add the new autogenerated lsa dissector

this changes some call signatures requiring changes to the netlogon 
dissector as well


svn path=/trunk/; revision=26320
This commit is contained in:
Ronnie Sahlberg 2008-10-01 00:48:27 +00:00
parent bf27687d94
commit 3e15613ed6
3 changed files with 12288 additions and 4380 deletions

File diff suppressed because it is too large Load Diff

View File

@ -1,145 +1,168 @@
/* packet-dcerpc-lsa.h
* Routines for SMB \PIPE\lsarpc packet disassembly
* Copyright 2001, Tim Potter <tpot@samba.org>
*
* $Id$
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
* Copyright 1998 Gerald Combs
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 2
* of the License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
*/
/* autogenerated by pidl */
#ifndef __PACKET_DCERPC_LSA_H
#define __PACKET_DCERPC_LSA_H
/* DO NOT EDIT
This filter was automatically generated
from lsa.idl and lsa.cnf.
Pidl is a perl based IDL compiler for DCE/RPC idl files.
It is maintained by the Samba team, not the Wireshark team.
Instructions on how to download and install Pidl can be
found at http://wiki.wireshark.org/Pidl
*/
#define LSA_LSARCLOSE 0x00
#define LSA_LSARDELETE 0x01
#define LSA_LSARENUMERATEPRIVILEGES 0x02
#define LSA_LSARQUERYSECURITYOBJECT 0x03
#define LSA_LSARSETSECURITYOBJECT 0x04
#define LSA_LSARCHANGEPASSWORD 0x05
#define LSA_LSAROPENPOLICY 0x06
#define LSA_LSARQUERYINFORMATIONPOLICY 0x07
#define LSA_LSARSETINFORMATIONPOLICY 0x08
#define LSA_LSARCLEARAUDITLOG 0x09
#define LSA_LSARCREATEACCOUNT 0x0a
#define LSA_LSARENUMERATEACCOUNTS 0x0b
#define LSA_LSARCREATETRUSTEDDOMAIN 0x0c
#define LSA_LSARENUMERATETRUSTEDDOMAINS 0x0d
#define LSA_LSARLOOKUPNAMES 0x0e
#define LSA_LSARLOOKUPSIDS 0x0f
#define LSA_LSARCREATESECRET 0x10
#define LSA_LSAROPENACCOUNT 0x11
#define LSA_LSARENUMERATEPRIVILEGESACCOUNT 0x12
#define LSA_LSARADDPRIVILEGESTOACCOUNT 0x13
#define LSA_LSARREMOVEPRIVILEGESFROMACCOUNT 0x14
#define LSA_LSARGETQUOTASFORACCOUNT 0x15
#define LSA_LSARSETQUOTASFORACCOUNT 0x16
#define LSA_LSARGETSYSTEMACCESSACCOUNT 0x17
#define LSA_LSARSETSYSTEMACCESSACCOUNT 0x18
#define LSA_LSAROPENTRUSTEDDOMAIN 0x19
#define LSA_LSARQUERYINFOTRUSTEDDOMAIN 0x1a
#define LSA_LSARSETINFORMATIONTRUSTEDDOMAIN 0x1b
#define LSA_LSAROPENSECRET 0x1c
#define LSA_LSARSETSECRET 0x1d
#define LSA_LSARQUERYSECRET 0x1e
#define LSA_LSARLOOKUPPRIVILEGEVALUE 0x1f
#define LSA_LSARLOOKUPPRIVILEGENAME 0x20
#define LSA_LSARLOOKUPPRIVILEGEDISPLAYNAME 0x21
#define LSA_LSARDELETEOBJECT 0x22
#define LSA_LSARENUMERATEACCOUNTSWITHUSERRIGHT 0x23
#define LSA_LSARENUMERATEACCOUNTRIGHTS 0x24
#define LSA_LSARADDACCOUNTRIGHTS 0x25
#define LSA_LSARREMOVEACCOUNTRIGHTS 0x26
#define LSA_LSARQUERYTRUSTEDDOMAININFO 0x27
#define LSA_LSARSETTRUSTEDDOMAININFO 0x28
#define LSA_LSARDELETETRUSTEDDOMAIN 0x29
#define LSA_LSARSTOREPRIVATEDATA 0x2a
#define LSA_LSARRETRIEVEPRIVATEDATA 0x2b
#define LSA_LSAROPENPOLICY2 0x2c
#define LSA_LSARGETUSERNAME 0x2d
#define LSA_LSARQUERYINFORMATIONPOLICY2 0x2e
#define LSA_LSARSETINFORMATIONPOLICY2 0x2f
#define LSA_LSARQUERYTRUSTEDDOMAININFOBYNAME 0x30
#define LSA_LSARSETTRUSTEDDOMAININFOBYNAME 0x31
#define LSA_LSARENUMERATETRUSTEDDOMAINSEX 0x32
#define LSA_LSARCREATETRUSTEDDOMAINEX 0x33
#define LSA_LSARCLOSETRUSTEDDOMAINEX 0x34
#define LSA_LSARQUERYDOMAININFORMATIONPOLICY 0x35
#define LSA_LSARSETDOMAININFORMATIONPOLICY 0x36
#define LSA_LSAROPENTRUSTEDDOMAINBYNAME 0x37
#define LSA_LSARTESTCALL 0x38
#define LSA_LSARLOOKUPSIDS2 0x39
#define LSA_LSARLOOKUPNAMES2 0x3a
#define LSA_LSARCREATETRUSTEDDOMAINEX2 0x3b
#define LSA_CREDRWRITE 0x3c
#define LSA_CREDRREAD 0x3d
#define LSA_CREDRENUMERATE 0x3e
#define LSA_CREDRWRITEDOMAINCREDENTIALS 0x3f
#define LSA_CREDRREADDOMAINCREDENTIALS 0x40
#define LSA_CREDRDELETE 0x41
#define LSA_CREDRGETTARGETINFO 0x42
