I've uploaded a new capture to http://wiki.ethereal.com/SMB2/GetInfo
which shows a bunch of getinfo/setinfo levels, and also shows a create
call with an initial set of EAs.
For the first set of getinfo calls the file started out like this:
all_info for '\test\testsmb2_file.dat'
create_time: Thu Apr 23 05:26:44 2009 EST
access_time: Thu Apr 23 05:26:43 2009 EST
write_time: Thu Apr 23 05:26:42 2009 EST
change_time: Thu Apr 23 05:26:41 2009 EST
attrib: 0x80
unknown1: 0x0
alloc_size: 8
size: 7
nlink: 1
delete_pending: 0
directory: 0
file_id: 10977524091775231
ea_size: 41
access_mask: 0x000f01ff
unknown2: 0x0
unknown3: 0x0
short name: 'TESTSM~1.DAT'
EA[0] flags=0 len=6 'EAONE'
EA[1] flags=0 len=8 'SECONDEA'
stream 0:
size 7
alloc size 8
name ::$DATA
stream 1:
size 7
alloc size 8
name :streamtwo:$DATA
for the setinfo calls it started out like this:
all_info for '\test\fnum_test_95.txt'
create_time: Thu Apr 23 05:26:44 2009 EST
access_time: Thu Apr 23 05:26:43 2009 EST
write_time: Thu Apr 23 05:26:42 2009 EST
change_time: Thu Apr 23 05:26:41 2009 EST
attrib: 0x80
unknown1: 0x0
alloc_size: 8
size: 7
nlink: 1
delete_pending: 0
directory: 0
file_id: 47287796087449946
ea_size: 41
access_mask: 0x001f01ff
unknown2: 0x0
unknown3: 0x0
short name: 'FNC783~1.TXT'
EA[0] flags=0 len=6 'EAONE'
EA[1] flags=0 len=8 'SECONDEA'
stream 0:
size 7
alloc size 8
name ::$DATA
