[cifs-protocol] What is FILE_ACTION_REMOVED_BY_DELETE? MS-FSCC 2.4.42

Volker Lendecke Volker.Lendecke at SerNet.DE
Mon Jul 6 16:04:18 CEST 2015

Hello, Dochelp!

MS-SMB2 2.2.36 SMB2 CHANGE_NOTIFY Response references
FILE_NOTIFY_INFORMATION from MS-FSCC 2.4.42, which includes
FILE_ACTION_REMOVED_BY_DELETE (value 9) as a possible

I could not find a reference to the symbolic name in MS-FSA
or MS-SMB2, the only reference google could find for me is a
kernel API FsRtlNotifyFullReportChange:


Question: Under what circumstances will we see
FILE_ACTION_REMOVED_BY_DELETE on the wire, and in particular
what is the difference to FILE_ACTION_REMOVED (value 2)?


Volker Lendecke

SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de

More information about the cifs-protocol mailing list