ruby_smb 3.0.6 → 3.1.0

data/lib/ruby_smb/smb1/packet/trans2/find_next2_response.rb

@@ -2,52 +2,52 @@ module RubySMB
   module SMB1
     module Packet
       module Trans2
-        # This class represents an SMB1 Trans2 FIND_NEXT2 Response Packet as defined in
-        # [2.2.6.3.2 Response](https://msdn.microsoft.com/en-us/library/ee441871.aspx)
-        class FindNext2Response < RubySMB::GenericPacket
-          COMMAND = RubySMB::SMB1::Commands::SMB_COM_TRANSACTION2
+        # The Trans2 Parameter Block for this particular Subcommand
+        class FindNext2ResponseTrans2Parameters < BinData::Record
+          endian  :little
 
-          class ParameterBlock < RubySMB::SMB1::Packet::Trans2::Response::ParameterBlock
-          end
+          uint16  :search_count,      label: 'Search Count'
+          uint16  :eos,               label: 'End of Search'
+          uint16  :ea_error_offset,   label: 'Offset to EA Error'
+          uint16  :last_name_offset,  label: 'Last Name Offset'
 
-          # The Trans2 Parameter Block for this particular Subcommand
-          class Trans2Parameters < BinData::Record
-            endian  :little
+          # Returns the length of the Trans2Parameters struct
+          # in number of bytes
+          def length
+            do_num_bytes
+          end
+        end
 
-            uint16  :search_count,      label: 'Search Count'
-            uint16  :eos,               label: 'End of Search'
-            uint16  :ea_error_offset,   label: 'Offset to EA Error'
-            uint16  :last_name_offset,  label: 'Last Name Offset'
+        # The Trans2 Data Block for this particular Subcommand
+        class FindNext2ResponseTrans2Data < BinData::Record
+          string :buffer, label: 'Results Buffer', read_length: :buffer_read_length
 
-            # Returns the length of the Trans2Parameters struct
-            # in number of bytes
-            def length
-              do_num_bytes
-            end
+          # Returns the length of the Trans2Data struct
+          # in number of bytes
+          def length
+            do_num_bytes
           end
+        end
 
-          # The Trans2 Data Block for this particular Subcommand
-          class Trans2Data < BinData::Record
-            rest :buffer, label: 'Results Buffer'
+        # The {RubySMB::SMB1::DataBlock} specific to this packet type.
+        class FindNext2ResponseDataBlock < RubySMB::SMB1::Packet::Trans2::DataBlock
+          string                                 :pad1,               length: -> { pad1_length }
+          find_next2_response_trans2_parameters  :trans2_parameters,  label: 'Trans2 Parameters'
+          string                                 :pad2,               length: -> { pad2_length }
+          find_next2_response_trans2_data        :trans2_data,        label: 'Trans2 Data', length: 0
+        end
 
-            # Returns the length of the Trans2Data struct
-            # in number of bytes
-            def length
-              do_num_bytes
-            end
-          end
+        # This class represents an SMB1 Trans2 FIND_NEXT2 Response Packet as defined in
+        # [2.2.6.3.2 Response](https://msdn.microsoft.com/en-us/library/ee441871.aspx)
+        class FindNext2Response < RubySMB::GenericPacket
+          COMMAND = RubySMB::SMB1::Commands::SMB_COM_TRANSACTION2
 
-          # The {RubySMB::SMB1::DataBlock} specific to this packet type.
-          class DataBlock < RubySMB::SMB1::Packet::Trans2::DataBlock
-            string             :pad1,               length: -> { pad1_length }
-            trans2_parameters  :trans2_parameters,  label: 'Trans2 Parameters'
-            string             :pad2,               length: -> { pad2_length }
-            trans2_data        :trans2_data,        label: 'Trans2 Data', length: 0
+          class ParameterBlock < RubySMB::SMB1::Packet::Trans2::Response::ParameterBlock
           end
 
