forked from osmocom/wireshark
2904 lines
91 KiB
C
2904 lines
91 KiB
C
/* packet-dcom-cba-acco.c
|
|
* Routines for DCOM CBA
|
|
*
|
|
* $Id$
|
|
*
|
|
* Ethereal - Network traffic analyzer
|
|
* By Gerald Combs <gerald@ethereal.com>
|
|
* Copyright 1998 Gerald Combs
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
*/
|
|
|
|
#ifdef HAVE_CONFIG_H
|
|
#include "config.h"
|
|
#endif
|
|
|
|
#ifdef HAVE_SYS_TYPES_H
|
|
#include <sys/types.h>
|
|
#endif
|
|
|
|
|
|
#include <glib.h>
|
|
#include <epan/packet.h>
|
|
#include "packet-dcerpc.h"
|
|
#include "packet-dcom.h"
|
|
#include "packet-dcom-cba-acco.h"
|
|
|
|
static int hf_cba_acco_opnum = -1;
|
|
|
|
static int hf_cba_acco_ping_factor = -1;
|
|
|
|
static int hf_cba_acco_count = -1;
|
|
|
|
static int hf_cba_acco_item = -1;
|
|
static int hf_cba_acco_data = -1;
|
|
static int hf_cba_acco_qc = -1;
|
|
static int hf_cba_acco_time_stamp = -1;
|
|
|
|
static int hf_cba_acco_conn_qos_type = -1;
|
|
static int hf_cba_acco_conn_qos_value = -1;
|
|
static int hf_cba_acco_conn_state = -1;
|
|
static int hf_cba_acco_conn_cons_id = -1;
|
|
static int hf_cba_acco_conn_version = -1;
|
|
static int hf_cba_acco_conn_prov_id = -1;
|
|
static int hf_cba_acco_conn_provider = -1;
|
|
static int hf_cba_acco_conn_consumer = -1;
|
|
static int hf_cba_acco_conn_provider_item = -1;
|
|
static int hf_cba_acco_conn_consumer_item = -1;
|
|
static int hf_cba_acco_conn_substitute = -1;
|
|
static int hf_cba_acco_conn_epsilon = -1;
|
|
static int hf_cba_acco_conn_persist = -1;
|
|
|
|
static int hf_cba_acco_cb_length = -1;
|
|
static int hf_cba_acco_cb_conn_data = -1;
|
|
static int hf_cba_acco_cb_version = -1;
|
|
static int hf_cba_acco_cb_flags = -1;
|
|
static int hf_cba_acco_cb_count = -1;
|
|
static int hf_cba_acco_cb_item = -1;
|
|
static int hf_cba_acco_cb_item_hole = -1;
|
|
static int hf_cba_acco_cb_item_length = -1;
|
|
static int hf_cba_acco_cb_item_data = -1;
|
|
|
|
static int hf_cba_acco_server_pICBAAccoCallback = -1;
|
|
|
|
static int hf_cba_acco_server_first_connect = -1;
|
|
|
|
static int hf_cba_acco_serversrt_prov_mac = -1;
|
|
static int hf_cba_acco_serversrt_cons_mac = -1;
|
|
|
|
static int hf_cba_acco_serversrt_cr_id = -1;
|
|
static int hf_cba_acco_serversrt_cr_length = -1;
|
|
static int hf_cba_acco_serversrt_cr_flags = -1;
|
|
static int hf_cba_acco_serversrt_cr_flags_timestamped = -1;
|
|
static int hf_cba_acco_serversrt_cr_flags_reconfigure = -1;
|
|
static int hf_cba_acco_serversrt_record_length = -1;
|
|
static int hf_cba_acco_serversrt_action = -1;
|
|
static int hf_cba_acco_serversrt_last_connect = -1;
|
|
|
|
static int hf_cba_getprovconnout = -1;
|
|
|
|
static int hf_cba_type_desc_len = -1;
|
|
|
|
static int hf_cba_connectincr = -1;
|
|
static int hf_cba_connectoutcr = -1;
|
|
static int hf_cba_connectin = -1;
|
|
static int hf_cba_connectout = -1;
|
|
static int hf_cba_getconnectionout = -1;
|
|
static int hf_cba_readitemout = -1;
|
|
static int hf_cba_writeitemin = -1;
|
|
static int hf_cba_addconnectionin = -1;
|
|
static int hf_cba_addconnectionout = -1;
|
|
static int hf_cba_getidout = -1;
|
|
|
|
static int hf_cba_getconsconnout = -1;
|
|
static int hf_cba_diagconsconnout = -1;
|
|
static int hf_cba_acco_conn_error_state = -1;
|
|
|
|
static int hf_cba_acco_info_max = -1;
|
|
static int hf_cba_acco_info_curr = -1;
|
|
|
|
static int hf_cba_acco_cdb_cookie = -1;
|
|
|
|
static int hf_cba_acco_rtauto = -1;
|
|
|
|
static int hf_cba_acco_prov_crid = -1;
|
|
|
|
|
|
gint ett_cba_connectincr = -1;
|
|
gint ett_cba_connectoutcr = -1;
|
|
gint ett_cba_connectin = -1;
|
|
gint ett_cba_connectout = -1;
|
|
gint ett_cba_getprovconnout = -1;
|
|
gint ett_cba_addconnectionin = -1;
|
|
gint ett_cba_addconnectionout = -1;
|
|
gint ett_cba_getidout = -1;
|
|
gint ett_cba_getconnectionout = -1;
|
|
gint ett_cba_readitemout = -1;
|
|
gint ett_cba_writeitemin = -1;
|
|
gint ett_cba_acco_serversrt_cr_flags = -1;
|
|
|
|
static int proto_ICBAAccoMgt = -1;
|
|
static gint ett_ICBAAccoMgt = -1;
|
|
static e_uuid_t uuid_ICBAAccoMgt = { 0xcba00041, 0x6c97, 0x11d1, { 0x82, 0x71, 0x00, 0xa0, 0x24, 0x42, 0xdf, 0x7d } };
|
|
static guint16 ver_ICBAAccoMgt = 0;
|
|
|
|
static int proto_ICBAAccoMgt2 = -1;
|
|
static e_uuid_t uuid_ICBAAccoMgt2 = { 0xcba00046, 0x6c97, 0x11d1, { 0x82, 0x71, 0x00, 0xa0, 0x24, 0x42, 0xdf, 0x7d } };
|
|
static guint16 ver_ICBAAccoMgt2 = 0;
|
|
|
|
static int proto_ICBAAccoCallback = -1;
|
|
static gint ett_ICBAAccoCallback = -1;
|
|
static gint ett_ICBAAccoCallback_Buffer = -1;
|
|
static gint ett_ICBAAccoCallback_Item = -1;
|
|
static e_uuid_t uuid_ICBAAccoCallback = { 0xcba00042, 0x6c97, 0x11d1, { 0x82, 0x71, 0x00, 0xa0, 0x24, 0x42, 0xdf, 0x7d } };
|
|
static guint16 ver_ICBAAccoCallback = 0;
|
|
|
|
static int proto_ICBAAccoCallback2 = -1;
|
|
static e_uuid_t uuid_ICBAAccoCallback2 = { 0xcba00047, 0x6c97, 0x11d1, { 0x82, 0x71, 0x00, 0xa0, 0x24, 0x42, 0xdf, 0x7d } };
|
|
static guint16 ver_ICBAAccoCallback2 = 0;
|
|
|
|
static int proto_ICBAAccoServer = -1;
|
|
static gint ett_ICBAAccoServer = -1;
|
|
static e_uuid_t uuid_ICBAAccoServer = { 0xcba00043, 0x6c97, 0x11d1, { 0x82, 0x71, 0x00, 0xa0, 0x24, 0x42, 0xdf, 0x7d } };
|
|
static guint16 ver_ICBAAccoServer = 0;
|
|
|
|
static int proto_ICBAAccoServer2 = -1;
|
|
static e_uuid_t uuid_ICBAAccoServer2 = { 0xcba00048, 0x6c97, 0x11d1, { 0x82, 0x71, 0x00, 0xa0, 0x24, 0x42, 0xdf, 0x7d } };
|
|
static guint16 ver_ICBAAccoServer2 = 0;
|
|
|
|
static int proto_ICBAAccoServerSRT = -1;
|
|
static gint ett_ICBAAccoServerSRT = -1;
|
|
static e_uuid_t uuid_ICBAAccoServerSRT = { 0xcba00045, 0x6c97, 0x11d1, { 0x82, 0x71, 0x00, 0xa0, 0x24, 0x42, 0xdf, 0x7d } };
|
|
static guint16 ver_ICBAAccoServerSRT = 0;
|
|
|
|
static int proto_ICBAAccoSync = -1;
|
|
static gint ett_ICBAAccoSync = -1;
|
|
static e_uuid_t uuid_ICBAAccoSync = { 0xcba00044, 0x6c97, 0x11d1, { 0x82, 0x71, 0x00, 0xa0, 0x24, 0x42, 0xdf, 0x7d } };
|
|
static guint16 ver_ICBAAccoSync = 0;
|
|
|
|
|
|
|
|
static const value_string cba_acco_qc_vals[] = {
|
|
{ 0x1c, "BadOutOfService" },
|
|
{ 0x44, "UncertainLastUsableValue" },
|
|
{ 0x48, "UncertainSubstituteSet" },
|
|
{ 0x50, "UncertainSensorNotAccurate" },
|
|
{ 0x80, "GoodNonCascOk" },
|
|
{ 0, NULL }
|
|
};
|
|
|
|
|
|
static const value_string cba_qos_type_vals[] = {
|
|
{ 0x00, "Acyclic" },
|
|
{ 0x01, "Acyclic seconds" }, /* obsolete */
|
|
{ 0x02, "Acyclic status" },
|
|
{ 0x03, "Acyclic HMI" },
|
|
{ 0x20, "Constant" },
|
|
{ 0x30, "Cyclic Real-Time" },
|
|
{ 0, NULL }
|
|
};
|
|
|
|
|
|
static const value_string cba_persist_vals[] = {
|
|
{ 0x00, "Volatile" },
|
|
{ 0x01, "PendingPersistent" },
|
|
{ 0x02, "Persistent" },
|
|
{ 0, NULL }
|
|
};
|
|
|
|
|
|
static const value_string cba_acco_conn_state_vals[] = {
|
|
{ 0x00, "Passive" },
|
|
{ 0x01, "Active" },
|
|
{ 0, NULL }
|
|
};
|
|
|
|
static const value_string cba_acco_serversrt_action_vals[] = {
|
|
{ 0x00, "Activate" },
|
|
{ 0x01, "Deactivate" },
|
|
{ 0x02, "Remove" },
|
|
{ 0, NULL }
|
|
};
|
|
|
|
static const value_string cba_acco_serversrt_last_connect_vals[] = {
|
|
{ 0x00, "CR not complete" },
|
|
{ 0x01, "CR complete" },
|
|
{ 0, NULL }
|
|
};
|
|
|
|
|
|
/* dissect a response containing an array of hresults (e.g: ICBAAccoMgt::RemoveConnections) */
|
|
static int
|
|
dissect_HResultArray_resp(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32HResult;
|
|
guint32 u32Pointer;
|
|
guint32 u32ArraySize = 0;
|
|
guint32 u32Idx;
|
|
guint32 u32Tmp;
|
|
|
|
|
|
offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep,
|
|
&u32Pointer);
|
|
|
|
if (u32Pointer) {
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32Idx = 1;
|
|
u32Tmp = u32ArraySize;
|
|
while (u32Tmp--) {
|
|
offset = dissect_dcom_indexed_HRESULT(tvb, offset, pinfo, tree, drep,
|
|
&u32HResult, u32Idx);
|
|
u32Idx++;
|
|
}
|
|
}
|
|
|
|
offset = dissect_dcom_HRESULT(tvb, offset, pinfo, tree, drep,
|
|
&u32HResult);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u -> %s",
|
|
u32ArraySize,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoServer_Connect_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint16 u16QoSType;
|
|
guint16 u16QoSValue;
|
|
guint8 u8State;
|
|
guint32 u32Count;
|
|
guint32 u32ArraySize;
|
|
|
|
guint32 u32VariableOffset;
|
|
proto_item *sub_item;
|
|
proto_tree *sub_tree;
|
|
guint32 u32SubStart;
|
|
guint32 u32Pointer;
|
|
guint16 u16VarType;
|
|
guint32 u32ConsID;
|
|
gchar szItem[1000] = { 0 };
|
|
guint32 u32MaxItemLen = sizeof(szItem);
|
|
gchar szCons[1000] = { 0 };
|
|
guint32 u32MaxConsLen = sizeof(szCons);
|
|
guint32 u32Idx;
|
|
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_LPWSTR(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_consumer, szCons, u32MaxConsLen);
|
|
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_qos_type, &u16QoSType);
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_qos_value, &u16QoSValue);
|
|
offset = dissect_dcom_BYTE(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_state, &u8State);
|
|
|
|
offset = dissect_dcom_PMInterfacePointer(tvb, offset, pinfo, tree, drep, 0);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32VariableOffset = offset + u32ArraySize*16;
|
|
|
|
/* array of CONNECTINs */
|
|
u32Idx = 1;
|
|
while (u32ArraySize--) {
|
|
sub_item = proto_tree_add_item(tree, hf_cba_connectin, tvb, offset, 0, FALSE);
|
|
sub_tree = proto_item_add_subtree(sub_item, ett_cba_connectin);
|
|
u32SubStart = offset;
|
|
|
|
/* ProviderItem */
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_LPWSTR(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_provider_item, szItem, u32MaxItemLen);
|
|
}
|
|
|
|
/* DataType */
|
|
offset = dissect_dcom_VARTYPE(tvb, offset, pinfo, sub_tree, drep,
|
|
&u16VarType);
|
|
|
|
/* Epsilon */
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_VARIANT(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_epsilon);
|
|
}
|
|
/* ConsumerID */
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_cons_id, &u32ConsID);
|
|
|
|
/* update subtree header */
|
|
proto_item_append_text(sub_item, "[%u]: ConsID=0x%x, ProvItem=\"%s\", VarType=%s",
|
|
u32Idx, u32ConsID, szItem,
|
|
val_to_str(u16VarType, dcom_variant_type_vals, "Unknown (0x%04x)") );
|
|
proto_item_set_len(sub_item, offset - u32SubStart);
|
|
|
|
u32Idx++;
