Stephen Fisher
75c18967f4
Fix Windows build-bot warnings:
...
packet-smb.c(5479) : error C2220: warning treated as error - no object file generated
packet-smb.c(5479) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data
packet-smb.c(5480) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data
svn path=/trunk/; revision=22134
2007-06-18 20:14:07 +00:00
Ronnie Sahlberg
f74d20b142
track filenames between rename requests and responses to make it easier to
...
diagnose why a rename failed
svn path=/trunk/; revision=22122
2007-06-17 23:58:01 +00:00
Ronnie Sahlberg
0adc338017
remember locking info between requests and repsonses so it is easier to
...
diagnose why an operation returned an error
svn path=/trunk/; revision=22121
2007-06-17 20:57:34 +00:00
Ronnie Sahlberg
bc33880788
show the filename that was to be deleted in the Delete reply
...
svn path=/trunk/; revision=21897
2007-05-22 23:05:25 +00:00
Ronnie Sahlberg
050a0508e1
remember the object name from a QUERY_PATH_INFO and show it as a
...
generated item in the response.
also show the infolevel in the response as a generated item
svn path=/trunk/; revision=21880
2007-05-22 03:33:51 +00:00
Ronnie Sahlberg
196ed78ce8
add the disposition to the data we store for how a fid is opened
...
svn path=/trunk/; revision=21873
2007-05-22 01:26:32 +00:00
Ronnie Sahlberg
52143e84d0
add tracking of OFFSET/LENGTH to reads/writes so we can easily see in a failed read/write
...
what offset/length was requested
svn path=/trunk/; revision=21858
2007-05-21 07:17:36 +00:00
Ronnie Sahlberg
7a68b1be72
track FIDs on a per transaction (request+response) basis and make sure the FID is printed
...
in both packets of a transaction.
this makes filters such as "smb.file==foo.txt" work much better since they now show both
the read/write request and also the response packets.
this is similar to what we already do in nfs for filehandles
svn path=/trunk/; revision=21856
2007-05-21 03:44:49 +00:00
Ronnie Sahlberg
f43afbaf35
add more tracking of FID properties
...
track create_flags, access_mask, file_attributes, share_access and
create options for all FIDs
svn path=/trunk/; revision=21743
2007-05-10 20:53:35 +00:00
Ronnie Sahlberg
e5e23150ab
prettify dissection of FIDs,
...
put the filename, if known, on the fid expansion line
also place a "generated" fid in failed ntcreateandx so it is easier to
quickly see which file the ntcreateandx failed for
svn path=/trunk/; revision=21739
2007-05-10 02:34:06 +00:00
Ronnie Sahlberg
0eae1cc0bd
add dissection of smb1 ioctl data by tying it into the dissectors for
...
ioctl data that already exists for smb2
svn path=/trunk/; revision=21713
2007-05-07 09:07:29 +00:00
Guy Harris
65b4512fe3
As with other types of extra info, tag the UID extra info. Don't add
...
stuff to the UID tree unless it's UID stuff.
Also, as we appear to allow for null domain and account information in
dissect_smb_uid(), check for null information before trying to add it to
the top-level item.
svn path=/trunk/; revision=21597
2007-04-26 19:44:18 +00:00
Ronnie Sahlberg
3a0cdfb42b
add a missing change from the previous commit
...
svn path=/trunk/; revision=21548
2007-04-24 05:09:53 +00:00
Stephen Fisher
d565967b58
From Peter Johansson:
...
Fix warnings
svn path=/trunk/; revision=21214
2007-03-26 21:16:21 +00:00
Ronnie Sahlberg
d08c190fe0
track fid types between NT TRans QUERY_SECURITY_DESCRIPTOR and dissect the ACEs properly
...
svn path=/trunk/; revision=18926
2006-08-16 09:22:36 +00:00
Ronnie Sahlberg
0902016b42
add a type field for the fid tracking structure and initialize it to UNKNOWN
...
when files are opened using NTCreateAndX and if we recognize the type set the type field to either FILE, DIR or PIPE
This is useful to know when dissecting things like security descriptors since it tells us how to dissect the specific bits of the access mask.
