2.2.8.3.7 SMB_QUERY_FILE_STANDARD_INFO

  • Article

This information level structure is used in TRANS2_QUERY_PATH_INFORMATION (section 2.2.6.6) and TRANS2_QUERY_FILE_INFORMATION (section 2.2.6.8) responses to return the following information for the file specified in the request.<176>

  • 64-bit version of file size

  • Number of hard links on the file

  • Deletion status

  • Whether the FID field in the request points to a directory

     SMB_QUERY_FILE_STANDARD_INFO 
   {
   LARGE_INTEGER AllocationSize;
   LARGE_INTEGER EndOfFile;
   ULONG         NumberOfLinks;
   UCHAR         DeletePending;
   UCHAR         Directory;
   }

Allocation Size: (8 bytes): This field contains the number of bytes that are allocated to the file.

EndOfFile: (8 bytes): This field contains the offset, in bytes, from the start of the file to the first byte after the end of the file.

NumberOfLinks: (4 bytes): This field contains the number of hard links to the file.

DeletePending: (1 byte): This field indicates whether there is a delete action pending for the file.

Directory: (1 byte): This field indicates whether the file is a directory.