|
|
}
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u", u32Count);
|
|
}
|
|
|
|
return u32VariableOffset;
|
|
}
|
|
|
|
static int
|
|
dissect_ICBAAccoServer2_Connect2_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint16 u16QoSType;
|
|
guint16 u16QoSValue;
|
|
guint8 u8State;
|
|
guint32 u32Count;
|
|
guint32 u32ArraySize;
|
|
|
|
guint32 u32VariableOffset;
|
|
proto_item *sub_item;
|
|
proto_tree *sub_tree;
|
|
guint32 u32SubStart;
|
|
guint32 u32Pointer;
|
|
guint16 u16VarType;
|
|
guint32 u32ConsID;
|
|
gchar szItem[1000] = { 0 };
|
|
guint32 u32MaxItemLen = sizeof(szItem);
|
|
gchar szCons[1000] = { 0 };
|
|
guint32 u32MaxConsLen = sizeof(szCons);
|
|
guint32 u32Idx;
|
|
guint16 u16TypeDescLen;
|
|
guint32 u32ArraySize2;
|
|
guint32 u32Idx2;
|
|
guint16 u16VarType2 = -1;
|
|
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_LPWSTR(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_consumer, szCons, u32MaxConsLen);
|
|
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_qos_type, &u16QoSType);
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_qos_value, &u16QoSValue);
|
|
offset = dissect_dcom_BYTE(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_state, &u8State);
|
|
|
|
offset = dissect_dcom_PMInterfacePointer(tvb, offset, pinfo, tree, drep, 0);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32VariableOffset = offset + u32ArraySize*20;
|
|
|
|
/* array of CONNECTINs */
|
|
u32Idx = 1;
|
|
while (u32ArraySize--) {
|
|
sub_item = proto_tree_add_item(tree, hf_cba_connectin, tvb, offset, 0, FALSE);
|
|
sub_tree = proto_item_add_subtree(sub_item, ett_cba_connectin);
|
|
u32SubStart = offset;
|
|
|
|
/* ProviderItem */
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_LPWSTR(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_provider_item, szItem, u32MaxItemLen);
|
|
}
|
|
|
|
/* TypeDescLen */
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_type_desc_len, &u16TypeDescLen);
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
/* pTypeDesc */
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_dcerpc_array_size(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
&u32ArraySize2);
|
|
|
|
/* extended type description will build an array here */
|
|
u32Idx2 = 1;
|
|
while (u32ArraySize2--) {
|
|
/* ToBeDone: some of the type description values are counts */
|
|
u32VariableOffset = dissect_dcom_VARTYPE(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
&u16VarType);
|
|
/* remember first VarType only */
|
|
if (u32Idx2 == 1) {
|
|
u16VarType2 = u16VarType;
|
|
}
|
|
u32Idx2++;
|
|
}
|
|
}
|
|
|
|
/* Epsilon */
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_VARIANT(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_epsilon);
|
|
}
|
|
/* ConsumerID */
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_cons_id, &u32ConsID);
|
|
|
|
/* update subtree header */
|
|
proto_item_append_text(sub_item, "[%u]: ConsID=0x%x, ProvItem=\"%s\", TypeDesc=%s",
|
|
u32Idx, u32ConsID, szItem,
|
|
val_to_str(u16VarType2, dcom_variant_type_vals, "Unknown (0x%04x)") );
|
|
proto_item_set_len(sub_item, offset - u32SubStart);
|
|
|
|
u32Idx++;
|
|
}
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u", u32Count);
|
|
}
|
|
|
|
return u32VariableOffset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoServer_Connect_resp(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint8 u8FirstConnect;
|
|
guint32 u32Pointer;
|
|
guint32 u32ArraySize;
|
|
guint32 u32HResult;
|
|
guint32 u32Idx = 1;
|
|
guint32 u32ProvID;
|
|
proto_item *sub_item;
|
|
proto_tree *sub_tree;
|
|
guint32 u32SubStart;
|
|
|
|
|
|
offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_BOOLEAN(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_server_first_connect, &u8FirstConnect);
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep,
|
|
&u32Pointer);
|
|
|
|
if (u32Pointer) {
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
/* array of CONNECTOUTs */
|
|
while(u32ArraySize--) {
|
|
sub_item = proto_tree_add_item(tree, hf_cba_connectout, tvb, offset, 8, FALSE);
|
|
sub_tree = proto_item_add_subtree(sub_item, ett_cba_connectout);
|
|
u32SubStart = offset;
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_prov_id, &u32ProvID);
|
|
|
|
offset = dissect_dcom_indexed_HRESULT(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32HResult, u32Idx);
|
|
|
|
proto_item_append_text(sub_item, "[%u]: ProvID=0x%x %s",
|
|
u32Idx, u32ProvID,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
proto_item_set_len(sub_item, offset - u32SubStart);
|
|
|
|
u32Idx++;
|
|
}
|
|
}
|
|
|
|
offset = dissect_dcom_HRESULT(tvb, offset, pinfo, tree, drep,
|
|
&u32HResult);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": %s Cnt=%u -> %s",
|
|
(u8FirstConnect) ? "First" : "NotFirst",
|
|
u32Idx-1,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_Server_ProvIDs_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Count;
|
|
guint32 u32ArraySize;
|
|
guint32 u32Idx;
|
|
guint32 u32ProvID;
|
|
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32Idx = 1;
|
|
while (u32ArraySize--) {
|
|
offset = dissect_dcom_indexed_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_prov_id, &u32ProvID, u32Idx);
|
|
u32Idx++;
|
|
}
|
|
|
|
/* update column info now */
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u", u32Count);
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_Server_Consumer_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
gchar szStr[1000];
|
|
guint32 u32MaxStr = sizeof(szStr);
|
|
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_LPWSTR(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_consumer, szStr, u32MaxStr);
|
|
|
|
/* update column info now */
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, " Consumer=\"%s\"", szStr);
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoServer_SetActivation_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint8 u8State;
|
|
guint32 u32Count;
|
|
guint32 u32ArraySize;
|
|
guint32 u32Idx;
|
|
guint32 u32ProvID;
|
|
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_BOOLEAN(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_state, &u8State);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32Idx = 1;
|
|
while (u32ArraySize--) {
|
|
offset = dissect_dcom_indexed_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_prov_id, &u32ProvID, u32Idx);
|
|
u32Idx++;
|
|
}
|
|
|
|
/* update column info now */
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u", u32Count);
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoServer_Ping_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
gchar szStr[1000];
|
|
guint32 u32MaxStr = sizeof(szStr);
|
|
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_LPWSTR(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_consumer, szStr, u32MaxStr);
|
|
|
|
/* update column info now */
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, " Consumer=\"%s\"", szStr);
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoServerSRT_ConnectCR_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
gchar szCons[1000] = { 0 };
|
|
guint32 u32MaxConsLen = sizeof(szCons);
|
|
guint16 u16QoSType;
|
|
guint16 u16QoSValue;
|
|
guint8 u8ConsMac[6];
|
|
guint16 u16CRID;
|
|
guint16 u16CRLength;
|
|
guint32 u32Flags;
|
|
guint32 u32Count;
|
|
guint32 u32ArraySize;
|
|
guint32 u32Idx;
|
|
proto_item *item = NULL;
|
|
proto_tree *flags_tree = NULL;
|
|
proto_item *sub_item;
|
|
proto_tree *sub_tree;
|
|
guint32 u32SubStart;
|
|
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
/* szCons */
|
|
offset = dissect_dcom_LPWSTR(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_consumer, szCons, u32MaxConsLen);
|
|
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_qos_type, &u16QoSType);
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_qos_value, &u16QoSValue);
|
|
|
|
offset = dissect_dcom_PMInterfacePointer(tvb, offset, pinfo, tree, drep, 0);
|
|
|
|
/* ConsumerMAC (big-endian, 1byte-aligned) */
|
|
tvb_memcpy(tvb, u8ConsMac, offset, 6);
|
|
|
|
proto_tree_add_ether(tree, hf_cba_acco_serversrt_cons_mac, tvb,
|
|
offset, 6, u8ConsMac);
|
|
offset += 6;
|
|
|
|
/* add flags subtree */
|
|
u32Flags = tvb_get_guint8(tvb, offset);
|
|
item = proto_tree_add_uint_format(tree, hf_cba_acco_serversrt_cr_flags,
|
|
tvb, offset, 4, u32Flags,
|
|
"Flags: 0x%02x (%s, %s)", u32Flags,
|
|
(u32Flags & 0x1) ? "Timestamped" : "not Timestamped",
|
|
(u32Flags & 0x2) ? "Reconfigure" : "not Reconfigure");
|
|
flags_tree = proto_item_add_subtree(item, ett_cba_acco_serversrt_cr_flags);
|
|
proto_tree_add_boolean(flags_tree, hf_cba_acco_serversrt_cr_flags_timestamped, tvb, offset, 4, u32Flags);
|
|
proto_tree_add_boolean(flags_tree, hf_cba_acco_serversrt_cr_flags_reconfigure, tvb, offset, 4, u32Flags);
|
|
offset += 4;
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32Idx = 1;
|
|
while (u32ArraySize--) {
|
|
/* array of CONNECTINCRs */
|
|
sub_item = proto_tree_add_item(tree, hf_cba_connectincr, tvb, offset, 0, FALSE);
|
|
sub_tree = proto_item_add_subtree(sub_item, ett_cba_connectincr);
|
|
u32SubStart = offset;
|
|
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_serversrt_cr_id, &u16CRID);
|
|
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_serversrt_cr_length, &u16CRLength);
|
|
|
|
/* update subtree header */
|
|
proto_item_append_text(sub_item, "[%u]: CRID=0x%x, CRLength=%u",
|
|
u32Idx, u16CRID, u16CRLength);
|
|
proto_item_set_len(sub_item, offset - u32SubStart);
|
|
|
|
u32Idx++;
|
|
}
|
|
|
|
|
|
/* update column info now */
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": %sConsCRID=0x%x Len=%u QoS=%u",
|
|
(u32Flags & 0x2) ? "Reco " : "", u16CRID, u16CRLength, u16QoSValue);
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoServerSRT_ConnectCR_resp(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint8 u8FirstConnect;
|
|
guint8 u8ProvMac[6];
|
|
guint32 u32ProvCRID = 0;
|
|
guint32 u32HResult;
|
|
guint32 u32ArraySize;
|
|
guint32 u32Idx;
|
|
guint32 u32Pointer;
|
|
proto_item *sub_item;
|
|
proto_tree *sub_tree;
|
|
guint32 u32SubStart;
|
|
|
|
|
|
offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_BOOLEAN(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_server_first_connect, &u8FirstConnect);
|
|
|
|
/* ProviderMAC (big-endian, 1byte-aligned) */
