2005-09-17 00:31:15 +00:00
|
|
|
/* packet-smb.h
|
|
|
|
* Defines for SMB packet dissection
|
1999-05-09 04:20:59 +00:00
|
|
|
* Copyright 1999, Richard Sharpe <rsharpe@ns.aus.com>
|
|
|
|
*
|
2004-07-18 00:24:25 +00:00
|
|
|
* $Id$
|
1999-05-09 04:20:59 +00:00
|
|
|
*
|
|
|
|
* Ethereal - Network traffic analyzer
|
2001-08-05 00:16:36 +00:00
|
|
|
* By Gerald Combs <gerald@ethereal.com>
|
1999-05-09 04:20:59 +00:00
|
|
|
* Copyright 1998, 1999 Gerald Combs
|
|
|
|
*
|
|
|
|
* This program is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU General Public License
|
|
|
|
* as published by the Free Software Foundation; either version 2
|
|
|
|
* of the License, or (at your option) any later version.
|
2002-08-28 21:04:11 +00:00
|
|
|
*
|
1999-05-09 04:20:59 +00:00
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU General Public License for more details.
|
2002-08-28 21:04:11 +00:00
|
|
|
*
|
1999-05-09 04:20:59 +00:00
|
|
|
* You should have received a copy of the GNU General Public License
|
|
|
|
* along with this program; if not, write to the Free Software
|
|
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
|
|
*/
|
|
|
|
|
2005-09-17 00:31:15 +00:00
|
|
|
#ifndef __PACKET_SMB_H__
|
|
|
|
#define __PACKET_SMB_H__
|
1999-05-09 04:20:59 +00:00
|
|
|
|
2004-05-09 10:03:41 +00:00
|
|
|
ETH_VAR_IMPORT gboolean sid_name_snooping;
|
|
|
|
|
|
|
|
/* SMB command codes, from the SNIA CIFS spec. With MSVC and a
|
|
|
|
* libethereal.dll, we need a special declaration.
|
|
|
|
*/
|
|
|
|
ETH_VAR_IMPORT const value_string smb_cmd_vals[];
|
|
|
|
ETH_VAR_IMPORT const value_string trans2_cmd_vals[];
|
|
|
|
ETH_VAR_IMPORT const value_string nt_cmd_vals[];
|
2003-03-25 09:41:42 +00:00
|
|
|
|
2001-11-21 06:25:58 +00:00
|
|
|
|
|
|
|
#define SMB_COM_CREATE_DIRECTORY 0x00
|
|
|
|
#define SMB_COM_DELETE_DIRECTORY 0x01
|
|
|
|
#define SMB_COM_OPEN 0x02
|
|
|
|
#define SMB_COM_CREATE 0x03
|
|
|
|
#define SMB_COM_CLOSE 0x04
|
|
|
|
#define SMB_COM_FLUSH 0x05
|
|
|
|
#define SMB_COM_DELETE 0x06
|
|
|
|
#define SMB_COM_RENAME 0x07
|
|
|
|
#define SMB_COM_QUERY_INFORMATION 0x08
|
|
|
|
#define SMB_COM_SET_INFORMATION 0x09
|
|
|
|
#define SMB_COM_READ 0x0A
|
|
|
|
#define SMB_COM_WRITE 0x0B
|
|
|
|
#define SMB_COM_LOCK_BYTE_RANGE 0x0C
|
|
|
|
#define SMB_COM_UNLOCK_BYTE_RANGE 0x0D
|
|
|
|
#define SMB_COM_CREATE_TEMPORARY 0x0E
|
|
|
|
#define SMB_COM_CREATE_NEW 0x0F
|
|
|
|
#define SMB_COM_CHECK_DIRECTORY 0x10
|
|
|
|
#define SMB_COM_PROCESS_EXIT 0x11
|
|
|
|
#define SMB_COM_SEEK 0x12
|
|
|
|
#define SMB_COM_LOCK_AND_READ 0x13
|
|
|
|
#define SMB_COM_WRITE_AND_UNLOCK 0x14
|
|
|
|
#define SMB_COM_READ_RAW 0x1A
