Change | 0.9.0 to 0.99.0 |
| smb.nt.notify.stream_name | Boolean | Stream Name Change | 0.9.0 to 0.99.0 |
| smb.nt.notify.stream_size | Boolean | Stream Size Change | 0.9.0 to 0.99.0 |
| smb.nt.notify.stream_write | Boolean | Stream Write | 0.9.0 to 0.99.0 |
| smb.nt.notify.watch_tree | Unsigned 8-bit integer | Watch Tree | 0.9.0 to 0.99.0 |
| smb.nt_qsd.dacl | Boolean | DACL | 0.9.0 to 0.99.0 |
| smb.nt_qsd.group | Boolean | Group | 0.9.0 to 0.99.0 |
| smb.nt_qsd.owner | Boolean | Owner | 0.9.0 to 0.99.0 |
| smb.nt_qsd.sacl | Boolean | SACL | 0.9.0 to 0.99.0 |
| smb.nt_status | Unsigned 32-bit integer | NT Status | 0.9.0 to 0.99.0 |
| smb.ntlmv2response | Byte array | NTLMv2 Response | 0.9.13 to 0.10.6 |
| smb.ntlmv2response.chal | Byte array | Client challenge | 0.9.13 to 0.10.6 |
| smb.ntlmv2response.header | Unsigned 32-bit integer | Header | 0.9.13 to 0.10.6 |
| smb.ntlmv2response.hmac | Byte array | HMAC | 0.9.13 to 0.10.6 |
| smb.ntlmv2response.name | String | Name | 0.9.13 to 0.10.6 |
| smb.ntlmv2response.name.len | Unsigned 32-bit integer | Name len | 0.9.13 to 0.10.6 |
| smb.ntlmv2response.name.type | Unsigned 32-bit integer | Name type | 0.9.13 to 0.10.6 |
| smb.ntlmv2response.reserved | Unsigned 32-bit integer | Reserved | 0.9.13 to 0.10.6 |
| smb.ntlmv2response.time | Date/Time stamp | Time | 0.9.13 to 0.10.6 |
| smb.ntlmv2response.unknown | Unsigned 32-bit integer | Unknown | 0.9.13 to 0.10.6 |
| smb.ntr_clu | Unsigned 32-bit integer | Cluster count | 0.9.4 to 0.99.0 |
| smb.ntr_loi | Unsigned 16-bit integer | Level of Interest | 0.9.4 to 0.99.0 |
| smb.offset | Unsigned 32-bit integer | Offset | 0.9.0 to 0.99.0 |
| smb.offset_high | Unsigned 32-bit integer | High Offset | 0.9.0 to 0.99.0 |
| smb.open.action.lock | Boolean | Exclusive Open | 0.9.0 to 0.99.0 |
| smb.open.action.open | Unsigned 16-bit integer | Open Action | 0.9.0 to 0.99.0 |
| smb.open.flags.add_info | Boolean | Additional Info | 0.9.0 to 0.99.0 |
| smb.open.flags.batch_oplock | Boolean | Batch Oplock | 0.9.0 to 0.99.0 |
| smb.open.flags.ealen | Boolean | Total EA Len | 0.9.0 to 0.99.0 |
| smb.open.flags.ex_oplock | Boolean | Exclusive Oplock | 0.9.0 to 0.99.0 |
| smb.open.function.create | Boolean | Create | 0.9.0 to 0.99.0 |
| smb.open.function.open | Unsigned 16-bit integer | Open | 0.9.0 to 0.99.0 |
| smb.oplock.level | Unsigned 8-bit integer | Oplock level | 0.9.0 to 0.99.0 |
| smb.originator_name | String | Originator Name | 0.9.5 to 0.99.0 |
| smb.padding | Byte array | Padding | 0.9.0 to 0.99.0 |
| smb.password | Byte array | Password | 0.9.0 to 0.99.0 |
| smb.path | String | Path | 0.9.0 to 0.99.0 |
| smb.pc | Unsigned 16-bit integer | Parameter Count | 0.9.0 to 0.99.0 |
| smb.pd | Unsigned 16-bit integer | Parameter Displacement | 0.9.0 to 0.99.0 |
| smb.pid | Unsigned 16-bit integer | Process ID | 0.9.0 to 0.99.0 |
| smb.pid.high | Unsigned 16-bit integer | Process ID High | 0.9.13 to 0.99.0 |
| smb.pipe.write_len | Unsigned 16-bit integer | Pipe Write Len | 0.9.12 to 0.99.0 |
| smb.pipe_info_flag | Boolean | Pipe Info | 0.99.0 |