#define LSA_CREDRPROFILELOADED 0x43
#define LSA_LSARLOOKUPNAMES3 0x44
#define LSA_CREDRGETSESSIONTYPES 0x45
#define LSA_LSARREGISTERAUDITEVENT 0x46
#define LSA_LSARGENAUDITEVENT 0x47
#define LSA_LSARUNREGISTERAUDITEVENT 0x48
#define LSA_LSARQUERYFORESTTRUSTINFORMATION 0x49
#define LSA_LSARSETFORESTTRUSTINFORMATION 0x4a
#define LSA_CREDRRENAME 0x4b
#define LSA_LSARLOOKUPSIDS3 0x4c
#define LSA_LSARLOOKUPNAMES4 0x4d
#define LSA_LSAROPENPOLICYSCE 0x4e
#define LSA_LSARADTREGISTERSECURITYEVENTSOURCE 0x4f
#define LSA_LSARADTUNREGISTERSECURITYEVENTSOURCE 0x50
#define LSA_LSARADTREPORTSECURITYEVENT 0x51
int
lsa_dissect_sec_desc_buf(tvbuff_t *tvb, int offset,
packet_info *pinfo, proto_tree *tree,
guint8 *drep, int dummy1, guint32 dummy2);
int
lsa_dissect_sec_desc_buf_data(tvbuff_t *tvb, int offset,
packet_info *pinfo, proto_tree *tree,
guint8 *drep);
int
lsa_dissect_LSA_SECRET(tvbuff_t *tvb, int offset,
packet_info *pinfo, proto_tree *parent_tree,
guint8 *drep);
#ifndef __PACKET_DCERPC_LSARPC_H
#define __PACKET_DCERPC_LSARPC_H
int
lsa_dissect_DnsDomainInfo(tvbuff_t *tvb, int offset,
packet_info *pinfo, proto_tree *parent_tree,
guint8 *drep, int dummy1, guint32 dummy2);
#define LSA_ENUM_TRUST_DOMAIN_MULTIPLIER ( 60 )
/* Specific access rights */
#define LSA_REF_DOMAIN_LIST_MULTIPLIER ( 32 )
#define POLICY_VIEW_LOCAL_INFORMATION 0x00000001
#define POLICY_VIEW_AUDIT_INFORMATION 0x00000002
#define POLICY_GET_PRIVATE_INFORMATION 0x00000004
#define POLICY_TRUST_ADMIN 0x00000008
#define POLICY_CREATE_ACCOUNT 0x00000010
#define POLICY_CREATE_SECRET 0x00000020
#define POLICY_CREATE_PRIVILEGE 0x00000040
#define POLICY_SET_DEFAULT_QUOTA_LIMITS 0x00000080
#define POLICY_SET_AUDIT_REQUIREMENTS 0x00000100
#define POLICY_AUDIT_LOG_ADMIN 0x00000200
#define POLICY_SERVER_ADMIN 0x00000400
#define POLICY_LOOKUP_NAMES 0x00000800
#define LSA_ENUM_TRUST_DOMAIN_EX_MULTIPLIER ( 82 )
#endif /* packet-dcerpc-lsa.h */
int lsarpc_dissect_bitmap_lsa_PolicyAccessMask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_bitmap_lsa_AccountAccessMask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_bitmap_lsa_DomainAccessMask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_bitmap_lsa_SecretAccessMask(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_bitmap_security_secinfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_String(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_StringLarge(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_Strings(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_AsciiString(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_AsciiStringLarge(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_LUID(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_PrivEntry(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_PrivArray(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
#define LSA_SECURITY_ANONYMOUS (0)
#define LSA_SECURITY_IDENTIFICATION (1)
#define LSA_SECURITY_IMPERSONATION (2)
#define LSA_SECURITY_DELEGATION (3)
extern const value_string lsarpc_lsa_SecurityImpersonationLevel_vals[];
int lsarpc_dissect_enum_lsa_SecurityImpersonationLevel(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_);
int lsarpc_dissect_struct_lsa_QosInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_ObjectAttribute(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_AuditLogInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
#define LSA_AUDIT_POLICY_NONE (0)
#define LSA_AUDIT_POLICY_SUCCESS (1)
#define LSA_AUDIT_POLICY_FAILURE (2)
#define LSA_AUDIT_POLICY_ALL ((LSA_AUDIT_POLICY_SUCCESS|LSA_AUDIT_POLICY_FAILURE))
#define LSA_AUDIT_POLICY_CLEAR (4)
extern const value_string lsarpc_lsa_PolicyAuditPolicy_vals[];
int lsarpc_dissect_enum_lsa_PolicyAuditPolicy(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_);
#define LSA_AUDIT_CATEGORY_SYSTEM (0)