-          smb_header        :smb_header
-          parameter_block   :parameter_block
-          data_block        :data_block
+          smb_header                      :smb_header
+          parameter_block                 :parameter_block
+          find_next2_response_data_block  :data_block
 
           def initialize_instance
             super

data/lib/ruby_smb/smb1/packet/trans2/open2_request.rb

@@ -2,53 +2,54 @@ module RubySMB
   module SMB1
     module Packet
       module Trans2
-        # A Trans2 OPEN2 Request Packet as defined in
-        # [2.2.6.1.1 Request](https://msdn.microsoft.com/en-us/library/ee441733.aspx)
-        class Open2Request < RubySMB::GenericPacket
-          COMMAND = RubySMB::SMB1::Commands::SMB_COM_TRANSACTION2
+        # The Trans2 Parameter Block for this particular Subcommand
+        class Open2RequestTrans2Parameters < BinData::Record
+          endian :little
 
-          class ParameterBlock < RubySMB::SMB1::Packet::Trans2::Request::ParameterBlock
+          open2_flags         :flags,           label: 'Flags'
+          open2_access_mode   :access_mode,     label: 'AccessMode'
+          uint16              :reserved,        label: 'Reserved Space'
+          smb_file_attributes :file_attributes, label: 'File Attributes'
+          utime               :creation_time,   label: 'Creation Time'
+          open2_open_mode     :open_mode,       label: 'Open Mode'
+          uint32              :allocation_size, label: 'Allocation Size'
+          array               :reserved2, initial_length: 5 do
+            uint16 initial_value: 0x0000
           end
+          stringz :filename, label: 'Filename'
 
-          # The Trans2 Parameter Block for this particular Subcommand
-          class Trans2Parameters < BinData::Record
-            endian :little
-            open2_flags         :flags,           label: 'Flags'
-            open2_access_mode   :access_mode,     label: 'AccessMode'
-            uint16              :reserved,        label: 'Reserved Space'
-            smb_file_attributes :file_attributes, label: 'File Attributes'
-            utime               :creation_time,   label: 'Creation Time'
-            open2_open_mode     :open_mode,       label: 'Open Mode'
-            uint32              :allocation_size, label: 'Allocation Size'
-            array               :reserved2, initial_length: 5 do
-              uint16 initial_value: 0x0000
-            end
-            stringz :filename, label: 'Filename'
-
-            # Returns the length of the Trans2Parameters struct
-            # in number of bytes
-            def length
-              do_num_bytes
-            end
+          # Returns the length of the Trans2Parameters struct
+          # in number of bytes
+          def length
+            do_num_bytes
           end
+        end
 
-          # The Trans2 Data Blcok for this particular Subcommand
-          class Trans2Data < BinData::Record
-            smb_fea_list :extended_attribute_list, label: 'Extended Attribute List'
-          end
+        # The Trans2 Data Block for this particular Subcommand
+        class Open2RequestTrans2Data < BinData::Record
+          smb_fea_list :extended_attribute_list, label: 'Extended Attribute List'
+        end
 
-          # The {RubySMB::SMB1::DataBlock} specific to this packet type.
-          class DataBlock < RubySMB::SMB1::Packet::Trans2::DataBlock
-            uint8              :name,               label: 'Name', initial_value: 0x00
-            string             :pad1,               length: -> { pad1_length }
-            trans2_parameters  :trans2_parameters,  label: 'Trans2 Parameters'
-            string             :pad2,               length: -> { pad2_length }
-            trans2_data        :trans2_data,        label: 'Trans2 Data'
+        # The {RubySMB::SMB1::DataBlock} specific to this packet type.
+        class Open2RequestDataBlock < RubySMB::SMB1::Packet::Trans2::DataBlock
+          uint8                            :name,               label: 'Name', initial_value: 0x00
+          string                           :pad1,               length: -> { pad1_length }
+          open2_request_trans2_parameters  :trans2_parameters,  label: 'Trans2 Parameters'
+          string                           :pad2,               length: -> { pad2_length }
+          open2_request_trans2_data        :trans2_data,        label: 'Trans2 Data'
+        end
+
+        # A Trans2 OPEN2 Request Packet as defined in
+        # [2.2.6.1.1 Request](https://msdn.microsoft.com/en-us/library/ee441733.aspx)
+        class Open2Request < RubySMB::GenericPacket
+          COMMAND = RubySMB::SMB1::Commands::SMB_COM_TRANSACTION2
+
+          class ParameterBlock < RubySMB::SMB1::Packet::Trans2::Request::ParameterBlock
           end
 