| smb.po | Unsigned 16-bit integer | Parameter Offset | 0.9.0 to 0.99.0 |
| smb.position | Unsigned 64-bit integer | Position | 0.10.14 to 0.99.0 |
| smb.primary_domain | String | Primary Domain | 0.9.0 to 0.99.0 |
| smb.print.identifier | String | Identifier | 0.9.0 to 0.99.0 |
| smb.print.mode | Unsigned 16-bit integer | Mode | 0.9.0 to 0.99.0 |
| smb.print.queued.date | Date/Time stamp | Queued | 0.9.0 to 0.99.0 |
| smb.print.queued.smb.date | Unsigned 16-bit integer | Queued Date | 0.9.0 to 0.99.0 |
| smb.print.queued.smb.time | Unsigned 16-bit integer | Queued Time | 0.9.0 to 0.99.0 |
| smb.print.restart_index | Unsigned 16-bit integer | Restart Index | 0.9.0 to 0.99.0 |
| smb.print.setup.len | Unsigned 16-bit integer | Setup Len | 0.9.0 to 0.99.0 |
| smb.print.spool.file_number | Unsigned 16-bit integer | Spool File Number | 0.9.0 to 0.99.0 |
| smb.print.spool.file_size | Unsigned 32-bit integer | Spool File Size | 0.9.0 to 0.99.0 |
| smb.print.spool.name | String | Name | 0.9.0 to 0.99.0 |
| smb.print.start_index | Unsigned 16-bit integer | Start Index | 0.9.0 to 0.99.0 |
| smb.print.status | Unsigned 8-bit integer | Status | 0.9.0 to 0.99.0 |
| smb.pwlen | Unsigned 16-bit integer | Password Length | 0.9.0 to 0.99.0 |
| smb.qfi_loi | Unsigned 16-bit integer | Level of Interest | 0.9.0 to 0.99.0 |
| smb.qpi_loi | Unsigned 16-bit integer | Level of Interest | 0.9.13 to 0.99.0 |
| smb.quota.flags.deny_disk | Boolean | Deny Disk | 0.9.2 to 0.99.0 |
| smb.quota.flags.enabled | Boolean | Enabled | 0.9.3 to 0.99.0 |
| smb.quota.flags.log_limit | Boolean | Log Limit | 0.9.2 to 0.99.0 |
| smb.quota.flags.log_warning | Boolean | Log Warning | 0.9.2 to 0.99.0 |
| smb.quota.hard.default | Unsigned 64-bit integer | (Hard) Quota Limit | 0.9.3 to 0.99.0 |
| smb.quota.soft.default | Unsigned 64-bit integer | (Soft) Quota Treshold | 0.9.3 to 0.99.0 |
| smb.quota.used | Unsigned 64-bit integer | Quota Used | 0.9.3 to 0.99.0 |
| smb.quota.user.offset | Unsigned 32-bit integer | Next Offset | 0.9.3 to 0.99.0 |
| smb.remaining | Unsigned 32-bit integer | Remaining | 0.9.0 to 0.99.0 |
| smb.reparse_tag | Unsigned 32-bit integer | Reparse Tag | 0.10.14 to 0.99.0 |
| smb.replace | Boolean | Replace | 0.10.3 to 0.99.0 |
| smb.request.mask | Unsigned 32-bit integer | Request Mask | 0.9.0 to 0.99.0 |
| smb.reserved | Byte array | Reserved | 0.9.0 to 0.99.0 |
| smb.response.mask | Unsigned 32-bit integer | Response Mask | 0.9.0 to 0.99.0 |
| smb.response_in | Frame number | Response in | 0.9.0 to 0.99.0 |
| smb.response_to | Frame number | Response to | 0.9.0 to 0.99.0 |
| smb.resume | Unsigned 32-bit integer | Resume Key | 0.9.0 to 0.99.0 |
| smb.resume.client.cookie | Byte array | Client Cookie | 0.9.0 to 0.99.0 |
| smb.resume.find_id | Unsigned 8-bit integer | Find ID | 0.9.5 to 0.99.0 |
| smb.resume.key_len | Unsigned 16-bit integer | Resume Key Length | 0.9.0 to 0.99.0 |
| smb.resume.server.cookie | Byte array | Server Cookie | 0.9.0 to 0.99.0 |
| smb.rfid | Unsigned 32-bit integer | Root FID | 0.9.0 to 0.99.0 |