|
|
|
|
#define SMB_COM_READ_MPX 0x1B
|
|
|
|
#define SMB_COM_READ_MPX_SECONDARY 0x1C
|
|
|
|
#define SMB_COM_WRITE_RAW 0x1D
|
|
|
|
#define SMB_COM_WRITE_MPX 0x1E
|
|
|
|
#define SMB_COM_WRITE_MPX_SECONDARY 0x1F
|
|
|
|
#define SMB_COM_WRITE_COMPLETE 0x20
|
|
|
|
#define SMB_COM_QUERY_SERVER 0x21
|
|
|
|
#define SMB_COM_SET_INFORMATION2 0x22
|
|
|
|
#define SMB_COM_QUERY_INFORMATION2 0x23
|
|
|
|
#define SMB_COM_LOCKING_ANDX 0x24
|
|
|
|
#define SMB_COM_TRANSACTION 0x25
|
|
|
|
#define SMB_COM_TRANSACTION_SECONDARY 0x26
|
|
|
|
#define SMB_COM_IOCTL 0x27
|
|
|
|
#define SMB_COM_IOCTL_SECONDARY 0x28
|
|
|
|
#define SMB_COM_COPY 0x29
|
|
|
|
#define SMB_COM_MOVE 0x2A
|
|
|
|
#define SMB_COM_ECHO 0x2B
|
|
|
|
#define SMB_COM_WRITE_AND_CLOSE 0x2C
|
|
|
|
#define SMB_COM_OPEN_ANDX 0x2D
|
|
|
|
#define SMB_COM_READ_ANDX 0x2E
|
|
|
|
#define SMB_COM_WRITE_ANDX 0x2F
|
|
|
|
#define SMB_COM_NEW_FILE_SIZE 0x30
|
|
|
|
#define SMB_COM_CLOSE_AND_TREE_DISC 0x31
|
|
|
|
#define SMB_COM_TRANSACTION2 0x32
|
|
|
|
#define SMB_COM_TRANSACTION2_SECONDARY 0x33
|
|
|
|
#define SMB_COM_FIND_CLOSE2 0x34
|
|
|
|
#define SMB_COM_FIND_NOTIFY_CLOSE 0x35
|
|
|
|
/* Used by Xenix/Unix 0x60-0x6E */
|
|
|
|
#define SMB_COM_TREE_CONNECT 0x70
|
|
|
|
#define SMB_COM_TREE_DISCONNECT 0x71
|
|
|
|
#define SMB_COM_NEGOTIATE 0x72
|
|
|
|
#define SMB_COM_SESSION_SETUP_ANDX 0x73
|
|
|
|
#define SMB_COM_LOGOFF_ANDX 0x74
|
|
|
|
#define SMB_COM_TREE_CONNECT_ANDX 0x75
|
|
|
|
#define SMB_COM_QUERY_INFORMATION_DISK 0x80
|
|
|
|
#define SMB_COM_SEARCH 0x81
|
|
|
|
#define SMB_COM_FIND 0x82
|
|
|
|
#define SMB_COM_FIND_UNIQUE 0x83
|
|
|
|
#define SMB_COM_FIND_CLOSE 0x84
|
|
|
|
#define SMB_COM_NT_TRANSACT 0xA0
|
|
|
|
#define SMB_COM_NT_TRANSACT_SECONDARY 0xA1
|
|
|
|
#define SMB_COM_NT_CREATE_ANDX 0xA2
|
|
|
|
#define SMB_COM_NT_CANCEL 0xA4
|
|
|
|
#define SMB_COM_NT_RENAME 0xA5
|
|
|
|
#define SMB_COM_OPEN_PRINT_FILE 0xC0
|
|
|
|
#define SMB_COM_WRITE_PRINT_FILE 0xC1
|
|
|
|
#define SMB_COM_CLOSE_PRINT_FILE 0xC2
|
|
|
|
#define SMB_COM_GET_PRINT_QUEUE 0xC3
|
|
|
|
#define SMB_COM_READ_BULK 0xD8
|
|
|
|
#define SMB_COM_WRITE_BULK 0xD9
|
|
|
|
#define SMB_COM_WRITE_BULK_DATA 0xDA
|
1999-05-09 04:20:59 +00:00
|
|
|
|
|
|
|
/* Error codes */
|
|
|
|
|
|
|
|
#define SMB_SUCCESS 0x00 /* All OK */
|
|
|
|
#define SMB_ERRDOS 0x01 /* DOS based error */
|
|
|
|
#define SMB_ERRSRV 0x02 /* server error, network file manager */
|
|
|
|
#define SMB_ERRHRD 0x03 /* Hardware style error */
|
|
|
|
#define SMB_ERRCMD 0x04 /* Not an SMB format command */
|
|
|
|
|
|
|
|
/* Error codes for the ERRSRV class */
|
|
|
|
|
|
|
|
#define SMBE_error 1 /* Non specific error code */