|
|
tvb_memcpy(tvb, u8ProvMac, offset, 6);
|
|
|
|
proto_tree_add_ether(tree, hf_cba_acco_serversrt_prov_mac, tvb,
|
|
offset, 6, u8ProvMac);
|
|
offset += 6;
|
|
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32Idx = 1;
|
|
while (u32ArraySize--) {
|
|
/* array of CONNECTOUTCRs */
|
|
sub_item = proto_tree_add_item(tree, hf_cba_connectoutcr, tvb, offset, 0, FALSE);
|
|
sub_tree = proto_item_add_subtree(sub_item, ett_cba_connectoutcr);
|
|
u32SubStart = offset;
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_prov_crid, &u32ProvCRID);
|
|
|
|
offset = dissect_dcom_HRESULT(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32HResult);
|
|
|
|
/* update subtree header */
|
|
proto_item_append_text(sub_item, "[%u]: ProvCRID=0x%x, %s",
|
|
u32Idx, u32ProvCRID,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
proto_item_set_len(sub_item, offset - u32SubStart);
|
|
|
|
u32Idx++;
|
|
}
|
|
}
|
|
|
|
offset = dissect_dcom_HRESULT(tvb, offset, pinfo, tree, drep,
|
|
&u32HResult);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": %s PCRID=0x%x -> %s",
|
|
(u8FirstConnect) ? "FirstCR" : "NotFirstCR",
|
|
u32ProvCRID,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoServerSRT_DisconnectCR_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Count;
|
|
guint32 u32ArraySize;
|
|
guint32 u32Idx;
|
|
guint32 u32ProvCRID;
|
|
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32Idx = 1;
|
|
while (u32ArraySize--) {
|
|
offset = dissect_dcom_indexed_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_prov_crid, &u32ProvCRID, u32Idx);
|
|
u32Idx++;
|
|
}
|
|
|
|
/* update column info now */
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u", u32Count);
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoServerSRT_Connect_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32ProvCRID;
|
|
guint8 u8State;
|
|
guint8 u8LastConnect;
|
|
guint32 u32Count;
|
|
guint32 u32ArraySize;
|
|
guint32 u32VariableOffset;
|
|
guint32 u32Idx;
|
|
proto_item *sub_item;
|
|
proto_tree *sub_tree;
|
|
guint32 u32SubStart;
|
|
guint32 u32Pointer;
|
|
gchar szProvItem[1000] = { 0 };
|
|
guint32 u32MaxProvItemLen = sizeof(szProvItem);
|
|
guint16 u16TypeDescLen;
|
|
guint32 u32ArraySize2;
|
|
guint32 u32Idx2;
|
|
guint16 u16VarType2 = -1;
|
|
guint16 u16VarType;
|
|
guint32 u32ConsID;
|
|
guint16 u16RecordLength;
|
|
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_prov_crid, &u32ProvCRID);
|
|
|
|
offset = dissect_dcom_BYTE(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_state, &u8State);
|
|
|
|
offset = dissect_dcom_BYTE(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_serversrt_last_connect, &u8LastConnect);
|
|
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32VariableOffset = offset + u32ArraySize*20;
|
|
|
|
u32Idx = 1;
|
|
while (u32ArraySize--) {
|
|
/* array of CONNECTINs */
|
|
sub_item = proto_tree_add_item(tree, hf_cba_connectin, tvb, offset, 0, FALSE);
|
|
sub_tree = proto_item_add_subtree(sub_item, ett_cba_connectin);
|
|
u32SubStart = offset;
|
|
|
|
/* ProviderItem */
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_LPWSTR(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_provider_item, szProvItem, u32MaxProvItemLen);
|
|
}
|
|
|
|
/* TypeDescLen */
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_type_desc_len, &u16TypeDescLen);
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
/* pTypeDesc */
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_dcerpc_array_size(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
&u32ArraySize2);
|
|
|
|
/* extended type description will build an array here */
|
|
u32Idx2 = 1;
|
|
while (u32ArraySize2--) {
|
|
/* ToBeDone: some of the type description values are counts */
|
|
u32VariableOffset = dissect_dcom_VARTYPE(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
&u16VarType);
|
|
/* remember first VarType only */
|
|
if (u32Idx2 == 1) {
|
|
u16VarType2 = u16VarType;
|
|
}
|
|
u32Idx2++;
|
|
}
|
|
}
|
|
|
|
/* ConsumerID */
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_cons_id, &u32ConsID);
|
|
|
|
/* RecordLength */
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_serversrt_record_length, &u16RecordLength);
|
|
|
|
/* update subtree header */
|
|
proto_item_append_text(sub_item, "[%u]: ConsID=0x%x, ProvItem=\"%s\", TypeDesc=%s",
|
|
u32Idx, u32ConsID, szProvItem,
|
|
val_to_str(u16VarType2, dcom_variant_type_vals, "Unknown (0x%04x)") );
|
|
proto_item_set_len(sub_item, offset - u32SubStart);
|
|
|
|
|
|
u32Idx++;
|
|
}
|
|
|
|
/* update column info now */
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": %s Cnt=%u PCRID=0x%x",
|
|
(u8LastConnect) ? "LastOfCR" : "",
|
|
u32Idx-1,
|
|
u32ProvCRID);
|
|
}
|
|
|
|
return u32VariableOffset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoServerSRT_Connect_resp(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Pointer;
|
|
guint32 u32ArraySize;
|
|
guint32 u32Idx = 1;
|
|
proto_item *sub_item;
|
|
proto_tree *sub_tree;
|
|
guint32 u32SubStart;
|
|
guint32 u32ProvID;
|
|
guint32 u32HResult;
|
|
|
|
|
|
offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep,
|
|
&u32Pointer);
|
|
|
|
if (u32Pointer) {
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
/* array of CONNECTOUTs */
|
|
while(u32ArraySize--) {
|
|
sub_item = proto_tree_add_item(tree, hf_cba_connectout, tvb, offset, 8, FALSE);
|
|
sub_tree = proto_item_add_subtree(sub_item, ett_cba_connectout);
|
|
u32SubStart = offset;
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_prov_id, &u32ProvID);
|
|
|
|
offset = dissect_dcom_indexed_HRESULT(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32HResult, u32Idx);
|
|
|
|
proto_item_append_text(sub_item, "[%u]: ProvID=0x%x %s",
|
|
u32Idx, u32ProvID,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
proto_item_set_len(sub_item, offset - u32SubStart);
|
|
|
|
u32Idx++;
|
|
}
|
|
}
|
|
|
|
offset = dissect_dcom_HRESULT(tvb, offset, pinfo, tree, drep,
|
|
&u32HResult);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u -> %s",
|
|
u32Idx-1,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_Server_GetProvIDs_resp(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Count;
|
|
guint32 u32Pointer;
|
|
guint32 u32ArraySize;
|
|
guint32 u32Idx;
|
|
guint32 u32ProvID;
|
|
guint32 u32HResult;
|
|
|
|
|
|
offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
if (u32Count) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u ProvID=", u32Count);
|
|
} else {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u", u32Count);
|
|
}
|
|
}
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32Idx = 1;
|
|
while (u32ArraySize--) {
|
|
offset = dissect_dcom_indexed_DWORD(tvb, offset, pinfo,
|
|
tree, drep,
|
|
hf_cba_acco_conn_prov_id, &u32ProvID, u32Idx);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
if (u32Idx == 1) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, "0x%x", u32ProvID);
|
|
} else if (u32Idx < 10) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ",0x%x", u32ProvID);
|
|
} else if (u32Idx == 10) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ",...");
|
|
}
|
|
}
|
|
|
|
u32Idx++;
|
|
}
|
|
}
|
|
|
|
offset = dissect_dcom_HRESULT(tvb, offset, pinfo, tree, drep,
|
|
&u32HResult);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, " -> %s",
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_Server_GetProvConnections_resp(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Count;
|
|
guint32 u32TmpCount;
|
|
guint32 u32Pointer;
|
|
guint32 u32VariableOffset;
|
|
guint32 u32Idx;
|
|
proto_item *sub_item;
|
|
proto_tree *sub_tree;
|
|
guint32 u32SubStart;
|
|
gchar szCons[1000] = { 0 };
|
|
guint32 u32MaxConsLen = sizeof(szCons);
|
|
gchar szProvItem[1000] = { 0 };
|
|
guint32 u32MaxProvItemLen = sizeof(szProvItem);
|
|
guint32 u32ConsID;
|
|
guint16 u16QoSType;
|
|
guint16 u16QoSValue;
|
|
guint8 u8State;
|
|
guint32 u32HResult;
|
|
|
|
|
|
offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep,
|
|
&u32Pointer);
|
|
|
|
u32VariableOffset = offset;
|
|
|
|
if (u32Pointer) {
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
u32VariableOffset = offset + u32Count*28;
|
|
|
|
/* array fixed part (including pointers to variable part) */
|
|
u32TmpCount = u32Count;
|
|
u32Idx = 1;
|
|
while (u32TmpCount--) {
|
|
sub_item = proto_tree_add_item(tree, hf_cba_getprovconnout, tvb, offset, 0, FALSE);
|
|
sub_tree = proto_item_add_subtree(sub_item, ett_cba_getprovconnout);
|
|
u32SubStart = offset;
|
|
|
|
/* wszConsumer */
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_LPWSTR(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_consumer, szCons, u32MaxConsLen);
|
|
}
|
|
/* wszProviderItem */
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_LPWSTR(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_provider_item, szProvItem, u32MaxProvItemLen);
|
|
}
|
|
/* dwConsID */
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_cons_id, &u32ConsID);
|
|
|
|
/* Epsilon */
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_VARIANT(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_epsilon);
|
|
}
|
|
|
|
/* QoS Type */
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_qos_type, &u16QoSType);
|
|
/* QoS Value */
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_qos_value, &u16QoSValue);
|
|
/* State */
|
|
offset = dissect_dcom_BOOLEAN(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_state, &u8State);
|
|
/* PartialResult */
|
|
offset = dissect_dcom_indexed_HRESULT(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32HResult, u32Idx);
|
|
|
|
proto_item_append_text(sub_item, "[%u]: %s",
|
|
u32Idx,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
proto_item_set_len(sub_item, offset - u32SubStart);
|
|
|
|
u32Idx++;
|
|
}
|
|
}
|
|
|
|
u32VariableOffset = dissect_dcom_HRESULT(tvb, u32VariableOffset, pinfo, tree, drep,
|
|
&u32HResult);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, " -> %s",
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
}
|
|
|
|
return u32VariableOffset;
|
|
}
|
|
|
|
|
|
#define CBA_MRSH_VERSION_DCOM 0x1
|
|
#define CBA_MRSH_VERSION_SRT_WITH_CONSID 0x10
|
|
#define CBA_MRSH_VERSION_SRT_WITHOUT_CONSID 0x11
|
|
|
|
|
|
int
|
|
dissect_CBA_Connection_Data(tvbuff_t *tvb,
|
|
packet_info *pinfo, proto_tree *tree)
|
|
{
|
|