| smb.rm.read | Boolean | Read Raw | 0.9.0 to 0.99.0 |
| smb.rm.write | Boolean | Write Raw | 0.9.0 to 0.99.0 |
| smb.root.dir.count | Unsigned 32-bit integer | Root Directory Count | 0.9.7 to 0.99.0 |
| smb.root.file.count | Unsigned 32-bit integer | Root File Count | 0.9.7 to 0.99.0 |
| smb.root_dir_handle | Unsigned 32-bit integer | Root Directory Handle | 0.10.3 to 0.99.0 |
| smb.sc | Unsigned 8-bit integer | Setup Count | 0.9.0 to 0.99.0 |
| smb.sd.length | Unsigned 32-bit integer | SD Length | 0.9.0 to 0.99.0 |
| smb.search.attribute.archive | Boolean | Archive | 0.9.0 to 0.99.0 |
| smb.search.attribute.directory | Boolean | Directory | 0.9.0 to 0.99.0 |
| smb.search.attribute.hidden | Boolean | Hidden | 0.9.0 to 0.99.0 |
| smb.search.attribute.read_only | Boolean | Read Only | 0.9.0 to 0.99.0 |
| smb.search.attribute.system | Boolean | System | 0.9.0 to 0.99.0 |
| smb.search.attribute.volume | Boolean | Volume ID | 0.9.0 to 0.99.0 |
| smb.search_count | Unsigned 16-bit integer | Search Count | 0.9.0 to 0.99.0 |
| smb.search_id | Unsigned 16-bit integer | Search ID | 0.9.12 to 0.99.0 |
| smb.search_pattern | String | Search Pattern | 0.9.0 to 0.99.0 |
| smb.sec_desc.revision | Unsigned 8-bit integer | Revision | 0.9.0 to 0.10.6 |
| smb.sec_desc.type.dacl_auto_inherit_req | Boolean | DACL Auto Inherit Required | 0.9.0 to 0.10.6 |
| smb.sec_desc.type.dacl_auto_inherited | Boolean | DACL Auto Inherited | 0.9.0 to 0.10.6 |
| smb.sec_desc.type.dacl_defaulted | Boolean | DACL Defaulted | 0.9.0 to 0.10.6 |
| smb.sec_desc.type.dacl_present | Boolean | DACL Present | 0.9.0 to 0.10.6 |
| smb.sec_desc.type.dacl_protected | Boolean | DACL Protected | 0.9.0 to 0.10.6 |
| smb.sec_desc.type.group_defaulted | Boolean | Group Defaulted | 0.9.0 to 0.10.6 |
| smb.sec_desc.type.owner_defaulted | Boolean | Owner Defaulted | 0.9.0 to 0.10.6 |
| smb.sec_desc.type.sacl_auto_inherit_req | Boolean | SACL Auto Inherit Required | 0.9.0 to 0.10.6 |
| smb.sec_desc.type.sacl_auto_inherited | Boolean | SACL Auto Inherited | 0.9.0 to 0.10.6 |
| smb.sec_desc.type.sacl_defaulted | Boolean | SACL Defaulted | 0.9.0 to 0.10.6 |
| smb.sec_desc.type.sacl_present | Boolean | SACL Present | 0.9.0 to 0.10.6 |
| smb.sec_desc.type.sacl_protected | Boolean | SACL Protected | 0.9.0 to 0.10.6 |
| smb.sec_desc.type.self_relative | Boolean | Self Relative | 0.9.0 to 0.10.6 |
| smb.sec_desc_len | Unsigned 32-bit integer | NT Security Descriptor Length | 0.9.0 to 0.99.0 |
| smb.security.flags.context_tracking | Boolean | Context Tracking | 0.9.0 to 0.99.0 |
| smb.security.flags.effective_only | Boolean | Effective Only | 0.9.0 to 0.99.0 |
| smb.security_blob | Byte array | Security Blob | 0.9.0 to 0.99.0 |
| smb.security_blob_len | Unsigned 16-bit integer | Security Blob Length | 0.9.0 to 0.99.0 |
| smb.seek_mode | Unsigned 16-bit integer | Seek Mode | 0.9.0 to 0.99.0 |
| smb.segment | Frame number | SMB Segment | 0.9.5 to 0.99.0 |
| smb.segment.error | Frame number | Defragmentation error | 0.9.5 to 0.99.0 |