-          smb_header        :smb_header
-          parameter_block   :parameter_block
-          data_block        :data_block
+          smb_header                :smb_header
+          parameter_block           :parameter_block
+          open2_request_data_block  :data_block
 
           def initialize_instance
             super

data/lib/ruby_smb/smb1/packet/trans2/open2_response.rb

@@ -2,6 +2,43 @@ module RubySMB
   module SMB1
     module Packet
       module Trans2
+        # The Trans2 Parameter Block for this particular Subcommand
+        class Open2ResponseTrans2Parameters < BinData::Record
+          endian :little
+          uint8               :fid,             label: 'File ID'
+          smb_file_attributes :file_attributes, label: 'File Attributes'
+          utime               :creation_time,   label: 'Creation Time'
+          open2_access_mode   :access_mode,     label: 'AccessMode'
+          uint16              :resource_type,   label: 'Resource Type'
+          smb_nmpipe_status   :nmpipe_status,   label: 'Named Pipe Status'
+
+          struct :action_taken do
+            endian  :little
+            bit6    :reserved,    label: 'Reserved Space'
+            bit2    :open_result, label: 'Open Result'
+            # byte boundary
+            bit1    :lock_status, label: 'Lock Status'
+            resume_byte_alignment
+          end
+
+          uint32  :reserved,                      label: 'Reserved Space'
+          uint16  :extended_attribute_offset,     label: 'Extended Attribute Offset'
+          uint32  :extended_attribute_length,     label: 'Extended Attribute Length'
+
+          # Returns the length of the Trans2Parameters struct
+          # in number of bytes
+          def length
+            do_num_bytes
+          end
+        end
+
+        # The {RubySMB::SMB1::DataBlock} specific to this packet type.
+        class Open2ResponseDataBlock < RubySMB::SMB1::Packet::Trans2::DataBlock
+          string                            :pad1,               length: -> { pad1_length }
+          open2_response_trans2_parameters  :trans2_parameters,  label: 'Trans2 Parameters'
+          # trans2_data: No data is sent by this message.
+        end
+
         # This class represents an SMB1 Trans2 Open2 Response Packet as defined in
         # [2.2.6.1.2 Response](https://msdn.microsoft.com/en-us/library/ee441545.aspx)
         class Open2Response < RubySMB::GenericPacket
@@ -10,46 +47,9 @@ module RubySMB
           class ParameterBlock < RubySMB::SMB1::Packet::Trans2::Response::ParameterBlock
           end
 
-          # The Trans2 Parameter Block for this particular Subcommand
-          class Trans2Parameters < BinData::Record
-            endian :little
-            uint8               :fid,             label: 'File ID'
-            smb_file_attributes :file_attributes, label: 'File Attributes'
-            utime               :creation_time,   label: 'Creation Time'
-            open2_access_mode   :access_mode,     label: 'AccessMode'
-            uint16              :resource_type,   label: 'Resource Type'
-            smb_nmpipe_status   :nmpipe_status,   label: 'Named Pipe Status'
-
-            struct :action_taken do
-              endian  :little
-              bit6    :reserved,    label: 'Reserved Space'
-              bit2    :open_result, label: 'Open Result'
-              # byte boundary
-              bit1    :lock_status, label: 'Lock Status'
-              resume_byte_alignment
-            end
-
-            uint32  :reserved,                      label: 'Reserved Space'
-            uint16  :extended_attribute_offset,     label: 'Extended Attribute Offset'
-            uint32  :extended_attribute_length,     label: 'Extended Attribute Length'
-
-            # Returns the length of the Trans2Parameters struct
-            # in number of bytes
-            def length
-              do_num_bytes
-            end
-          end
-
-          # The {RubySMB::SMB1::DataBlock} specific to this packet type.
-          class DataBlock < RubySMB::SMB1::Packet::Trans2::DataBlock
-            string             :pad1,               length: -> { pad1_length }
-            trans2_parameters  :trans2_parameters,  label: 'Trans2 Parameters'
-            # trans2_data: No data is sent by this message.
-          end
-
-          smb_header        :smb_header
-          parameter_block   :parameter_block
-          data_block        :data_block
+          smb_header                 :smb_header
+          parameter_block            :parameter_block
+          open2_response_data_block  :data_block
 