guint8 u8Version;
|
|
guint8 u8Flags;
|
|
guint16 u16CountFix;
|
|
guint16 u16Count;
|
|
guint32 u32ItemIdx;
|
|
guint32 u32HoleIdx;
|
|
proto_item *sub_item;
|
|
proto_tree *sub_tree;
|
|
proto_item *conn_data_item = NULL;
|
|
proto_tree *conn_data_tree = NULL;
|
|
guint16 u16Len;
|
|
guint32 u32ID;
|
|
guint8 u8QC;
|
|
guint16 u16DataLen;
|
|
guint16 u16HdrLen;
|
|
int offset = 0;
|
|
int offset_hole;
|
|
/* guint32 bTimeStamped = 0;*/
|
|
|
|
/*** ALL data in this buffer is NOT aligned and always little endian ordered ***/
|
|
|
|
if (tree) {
|
|
conn_data_item = proto_tree_add_item(tree, hf_cba_acco_cb_conn_data, tvb, offset, 0, FALSE);
|
|
conn_data_tree = proto_item_add_subtree(conn_data_item, ett_ICBAAccoCallback_Buffer);
|
|
}
|
|
|
|
/* add buffer header */
|
|
u8Version = tvb_get_guint8 (tvb, offset);
|
|
if (conn_data_tree) {
|
|
proto_tree_add_item(conn_data_tree, hf_cba_acco_cb_version, tvb, offset, 1, TRUE);
|
|
}
|
|
offset += 1;
|
|
|
|
u8Flags = tvb_get_guint8 (tvb, offset);
|
|
if (conn_data_tree) {
|
|
proto_tree_add_item(conn_data_tree, hf_cba_acco_cb_flags, tvb, offset, 1, TRUE);
|
|
}
|
|
offset += 1;
|
|
|
|
u16Count = tvb_get_letohs (tvb, offset);
|
|
if (conn_data_tree) {
|
|
proto_tree_add_item(conn_data_tree, hf_cba_acco_cb_count, tvb, offset, 2, TRUE);
|
|
}
|
|
offset += 2;
|
|
u16CountFix = u16Count;
|
|
|
|
/* update column info now */
|
|
if (check_col(pinfo->cinfo, COL_INFO))
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, " Cnt=%u", u16Count);
|
|
|
|
/* is this an OnDataChanged buffer format (version), we know? */
|
|
if (u8Version != CBA_MRSH_VERSION_DCOM &&
|
|
u8Version != CBA_MRSH_VERSION_SRT_WITH_CONSID &&
|
|
u8Version != CBA_MRSH_VERSION_SRT_WITHOUT_CONSID)
|
|
{
|
|
return offset;
|
|
}
|
|
|
|
/* Timestamps are currently unused -> flags must be zero */
|
|
if (u8Flags != 0) {
|
|
return offset;
|
|
}
|
|
|
|
u32ItemIdx = 1;
|
|
u32HoleIdx = 1;
|
|
while (u16Count--) {
|
|
/* find next record header */
|
|
u16Len = tvb_get_letohs (tvb, offset);
|
|
|
|
/* trapped inside an empty hole? -> try to find next record header */
|
|
if (u16Len == 0 &&
|
|
(u8Version == CBA_MRSH_VERSION_SRT_WITH_CONSID ||
|
|
u8Version == CBA_MRSH_VERSION_SRT_WITHOUT_CONSID))
|
|
{
|
|
u32HoleIdx++;
|
|
offset_hole = offset;
|
|
/* length smaller or larger than possible -> must be a hole */
|
|
while (u16Len == 0) {
|
|
offset++;
|
|
u16Len = tvb_get_letohs(tvb, offset);
|
|
/* this is a bit tricky here! we know: */
|
|
/* u16Len must be greater than 3 (min. size of header itself) */
|
|
/* u16Len must be a lot smaller than 0x300 (max. size of frame) */
|
|
/* -> if we found a length larger than 0x300, */
|
|
/* this must be actually the high byte, so do one more step */
|
|
if (u16Len > 0x300) {
|
|
u16Len = 0;
|
|
}
|
|
}
|
|
proto_tree_add_none_format(conn_data_tree, hf_cba_acco_cb_item_hole, tvb,
|
|
offset_hole, offset - offset_hole,
|
|
"Hole(--): -------------, offset=%2u, length=%2u",
|
|
offset_hole, offset - offset_hole);
|
|
}
|
|
|
|
/* add callback-item subtree */
|
|
sub_item = proto_tree_add_item(conn_data_tree, hf_cba_acco_cb_item, tvb, offset, 0, FALSE);
|
|
sub_tree = proto_item_add_subtree(sub_item, ett_ICBAAccoCallback_Item);
|
|
|
|
/* add item header fields */
|
|
if (sub_tree) {
|
|
proto_tree_add_item(sub_tree, hf_cba_acco_cb_item_length, tvb, offset, 2, TRUE);
|
|
}
|
|
offset += 2;
|
|
u16HdrLen = 2;
|
|
|
|
if (u8Version == CBA_MRSH_VERSION_DCOM ||
|
|
u8Version == CBA_MRSH_VERSION_SRT_WITH_CONSID)
|
|
{
|
|
u32ID = tvb_get_letohl (tvb, offset);
|
|
if (sub_tree) {
|
|
proto_tree_add_item(sub_tree, hf_cba_acco_conn_cons_id, tvb, offset, 4, TRUE);
|
|
}
|
|
offset += 4;
|
|
u16HdrLen += 4;
|
|
} else {
|
|
u32ID = 0;
|
|
}
|
|
|
|
u8QC = tvb_get_guint8 (tvb, offset);
|
|
if (sub_tree) {
|
|
proto_tree_add_item(sub_tree, hf_cba_acco_qc, tvb, offset, 1, TRUE);
|
|
}
|
|
offset += 1;
|
|
u16HdrLen += 1;
|
|
|
|
/* user data length is item length without headers */
|
|
u16DataLen = u16Len - u16HdrLen;
|
|
|
|
/* append text to subtree header */
|
|
if (u8Version == CBA_MRSH_VERSION_DCOM ||
|
|
u8Version == CBA_MRSH_VERSION_SRT_WITH_CONSID)
|
|
{
|
|
proto_item_append_text(sub_item,
|
|
"[%2u]: ConsID=0x%08x, offset=%2u, length=%2u (user-length=%2u), QC=%s (0x%02x)",
|
|
u32ItemIdx, u32ID, offset - u16HdrLen, u16Len, u16DataLen,
|
|
val_to_str(u8QC, cba_acco_qc_vals, "Unknown (0x%02x)"), u8QC );
|
|
} else {
|
|
proto_item_append_text(sub_item,
|
|
"[%2u]: ConsID=-, offset=%2u, length=%2u (user-length=%2u), QC=%s (0x%02x)",
|
|
u32ItemIdx, offset - u16HdrLen, u16Len, u16DataLen,
|
|
val_to_str(u8QC, cba_acco_qc_vals, "Unknown (0x%02x)"), u8QC );
|
|
}
|
|
proto_item_set_len(sub_item, u16Len);
|
|
|
|
/* hexdump of user data */
|
|
proto_tree_add_bytes(sub_tree, hf_cba_acco_cb_item_data, tvb, offset, u16DataLen,
|
|
tvb_get_ptr(tvb, offset, u16DataLen));
|
|
offset += u16DataLen;
|
|
|
|
u32ItemIdx++;
|
|
}
|
|
|
|
if (u8Version == 1) {
|
|
proto_item_append_text(conn_data_item,
|
|
": Version=0x%x (OnDataChanged), Flags=0x%x, Count=%u",
|
|
u8Version, u8Flags, u16CountFix);
|
|
} else {
|
|
proto_item_append_text(conn_data_item,
|
|
": Version=0x%x (SRT), Flags=0x%x, Count=%u, Items=%u, Holes=%u",
|
|
u8Version, u8Flags, u16CountFix, u32ItemIdx-1, u32HoleIdx-1);
|
|
}
|
|
proto_item_set_len(conn_data_item, offset);
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static gboolean
|
|
dissect_CBA_Connection_Data_heur(tvbuff_t *tvb,
|
|
packet_info *pinfo, proto_tree *tree)
|
|
{
|
|
guint8 u8Version;
|
|
guint8 u8Flags;
|
|
guint16 u16FrameID;
|
|
|
|
/* the tvb will NOT contain the frame_id here! */
|
|
u16FrameID = GPOINTER_TO_UINT(pinfo->private_data);
|
|
|
|
/* frame id must be in valid range (cyclic Real-Time, class=1) */
|
|
if (u16FrameID < 0xc000 || u16FrameID >= 0xfb00) {
|
|
return FALSE;
|
|
}
|
|
|
|
u8Version = tvb_get_guint8 (tvb, 0);
|
|
u8Flags = tvb_get_guint8 (tvb, 1);
|
|
|
|
/* version and flags must be ok */
|
|
if(u8Version != 0x11 || u8Flags != 0x00) {
|
|
return FALSE;
|
|
}
|
|
|
|
if (check_col(pinfo->cinfo, COL_PROTOCOL))
|
|
col_add_str(pinfo->cinfo, COL_PROTOCOL, "PN-CBA");
|
|
|
|
dissect_CBA_Connection_Data(tvb, pinfo, tree);
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoCallback_OnDataChanged_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Length;
|
|
guint32 u32ArraySize;
|
|
tvbuff_t *next_tvb;
|
|
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
/* length */
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_cb_length, &u32Length);
|
|
|
|
/* array size */
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
/*** the data below is NOT ndr encoded (especially NOT aligned)!!! ***/
|
|
/* dissect PROFINET component data (without header) */
|
|
next_tvb = tvb_new_subset(tvb, offset, -1, -1);
|
|
|
|
offset += dissect_CBA_Connection_Data(next_tvb, pinfo, tree);
|
|
|
|
/* XXX */
|
|
/* tvb_free(next_tvb);*/
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoServer2_GetConnectionData_resp(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Length;
|
|
guint32 u32ArraySize;
|
|
tvbuff_t *next_tvb;
|
|
guint32 u32Pointer;
|
|
guint32 u32HResult;
|
|
|
|
|
|
offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep);
|
|
|
|
/* length */
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_cb_length, &u32Length);
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
/* array size */
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
/*** the data below is NOT ndr encoded (especially NOT aligned)!!! ***/
|
|
/* dissect PROFINET component data (without header) */
|
|
next_tvb = tvb_new_subset(tvb, offset, -1, -1);
|
|
|
|
offset += dissect_CBA_Connection_Data(next_tvb, pinfo, tree);
|
|
|
|
/* XXX */
|
|
/* tvb_free(next_tvb);*/
|
|
}
|
|
|
|
offset = dissect_dcom_HRESULT(tvb, offset, pinfo, tree, drep,
|
|
&u32HResult);
|
|
|
|
/* update column info now */
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, " -> %s",
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoMgt_AddConnections_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
gchar szConsumer[1000] = { 0 };
|
|
guint32 u32MaxConsLen = sizeof(szConsumer);
|
|
guint16 u16QoSType;
|
|
guint16 u16QoSValue;
|
|
guint8 u8State;
|
|
guint32 u32Count;
|
|
guint32 u32ArraySize;
|
|
guint32 u32Pointer;
|
|
guint16 u16Persistence;
|
|
gchar szConsItem[1000] = { 0 };
|
|
guint32 u32MaxConsItemLen = sizeof(szConsItem);
|
|
gchar szProvItem[1000] = { 0 };
|
|
guint32 u32MaxProvItemLen = sizeof(szProvItem);
|
|
guint32 u32VariableOffset;
|
|
proto_item *sub_item;
|
|
proto_tree *sub_tree;
|
|
guint32 u32SubStart;
|
|
guint32 u32Idx;
|
|
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_LPWSTR(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_provider, szConsumer, u32MaxConsLen);
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_qos_type, &u16QoSType);
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_qos_value, &u16QoSValue);
|
|
offset = dissect_dcom_BOOLEAN(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_state, &u8State);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32VariableOffset = offset + u32ArraySize * 20;
|
|
|
|
u32Idx = 1;
|
|
while (u32ArraySize--) {
|
|
sub_item = proto_tree_add_item(tree, hf_cba_addconnectionin, tvb, offset, 0, FALSE);
|
|
sub_tree = proto_item_add_subtree(sub_item, ett_cba_addconnectionin);
|
|
u32SubStart = offset;
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_LPWSTR(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_provider_item, szProvItem, u32MaxProvItemLen);
|
|
}
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_LPWSTR(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_consumer_item, szConsItem, u32MaxConsItemLen);
|
|
}
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_persist, &u16Persistence);
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_VARIANT(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_substitute);
|
|
}
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_VARIANT(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_epsilon);
|
|
}
|
|
proto_item_append_text(sub_item, "[%u]: ConsItem=\"%s\" ProvItem=\"%s\" %s Pers=%u",
|
|
u32Idx, szConsItem, szProvItem,
|
|
val_to_str(u16Persistence, cba_persist_vals, "Unknown (0x%02x)"), u16Persistence);