#define LSA_AUDIT_CATEGORY_LOGON (1)
#define LSA_AUDIT_CATEGORY_FILE_AND_OBJECT_ACCESS (2)
#define LSA_AUDIT_CATEGORY_USE_OF_USER_RIGHTS (3)
#define LSA_AUDIT_CATEGORY_PROCCESS_TRACKING (4)
#define LSA_AUDIT_CATEGORY_SECURITY_POLICY_CHANGES (5)
#define LSA_AUDIT_CATEGORY_ACCOUNT_MANAGEMENT (6)
#define LSA_AUDIT_CATEGORY_DIRECTORY_SERVICE_ACCESS (7)
#define LSA_AUDIT_CATEGORY_ACCOUNT_LOGON (8)
extern const value_string lsarpc_lsa_PolicyAuditEventType_vals[];
int lsarpc_dissect_enum_lsa_PolicyAuditEventType(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_);
int lsarpc_dissect_struct_lsa_AuditEventsInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_DomainInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_PDAccountInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_ServerRole(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_ReplicaSourceInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_DefaultQuotaInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_ModificationInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_AuditFullSetInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_AuditFullQueryInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_DnsDomainInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
#define LSA_POLICY_INFO_AUDIT_LOG (1)
#define LSA_POLICY_INFO_AUDIT_EVENTS (2)
#define LSA_POLICY_INFO_DOMAIN (3)
#define LSA_POLICY_INFO_PD (4)
#define LSA_POLICY_INFO_ACCOUNT_DOMAIN (5)
#define LSA_POLICY_INFO_ROLE (6)
#define LSA_POLICY_INFO_REPLICA (7)
#define LSA_POLICY_INFO_QUOTA (8)
#define LSA_POLICY_INFO_DB (9)
#define LSA_POLICY_INFO_AUDIT_FULL_SET (10)
#define LSA_POLICY_INFO_AUDIT_FULL_QUERY (11)
#define LSA_POLICY_INFO_DNS (12)
extern const value_string lsarpc_lsa_PolicyInfo_vals[];
int lsarpc_dissect_enum_lsa_PolicyInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_);
int lsarpc_dissect_struct_lsa_SidPtr(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_SidArray(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_DomainList(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
#define SID_NAME_USE_NONE (0)
#define SID_NAME_USER (1)
#define SID_NAME_DOM_GRP (2)
#define SID_NAME_DOMAIN (3)
#define SID_NAME_ALIAS (4)
#define SID_NAME_WKN_GRP (5)
#define SID_NAME_DELETED (6)
#define SID_NAME_INVALID (7)
#define SID_NAME_UNKNOWN (8)
#define SID_NAME_COMPUTER (9)
extern const value_string lsarpc_lsa_SidType_vals[];
int lsarpc_dissect_enum_lsa_SidType(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_);
int lsarpc_dissect_struct_lsa_TranslatedSid(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_TransSidArray(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_RefDomainList(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
#define LSA_LOOKUP_NAMES_ALL (1)
#define LSA_LOOKUP_NAMES_DOMAINS_ONLY (2)
#define LSA_LOOKUP_NAMES_PRIMARY_DOMAIN_ONLY (3)
#define LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY (4)
#define LSA_LOOKUP_NAMES_FOREST_TRUSTS_ONLY (5)
#define LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY2 (6)
extern const value_string lsarpc_lsa_LookupNamesLevel_vals[];
int lsarpc_dissect_enum_lsa_LookupNamesLevel(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_);
int lsarpc_dissect_struct_lsa_TranslatedName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_TransNameArray(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_LUIDAttribute(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_PrivilegeSet(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_DATA_BUF(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_DATA_BUF2(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
#define LSA_TRUSTED_DOMAIN_INFO_NAME (1)
#define LSA_TRUSTED_DOMAIN_INFO_CONTROLLERS_INFO (2)
#define LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET (3)