           def initialize_instance
             super

data/lib/ruby_smb/smb1/packet/trans2/query_file_information_request.rb

@@ -0,0 +1,60 @@
+module RubySMB
+  module SMB1
+    module Packet
+      module Trans2
+        # The Trans2 Parameter Block for this particular Subcommand
+        class QueryFileInformationRequestTrans2Parameters < BinData::Record
+          endian :little
+
+          uint16 :fid,               label: 'FID'
+          uint16 :information_level, label: 'Information Level'
+
+          # Returns the length of the Trans2Parameters struct
+          # in number of bytes
+          def length
+            do_num_bytes
+          end
+        end
+
+        # The Trans2 Data Block for this particular Subcommand
+        class QueryFileInformationRequestTrans2Data < BinData::Record
+          smb_gea_list :extended_attribute_list, label: 'Get Extended Attribute List',
+            onlyif: -> { parent.trans2_parameters.information_level == FindInformationLevel::SMB_INFO_QUERY_EAS_FROM_LIST}
+
+          # Returns the length of the Trans2Data struct
+          # in number of bytes
+          def length
+            do_num_bytes
+          end
+        end
+
+        # The {RubySMB::SMB1::DataBlock} specific to this packet type.
+        class QueryFileInformationRequestDataBlock < RubySMB::SMB1::Packet::Trans2::DataBlock
+          uint8                                             :name,               label: 'Name', initial_value: 0x00
+          string                                            :pad1,               length: -> { pad1_length }
+          query_file_information_request_trans2_parameters  :trans2_parameters,  label: 'Trans2 Parameters'
+          string                                            :pad2,               length: -> { pad2_length }
+          query_file_information_request_trans2_data        :trans2_data,        label: 'Trans2 Data'
+        end
+
+        # A Trans2 QUERY_FILE_INFORMATION Request Packet as defined in
+        # [2.2.6.8.1](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-cifs/357bf60d-f30a-457e-9787-9f78322b92d3)
+        class QueryFileInformationRequest < RubySMB::GenericPacket
+          COMMAND = RubySMB::SMB1::Commands::SMB_COM_TRANSACTION2
+
+          class ParameterBlock < RubySMB::SMB1::Packet::Trans2::Request::ParameterBlock
+          end
+
+          smb_header                                 :smb_header
+          parameter_block                            :parameter_block
+          query_file_information_request_data_block  :data_block
+
+          def initialize_instance
+            super
+            parameter_block.setup << RubySMB::SMB1::Packet::Trans2::Subcommands::QUERY_FILE_INFORMATION
+          end
+        end
+      end
+    end
+  end
+end