| smb.segment.multipletails | Boolean | Multiple tail fragments found | 0.9.5 to 0.99.0 |
| smb.segment.overlap | Boolean | Fragment overlap | 0.9.5 to 0.99.0 |
| smb.segment.overlap.conflict | Boolean | Conflicting data in fragment overlap | 0.9.5 to 0.99.0 |
| smb.segment.segments | None | SMB Segments | 0.9.5 to 0.99.0 |
| smb.segment.toolongfragment | Boolean | Fragment too long | 0.9.5 to 0.99.0 |
| smb.sequence_num | Unsigned 16-bit integer | Sequence Number | 0.9.12 to 0.99.0 |
| smb.server | String | Server | 0.9.6 to 0.99.0 |
| smb.server.cap.bulk_transfer | Boolean | Bulk Transfer | 0.9.0 to 0.9.1 |
| smb.server.cap.compressed_data | Boolean | Compressed Data | 0.9.0 to 0.9.1 |
| smb.server.cap.dfs | Boolean | Dfs | 0.9.0 to 0.9.1 |
| smb.server.cap.extended_security | Boolean | Extended Security | 0.9.0 to 0.9.1 |
| smb.server.cap.infolevel_passthru | Boolean | Infolevel Passthru | 0.9.0 to 0.9.1 |
| smb.server.cap.large_files | Boolean | Large Files | 0.9.0 to 0.9.1 |
| smb.server.cap.large_readx | Boolean | Large ReadX | 0.9.0 to 0.9.1 |
| smb.server.cap.large_writex | Boolean | Large WriteX | 0.9.0 to 0.9.1 |
| smb.server.cap.level_2_oplocks | Boolean | Level 2 Oplocks | 0.9.0 to 0.9.1 |
| smb.server.cap.lock_and_read | Boolean | Lock and Read | 0.9.0 to 0.9.1 |
| smb.server.cap.mpx_mode | Boolean | MPX Mode | 0.9.0 to 0.9.1 |
| smb.server.cap.nt_find | Boolean | NT Find | 0.9.0 to 0.9.1 |
| smb.server.cap.nt_smbs | Boolean | NT SMBs | 0.9.0 to 0.9.1 |
| smb.server.cap.nt_status | Boolean | NT Status Codes | 0.9.0 to 0.9.1 |
| smb.server.cap.raw_mode | Boolean | Raw Mode | 0.9.0 to 0.9.1 |
| smb.server.cap.reserved | Boolean | Reserved | 0.9.0 to 0.9.1 |
| smb.server.cap.rpc_remote_apis | Boolean | RPC Remote APIs | 0.9.0 to 0.9.1 |
| smb.server.cap.unicode | Boolean | Unicode | 0.9.0 to 0.9.1 |
| smb.server.cap.unix | Boolean | UNIX | 0.9.0 to 0.9.1 |
| smb.server.guid | Byte array | Server GUID | 0.9.0 to 0.9.1 |
| smb.server.timezone | Signed 16-bit integer | Time Zone | 0.9.0 to 0.9.1 |
| smb.server_cap.bulk_transfer | Boolean | Bulk Transfer | 0.9.1 to 0.99.0 |
| smb.server_cap.compressed_data | Boolean | Compressed Data | 0.9.1 to 0.99.0 |
| smb.server_cap.dfs | Boolean | Dfs | 0.9.1 to 0.99.0 |
| smb.server_cap.extended_security | Boolean | Extended Security | 0.9.1 to 0.99.0 |
| smb.server_cap.infolevel_passthru | Boolean | Infolevel Passthru | 0.9.1 to 0.99.0 |
| smb.server_cap.large_files | Boolean | Large Files | 0.9.1 to 0.99.0 |
| smb.server_cap.large_readx | Boolean | Large ReadX | 0.9.1 to 0.99.0 |
| smb.server_cap.large_writex | Boolean | Large WriteX | 0.9.1 to 0.99.0 |
| smb.server_cap.level_2_oplocks | Boolean | Level 2 Oplocks | 0.9.1 to 0.99.0 |
| smb.server_cap.lock_and_read | Boolean | Lock and Read | 0.9.1 to 0.99.0 |
| smb.server_cap.mpx_mode | Boolean | MPX Mode | 0.9.1 to 0.99.0 |
| smb.server_cap.nt_find | Boolean | NT Find | 0.9.1 to 0.99.0 |
| smb.server_cap.nt_smbs | Boolean | NT SMBs | 0.9.1 to 0.99.0 |
| smb.server_cap.nt_status | Boolean | NT Status Codes | 0.9.1 to 0.99.0 |