#define LSA_TRUSTED_DOMAIN_INFO_PASSWORD (4)
#define LSA_TRUSTED_DOMAIN_INFO_BASIC (5)
#define LSA_TRUSTED_DOMAIN_INFO_INFO_EX (6)
#define LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO (7)
#define LSA_TRUSTED_DOMAIN_INFO_FULL_INFO (8)
#define LSA_TRUSTED_DOMAIN_INFO_11 (11)
#define LSA_TRUSTED_DOMAIN_INFO_INFO_ALL (12)
extern const value_string lsarpc_lsa_TrustDomInfoEnum_vals[];
int lsarpc_dissect_enum_lsa_TrustDomInfoEnum(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_);
int lsarpc_dissect_struct_lsa_TrustDomainInfoName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_TrustDomainInfoPosixOffset(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_TrustDomainInfoPassword(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_TrustDomainInfoBasic(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_TrustDomainInfoBuffer(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_TrustDomainInfo11(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_TrustDomainInfoInfoAll(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_DATA_BUF_PTR(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_RightAttribute(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_RightSet(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_StringPointer(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_DomainListEx(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_DomainInfoKerberos(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_DomainInfoEfs(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
#define LSA_DOMAIN_INFO_POLICY_EFS (2)
#define LSA_DOMAIN_INFO_POLICY_KERBEROS (3)
extern const value_string lsarpc_lsa_DomainInfoEnum_vals[];
int lsarpc_dissect_enum_lsa_DomainInfoEnum(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_);
int lsarpc_dissect_struct_lsa_TranslatedName2(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_TransNameArray2(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_TranslatedSid2(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_TransSidArray2(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_TranslatedSid3(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_TransSidArray3(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_ForestTrustBinaryData(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_ForestTrustDomainInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
#define LSA_FOREST_TRUST_TOP_LEVEL_NAME (0)
#define LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX (1)
#define LSA_FOREST_TRUST_DOMAIN_INFO (2)
#define LSA_FOREST_TRUST_RECORD_TYPE_LAST (3)
extern const value_string lsarpc_lsa_ForestTrustRecordType_vals[];
int lsarpc_dissect_enum_lsa_ForestTrustRecordType(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_);
int lsarpc_dissect_struct_lsa_ForestTrustRecord(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
int lsarpc_dissect_struct_lsa_ForestTrustInformation(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_);
#endif /* __PACKET_DCERPC_LSARPC_H */

View File

@ -257,6 +257,7 @@ static int hf_netlogon_dc_flags_ndnc_flag = -1;
static int hf_netlogon_dc_flags_dns_controller_flag = -1;
static int hf_netlogon_dc_flags_dns_domain_flag = -1;
static int hf_netlogon_dc_flags_dns_forest_flag = -1;
static int hf_netlogon_dnsdomaininfo = -1;
static gint ett_dcerpc_netlogon = -1;
static gint ett_group_attrs = -1;
@ -2139,6 +2140,9 @@ netlogon_dissect_USER_PRIVATE_INFO(tvbuff_t *tvb, int offset,
return offset;
}
int
lsarpc_dissect_sec_desc_buf(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, guint8 *drep);
/*
* IDL typedef struct {
* IDL UNICODESTRING UserName;
@ -2267,8 +2271,7 @@ netlogon_dissect_DELTA_USER(tvbuff_t *tvb, int offset,
offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
hf_netlogon_security_information, NULL);