data/lib/ruby_smb/smb1/packet/trans2/query_file_information_response.rb

@@ -0,0 +1,59 @@
+module RubySMB
+  module SMB1
+    module Packet
+      module Trans2
+        # The Trans2 Parameter Block for this particular Subcommand
+        class QueryFileInformationResponseTrans2Parameters < BinData::Record
+          endian :little
+
+          uint16 :ea_error_offset, label: 'EA Error Offset'
+
+          # Returns the length of the Trans2Parameters struct
+          # in number of bytes
+          def length
+            do_num_bytes
+          end
+        end
+
+        # The Trans2 Data Block for this particular Subcommand
+        class QueryFileInformationResponseTrans2Data < BinData::Record
+          string :buffer, label: 'Results Buffer', read_length: :buffer_read_length
+
+          # Returns the length of the Trans2Data struct
+          # in number of bytes
+          def length
+            do_num_bytes
+          end
+        end
+
+        # The {RubySMB::SMB1::DataBlock} specific to this packet type.
+        class QueryFileInformationResponseDataBlock < RubySMB::SMB1::Packet::Trans2::DataBlock
+          uint8                                              :name,               label: 'Name', initial_value: 0x00
+          string                                             :pad1,               length: -> { pad1_length }
+          query_file_information_response_trans2_parameters  :trans2_parameters,  label: 'Trans2 Parameters'
+          string                                             :pad2,               length: -> { pad2_length }
+          query_file_information_response_trans2_data        :trans2_data,        label: 'Trans2 Data'
+        end
+
+        # A Trans2 QUERY_FILE_INFORMATION Response Packet as defined in
+        # [2.2.6.8.2](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-cifs/262fd0c3-41c4-41db-9f0c-61154f694636)
+        class QueryFileInformationResponse < RubySMB::GenericPacket
+          COMMAND = RubySMB::SMB1::Commands::SMB_COM_TRANSACTION2
+
+          class ParameterBlock < RubySMB::SMB1::Packet::Trans2::Response::ParameterBlock
+          end
+
+          smb_header                                  :smb_header
+          parameter_block                             :parameter_block
+          query_file_information_response_data_block  :data_block
+
+          def initialize_instance
+            super
+            parameter_block.setup << RubySMB::SMB1::Packet::Trans2::Subcommands::QUERY_FILE_INFORMATION
+            smb_header.flags.reply = 1
+          end
+        end
+      end
+    end
+  end
+end

data/lib/ruby_smb/smb1/packet/trans2/query_fs_information_level/query_fs_attribute_info.rb

@@ -0,0 +1,31 @@
+module RubySMB
+  module SMB1
+    module Packet
+      module Trans2
+        # SMB_QUERY_FS_ATTRIBUTE_INFO Class as defined in
+        # [2.2.8.2.6 SMB_QUERY_FS_ATTRIBUTE_INFO](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-cifs/1011206a-55c5-4dbf-aff0-119514136940)
+        module QueryFsInformationLevel
+          class QueryFsAttributeInfo < BinData::Record
+            CLASS_LEVEL = SMB_QUERY_FS_ATTRIBUTE_INFO
+            endian :little
+
+            struct    :file_system_attributes,        label: 'File System Attributes' do
+              bit3    :reserved1
+              bit1    :file_file_compression,         label: 'File Compression'
+              bit1    :file_persistent_acls,          label: 'Persistent ACLs'
+              bit1    :file_unicode_on_disk,          label: 'Unicode on Disk'
+              bit1    :file_case_preserved_names,     label: 'Case Preserved Names'
+              bit1    :file_case_sensitive_search,    label: 'Case Sensitive Search'
+              # byte boundary
+              bit1    :file_volume_is_compressed,     label: 'Volume is Compressed'
+              bit23   :reserved2
+            end
+            uint32    :max_file_name_length_in_bytes, label: 'Max File Name Length In Bytes'
+            uint32    :length_of_file_system_name,    label: 'Length of File System Name', initial_value: -> { file_system_name.num_bytes }
+            string16  :file_system_name,              label: 'File System name', read_length: -> { length_of_file_system_name }
+          end
+        end
+      end
+    end
+  end
+end