|
|
|
|
#define SMBE_badpw 2 /* Bad password */
|
|
|
|
#define SMBE_badtype 3 /* reserved */
|
|
|
|
#define SMBE_access 4 /* No permissions to do the requested operation */
|
|
|
|
#define SMBE_invnid 5 /* tid invalid */
|
|
|
|
#define SMBE_invnetname 6 /* Invalid servername */
|
|
|
|
#define SMBE_invdevice 7 /* Invalid device */
|
|
|
|
#define SMBE_qfull 49 /* Print queue full */
|
|
|
|
#define SMBE_qtoobig 50 /* Queued item too big */
|
1999-05-11 07:22:31 +00:00
|
|
|
#define SMBE_qeof 51 /* EOF in print queue dump */
|
1999-05-09 04:20:59 +00:00
|
|
|
#define SMBE_invpfid 52 /* Invalid print file in smb_fid */
|
|
|
|
#define SMBE_smbcmd 64 /* Unrecognised command */
|
|
|
|
#define SMBE_srverror 65 /* smb server internal error */
|
|
|
|
#define SMBE_filespecs 67 /* fid and pathname invalid combination */
|
2002-08-28 21:04:11 +00:00
|
|
|
#define SMBE_badlink 68
|
1999-05-09 04:20:59 +00:00
|
|
|
#define SMBE_badpermits 69 /* Access specified for a file is not valid */
|
2002-08-28 21:04:11 +00:00
|
|
|
#define SMBE_badpid 70
|
1999-05-09 04:20:59 +00:00
|
|
|
#define SMBE_setattrmode 71 /* attribute mode invalid */
|
|
|
|
#define SMBE_paused 81 /* Message server paused */
|
|
|
|
#define SMBE_msgoff 82 /* Not receiving messages */
|
|
|
|
#define SMBE_noroom 83 /* No room for message */
|
|
|
|
#define SMBE_rmuns 87 /* too many remote usernames */
|
|
|
|
#define SMBE_timeout 88 /* operation timed out */
|
|
|
|
#define SMBE_noresource 89 /* No resources currently available for request. */
|
|
|
|
#define SMBE_toomanyuids 90 /* too many userids */
|
|
|
|
#define SMBE_baduid 91 /* bad userid */
|
|
|
|
#define SMBE_useMPX 250 /* temporarily unable to use raw mode, use MPX mode */
|
|
|
|
#define SMBE_useSTD 251 /* temporarily unable to use raw mode, use standard mode */
|
|
|
|
#define SMBE_contMPX 252 /* resume MPX mode */
|
2002-08-28 21:04:11 +00:00
|
|
|
#define SMBE_badPW 253 /* Check this out ... */
|
1999-05-09 04:20:59 +00:00
|
|
|
#define SMBE_nosupport 0xFFFF
|
|
|
|
#define SMBE_unknownsmb 22 /* from NT 3.5 response */
|
|
|
|
|
|
|
|
/* Error codes for the ERRHRD class */
|
|
|
|
|
2002-05-26 01:30:05 +00:00
|
|
|
#define SMBE_nowrite 19 /* read only media */
|
|
|
|
#define SMBE_badunit 20 /* Unknown device */
|
|
|
|
#define SMBE_notready 21 /* Drive not ready */
|
|
|
|
#define SMBE_badcmd 22 /* Unknown command */
|
|
|
|
#define SMBE_data 23 /* Data (CRC) error */
|
|
|
|
#define SMBE_badreq 24 /* Bad request structure length */
|
|
|
|
#define SMBE_seek 25 /* Seek error */
|
|
|
|
#define SMBE_badmedia 26 /* Unknown media type */
|
|
|
|