Only do this for NTCreateAndX for now. It is trivial to add similar tracking to some of the older obsolete calls used to open fids but no clients ever use those old calls any more.
svn path=/trunk/; revision=18922
2006-08-16 08:00:46 +00:00
Ronnie Sahlberg
8ce8e719e0
rename some structures and defines from the se_tree to the emem_tree prefix
...
svn path=/trunk/; revision=18894
2006-08-14 08:29:29 +00:00
Gerald Combs
f7e38bd5e6
Change ETH_VAR_IMPORT to WS_VAR_IMPORT. Try to fix a duplicate variable
...
definition in the Catapult DCT2000 code.
svn path=/trunk/; revision=18524
2006-06-20 18:30:54 +00:00
Ronnie Sahlberg
75030295d1
add tracking of TID -> sharenames
...
reuse the recent structure for fid->filename mappings since the problemspace is virtually the same
(go to tired of trying to find the sharename in 10mpacket traces with 1000s of shares)
svn path=/trunk/; revision=18516
2006-06-19 09:44:15 +00:00
Ronnie Sahlberg
986085204d
add infrastructure to make tracking of fid->filename easy to implement and use
...
svn path=/trunk/; revision=18514
2006-06-19 07:39:19 +00:00
Ronnie Sahlberg
d76b58cbfb
track smb FIDFs when tehy are opened and closed.
...
add an expansion to the fid that display which frame itr was opened in and when it was closed.
someone may want to add tracking of actual filenames here as well. i am not sure i need that feature myself so ...
svn path=/trunk/; revision=18512
2006-06-18 05:45:40 +00:00
Ronnie Sahlberg
a5db166102
rename add_fid() to dissect_smb_fid() as a firsdt step towards adding tracking of filename/openedframe/closedframe tracking for smb fids
...
svn path=/trunk/; revision=18506
2006-06-18 01:58:34 +00:00
Ronnie Sahlberg
feab79e328
change a whole bunch of ethereal into wireshark
...
svn path=/trunk/; revision=18196
2006-05-21 04:49:01 +00:00
Ronnie Sahlberg
baed8f0888
add dissection of
...
SMB/SetFileInfo level 1023
SMB2/SetInfo/FILE_INFO level 0x17
FILE_PIPE_INFO infolevel
svn path=/trunk/; revision=17195
2006-02-07 08:48:51 +00:00
Ronnie Sahlberg
55beaa37cf
add endoffile infolevel
...
svn path=/trunk/; revision=16607
2005-11-26 21:59:48 +00:00
Ronnie Sahlberg
f699f011fc
more infolevels
...
svn path=/trunk/; revision=16606
2005-11-26 21:44:37 +00:00
Ronnie Sahlberg
d149d98fc3
assume the four bytes after the fid in notify request is the completion mask
...
svn path=/trunk/; revision=16596
2005-11-26 00:34:22 +00:00
Ronnie Sahlberg
704abdc0e5
add some more infolevels
...
svn path=/trunk/; revision=16585
2005-11-25 08:02:40 +00:00
Ronnie Sahlberg
261aade300
add dissection of the smb2 impersionationlevel field
...
svn path=/trunk/; revision=16581
2005-11-25 06:19:41 +00:00
Ronnie Sahlberg
c76c376968
some info level updates
...
svn path=/trunk/; revision=16580
2005-11-25 06:04:11 +00:00
Ronnie Sahlberg
cfc56af514
some info level updates
...
svn path=/trunk/; revision=16579
2005-11-25 05:41:00 +00:00
Ronnie Sahlberg
3f047721a3
dissect some more infolevels
...
svn path=/trunk/; revision=16543
2005-11-18 07:31:18 +00:00
Ronnie Sahlberg
3afd94f519
add dissection of more infolevels for smb2
...
svn path=/trunk/; revision=16539
2005-11-17 22:30:19 +00:00
Ronnie Sahlberg
e5b6a6426b
add dissection of fs_[objectid|full_size]_info
...
svn path=/trunk/; revision=16538
2005-11-17 14:22:11 +00:00
Ronnie Sahlberg
6ac4fe9a25
add dissection of fs quota info
...
svn path=/trunk/; revision=16537
2005-11-17 14:00:07 +00:00
Ronnie Sahlberg
1b809cfcd7
add full dissection of fs_[volume|size|device|atrtibute]_info
...
svn path=/trunk/; revision=16536
2005-11-17 13:43:22 +00:00
Ronnie Sahlberg
675d0862b5
add dissection of the security descriptor mask
...
svn path=/trunk/; revision=16535
2005-11-17 12:30:36 +00:00
Ronnie Sahlberg
15f13b23a0
improve the dissection of Create and fill in most of the fields
...
svn path=/trunk/; revision=16490
2005-11-12 11:27:34 +00:00
Ronnie Sahlberg
8b68d91039
dissect more of Close request/response
...
svn path=/trunk/; revision=16487
2005-11-12 10:07:12 +00:00
Guy Harris
ab2dca9114
Move some headers for stuff defined by a dissector into epan/dissectors
...
- and rename smb.h to packet-smb.h, as it's packet-smb.c's header file.
svn path=/trunk/; revision=15845
2005-09-17 00:31:15 +00:00