[cifs-protocol] What is FILE_ACTION_REMOVED_BY_DELETE? MS-FSCC 2.4.42

[Volker Lendecke]

On Mon, Jul 06, 2015 at 03:07:33PM +0000, Tarun Chopra wrote:
> 
> Thanks Richard for the pointer. 
> 
> Hello Volker - As Richard pointed out; the information is stated in section 2.4.42 of MS-FSCC. Kindly let us know if you need any further assistance.

Yes, I need further assistance.

2.4.42 in MS-FSCC mentions for FILE_ACTION_REMOVED_BY_DELETE the
meaning "The file was removed by delete." As Richard also mentioned, the
description is terse. If I for example search for FILE_ACTION_REMOVED in
[MS-FSA], I find a few places where it is mentioned and thus propagated up
to [MS-SMB2] and [MS-FSCC]. If I search for FILE_ACTION_REMOVED_BY_DELETE
in [MS-FSA], I do not find any mentioning of it in [MS-FSA].

So my question again: Can you specify what events in the file server
(or layers below) trigger FILE_ACTION_REMOVED_BY_DELETE to show up in
a notify response?

Thanks,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de