#define SMBE_badsector 27 /* Sector not found */
|
|
|
|
#define SMBE_nopaper 28 /* Printer out of paper */
|
|
|
|
#define SMBE_write 29 /* Write fault */
|
|
|
|
#define SMBE_read 30 /* Read fault */
|
|
|
|
#define SMBE_general 31 /* General failure */
|
|
|
|
#define SMBE_badshare 32 /* An open conflicts with an existing open */
|
|
|
|
#define SMBE_lock 33 /* Lock conflict or invalid mode, or unlock of
|
|
|
|
lock held by another process */
|
|
|
|
#define SMBE_wrongdisk 34 /* The wrong disk was found in a drive */
|
|
|
|
#define SMBE_FCBunavail 35 /* No FCBs are available to process request */
|
|
|
|
#define SMBE_sharebufexc 36 /* A sharing buffer has been exceeded */
|
1999-05-09 04:20:59 +00:00
|
|
|
#define SMBE_diskfull 39
|
|
|
|
|
2003-01-22 00:40:36 +00:00
|
|
|
/* the information we need to keep around for NT transatcion commands */
|
|
|
|
typedef struct {
|
|
|
|
int subcmd;
|
|
|
|
} smb_nt_transact_info_t;
|
|
|
|
|
|
|
|
/* the information we need to keep around for transaction2 commands */
|
|
|
|
typedef struct {
|
|
|
|
int subcmd;
|
|
|
|
int info_level;
|
|
|
|
gboolean resume_keys; /* if "return resume" keys set in T2 FIND_FIRST request */
|
|
|
|
} smb_transact2_info_t;
|
|
|
|
|
2001-11-18 02:51:20 +00:00
|
|
|
/*
|
|
|
|
* The information we need to save about a request in order to show the
|
|
|
|
* frame number of the request in the dissection of the reply.
|
|
|
|
*/
|
2002-03-16 04:39:29 +00:00
|
|
|
#define SMB_SIF_TID_IS_IPC 0x0001
|
2004-09-30 01:04:33 +00:00
|
|
|
#define SMB_SIF_IS_CONTINUED 0x0002
|
2005-04-16 21:54:32 +00:00
|
|
|
typedef enum {
|
|
|
|
SMB_EI_NONE, /* Unassigned / NULL */
|
|
|
|
SMB_EI_FID, /* FID */
|
|
|
|
SMB_EI_NTI, /* smb_nt_transact_info_t * */
|
|
|
|
SMB_EI_TRI, /* smb_transact_info_t * */
|
|
|
|
SMB_EI_T2I /* smb_transact2_info_t * */
|
|
|
|
} smb_extra_info_t;
|
2001-11-18 02:51:20 +00:00
|
|
|
typedef struct {
|
|
|
|
guint32 frame_req, frame_res;
|
2002-08-28 21:04:11 +00:00
|
|
|
nstime_t req_time;
|
2002-03-16 04:39:29 +00:00
|
|
|
guint16 flags;
|
2003-12-18 00:18:55 +00:00
|
|
|
guint8 cmd;
|
2001-11-18 02:51:20 +00:00
|
|
|
void *extra_info;
|
2005-04-16 21:54:32 +00:00
|
|
|
smb_extra_info_t extra_info_type;
|
2001-11-18 02:51:20 +00:00
|
|
|
} smb_saved_info_t;
|
|
|
|
|
2001-08-11 07:26:25 +00:00
|
|
|
/*
|
2001-11-18 01:46:51 +00:00
|
|
|
* The information we need to save about a Transaction request in order
|
|
|
|
* to dissect the reply; this includes information for use by the
|
|
|
|
* Remote API and Mailslot dissectors.
|
|
|
|
* XXX - have an additional data structure hung off of this by the
|
|
|
|
* subdissectors?
