osmith
/
wireshark
forked from osmocom/wireshark
1
0
Fork 0
Code Pull Requests Releases Wiki Activity
16,550 Commits 23 Branches 0 Tags 1.3 GiB
Commit Graph

8 Commits

Author SHA1 Message Date
Ronnie Sahlberg adb796abc6 tap the ntlmssp protocol and extract the account/domain names when users authenticate. 
If known   put the account name, domain name, host name and which frame the suer authenticated in in an expansion below UID in the SMB2 header




svn path=/trunk/; revision=16723
 2005-12-07 13:14:09 +00:00
Ronnie Sahlberg 7e5f31b6a0 updates for FILE_OBJECTID_BUFFER and have smb call this (no more unknown bytes in smb for objectid) 
svn path=/trunk/; revision=16682
 2005-12-05 21:22:06 +00:00
Ronnie Sahlberg ced869a426 move the ioctl function code to the si structure so we can switch on this later in the ioctl_data dissector 
svn path=/trunk/; revision=16634
 2005-12-01 09:42:39 +00:00
Ronnie Sahlberg 728323e533 add initial decode of dcerpc over smb2 
it does not yet multiplex between different files   but it is better than nothing


svn path=/trunk/; revision=16484
 2005-11-12 08:48:02 +00:00
Ronnie Sahlberg bc6cb5d6ad in order to handle dcerpc over smb2 later and to make the heuristics stronger for determining what might and what might not be a pipe 
add   TID tracking.   for all TreeConnect requests/resposnes seen,   store the name->tid mapping and other metadata.


as a freebee    the disswection of the tid in the ehader is aware of this table so when a tid value is dissected in the header and we known the name for this tid   then put it in an expansion below the tid.




svn path=/trunk/; revision=16483
 2005-11-12 07:45:01 +00:00
Ronnie Sahlberg 9ca683a249 start separating things out into structures 
we can regenerate from the header
we need to remember between request/response
we need on a per conersation bases

to reduce the amount of data we store in the per req/resp  pair  since there will be many of them and we want that struct as small as possible.




svn path=/trunk/; revision=16482
 2005-11-12 04:23:52 +00:00
Jörg Mayer 66df615702 Propset svn:... 
svn path=/trunk/; revision=16478
 2005-11-12 00:25:27 +00:00
Ronnie Sahlberg 078ef72ee4 break out some structures into packet-smb2.h so we can start tapping in later 
we will do service-response-time   statistics before other inferior products have even noticed a new protocol is in town.




svn path=/trunk/; revision=16463
 2005-11-11 03:50:53 +00:00