| smb.server_cap.raw_mode | Boolean | Raw Mode | 0.9.1 to 0.99.0 |
| smb.server_cap.reserved | Boolean | Reserved | 0.9.1 to 0.99.0 |
| smb.server_cap.rpc_remote_apis | Boolean | RPC Remote APIs | 0.9.1 to 0.99.0 |
| smb.server_cap.unicode | Boolean | Unicode | 0.9.1 to 0.99.0 |
| smb.server_cap.unix | Boolean | UNIX | 0.9.1 to 0.99.0 |
| smb.server_date_time | Date/Time stamp | Server Date and Time | 0.9.0 to 0.99.0 |
| smb.server_date_time.smb_date | Unsigned 16-bit integer | Server Date | 0.9.0 to 0.99.0 |
| smb.server_date_time.smb_time | Unsigned 16-bit integer | Server Time | 0.9.0 to 0.99.0 |
| smb.server_fid | Unsigned 32-bit integer | Server FID | 0.9.0 to 0.99.0 |
| smb.server_guid | Byte array | Server GUID | 0.9.1 to 0.99.0 |
| smb.server_timezone | Signed 16-bit integer | Time Zone | 0.9.1 to 0.99.0 |
| smb.service | String | Service | 0.9.0 to 0.99.0 |
| smb.sessid | Unsigned 16-bit integer | Session ID | 0.9.12 to 0.99.0 |
| smb.session_key | Unsigned 32-bit integer | Session Key | 0.9.0 to 0.99.0 |
| smb.setup.action.guest | Boolean | Guest | 0.9.0 to 0.99.0 |
| smb.share.access.delete | Boolean | Delete | 0.9.0 to 0.99.0 |
| smb.share.access.read | Boolean | Read | 0.9.0 to 0.99.0 |
| smb.share.access.write | Boolean | Write | 0.9.0 to 0.99.0 |
| smb.short_file | String | Short File Name | 0.9.0 to 0.99.0 |
| smb.short_file_name_len | Unsigned 32-bit integer | Short File Name Len | 0.9.0 to 0.99.0 |
| smb.sid | String | SID | 0.9.0 to 0.10.6 |
| smb.sid.num_auth | Unsigned 8-bit integer | Num Auth | 0.9.0 to 0.10.6 |
| smb.sid.revision | Unsigned 8-bit integer | Revision | 0.9.0 to 0.10.6 |
| smb.signature | Byte array | Signature | 0.9.13 to 0.99.0 |
| smb.sm.mode | Boolean | Mode | 0.9.0 to 0.99.0 |
| smb.sm.password | Boolean | Password | 0.9.0 to 0.99.0 |
| smb.sm.sig_required | Boolean | Sig Req | 0.9.0 to 0.99.0 |
| smb.sm.signatures | Boolean | Signatures | 0.9.0 to 0.99.0 |
| smb.spi_loi | Unsigned 16-bit integer | Level of Interest | 0.9.13 to 0.99.0 |
| smb.storage_type | Unsigned 32-bit integer | Storage Type | 0.9.0 to 0.99.0 |
| smb.stream_name | String | Stream Name | 0.9.0 to 0.99.0 |
| smb.stream_name_len | Unsigned 32-bit integer | Stream Name Length | 0.9.0 to 0.99.0 |
| smb.stream_size | Unsigned 64-bit integer | Stream Size | 0.9.0 to 0.99.0 |
| smb.system.time | Date/Time stamp | System Time | 0.9.0 to 0.99.0 |
| smb.target_name | String | Target name | 0.10.3 to 0.99.0 |
| smb.target_name_len | Unsigned 32-bit integer | Target name length | 0.10.3 to 0.99.0 |
| smb.tdc | Unsigned 32-bit integer | Total Data Count | 0.9.0 to 0.99.0 |
| smb.tid | Unsigned 16-bit integer | Tree ID | 0.9.0 to 0.99.0 |
| smb.time | Time duration | Time from request | 0.9.6 to 0.99.0 |
| smb.timeout | Unsigned 32-bit integer | Timeout | 0.9.0 to 0.99.0 |
| smb.total_data_len | Unsigned 16-bit integer | Total Data Length | 0.9.0 to 0.99.0 |
| smb.tpc | Unsigned 32-bit integer | Total Parameter Count | 0.9.0 to 0.99.0 |
| smb.trans2.cmd | Unsigned 16-bit integer | Subcommand | 0.9.0 to 0.99.0 |
