diff --git a/packet-dcerpc-lsa.c b/packet-dcerpc-lsa.c index 1ca379419d..dc31bc491a 100644 --- a/packet-dcerpc-lsa.c +++ b/packet-dcerpc-lsa.c @@ -3,7 +3,7 @@ * Copyright 2001,2003 Tim Potter * 2002 Added LSA command dissectors Ronnie Sahlberg * - * $Id: packet-dcerpc-lsa.c,v 1.95 2004/06/05 02:40:22 sahlberg Exp $ + * $Id: packet-dcerpc-lsa.c,v 1.96 2004/06/28 05:29:21 guy Exp $ * * Ethereal - Network traffic analyzer * By Gerald Combs @@ -3181,11 +3181,19 @@ static int lsa_dissect_lsarqueryinformationpolicy2_rqst(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, guint8 *drep) { + guint16 level; + offset = dissect_nt_policy_hnd(tvb, offset, pinfo, tree, drep, hf_lsa_hnd, NULL, NULL, FALSE, FALSE); offset = dissect_ndr_uint16(tvb, offset, pinfo, tree, drep, - hf_lsa_policy_information_class, NULL); + hf_lsa_policy_information_class, &level); + + if (check_col(pinfo->cinfo, COL_INFO)) + col_append_fstr( + pinfo->cinfo, COL_INFO, ", %s", + val_to_str(level, policy_information_class_vals, + "Unknown (%d)")); return offset; } @@ -4187,8 +4195,8 @@ proto_register_dcerpc_lsa(void) NULL, 0x0, "Next audit record", HFILL }}, { &hf_lsa_paei_enabled, - { "Enabled", "lsa.paei.enabled", FT_UINT8, BASE_DEC, - NULL, 0x0, "If Audit Events Information is Enabled or not", HFILL }}, + { "Auditing enabled", "lsa.paei.enabled", FT_UINT8, BASE_DEC, + NULL, 0x0, "If Security auditing is enabled or not", HFILL }}, { &hf_lsa_paei_settings, { "Settings", "lsa.paei.settings", FT_UINT32, BASE_HEX,