|
|
proto_item_set_len(sub_item, offset - u32SubStart);
|
|
|
|
u32Idx++;
|
|
}
|
|
|
|
/* update column info now */
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Prov=\"%s\" State=%s Cnt=%u",
|
|
szConsumer,
|
|
val_to_str(u8State, cba_acco_conn_state_vals, "Unknown (0x%02x)"),
|
|
u32Count);
|
|
}
|
|
|
|
return u32VariableOffset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoMgt_AddConnections_resp(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Pointer;
|
|
guint32 u32ArraySize = 0;
|
|
guint32 u32ConsID;
|
|
guint16 u16ConnVersion;
|
|
guint32 u32HResult = 0;
|
|
guint32 u32Count = 0;
|
|
guint32 u32Idx;
|
|
proto_item *sub_item;
|
|
proto_tree *sub_tree;
|
|
guint32 u32SubStart;
|
|
|
|
|
|
offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep,
|
|
&u32Pointer);
|
|
|
|
if (u32Pointer) {
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32Count = u32ArraySize;
|
|
u32Idx = 1;
|
|
while (u32ArraySize--) {
|
|
sub_item = proto_tree_add_item(tree, hf_cba_addconnectionout, tvb, offset, 0, FALSE);
|
|
sub_tree = proto_item_add_subtree(sub_item, ett_cba_addconnectionout);
|
|
u32SubStart = offset;
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_cons_id, &u32ConsID);
|
|
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_version, &u16ConnVersion);
|
|
|
|
offset = dissect_dcom_indexed_HRESULT(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32HResult, u32Idx);
|
|
|
|
proto_item_append_text(sub_item, "[%u]: ConsID=0x%x Version=%u %s",
|
|
u32Idx, u32ConsID, u16ConnVersion,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
proto_item_set_len(sub_item, offset - u32SubStart);
|
|
|
|
u32Idx++;
|
|
}
|
|
|
|
offset = dissect_dcom_HRESULT(tvb, offset, pinfo, tree, drep,
|
|
&u32HResult);
|
|
}
|
|
|
|
/* update column info now */
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u -> %s",
|
|
u32Count,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoMgt_RemoveConnections_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Count;
|
|
guint32 u32ArraySize;
|
|
guint32 u32Idx;
|
|
guint32 u32ConsID;
|
|
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32Idx = 1;
|
|
while (u32ArraySize--) {
|
|
offset = dissect_dcom_indexed_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_cons_id, &u32ConsID, u32Idx);
|
|
u32Idx++;
|
|
}
|
|
|
|
/* update column info now */
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u", u32Count);
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoMgt_SetActivationState_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint8 u8State;
|
|
guint32 u32Count;
|
|
guint32 u32ArraySize;
|
|
guint32 u32Idx;
|
|
guint32 u32ConsID;
|
|
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_BOOLEAN(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_state, &u8State);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32Idx = 1;
|
|
while (u32ArraySize--) {
|
|
offset = dissect_dcom_indexed_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_cons_id, &u32ConsID, u32Idx);
|
|
u32Idx++;
|
|
}
|
|
|
|
/* update column info now */
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u", u32Count);
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoMgt_GetInfo_resp(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Max;
|
|
guint32 u32CurCnt;
|
|
guint32 u32HResult;
|
|
|
|
|
|
offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_info_max, &u32Max);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_info_curr, &u32CurCnt);
|
|
|
|
offset = dissect_dcom_HRESULT(tvb, offset, pinfo, tree, drep,
|
|
&u32HResult);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO))
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": %u/%u -> %s",
|
|
u32CurCnt, u32Max,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoMgt_GetIDs_resp(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Count;
|
|
guint32 u32Pointer;
|
|
guint32 u32ArraySize;
|
|
guint32 u32ConsID;
|
|
guint8 u8State;
|
|
guint16 u16Version;
|
|
guint32 u32HResult;
|
|
guint32 u32Idx;
|
|
proto_item *sub_item;
|
|
proto_tree *sub_tree;
|
|
guint32 u32SubStart;
|
|
|
|
|
|
offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
if (u32Count) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u ConsID=", u32Count);
|
|
} else {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u", u32Count);
|
|
}
|
|
}
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32Idx = 1;
|
|
while (u32ArraySize--) {
|
|
sub_item = proto_tree_add_item(tree, hf_cba_getidout, tvb, offset, 0, FALSE);
|
|
sub_tree = proto_item_add_subtree(sub_item, ett_cba_getidout);
|
|
u32SubStart = offset;
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_cons_id, &u32ConsID);
|
|
offset = dissect_dcom_BOOLEAN(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_state, &u8State);
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_version, &u16Version);
|
|
offset = dissect_dcom_indexed_HRESULT(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32HResult, u32Idx);
|
|
|
|
proto_item_append_text(sub_item, "[%u]: ConsID=0x%x State=%s Version=%u %s",
|
|
u32Idx, u32ConsID,
|
|
val_to_str(u8State, cba_acco_conn_state_vals, "Unknown (0x%02x)"),
|
|
u16Version,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
proto_item_set_len(sub_item, offset - u32SubStart);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
if (u32Idx == 1) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, "0x%x", u32ConsID);
|
|
} else if (u32Idx < 10) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ",0x%x", u32ConsID);
|
|
} else if (u32Idx == 10) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ",...");
|
|
}
|
|
}
|
|
|
|
u32Idx++;
|
|
}
|
|
}
|
|
|
|
offset = dissect_dcom_HRESULT(tvb, offset, pinfo, tree, drep,
|
|
&u32HResult);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, " -> %s",
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoMgt2_GetConsIDs_resp(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Count;
|
|
guint32 u32Pointer;
|
|
guint32 u32ArraySize;
|
|
guint32 u32Idx;
|
|
guint32 u32ConsID;
|
|
guint32 u32HResult;
|
|
|
|
|
|
offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
if (u32Count) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u ConsID=", u32Count);
|
|
} else {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u", u32Count);
|
|
}
|
|
}
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32Idx = 1;
|
|
while (u32ArraySize--) {
|
|
offset = dissect_dcom_indexed_DWORD(tvb, offset, pinfo,
|
|
tree, drep,
|
|
hf_cba_acco_conn_cons_id, &u32ConsID, u32Idx);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
if (u32Idx == 1) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, "0x%x", u32ConsID);
|
|
} else if (u32Idx < 10) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ",0x%x", u32ConsID);
|
|
} else if (u32Idx == 10) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ",...");
|
|
}
|
|
}
|
|
|
|
u32Idx++;
|
|
}
|
|
}
|
|
|
|
offset = dissect_dcom_HRESULT(tvb, offset, pinfo, tree, drep,
|
|
&u32HResult);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, " -> %s",
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoMgt2_GetConsConnections_resp(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Count;
|
|
guint32 u32TmpCount;
|
|
guint32 u32Pointer;
|
|
guint32 u32HResult;
|
|
|
|
guint16 u16QoSType;
|
|
guint16 u16QoSValue;
|
|
guint8 u8State;
|
|
guint16 u16Persistence;
|
|
proto_item *sub_item;
|
|
proto_tree *sub_tree;
|
|
guint32 u32SubStart;
|
|
guint32 u32Idx;
|
|
guint32 u32VariableOffset;
|
|
gchar szProv[1000] = { 0 };
|
|
guint32 u32MaxProvLen = sizeof(szProv);
|
|
gchar szProvItem[1000] = { 0 };
|
|
guint32 u32MaxProvItemLen = sizeof(szProvItem);
|
|
gchar szConsItem[1000] = { 0 };
|
|
guint32 u32MaxConsItemLen = sizeof(szConsItem);
|
|
|
|
|
|
offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep,
|
|
&u32Pointer);
|
|
|
|
u32VariableOffset = offset;
|
|
|
|
if (u32Pointer) {
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
u32VariableOffset = offset + u32Count*32;
|
|
|
|
/* array fixed part (including pointers to variable part) */
|
|
u32TmpCount = u32Count;
|
|
u32Idx = 1;
|
|
while (u32TmpCount--) {
|
|
sub_item = proto_tree_add_item(tree, hf_cba_getconsconnout, tvb, offset, 0, FALSE);
|
|
sub_tree = proto_item_add_subtree(sub_item, ett_cba_getconnectionout);
|
|
u32SubStart = offset;
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_LPWSTR(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_provider, szProv, u32MaxProvLen);
|
|
}
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_LPWSTR(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_provider_item, szProvItem, u32MaxProvItemLen);
|
|
}
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_LPWSTR(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_consumer_item, szConsItem, u32MaxConsItemLen);
|
|
}
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_VARIANT(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_substitute);
|
|
}
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_VARIANT(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_epsilon);
|
|
}
|
|
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_qos_type, &u16QoSType);
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_qos_value, &u16QoSValue);
|
|
offset = dissect_dcom_BOOLEAN(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_state, &u8State);
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_persist, &u16Persistence);
|
|
offset = dissect_dcom_indexed_HRESULT(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32HResult, u32Idx);
|
|
|
|
proto_item_append_text(sub_item, "[%u]: %s",
|
|
u32Idx,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
proto_item_set_len(sub_item, offset - u32SubStart);
|
|
|
|
u32Idx++;
|
|
}
|
|
}
|
|
|
|
u32VariableOffset = dissect_dcom_HRESULT(tvb, u32VariableOffset, pinfo, tree, drep,
|
|
&u32HResult);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, " -> %s",
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
}
|
|
|
|
return u32VariableOffset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoMgt2_DiagConsConnections_resp(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Count;
|
|
guint32 u32TmpCount;
|
|
guint32 u32Pointer;
|
|
guint32 u32HResult;
|
|
guint8 u8State;
|
|
guint16 u16Persistence;
|
|
guint16 u16ConnVersion;