| smb.trans_name | String | Transaction Name | 0.9.0 to 0.99.0 |
| smb.transaction.flags.dtid | Boolean | Disconnect TID | 0.9.0 to 0.99.0 |
| smb.transaction.flags.owt | Boolean | One Way Transaction | 0.9.0 to 0.99.0 |
| smb.uid | Unsigned 16-bit integer | User ID | 0.9.0 to 0.99.0 |
| smb.unicode_password | Byte array | Unicode Password | 0.9.0 to 0.99.0 |
| smb.unicode_pwlen | Unsigned 16-bit integer | Unicode Password Length | 0.9.0 to 0.99.0 |
| smb.units | Unsigned 16-bit integer | Total Units | 0.9.0 to 0.99.0 |
| smb.unix.capability.fcntl | Boolean | FCNTL Capability | 0.9.14 to 0.99.0 |
| smb.unix.capability.posix_acl | Boolean | POSIX ACL Capability | 0.9.14 to 0.99.0 |
| smb.unix.file.atime | Date/Time stamp | Last access | 0.9.14 to 0.99.0 |
| smb.unix.file.dev_major | Unsigned 64-bit integer | Major device | 0.9.14 to 0.99.0 |
| smb.unix.file.dev_minor | Unsigned 64-bit integer | Minor device | 0.9.14 to 0.99.0 |
| smb.unix.file.file_type | Unsigned 32-bit integer | File type | 0.9.14 to 0.99.0 |
| smb.unix.file.gid | Unsigned 64-bit integer | GID | 0.9.14 to 0.99.0 |
| smb.unix.file.link_dest | String | Link destination | 0.9.15 to 0.99.0 |
| smb.unix.file.mtime | Date/Time stamp | Last modification | 0.9.14 to 0.99.0 |
| smb.unix.file.num_bytes | Unsigned 64-bit integer | Number of bytes | 0.9.14 to 0.99.0 |
| smb.unix.file.num_links | Unsigned 64-bit integer | Num links | 0.9.14 to 0.99.0 |
| smb.unix.file.perms | Unsigned 64-bit integer | File permissions | 0.9.14 to 0.99.0 |
| smb.unix.file.size | Unsigned 64-bit integer | File size | 0.9.14 to 0.99.0 |
| smb.unix.file.stime | Date/Time stamp | Last status change | 0.9.14 to 0.99.0 |
| smb.unix.file.uid | Unsigned 64-bit integer | UID | 0.9.14 to 0.99.0 |
| smb.unix.file.unique_id | Unsigned 64-bit integer | Unique ID | 0.9.14 to 0.99.0 |
| smb.unix.find_file.next_offset | Unsigned 32-bit integer | Next entry offset | 0.9.14 to 0.99.0 |
| smb.unix.find_file.resume_key | Unsigned 32-bit integer | Resume key | 0.9.14 to 0.99.0 |
| smb.unix.major_version | Unsigned 16-bit integer | Major Version | 0.9.14 to 0.99.0 |
| smb.unix.minor_version | Unsigned 16-bit integer | Minor Version | 0.9.14 to 0.99.0 |
| smb.unknown | Byte array | Unknown Data | 0.9.0 to 0.99.0 |
| smb.vc | Unsigned 16-bit integer | VC Number | 0.9.0 to 0.99.0 |
| smb.volume.label | String | Label | 0.9.0 to 0.99.0 |
| smb.volume.label.len | Unsigned 32-bit integer | Label Length | 0.9.0 to 0.99.0 |
| smb.volume.serial | Unsigned 32-bit integer | Volume Serial Number | 0.9.0 to 0.99.0 |
| smb.wct | Unsigned 8-bit integer | Word Count (WCT) | 0.9.0 to 0.99.0 |
| smb.write.mode.connectionless | Boolean | Connectionless | 0.9.0 to 0.99.0 |
| smb.write.mode.message_start | Boolean | Message Start | 0.9.0 to 0.99.0 |
| smb.write.mode.raw | Boolean | Write Raw | 0.9.0 to 0.99.0 |
| smb.write.mode.return_remaining | Boolean | Return Remaining | 0.9.0 to 0.99.0 |
| smb.write.mode.write_through | Boolean | Write Through | 0.9.0 to 0.99.0 |