[cifs-protocol] Flags field in [MS-SMB2] 2.2.14 SMB2 CREATE Response?

Volker Lendecke Volker.Lendecke at sernet.de
Tue Feb 14 20:23:31 UTC 2023

Hello dochelp,

[ms-smb2] 2.2.14 defines the flags field in the create response as SMB2_CREATE_FLAG_REPARSEPOINT (0x01) when the last component of a file opened is a reparse point. Receiving an SMB2 CREATE Request

confirms this: If Connection.Dialect belongs to the SMB 3.x dialect
family and Open.LocalOpen is a reparse point, set the
SMB2_CREATE_FLAG_REPARSEPOINT bit in the Flags field.

Attached find a network trace against Windows 2016 (build 14393.5648)
that seems to behave differently. Frame 14 returns STOPPED_ON_SYMLINK
with an unparsed path length of 0. Frame 15 reopens the file with
OPEN_REPARSE_POINT. The FileAttributes field in Frame 16 shows this,
but the "flags" field according to [ms-smb2] 2.2.14 is 0.

Can you explain if my interpretation of [ms-smb2] is wrong?


-------------- next part --------------
A non-text attachment was scrubbed...
Name: syml.cap
Type: application/vnd.tcpdump.pcap
Size: 4160 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20230214/768e3089/syml.cap>

More information about the cifs-protocol mailing list