|
|
proto_item *sub_item;
|
|
proto_tree *sub_tree;
|
|
guint32 u32SubStart;
|
|
guint32 u32Idx;
|
|
guint32 u32VariableOffset;
|
|
guint32 u32ConnErrorState;
|
|
|
|
|
|
offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep,
|
|
&u32Pointer);
|
|
|
|
u32VariableOffset = offset;
|
|
|
|
if (u32Pointer) {
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
u32VariableOffset = offset + u32Count*16;
|
|
|
|
/* array fixed part (including pointers to variable part) */
|
|
u32TmpCount = u32Count;
|
|
u32Idx = 1;
|
|
while (u32TmpCount--) {
|
|
sub_item = proto_tree_add_item(tree, hf_cba_diagconsconnout, tvb, offset, 0, FALSE);
|
|
sub_tree = proto_item_add_subtree(sub_item, ett_cba_getconnectionout);
|
|
u32SubStart = offset;
|
|
|
|
offset = dissect_dcom_BOOLEAN(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_state, &u8State);
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_persist, &u16Persistence);
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_version, &u16ConnVersion);
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_error_state, &u32ConnErrorState);
|
|
offset = dissect_dcom_indexed_HRESULT(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32HResult, u32Idx);
|
|
|
|
proto_item_append_text(sub_item, "[%u]: %s",
|
|
u32Idx,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
proto_item_set_len(sub_item, offset - u32SubStart);
|
|
|
|
u32Idx++;
|
|
}
|
|
}
|
|
|
|
u32VariableOffset = dissect_dcom_HRESULT(tvb, u32VariableOffset, pinfo, tree, drep,
|
|
&u32HResult);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, " -> %s",
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
}
|
|
|
|
return u32VariableOffset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoMgt_GetConnections_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32ConsID;
|
|
guint32 u32Count;
|
|
guint32 u32ArraySize;
|
|
guint32 u32Idx;
|
|
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32Idx = 1;
|
|
while (u32ArraySize--){
|
|
offset = dissect_dcom_indexed_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_cons_id, &u32ConsID, u32Idx);
|
|
u32Idx++;
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoMgt_GetConnections_resp(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Count;
|
|
guint32 u32TmpCount;
|
|
guint32 u32Pointer;
|
|
guint32 u32HResult;
|
|
|
|
guint16 u16QoSType;
|
|
guint16 u16QoSValue;
|
|
guint8 u8State;
|
|
guint16 u16Persistence;
|
|
guint16 u16ConnVersion;
|
|
proto_item *sub_item;
|
|
proto_tree *sub_tree;
|
|
guint32 u32SubStart;
|
|
guint32 u32Idx;
|
|
guint32 u32VariableOffset;
|
|
gchar szProv[1000] = { 0 };
|
|
guint32 u32MaxProvLen = sizeof(szProv);
|
|
gchar szProvItem[1000] = { 0 };
|
|
guint32 u32MaxProvItemLen = sizeof(szProvItem);
|
|
gchar szConsItem[1000] = { 0 };
|
|
guint32 u32MaxConsItemLen = sizeof(szConsItem);
|
|
|
|
|
|
offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep,
|
|
&u32Pointer);
|
|
|
|
u32VariableOffset = offset;
|
|
|
|
if (u32Pointer) {
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
u32VariableOffset = offset + u32Count*36;
|
|
|
|
/* array fixed part (including pointers to variable part) */
|
|
u32TmpCount = u32Count;
|
|
u32Idx = 1;
|
|
while (u32TmpCount--) {
|
|
sub_item = proto_tree_add_item(tree, hf_cba_getconnectionout, tvb, offset, 0, FALSE);
|
|
sub_tree = proto_item_add_subtree(sub_item, ett_cba_getconnectionout);
|
|
u32SubStart = offset;
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_LPWSTR(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_provider, szProv, u32MaxProvLen);
|
|
}
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_LPWSTR(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_provider_item, szProvItem, u32MaxProvItemLen);
|
|
}
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_LPWSTR(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_consumer_item, szConsItem, u32MaxConsItemLen);
|
|
}
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_VARIANT(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_substitute);
|
|
}
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_VARIANT(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_epsilon);
|
|
}
|
|
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_qos_type, &u16QoSType);
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_qos_value, &u16QoSValue);
|
|
offset = dissect_dcom_BOOLEAN(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_state, &u8State);
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_persist, &u16Persistence);
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_conn_version, &u16ConnVersion);
|
|
offset = dissect_dcom_indexed_HRESULT(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32HResult, u32Idx);
|
|
|
|
proto_item_append_text(sub_item, "[%u]: %s",
|
|
u32Idx,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
proto_item_set_len(sub_item, offset - u32SubStart);
|
|
|
|
u32Idx++;
|
|
}
|
|
}
|
|
|
|
u32VariableOffset = dissect_dcom_HRESULT(tvb, u32VariableOffset, pinfo, tree, drep,
|
|
&u32HResult);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, " -> %s",
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
}
|
|
|
|
return u32VariableOffset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoMgt_ReviseQoS_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint16 u16QoSType;
|
|
guint16 u16QoSValue;
|
|
gchar szStr[1000];
|
|
guint32 u32MaxStr = sizeof(szStr);
|
|
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_LPWSTR(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_rtauto, szStr, u32MaxStr);
|
|
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_qos_type, &u16QoSType);
|
|
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_qos_value, &u16QoSValue);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": RTAuto=\"%s\" QoSType=%s QoSValue=%u",
|
|
szStr,
|
|
val_to_str(u16QoSType, cba_qos_type_vals, "Unknown (0x%04x)"),
|
|
u16QoSValue);
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoMgt_ReviseQoS_resp(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint16 u16QoSValue;
|
|
guint32 u32HResult;
|
|
|
|
|
|
offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_conn_qos_value, &u16QoSValue);
|
|
|
|
offset = dissect_dcom_HRESULT(tvb, offset, pinfo, tree, drep,
|
|
&u32HResult);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO))
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": %u -> %s",
|
|
u16QoSValue,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoMgt_get_PingFactor_resp(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint16 u16PF;
|
|
guint32 u32HResult;
|
|
|
|
|
|
offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_ping_factor, &u16PF);
|
|
|
|
offset = dissect_dcom_HRESULT(tvb, offset, pinfo, tree, drep,
|
|
&u32HResult);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO))
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": %u -> %s",
|
|
u16PF,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoMgt_put_PingFactor_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint16 u16PF;
|
|
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_ping_factor, &u16PF);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO))
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": %u", u16PF);
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoMgt_get_CDBCookie_resp(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Cookie;
|
|
guint32 u32HResult;
|
|
|
|
|
|
offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_cdb_cookie, &u32Cookie);
|
|
|
|
offset = dissect_dcom_HRESULT(tvb, offset, pinfo, tree, drep,
|
|
&u32HResult);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": CDBCookie=0x%x -> %s",
|
|
u32Cookie,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoSync_ReadItems_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Count;
|
|
gchar szStr[1000];
|
|
guint32 u32MaxStr = sizeof(szStr);
|
|
guint32 u32Pointer;
|
|
guint32 u32ArraySize;
|
|
guint32 u32VariableOffset;
|
|
guint32 u32Idx;
|
|
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32VariableOffset = offset + u32ArraySize*4;
|
|
|
|
u32Idx = 1;
|
|
while (u32ArraySize--) {
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_indexed_LPWSTR(tvb, u32VariableOffset, pinfo, tree, drep,
|
|
hf_cba_acco_item, szStr, u32MaxStr, u32Idx);
|
|
}
|
|
|
|
u32Idx++;
|
|
}
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u", u32Count);
|
|
}
|
|
|
|
return u32VariableOffset;
|
|
}
|
|
|
|
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoSync_ReadItems_resp(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Pointer;
|
|
guint16 u16QC;
|
|
guint32 u32ArraySize;
|
|
guint32 u32HResult;
|
|
guint32 u32Idx;
|
|
proto_item *sub_item;
|
|
proto_tree *sub_tree;
|
|
guint32 u32SubStart;
|
|
guint32 u32VariableOffset;
|
|
guint32 u32Tmp;
|
|
|
|
|
|
offset = dissect_dcom_that(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, tree, drep,
|
|
&u32Pointer);
|
|
u32VariableOffset = offset;
|
|
|
|
if (u32Pointer) {
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32VariableOffset = offset + u32ArraySize * 20;
|
|
u32Idx = 1;
|
|
u32Tmp = u32ArraySize;
|
|
while(u32Tmp--) {
|
|
sub_item = proto_tree_add_item(tree, hf_cba_readitemout, tvb, offset, 0, FALSE);
|
|
sub_tree = proto_item_add_subtree(sub_item, ett_cba_readitemout);
|
|
u32SubStart = offset;
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_VARIANT(tvb, u32VariableOffset, pinfo, sub_tree, drep, hf_cba_acco_data);
|
|
}
|
|
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_qc, &u16QC);
|
|
offset = dissect_dcom_FILETIME(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_time_stamp, NULL);
|
|
|
|
offset = dissect_dcom_indexed_HRESULT(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32HResult, u32Idx);
|
|
|
|
proto_item_append_text(sub_item, "[%u]: QC=%s (0x%02x) %s",
|
|
u32Idx,
|
|
val_to_str(u16QC, cba_acco_qc_vals, "Unknown"),
|
|
u16QC,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
proto_item_set_len(sub_item, offset - u32SubStart);
|
|
|
|
u32Idx++;
|
|
}
|
|
}
|
|
|
|
u32VariableOffset = dissect_dcom_HRESULT(tvb, u32VariableOffset, pinfo, tree, drep,
|
|
&u32HResult);
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u -> %s",
|
|
u32ArraySize,
|
|
val_to_str(u32HResult, dcom_hresult_vals, "Unknown (0x%08x)") );
|
|
}
|
|
|
|