data/lib/ruby_smb/smb1/packet/trans2/query_fs_information_level.rb

@@ -0,0 +1,40 @@
+module RubySMB
+  module SMB1
+    module Packet
+      module Trans2
+        # SMB Query Information Levels as defined in
+        # [2.2.8.2 QUERY_FS Information Levels](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-cifs/2c7707b4-afcd-4dbf-a0f3-35abebe68fac)
+        # used in TRANS2_QUERY_FS_INFORMATION
+        module QueryFsInformationLevel
+          # Constants defined in
+          # [2.2.2.3.2 QUERY_FS Information Level Codes](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-cifs/55217a26-87ef-489f-a159-3ed6cc6412e9)
+          # [dialect] description
+
+          # [LANMAN2.0] Query file system allocation unit information.
+          SMB_INFO_ALLOCATION               = 0x0001 # 1
+
+          # [LANMAN2.0] Query volume name and serial number.
+          SMB_INFO_VOLUME                   = 0x0002 # 2
+
+          # [NT LANMAN] Query the creation timestamp, serial number, and Unicode-encoded volume label.
+          SMB_QUERY_FS_VOLUME_INFO          = 0x0102 # 258
+
+          # [NT LANMAN] Query 64-bit file system allocation unit information.
+          SMB_QUERY_FS_SIZE_INFO            = 0x0103 # 259
+
+          # [NT LANMAN] Query a file system's underlying device type and characteristics.
+          SMB_QUERY_FS_DEVICE_INFO          = 0x0104 # 260
+
+          # [NT LANMAN] Query file system attributes.
+          SMB_QUERY_FS_ATTRIBUTE_INFO       = 0x0105 # 261
+
+          def self.name(value)
+            constants.select { |c| c.upcase == c }.find { |c| const_get(c) == value }
+          end
+
+          require 'ruby_smb/smb1/packet/trans2/query_fs_information_level/query_fs_attribute_info'
+        end
+      end
+    end
+  end
+end

data/lib/ruby_smb/smb1/packet/trans2/query_fs_information_request.rb

@@ -0,0 +1,46 @@
+module RubySMB
+  module SMB1
+    module Packet
+      module Trans2
+        # The Trans2 Parameter Block for this particular Subcommand
+        class QueryFsInformationRequestTrans2Parameters < BinData::Record
+          endian :little
+
+          uint16 :information_level, label: 'Information Level'
+
+          # Returns the length of the Trans2Parameters struct
+          # in number of bytes
+          def length
+            do_num_bytes
+          end
+        end
+
+        # The {RubySMB::SMB1::DataBlock} specific to this packet type.
+        class QueryFsInformationRequestDataBlock < RubySMB::SMB1::Packet::Trans2::DataBlock
+          uint8                                           :name,               label: 'Name', initial_value: 0x00
+          string                                          :pad1,               length: -> { pad1_length }
+          query_fs_information_request_trans2_parameters  :trans2_parameters,  label: 'Trans2 Parameters'
+          # trans2_data: No data is sent by this message.
+        end
+
+        # A Trans2 QUERY_FS_INFORMATION Request Packet as defined in
+        # [2.2.6.4.1](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-cifs/cfa23a11-0e80-43bd-bbd4-e9cfb99b5dce)
+        class QueryFsInformationRequest < RubySMB::GenericPacket
+          COMMAND = RubySMB::SMB1::Commands::SMB_COM_TRANSACTION2
+
+          class ParameterBlock < RubySMB::SMB1::Packet::Trans2::Request::ParameterBlock
+          end
+
+          smb_header                               :smb_header
+          parameter_block                          :parameter_block
+          query_fs_information_request_data_block  :data_block
+
+          def initialize_instance
+            super
+            parameter_block.setup << RubySMB::SMB1::Packet::Trans2::Subcommands::QUERY_FS_INFORMATION
+          end
+        end
+      end
+    end
+  end
+end