offset = lsa_dissect_sec_desc_buf(tvb, offset,
pinfo, tree, drep, 0, 0);
offset = lsarpc_dissect_sec_desc_buf(tvb, offset, pinfo, tree, drep);
offset = dissect_ndr_counted_string(tvb, offset, pinfo, tree, drep,
hf_netlogon_dummy, 0);
@ -2356,8 +2359,7 @@ netlogon_dissect_DELTA_DOMAIN(tvbuff_t *tvb, int offset,
offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
hf_netlogon_security_information, NULL);
offset = lsa_dissect_sec_desc_buf(tvb, offset,
pinfo, tree, drep, 0, 0);
offset = lsarpc_dissect_sec_desc_buf(tvb, offset, pinfo, tree, drep);
offset = dissect_ndr_counted_string(tvb, offset, pinfo, tree, drep,
hf_netlogon_dummy, 0);
@ -2421,8 +2423,7 @@ netlogon_dissect_DELTA_GROUP(tvbuff_t *tvb, int offset,
offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
hf_netlogon_security_information, NULL);
offset = lsa_dissect_sec_desc_buf(tvb, offset,
pinfo, tree, drep, 0, 0);
offset = lsarpc_dissect_sec_desc_buf(tvb, offset, pinfo, tree, drep);
offset = dissect_ndr_counted_string(tvb, offset, pinfo, tree, drep,
hf_netlogon_dummy, 0);
@ -2626,8 +2627,7 @@ netlogon_dissect_DELTA_ALIAS(tvbuff_t *tvb, int offset,
offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
hf_netlogon_security_information, NULL);
offset = lsa_dissect_sec_desc_buf(tvb, offset,
pinfo, tree, drep, 0, 0);
offset = lsarpc_dissect_sec_desc_buf(tvb, offset, pinfo, tree, drep);
offset = dissect_ndr_counted_string(tvb, offset, pinfo, tree, drep,
hf_netlogon_dummy, 0);
@ -2822,8 +2822,7 @@ netlogon_dissect_DELTA_POLICY(tvbuff_t *tvb, int offset,
offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
hf_netlogon_security_information, NULL);
offset = lsa_dissect_sec_desc_buf(tvb, offset,
pinfo, tree, drep, 0, 0);
offset = lsarpc_dissect_sec_desc_buf(tvb, offset, pinfo, tree, drep);
offset = dissect_ndr_counted_string(tvb, offset, pinfo, tree, drep,
hf_netlogon_dummy, 0);
@ -2911,8 +2910,7 @@ netlogon_dissect_DELTA_TRUSTED_DOMAINS(tvbuff_t *tvb, int offset,
offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
hf_netlogon_security_information, NULL);
offset = lsa_dissect_sec_desc_buf(tvb, offset,
pinfo, tree, drep, 0, 0);
offset = lsarpc_dissect_sec_desc_buf(tvb, offset, pinfo, tree, drep);
offset = dissect_ndr_counted_string(tvb, offset, pinfo, tree, drep,
hf_netlogon_dummy, 0);
@ -3035,8 +3033,7 @@ netlogon_dissect_DELTA_ACCOUNTS(tvbuff_t *tvb, int offset,
offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
hf_netlogon_security_information, NULL);
offset = lsa_dissect_sec_desc_buf(tvb, offset,
pinfo, tree, drep, 0, 0);
offset = lsarpc_dissect_sec_desc_buf(tvb, offset, pinfo, tree, drep);
offset = dissect_ndr_counted_string(tvb, offset, pinfo, tree, drep,
hf_netlogon_dummy, 0);
@ -3172,8 +3169,7 @@ netlogon_dissect_DELTA_SECRET(tvbuff_t *tvb, int offset,
offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
hf_netlogon_security_information, NULL);
offset = lsa_dissect_sec_desc_buf(tvb, offset,
pinfo, tree, drep, 0, 0);
offset = lsarpc_dissect_sec_desc_buf(tvb, offset, pinfo, tree, drep);
offset = dissect_ndr_counted_string(tvb, offset, pinfo, tree, drep,
hf_netlogon_dummy, 0);
@ -5129,7 +5125,8 @@ netlogon_dissect_DOMAIN_TRUST_INFO(tvbuff_t *tvb, int offset,
}
offset = lsa_dissect_DnsDomainInfo(tvb, offset, pinfo, tree, drep, 0, 0);
offset = lsarpc_dissect_struct_lsa_DnsDomainInfo(tvb, offset, pinfo, tree, drep, hf_netlogon_dnsdomaininfo, 0);
/* Guesses at best. */
offset = dissect_ndr_counted_string(tvb, offset, pinfo, tree, drep,
@ -7744,6 +7741,10 @@ static hf_register_info hf[] = {
FT_BOOLEAN, 32, TFS(&user_account_control_account_disabled), 0x00000001,
"The user account control account_disabled flag ", HFILL }},
{ &hf_netlogon_dnsdomaininfo,
{ "DnsDomainInfo", "netlogon.dnsdomaininfo", FT_NONE, BASE_NONE,
NULL, 0x0, "", HFILL }},
};
static gint *ett[] = {