|
2001-08-11 07:26:25 +00:00
|
|
|
*/
|
2001-11-18 01:46:51 +00:00
|
|
|
typedef struct {
|
|
|
|
int subcmd;
|
|
|
|
int trans_subcmd;
|
2001-11-20 06:24:20 +00:00
|
|
|
int function;
|
|
|
|
int fid;
|
2001-11-18 01:46:51 +00:00
|
|
|
guint16 lanman_cmd;
|
|
|
|
guchar *param_descrip; /* Keep these descriptors around */
|
|
|
|
guchar *data_descrip;
|
|
|
|
guchar *aux_data_descrip;
|
|
|
|
int info_level;
|
|
|
|
} smb_transact_info_t;
|
2001-11-15 10:41:53 +00:00
|
|
|
|
2001-11-18 01:46:51 +00:00
|
|
|
/*
|
|
|
|
* Subcommand type.
|
|
|
|
*/
|
|
|
|
#define TRANSACTION_PIPE 0
|
|
|
|
#define TRANSACTION_MAILSLOT 1
|
2001-11-15 10:41:53 +00:00
|
|
|
|
2002-03-16 04:39:29 +00:00
|
|
|
/* these are defines used to represent different types of TIDs.
|
|
|
|
dont use the value 0 for any of these */
|
|
|
|
#define TID_NORMAL 1
|
|
|
|
#define TID_IPC 2
|
|
|
|
|
2001-12-05 08:20:30 +00:00
|
|
|
/* this is the structure which is associated with each conversation */
|
|
|
|
typedef struct conv_tables {
|
|
|
|
/* these two tables are used to match requests with responses */
|
|
|
|
GHashTable *unmatched;
|
|
|
|
GHashTable *matched;
|
2003-04-12 08:14:02 +00:00
|
|
|
|
2002-03-16 04:39:29 +00:00
|
|
|
/* This table is used to track TID->services for a conversation */
|
|
|
|
GHashTable *tid_service;
|
2002-08-31 05:31:42 +00:00
|
|
|
gboolean raw_ntlmssp; /* Do extended security exc use raw ntlmssp */
|
2001-12-05 08:20:30 +00:00
|
|
|
} conv_tables_t;
|
|
|
|
|
2001-11-03 06:56:56 +00:00
|
|
|
typedef struct smb_info {
|
2003-12-18 00:18:55 +00:00
|
|
|
guint8 cmd;
|
2002-03-16 04:39:29 +00:00
|
|
|
int tid, pid, uid, mid;
|
2001-11-18 01:46:51 +00:00
|
|
|
gboolean unicode; /* Are strings in this SMB Unicode? */
|
|
|
|
gboolean request; /* Is this a request? */
|
2001-11-03 06:56:56 +00:00
|
|
|
gboolean unidir;
|
2001-11-28 11:33:55 +00:00
|
|
|
int info_level;
|
2001-11-12 08:46:14 +00:00
|
|
|
int info_count;
|
2001-11-18 02:51:20 +00:00
|
|
|
smb_saved_info_t *sip; /* smb_saved_info_t, if any, for this */
|
2001-12-05 08:20:30 +00:00
|
|
|
conv_tables_t *ct;
|
2001-11-03 06:56:56 +00:00
|
|
|
} smb_info_t;
|
2000-02-14 04:02:21 +00:00
|
|
|
|
2001-11-20 07:47:42 +00:00
|
|
|
/*
|
|
|
|
* Show file data for a read or write.
|
|
|
|
*/
|
2002-04-30 11:03:08 +00:00
|
|
|
extern int dissect_file_data(tvbuff_t *tvb, proto_tree *tree, int offset,
|
|
|
|
guint16 bc, guint16 datalen);
|
2001-11-20 07:47:42 +00:00
|
|
|
|
Pass, as the first tvbuff argument to "dissect_mailslot_smb()" and
"dissect_pipe_smb()", a tvbuff containing the setup words and the
pipe/mailslot pathname, as those are arguably the part of the packet
that contains the "mailslot protocol" and the "pipe protocol", as
opposed to the protocol running atop mailslots or pipes.
Pass a setup tvbuff to "dissect_pipe_smb()" for it to pass on to the
MSRPC-over-named-pipe dissector, and have the setup tvbuff passed to it
and "dissect_mailslot_smb()" contain *only* the setup words; don't
extract anything other than the setup words from it.
Declare "register_proto_smb_mailslot()" in "packet-smb-mailslot.h"
rather than "packet-smb.c", and declare "register_proto_smb_pipe()" in
"packet-smb-pipe.h" rather than "packet-smb.c".
