Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.
Wireshark logo

Smb2-protocol: [Smb2-protocol] Re: New Extrainfo tag : TWrp

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: tridge@xxxxxxxxx
Date: Mon, 6 Feb 2006 21:56:56 +1100
Ronnie,

 > So, this is then probably how they open
 > shadow copies,

yes, that makes sense. It's a bit neater than the method used in SMB,
where they open file names like:

  \@GMT-2006.01.25-02.49.38\test\New Text Document.txt

after using an IOCTL to get the list of times.

Cheers, Tridge
Wireshark logo footer

© Wireshark Foundation · Privacy Policy

Facebook·Mastodon·Twitter·YouTube