return u32VariableOffset;
|
|
}
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoSync_WriteItems_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Count;
|
|
guint32 u32ArraySize;
|
|
gchar szStr[1000];
|
|
guint32 u32MaxStr = sizeof(szStr);
|
|
guint32 u32Pointer;
|
|
guint32 u32VariableOffset;
|
|
proto_item *sub_item;
|
|
proto_tree *sub_tree;
|
|
guint32 u32SubStart;
|
|
guint32 u32Idx;
|
|
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32VariableOffset = offset + u32ArraySize * 8;
|
|
u32Idx = 1;
|
|
while(u32ArraySize--) {
|
|
sub_item = proto_tree_add_item(tree, hf_cba_writeitemin, tvb, offset, 0, FALSE);
|
|
sub_tree = proto_item_add_subtree(sub_item, ett_cba_writeitemin);
|
|
u32SubStart = offset;
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_LPWSTR(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_item, szStr, u32MaxStr);
|
|
}
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_VARIANT(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_data);
|
|
}
|
|
|
|
proto_item_append_text(sub_item, "[%u]: Item=\"%s\"", u32Idx, szStr);
|
|
proto_item_set_len(sub_item, offset - u32SubStart);
|
|
|
|
u32Idx++;
|
|
}
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u", u32Count);
|
|
}
|
|
|
|
return u32VariableOffset;
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
dissect_ICBAAccoSync_WriteItemsQCD_rqst(tvbuff_t *tvb, int offset,
|
|
packet_info *pinfo, proto_tree *tree, guint8 *drep)
|
|
{
|
|
guint32 u32Count;
|
|
guint32 u32ArraySize;
|
|
gchar szStr[1000];
|
|
guint32 u32MaxStr = sizeof(szStr);
|
|
guint32 u32Pointer;
|
|
guint32 u32VariableOffset;
|
|
proto_item *sub_item;
|
|
proto_tree *sub_tree;
|
|
guint32 u32SubStart;
|
|
guint32 u32Idx;
|
|
guint16 u16QC;
|
|
|
|
offset = dissect_dcom_this(tvb, offset, pinfo, tree, drep);
|
|
|
|
offset = dissect_dcom_DWORD(tvb, offset, pinfo, tree, drep,
|
|
hf_cba_acco_count, &u32Count);
|
|
|
|
offset = dissect_dcom_dcerpc_array_size(tvb, offset, pinfo, tree, drep,
|
|
&u32ArraySize);
|
|
|
|
u32VariableOffset = offset + u32ArraySize * 20;
|
|
u32Idx = 1;
|
|
while(u32ArraySize--) {
|
|
sub_item = proto_tree_add_item(tree, hf_cba_writeitemin, tvb, offset, 0, FALSE);
|
|
sub_tree = proto_item_add_subtree(sub_item, ett_cba_writeitemin);
|
|
u32SubStart = offset;
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_LPWSTR(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_item, szStr, u32MaxStr);
|
|
}
|
|
|
|
offset = dissect_dcom_dcerpc_pointer(tvb, offset, pinfo, sub_tree, drep,
|
|
&u32Pointer);
|
|
if (u32Pointer) {
|
|
u32VariableOffset = dissect_dcom_VARIANT(tvb, u32VariableOffset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_data);
|
|
}
|
|
|
|
offset = dissect_dcom_WORD(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_qc, &u16QC);
|
|
|
|
offset = dissect_dcom_FILETIME(tvb, offset, pinfo, sub_tree, drep,
|
|
hf_cba_acco_time_stamp, NULL);
|
|
|
|
proto_item_append_text(sub_item, "[%u]: Item=\"%s\" QC=%s (0x%02x)",
|
|
u32Idx, szStr,
|
|
val_to_str(u16QC, cba_acco_qc_vals, "Unknown"), u16QC);
|
|
|
|
proto_item_set_len(sub_item, offset - u32SubStart);
|
|
u32Idx++;
|
|
}
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ": Cnt=%u", u32Count);
|
|
}
|
|
|
|
return u32VariableOffset;
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/* sub dissector table of ICBAAccoMgt / ICBAAccoMgt2 interface */
|
|
static dcerpc_sub_dissector ICBAAccoMgt_dissectors[] = {
|
|
{ 0, "QueryInterface", NULL, NULL},
|
|
{ 1, "AddRef", NULL, NULL },
|
|
{ 2, "Release", NULL, NULL },
|
|
|
|
{ 3, "AddConnections", dissect_ICBAAccoMgt_AddConnections_rqst, dissect_ICBAAccoMgt_AddConnections_resp },
|
|
{ 4, "RemoveConnections", dissect_ICBAAccoMgt_RemoveConnections_rqst, dissect_HResultArray_resp },
|
|
{ 5, "ClearConnections", dissect_dcom_simple_rqst, dissect_dcom_simple_resp },
|
|
{ 6, "SetActivationState", dissect_ICBAAccoMgt_SetActivationState_rqst, dissect_HResultArray_resp },
|
|
{ 7, "GetInfo", dissect_dcom_simple_rqst, dissect_ICBAAccoMgt_GetInfo_resp },
|
|
{ 8, "GetIDs", dissect_dcom_simple_rqst, dissect_ICBAAccoMgt_GetIDs_resp },
|
|
{ 9, "GetConnections", dissect_ICBAAccoMgt_GetConnections_rqst, dissect_ICBAAccoMgt_GetConnections_resp },
|
|
{10, "ReviseQoS", dissect_ICBAAccoMgt_ReviseQoS_rqst, dissect_ICBAAccoMgt_ReviseQoS_resp },
|
|
{11, "get_PingFactor", dissect_dcom_simple_rqst, dissect_ICBAAccoMgt_get_PingFactor_resp },
|
|
{12, "put_PingFactor", dissect_ICBAAccoMgt_put_PingFactor_rqst, dissect_dcom_simple_resp },
|
|
{13, "get_CDBCookie", dissect_dcom_simple_rqst, dissect_ICBAAccoMgt_get_CDBCookie_resp },
|
|
/* stage 2 */
|
|
{14, "GetConsIDs", dissect_dcom_simple_rqst, dissect_ICBAAccoMgt2_GetConsIDs_resp },
|
|
{15, "GetConsConnections", dissect_ICBAAccoMgt_GetConnections_rqst, dissect_ICBAAccoMgt2_GetConsConnections_resp },
|
|
{16, "DiagConsConnections", dissect_ICBAAccoMgt_GetConnections_rqst, dissect_ICBAAccoMgt2_DiagConsConnections_resp },
|
|
{17, "GetProvIDs", dissect_dcom_simple_rqst, dissect_Server_GetProvIDs_resp },
|
|
{18, "GetProvConnections", dissect_Server_ProvIDs_rqst, dissect_Server_GetProvConnections_resp },
|
|
{19, "GetDiagnosis", NULL, NULL },
|
|
{ 0, NULL, NULL, NULL },
|
|
};
|
|
|
|
|
|
/* sub dissector table of ICBAAccoCallback interface */
|
|
static dcerpc_sub_dissector ICBAAccoCallback_dissectors[] = {
|
|
{ 0, "QueryInterface", NULL, NULL },
|
|
{ 1, "AddRef", NULL, NULL },
|
|
{ 2, "Release", NULL, NULL },
|
|
|
|
{ 3, "OnDataChanged", dissect_ICBAAccoCallback_OnDataChanged_rqst, dissect_dcom_simple_resp },
|
|
/* stage 2 */
|
|
{ 4, "Gnip", dissect_dcom_simple_rqst, dissect_dcom_simple_resp },
|
|
{ 0, NULL, NULL, NULL },
|
|
};
|
|
|
|
|
|
/* sub dissector table of ICBAAccoServer interface */
|
|
static dcerpc_sub_dissector ICBAAccoServer_dissectors[] = {
|
|
{ 0, "QueryInterface", NULL, NULL },
|
|
{ 1, "AddRef", NULL, NULL },
|
|
{ 2, "Release", NULL, NULL },
|
|
|
|
{ 3, "Connect", dissect_ICBAAccoServer_Connect_rqst, dissect_ICBAAccoServer_Connect_resp },
|
|
{ 4, "Disconnect", dissect_Server_ProvIDs_rqst, dissect_HResultArray_resp },
|
|
{ 5, "DisconnectMe", dissect_Server_Consumer_rqst, dissect_dcom_simple_resp },
|
|
{ 6, "SetActivation", dissect_ICBAAccoServer_SetActivation_rqst, dissect_HResultArray_resp },
|
|
{ 7, "Ping", dissect_ICBAAccoServer_Ping_rqst, dissect_dcom_simple_resp },
|
|
/* stage 2 */
|
|
{ 8, "Connect2", dissect_ICBAAccoServer2_Connect2_rqst, dissect_ICBAAccoServer_Connect_resp },
|
|
{ 9, "GetConnectionData", dissect_Server_Consumer_rqst, dissect_ICBAAccoServer2_GetConnectionData_resp },
|
|
{ 0, NULL, NULL, NULL },
|
|
};
|
|
|
|
|
|
/* sub dissector table of ICBAAccoServerSRT interface (stage 2 only) */
|
|
static dcerpc_sub_dissector ICBAAccoServerSRT_dissectors[] = {
|
|
{ 0, "QueryInterface", NULL, NULL },
|
|
{ 1, "AddRef", NULL, NULL },
|
|
{ 2, "Release", NULL, NULL },
|
|
|
|
{ 3, "ConnectCR", dissect_ICBAAccoServerSRT_ConnectCR_rqst, dissect_ICBAAccoServerSRT_ConnectCR_resp },
|
|
{ 4, "DisconnectCR", dissect_ICBAAccoServerSRT_DisconnectCR_rqst, dissect_HResultArray_resp },
|
|
{ 5, "Connect", dissect_ICBAAccoServerSRT_Connect_rqst, dissect_ICBAAccoServerSRT_Connect_resp },
|
|
{ 6, "Disconnect", dissect_Server_ProvIDs_rqst, dissect_HResultArray_resp },
|
|
{ 7, "DisconnectMe", dissect_Server_Consumer_rqst, dissect_dcom_simple_resp },
|
|
{ 8, "SetActivation", dissect_ICBAAccoServer_SetActivation_rqst, dissect_HResultArray_resp },
|
|
{ 0, NULL, NULL, NULL },
|
|
};
|
|
|
|
|
|
/* sub dissector table of ICBAAccoSync interface */
|
|
static dcerpc_sub_dissector ICBAAccoSync_dissectors[] = {
|
|
{ 0, "QueryInterface", NULL, NULL },
|
|
{ 1, "AddRef", NULL, NULL },
|
|
{ 2, "Release", NULL, NULL },
|
|
|
|
{ 3, "ReadItems", dissect_ICBAAccoSync_ReadItems_rqst, dissect_ICBAAccoSync_ReadItems_resp },
|
|
{ 4, "WriteItems", dissect_ICBAAccoSync_WriteItems_rqst, dissect_HResultArray_resp },
|
|
{ 5, "WriteItemsQCD", dissect_ICBAAccoSync_WriteItemsQCD_rqst, dissect_HResultArray_resp },
|
|
{ 0, NULL, NULL, NULL },
|
|
};
|
|
|
|
|
|
/* register protocol */
|
|
void
|
|
proto_register_dcom_cba_acco (void)
|
|
{
|
|
static gint *ett3[3];
|
|
static gint *ett4[4];
|
|
static gint *ett5[5];
|
|
|
|
|
|
static hf_register_info hf_cba_acco_array[] = {
|
|
{ &hf_cba_acco_opnum,
|
|
{ "Operation", "cba.acco.opnum", FT_UINT16, BASE_DEC, NULL, 0x0, "Operation", HFILL }},
|
|
{ &hf_cba_acco_ping_factor,
|
|
{ "PingFactor", "cba.acco.ping_factor", FT_UINT16, BASE_DEC, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_count,
|
|
{ "Count", "cba.acco.count", FT_UINT32, BASE_DEC, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_info_max,
|
|
{ "Max", "cba.acco.info_max", FT_UINT32, BASE_DEC, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_info_curr,
|
|
{ "Current", "cba.acco.info_curr", FT_UINT32, BASE_DEC, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_rtauto,
|
|
{ "RTAuto", "cba.acco.rtauto", FT_STRING, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_item,
|
|
{ "Item", "cba.acco.item", FT_STRING, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_data,
|
|
{ "Data", "cba.acco.data", FT_NONE, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_qc,
|
|
{ "QualityCode", "cba.acco.qc", FT_UINT8, BASE_HEX, VALS(cba_acco_qc_vals), 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_time_stamp,
|
|
{ "TimeStamp", "cba.acco.time_stamp", FT_UINT64, BASE_DEC, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_readitemout,
|
|
{ "ReadItemOut", "cba.acco.readitemout", FT_NONE, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_writeitemin,
|
|
{ "WriteItemIn", "cba.acco.writeitemin", FT_NONE, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_cdb_cookie,
|
|
{ "CDBCookie", "cba.acco.cdb_cookie", FT_UINT32, BASE_HEX, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_conn_error_state,
|
|
{ "ConnErrorState", "cba.acco.conn_error_state", FT_UINT32, BASE_HEX, VALS(dcom_hresult_vals), 0x0, "", HFILL }},
|
|
};
|
|
|
|
static hf_register_info hf_cba_acco_server[] = {
|
|
{ &hf_cba_acco_server_pICBAAccoCallback,
|
|
{ "pICBAAccoCallback", "cba.acco.server_pICBAAccoCallback", FT_BYTES, BASE_HEX, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_server_first_connect,
|
|
