Commit Graph

23 Commits

Author SHA1 Message Date
Guy Harris 4b2d927feb From Jim McDonough: add dissection of the shutdown, shutdownex, and
abortshutdown commands within the winreg pipe.

svn path=/trunk/; revision=8766
2003-10-24 00:35:29 +00:00
Tim Potter 82d0ca7c51 Operation name updates for winreg pipe from Jean-Baptiste Marchand.
svn path=/trunk/; revision=8561
2003-09-28 11:35:20 +00:00
Tim Potter 4ccbfa3edc Guy suggested that the dcerpc opnum value_string code could be simplified
somewhat.  Now the dynamic initialisation of the value_string is contained
in the value_string_from_subdissectors() function instead of being
distributed amongst the dcerpc dissectors.

svn path=/trunk/; revision=8123
2003-08-04 02:49:04 +00:00
Tim Potter 623f5b865d Dynamically create DCERPC opnum value_strings from the subdissector
list rather than duplicating this information in the dissector.  Some
of the opnum strings were starting to get out of date as developers
forgot to update the information in both places.

svn path=/trunk/; revision=7936
2003-06-26 04:30:31 +00:00
Tim Potter 78c337d69e Some educated guesses about the structure of the QueryValue RPC (was named
"Info") for the WINREG DCERPC pipe.

svn path=/trunk/; revision=7897
2003-06-17 06:50:36 +00:00
Tim Potter 24d1d3a828 Remove silly dcerpc_smb_check_long_frame() function and all calls to it.
A much better place to do this is after the subdissector function has
been called in dcercp_try_handoff().

svn path=/trunk/; revision=7895
2003-06-17 05:29:46 +00:00
Guy Harris ef77cb578a In the policy handle hashing, handle more than one policy handle having
the same value, as an open might return handle XXX, handle XXX might
then be closed, and a subsequent handle might return handle XXX, and we
want to keep the two handles distinct to avoid, for example, displaying
handles closed before they're opened.

In policy handle open replies, store the handle name only if the
operation succeeded.  We can now do that without parsing the packet
twice.

Have "dissect_nt_policy_hnd()" optionally return, through a pointer, the
protocol tree item for the handle, so that its caller can decorate the
item with the name of the handle - that's done on opens, where we do
that only if the operation succeeds.

svn path=/trunk/; revision=7787
2003-06-05 04:22:04 +00:00
Guy Harris 393e152a04 The DCE RPC dissector puts "request in" and "reply in" information into
the protocol tree, and no other dissector for a DCE RPC-based protocol
does to itself - get rid of the code to do so here.

svn path=/trunk/; revision=7514
2003-04-21 01:13:41 +00:00
Tim Potter 6b8a47a691 Convert to new DCERPC string handling functions. There are still some
cosmetic bugs to work out though.

svn path=/trunk/; revision=7069
2003-02-03 02:14:01 +00:00
Guy Harris 5dc66497b7 Generalize "cb_str_postprocess()" to allow the string to be appended to
items N levels up from the item being processed, and use that to
decorate the tree as it was decorated before.

svn path=/trunk/; revision=7043
2003-01-30 08:19:39 +00:00
Tim Potter 1d6acba45c Convert dissector to callback based version of dissect_ndr_pointer().
Strings that used to call with levels != -1 should call the
callback helper which will append the string to the pointer item.

svn path=/trunk/; revision=7017
2003-01-28 06:39:41 +00:00
Guy Harris 3f4397bbb0 From Ulf Lamping: change some #define names to avoid name collisions on
Windows that cause compiler warnings.

svn path=/trunk/; revision=6129
2002-08-29 19:05:41 +00:00
Jörg Mayer 7c4176d868 Removed trailing whitespaces from .h and .c files using the
winapi_cleanup tool written by Patrik Stridvall for the wine
project.

svn path=/trunk/; revision=6117
2002-08-28 21:04:11 +00:00
Tim Potter 5b290be66f Added dissectors for OpenEntry, EnumKey and Unknown1A.
Renamed protocol to WINREG from just REG.

svn path=/trunk/; revision=5964
2002-08-07 01:03:10 +00:00
Guy Harris f84dac608f Use "dissect_ndr_nt_NTTIME()" rather than "dissect_smb_64bit_time()" to
dissect a FILETIME.

svn path=/trunk/; revision=5822
2002-07-05 20:41:01 +00:00
Guy Harris b935491ffc At least from one capture, it appears that the mod time field in a QueryKey
reply is probably a FILETIME, so process it as such.

svn path=/trunk/; revision=5821
2002-07-05 19:34:12 +00:00
Tim Potter c6bb2fdfae Implemented a couple of easy windows registry dissectors.
svn path=/trunk/; revision=5819
2002-07-05 07:07:34 +00:00
Tim Potter 6d6dce305d Change each DCERPC dissector to pass in a hf value on initialisation
for a value_string that corresponds to that dissectors opnums.  Pass
in -1 if no such table is available.

svn path=/trunk/; revision=5749
2002-06-24 00:03:18 +00:00
Tim Potter d6f3fc6f95 Prettify subdissector names.
svn path=/trunk/; revision=5720
2002-06-21 04:59:04 +00:00
Tim Potter 501daf1770 Removed some trailing commas from various DCERPC dissectors.
svn path=/trunk/; revision=5604
2002-05-31 00:31:13 +00:00
Guy Harris ee5ca25d31 Include files from the "epan" directory and subdirectories thereof with
"epan/..." pathnames, so as to avoid collisions with header files in any
of the directories in which we look (e.g., "proto.h", as some other
package has its own "proto.h" file which it installs in the top-level
include directory).

Don't add "-I" flags to search "epan", as that's no longer necessary
(and we want includes of "epan" headers to fail if the "epan/" is left
out, so that we don't re-introduce includes lacking "epan/").

svn path=/trunk/; revision=4586
2002-01-21 07:37:49 +00:00
Guy Harris 98b2ecb304 SPOOLSS RPC dissector, from Tim Potter. This includes adding additional
DOS error codes to the table of them, and exporting that table to other
dissectors for protocols using DOS error codes.

svn path=/trunk/; revision=4470
2002-01-03 20:42:41 +00:00
Guy Harris 81d7ded14e Rename the "packet-msrpc-XXX.[ch]" files to "packet-dcerpc-XXX.[ch]", as
per Todd Sabin's suggestion.

svn path=/trunk/; revision=4242
2001-11-21 02:08:57 +00:00