Commit Graph

10 Commits

Author SHA1 Message Date
Guy Harris bd9f96738c From Didier Gautheron: put an "fvalue_t" structure into a "field_info"
structure, rather than separately allocating "fvalue_t"s and having the
"field_info" structure point to them - this appears to speed up protocol
tree construction a bit.

svn path=/trunk/; revision=9146
2003-12-02 21:15:49 +00:00
Ronnie Sahlberg 1630411d40 SID name mappings can now be presented in a table by tethereal
using the -z smb,sids  command argument.

svn path=/trunk/; revision=7816
2003-06-09 10:08:05 +00:00
Ronnie Sahlberg c00038711d fix to make the dcerpc_smb_fetch_pol use the new function argument list
svn path=/trunk/; revision=7790
2003-06-05 11:13:41 +00:00
Ronnie Sahlberg c9edc3ccee Teach teh sid snooping how to extract sid->name mappings from SAMR:QueryDispInfo
svn path=/trunk/; revision=7789
2003-06-05 11:02:19 +00:00
Ronnie Sahlberg 1909e86e15 Add snooping of sid->domain mapping from POLICY_ACCOUNT_DOMAIN_INFO structures
svn path=/trunk/; revision=7713
2003-05-22 11:48:28 +00:00
Ronnie Sahlberg 5512ef4745 Rearrange sid snooping a bit.
Add snooping of sid->domain mapping for POLICY_DNS_DOMAIN_INFO

svn path=/trunk/; revision=7711
2003-05-22 11:03:15 +00:00
Ronnie Sahlberg 75f18ecfee Make one QIP infolevel specify a sid hf field and update the embryonic sid snooping framework to handle the new hw name
svn path=/trunk/; revision=7709
2003-05-21 10:39:19 +00:00
Guy Harris 1b872b3648 Make "register_tap_listener()" return NULL on success and a "GString *"
referring to a GString containing an error message on failure, and don't
have it print anything on failure.

If it fails, have its Tethereal-tap callers print an error message
before exiting, and have its Ethereal callers pop up a dialog box with
the error (except in cases where the failure is guaranteed not to be the
user's fault, and where we exit, in which case we just print an error
message before we exit).  In all cases, the error message includes the
text of the GString.

Fix a scanf format string in the DCE RPC statistics Ethereal tap, so
that it properly skips the comma before the filter string.

Fix some Ethereal error messages not to say "tethereal".

svn path=/trunk/; revision=7542
2003-04-23 08:20:06 +00:00
Guy Harris 5ea0610a8a Non-void functions must always return a value; the SID snooping tap
listener isn't a GUI tap, so it should always return 0.

svn path=/trunk/; revision=7364
2003-03-25 19:52:56 +00:00
Ronnie Sahlberg cec5c81ac3 Added SMB option : sid_name_snooping.
This feature, when enabled through Edit/preferences/protocols/smb,
will look at certain SMB and CIFS related protocols to discover the
mapping between SIDs and their Names.

For those SIDs whose name has been snooped/discovered ethereal will
also add "(<name>)" to the end of the SID when printed in the tree pane
through the function dissect_nt_sid().

Currently the feature is not too exciting since the only thing that packet-smb-sidsnooping.c will look at to build this mapping table is
replies to the LSA/QueryInfoPolicy infolevel 3  packets and thus
discover mappings between a Domain SID and a Domain Name.
In the near future this future will be enhanced to also look at more interesting calls such as LSA/LookupSIDs2 and similar.

svn path=/trunk/; revision=7362
2003-03-25 09:41:42 +00:00