Add a protocol for MSRPC-over-named-pipes.
Move the stuff to handle the FID in the setup words of
MSRPC-over-named-pipe transactions out of the SMB Transaction dissector
into the MSRPC dissector. Add a routine to "packet-smb.c", callable
from outside "packet-smb.c", to put an "smb.fid" field into the protocol
tree, and to add ", FID: XXXX" to the Info column, for use by the
MSRPC-over-named-pipe dissector; use it in the SMB dissector as well, in
all the places where we put a FID into the protocol tree.
Move the stuff to check whether the LANMAN protocol is enabled, and to
set "pinfo->current_proto" to "LANMAN" if it is, into the LANMAN
API-over-named-pipe dissector out of the named pipe protocol dissector.
If we didn't dissect a Transaction request or reply as a named pipe or
mailslot message, put any setup words, parameters, and data it has into
the protocol tree as separate items.
Don't put a "Response in" item into the protocol tree for an NT Cancel
request, as there are no responses to NT Cancel requests.
svn path=/trunk/; revision=4221
2001-11-19 10:06:42 +00:00
|
|
|
/*
|
|
|
|
* Add a FID to the protocol tree and the Info column.
|
|
|
|
*/
|
|
|
|
extern void add_fid(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree,
|
2001-11-20 06:24:20 +00:00
|
|
|
int offset, int len, guint16 fid);
|
Pass, as the first tvbuff argument to "dissect_mailslot_smb()" and
"dissect_pipe_smb()", a tvbuff containing the setup words and the
pipe/mailslot pathname, as those are arguably the part of the packet
that contains the "mailslot protocol" and the "pipe protocol", as
opposed to the protocol running atop mailslots or pipes.
Pass a setup tvbuff to "dissect_pipe_smb()" for it to pass on to the
MSRPC-over-named-pipe dissector, and have the setup tvbuff passed to it
and "dissect_mailslot_smb()" contain *only* the setup words; don't
extract anything other than the setup words from it.
Declare "register_proto_smb_mailslot()" in "packet-smb-mailslot.h"
rather than "packet-smb.c", and declare "register_proto_smb_pipe()" in
"packet-smb-pipe.h" rather than "packet-smb.c".
Add a protocol for MSRPC-over-named-pipes.
Move the stuff to handle the FID in the setup words of
MSRPC-over-named-pipe transactions out of the SMB Transaction dissector
into the MSRPC dissector. Add a routine to "packet-smb.c", callable
from outside "packet-smb.c", to put an "smb.fid" field into the protocol
tree, and to add ", FID: XXXX" to the Info column, for use by the
MSRPC-over-named-pipe dissector; use it in the SMB dissector as well, in
all the places where we put a FID into the protocol tree.
Move the stuff to check whether the LANMAN protocol is enabled, and to
set "pinfo->current_proto" to "LANMAN" if it is, into the LANMAN
API-over-named-pipe dissector out of the named pipe protocol dissector.
If we didn't dissect a Transaction request or reply as a named pipe or
mailslot message, put any setup words, parameters, and data it has into
the protocol tree as separate items.
Don't put a "Response in" item into the protocol tree for an NT Cancel
request, as there are no responses to NT Cancel requests.
svn path=/trunk/; revision=4221
2001-11-19 10:06:42 +00:00
|
|
|
|
2001-11-20 07:47:42 +00:00
|
|
|
/*
|
|
|
|
* Dissect named pipe state information.
|
|
|
|
*/
|
2002-04-30 11:03:08 +00:00
|
|
|
extern int dissect_ipc_state(tvbuff_t *tvb, proto_tree *parent_tree,
|
|
|
|
int offset, gboolean setstate);
|
2001-11-20 07:47:42 +00:00
|
|
|
|
2001-12-05 08:20:30 +00:00
|
|
|
extern gboolean smb_dcerpc_reassembly;
|
|
|
|
|
2005-11-12 10:07:12 +00:00
|
|
|
extern int dissect_file_attributes(tvbuff_t *tvb, proto_tree *parent_tree, int offset, int bytes);
|
|
|
|
|
1999-05-09 04:20:59 +00:00
|
|
|
#endif
|