data/lib/ruby_smb/smb1/packet/trans2/query_fs_information_response.rb

@@ -0,0 +1,59 @@
+module RubySMB
+  module SMB1
+    module Packet
+      module Trans2
+        # The Trans2 Parameter Block for this particular Subcommand
+        class QueryFsInformationResponseTrans2Parameters < BinData::Record
+          endian :little
+
+          # this field is intentionally empty
+
+          # Returns the length of the Trans2Parameters struct
+          # in number of bytes
+          def length
+            do_num_bytes
+          end
+        end
+
+        # The Trans2 Data Block for this particular Subcommand
+        class QueryFsInformationResponseTrans2Data < BinData::Record
+          string :buffer, label: 'Results Buffer', read_length: :buffer_read_length
+
+          # Returns the length of the Trans2Data struct
+          # in number of bytes
+          def length
+            do_num_bytes
+          end
+        end
+
+        # The {RubySMB::SMB1::DataBlock} specific to this packet type.
+        class QueryFsInformationResponseDataBlock < RubySMB::SMB1::Packet::Trans2::DataBlock
+          uint8                                            :name,              label: 'Name', initial_value: 0x00
+          string                                           :pad1,              length: -> { pad1_length }
+          query_fs_information_response_trans2_parameters  :trans2_parameters, label: 'Trans2 Parameters'
+          string                                           :pad2,              length: -> { pad2_length }
+          query_fs_information_response_trans2_data        :trans2_data,       label: 'Trans2 Data'
+        end
+
+        # A Trans2 QUERY_FS_INFORMATION Response Packet as defined in
+        # [2.2.6.4.1](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-cifs/cfa23a11-0e80-43bd-bbd4-e9cfb99b5dce)
+        class QueryFsInformationResponse < RubySMB::GenericPacket
+          COMMAND = RubySMB::SMB1::Commands::SMB_COM_TRANSACTION2
+
+          class ParameterBlock < RubySMB::SMB1::Packet::Trans2::Response::ParameterBlock
+          end
+
+          smb_header                                :smb_header
+          parameter_block                           :parameter_block
+          query_fs_information_response_data_block  :data_block
+
+          def initialize_instance
+            super
+            parameter_block.setup << RubySMB::SMB1::Packet::Trans2::Subcommands::QUERY_FS_INFORMATION
+            smb_header.flags.reply = 1
+          end
+        end
+      end
+    end
+  end
+end

data/lib/ruby_smb/smb1/packet/trans2/query_information_level/query_file_basic_info.rb

@@ -0,0 +1,23 @@
+module RubySMB
+  module SMB1
+    module Packet
+      module Trans2
+        # SMB_QUERY_FILE_BASIC_INFO Class as defined in
+        # [2.2.8.3.6 SMB_QUERY_FILE_BASIC_INFO](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-cifs/3da7df75-43ba-4498-a6b3-a68ba57ec922)
+        module QueryInformationLevel
+          class QueryFileBasicInfo < BinData::Record
+            CLASS_LEVEL = SMB_QUERY_FILE_BASIC_INFO
+            endian :little
+
+            file_time                :create_time,         label: 'Create Time'
+            file_time                :last_access,         label: 'Last Accessed Time'
+            file_time                :last_write,          label: 'Last Write Time'
+            file_time                :last_change,         label: 'Last Modified Time'
+            smb_ext_file_attributes  :ext_file_attributes, label: 'Extended File Attributes'
+            uint32                   :reserved,            label: 'Reserved'
+          end
+        end
+      end
+    end
+  end
+end

data/lib/ruby_smb/smb1/packet/trans2/query_information_level/query_file_standard_info.rb

@@ -0,0 +1,22 @@
+module RubySMB
+  module SMB1
+    module Packet
+      module Trans2
+        # SMB_QUERY_FILE_STANDARD_INFO Class as defined in
+        # [2.2.8.3.7 SMB_QUERY_FILE_STANDARD_INFO](https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-cifs/3bdd080c-f8a4-4a09-acf1-0f8bd00152e4)
+        module QueryInformationLevel
+          class QueryFileStandardInfo < BinData::Record
+            CLASS_LEVEL = SMB_QUERY_FILE_STANDARD_INFO
+            endian :little
+
+            uint64  :allocation_size, label: 'Allocated Size'
+            uint64  :end_of_file,     label: 'End of File'
+            uint32  :number_of_links, label: 'Number of Hard Links'
+            uint8   :delete_pending,  label: 'Delete Pending?'
+            uint8   :directory,       label: 'Directory?'
+          end
+        end
+      end
+    end
+  end
+end