{ "FirstConnect", "cba.acco.server_first_connect", FT_UINT8, BASE_HEX, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_getprovconnout,
|
|
{ "GETPROVCONNOUT", "cba.acco.getprovconnout", FT_NONE, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_serversrt_prov_mac,
|
|
{ "ProviderMAC", "cba.acco.serversrt_prov_mac", FT_ETHER, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_serversrt_cons_mac,
|
|
{ "ConsumerMAC", "cba.acco.serversrt_cons_mac", FT_ETHER, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_serversrt_cr_id,
|
|
{ "ConsumerCRID", "cba.acco.serversrt_cr_id", FT_UINT16, BASE_HEX, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_serversrt_cr_length,
|
|
{ "CRLength", "cba.acco.serversrt_cr_length", FT_UINT16, BASE_DEC, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_serversrt_cr_flags,
|
|
{ "Flags", "cba.acco.serversrt_cr_flags", FT_UINT32, BASE_HEX, 0, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_serversrt_cr_flags_timestamped,
|
|
{ "Timestamped", "cba.acco.serversrt_cr_flags_timestamped", FT_BOOLEAN, 32, TFS (&flags_set_truth), 0x1, "", HFILL }},
|
|
{ &hf_cba_acco_serversrt_cr_flags_reconfigure,
|
|
{ "Reconfigure", "cba.acco.serversrt_cr_flags_reconfigure", FT_BOOLEAN, 32, TFS (&flags_set_truth), 0x2, "", HFILL }},
|
|
{ &hf_cba_type_desc_len,
|
|
{ "TypeDescLen", "cba.acco.type_desc_len", FT_UINT16, BASE_DEC, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_serversrt_record_length,
|
|
{ "RecordLength", "cba.acco.serversrt_record_length", FT_UINT16, BASE_DEC, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_serversrt_action,
|
|
{ "Action", "cba.acco.serversrt_action", FT_UINT32, BASE_DEC, VALS(cba_acco_serversrt_action_vals), 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_serversrt_last_connect,
|
|
{ "LastConnect", "cba.acco.serversrt_last_connect", FT_UINT8, BASE_DEC, VALS(cba_acco_serversrt_last_connect_vals), 0x0, "", HFILL }},
|
|
};
|
|
|
|
static hf_register_info hf_cba_connectcr_array[] = {
|
|
{ &hf_cba_acco_prov_crid,
|
|
{ "ProviderCRID", "cba.acco.prov_crid", FT_UINT32, BASE_HEX, NULL, 0x0, "", HFILL }},
|
|
};
|
|
|
|
static hf_register_info hf_cba_connect_array[] = {
|
|
{ &hf_cba_addconnectionin,
|
|
{ "ADDCONNECTIONIN", "cba.acco.addconnectionin", FT_NONE, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_addconnectionout,
|
|
{ "ADDCONNECTIONOUT", "cba.acco.addconnectionout", FT_NONE, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_getidout,
|
|
{ "GETIDOUT", "cba.acco.getidout", FT_NONE, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_getconnectionout,
|
|
{ "GETCONNECTIONOUT", "cba.acco.getconnectionout", FT_NONE, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_getconsconnout,
|
|
{ "GETCONSCONNOUT", "cba.acco.getconsconnout", FT_NONE, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_diagconsconnout,
|
|
{ "DIAGCONSCONNOUT", "cba.acco.diagconsconnout", FT_NONE, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_connectincr,
|
|
{ "CONNECTINCR", "cba.acco.connectincr", FT_NONE, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_connectoutcr,
|
|
{ "CONNECTOUTCR", "cba.acco.connectoutcr", FT_NONE, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_connectin,
|
|
{ "CONNECTIN", "cba.acco.connectin", FT_NONE, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_connectout,
|
|
{ "CONNECTOUT", "cba.acco.connectout", FT_NONE, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_conn_prov_id,
|
|
{ "ProviderID", "cba.acco.conn_prov_id", FT_UINT32, BASE_HEX, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_conn_cons_id,
|
|
{ "ConsumerID", "cba.acco.conn_cons_id", FT_UINT32, BASE_HEX, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_conn_version,
|
|
{ "ConnVersion", "cba.acco.conn_version", FT_UINT16, BASE_HEX, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_conn_consumer,
|
|
{ "Consumer", "cba.acco.conn_consumer", FT_STRING, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_conn_qos_type,
|
|
{ "QoSType", "cba.acco.conn_qos_type", FT_UINT16, BASE_HEX, VALS(cba_qos_type_vals), 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_conn_qos_value,
|
|
{ "QoSValue", "cba.acco.conn_qos_value", FT_UINT16, BASE_DEC, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_conn_state,
|
|
{ "State", "cba.acco.conn_state", FT_UINT8, BASE_HEX, VALS(cba_acco_conn_state_vals), 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_conn_provider,
|
|
{ "Provider", "cba.acco.conn_provider", FT_STRING, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_conn_provider_item,
|
|
{ "ProviderItem", "cba.acco.conn_provider_item", FT_STRING, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_conn_consumer_item,
|
|
{ "ConsumerItem", "cba.acco.conn_consumer_item", FT_STRING, BASE_NONE, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_conn_persist,
|
|
{ "Persistence", "cba.acco.conn_persist", FT_UINT16, BASE_HEX, VALS(cba_persist_vals), 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_conn_epsilon,
|
|
{ "Epsilon", "cba.acco.conn_epsilon", FT_NONE, BASE_DEC, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_conn_substitute,
|
|
{ "Substitute", "cba.acco.conn_substitute", FT_NONE, BASE_DEC, NULL, 0x0, "", HFILL }},
|
|
};
|
|
|
|
static hf_register_info hf_cba_acco_cb[] = {
|
|
{ &hf_cba_acco_cb_length,
|
|
{ "Length", "cba.acco.cb_length", FT_UINT32, BASE_DEC, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_cb_version,
|
|
{ "Version", "cba.acco.cb_version", FT_UINT8, BASE_HEX, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_cb_flags,
|
|
{ "Flags", "cba.acco.cb_flags", FT_UINT8, BASE_HEX, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_cb_count,
|
|
{ "Count", "cba.acco.cb_count", FT_UINT16, BASE_DEC, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_cb_conn_data,
|
|
{ "CBA Connection data", "cba.acco.cb_conn_data", FT_NONE, BASE_DEC, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_cb_item,
|
|
{ "Item", "cba.acco.cb_item", FT_NONE, BASE_DEC, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_cb_item_hole,
|
|
{ "Hole", "cba.acco.cb_item_hole", FT_NONE, BASE_DEC, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_cb_item_length,
|
|
{ "Length", "cba.acco.cb_item_length", FT_UINT16, BASE_DEC, NULL, 0x0, "", HFILL }},
|
|
{ &hf_cba_acco_cb_item_data,
|
|
{ "Data(Hex)", "cba.acco.cb_item_data", FT_BYTES, BASE_HEX, NULL, 0x0, "", HFILL }},
|
|
};
|
|
|
|
ett5[0] = &ett_ICBAAccoMgt;
|
|
ett5[1] = &ett_cba_addconnectionin;
|
|
ett5[2] = &ett_cba_addconnectionout;
|
|
ett5[3] = &ett_cba_getidout;
|
|
ett5[4] = &ett_cba_getconnectionout;
|
|
proto_ICBAAccoMgt = proto_register_protocol ("ICBAAccoMgt", "ICBAAccoMgt", "cba_acco_mgt");
|
|
proto_register_field_array(proto_ICBAAccoMgt, hf_cba_acco_array, array_length(hf_cba_acco_array));
|
|
proto_register_field_array(proto_ICBAAccoMgt, hf_cba_connect_array, array_length(hf_cba_connect_array));
|
|
proto_register_field_array(proto_ICBAAccoMgt, hf_cba_connectcr_array, array_length(hf_cba_connectcr_array));
|
|
proto_register_subtree_array (ett5, array_length (ett5));
|
|
|
|
proto_ICBAAccoMgt2 = proto_register_protocol ("ICBAAccoMgt2", "ICBAAccoMgt2", "cba_acco_mgt2");
|
|
|
|
ett3[0] = &ett_ICBAAccoCallback;
|
|
ett3[1] = &ett_ICBAAccoCallback_Item;
|
|
ett3[2] = &ett_ICBAAccoCallback_Buffer;
|
|
proto_ICBAAccoCallback = proto_register_protocol ("ICBAAccoCallback", "ICBAAccoCB", "cba_acco_cb");
|
|
proto_register_field_array(proto_ICBAAccoCallback, hf_cba_acco_cb, array_length(hf_cba_acco_cb));
|
|
proto_register_subtree_array (ett3, array_length (ett3));
|
|
|
|
proto_ICBAAccoCallback2 = proto_register_protocol ("ICBAAccoCallback2", "ICBAAccoCB2", "cba_acco_cb2");
|
|
|
|
ett4[0] = &ett_ICBAAccoServer;
|
|
ett4[1] = &ett_cba_connectin;
|
|
ett4[2] = &ett_cba_connectout;
|
|
ett4[3] = &ett_cba_getprovconnout;
|
|
proto_ICBAAccoServer = proto_register_protocol ("ICBAAccoServer", "ICBAAccoServ", "cba_acco_server");
|
|
proto_register_field_array(proto_ICBAAccoServer, hf_cba_acco_server, array_length(hf_cba_acco_server));
|
|
proto_register_subtree_array (ett4, array_length (ett4));
|
|
|
|
proto_ICBAAccoServer2 = proto_register_protocol ("ICBAAccoServer2", "ICBAAccoServ2", "cba_acco_server2");
|
|
|
|
ett4[0] = &ett_ICBAAccoServerSRT;
|
|
ett4[1] = &ett_cba_acco_serversrt_cr_flags;
|
|
ett4[2] = &ett_cba_connectincr;
|
|
ett4[3] = &ett_cba_connectoutcr;
|
|
proto_ICBAAccoServerSRT = proto_register_protocol ("ICBAAccoServerSRT", "ICBAAccoServSRT", "cba_acco_server_srt");
|
|
proto_register_subtree_array (ett4, array_length (ett4));
|
|
|
|
ett3[0] = &ett_ICBAAccoSync;
|
|
ett3[1] = &ett_cba_readitemout;
|
|
ett3[2] = &ett_cba_writeitemin;
|
|
proto_ICBAAccoSync = proto_register_protocol ("ICBAAccoSync", "ICBAAccoSync", "cba_acco_sync");
|
|
proto_register_subtree_array (ett3, array_length (ett3));
|
|
}
|
|
|
|
|
|
/* handoff protocol */
|
|
void
|
|
proto_reg_handoff_dcom_cba_acco (void)
|
|
{
|
|
/* Register the interfaces */
|
|
dcerpc_init_uuid(proto_ICBAAccoMgt, ett_ICBAAccoMgt,
|
|
&uuid_ICBAAccoMgt, ver_ICBAAccoMgt, ICBAAccoMgt_dissectors, hf_cba_acco_opnum);
|
|
|
|
dcerpc_init_uuid(proto_ICBAAccoMgt2, ett_ICBAAccoMgt,
|
|
&uuid_ICBAAccoMgt2, ver_ICBAAccoMgt2, ICBAAccoMgt_dissectors, hf_cba_acco_opnum);
|
|
|
|
dcerpc_init_uuid(proto_ICBAAccoCallback, ett_ICBAAccoCallback,
|
|
&uuid_ICBAAccoCallback, ver_ICBAAccoCallback, ICBAAccoCallback_dissectors, hf_cba_acco_opnum);
|
|
|
|
dcerpc_init_uuid(proto_ICBAAccoCallback2, ett_ICBAAccoCallback,
|
|
&uuid_ICBAAccoCallback2, ver_ICBAAccoCallback2, ICBAAccoCallback_dissectors, hf_cba_acco_opnum);
|
|
|
|
dcerpc_init_uuid(proto_ICBAAccoServer, ett_ICBAAccoServer,
|
|
&uuid_ICBAAccoServer, ver_ICBAAccoServer, ICBAAccoServer_dissectors, hf_cba_acco_opnum);
|
|
|
|
dcerpc_init_uuid(proto_ICBAAccoServer2, ett_ICBAAccoServer,
|
|
&uuid_ICBAAccoServer2, ver_ICBAAccoServer2, ICBAAccoServer_dissectors, hf_cba_acco_opnum);
|
|
|
|
dcerpc_init_uuid(proto_ICBAAccoServerSRT, ett_ICBAAccoServerSRT,
|
|
&uuid_ICBAAccoServerSRT, ver_ICBAAccoServerSRT, ICBAAccoServerSRT_dissectors, hf_cba_acco_opnum);
|
|
|
|
dcerpc_init_uuid(proto_ICBAAccoSync, ett_ICBAAccoSync,
|
|
&uuid_ICBAAccoSync, ver_ICBAAccoSync, ICBAAccoSync_dissectors, hf_cba_acco_opnum);
|
|
|
|
|
|
heur_dissector_add("pn_rt", dissect_CBA_Connection_Data_heur, proto_ICBAAccoServer);
|
|
}
|