SMB2/Ioctl/Function

SMB2/Ioctl/Function

This is a 4 byte field in the SMB2/Ioctl command that describes what kind of ioctl or fsctl is being used.

Structure

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|            Device             | A :       Function        : M |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

Device

A

 0x00  FILE_ANY_ACCESS
 0x01  FILE_READ_ACCESS
 0x02  FILE_WRITE_ACCESS
 0x03  FILE_READ_WRITE_ACCESS

Method

 0x00  METHOD_BUFFERED
 0x01  METHOD_IN_DIRECT
 0x02  METHOD_OUT_DIRECT
 0x03  METHOD_NEITHER

Function

Function depends on the device used.

Discussion

http://www.osronline.com/article.cfm?article=229 contains an online conversion tool.


Imported from https://wiki.wireshark.org/SMB2/Ioctl/Function on 2020-08-11 23:25:03 UTC