2001-12-16 20:17:10 +00:00
|
|
|
/* packet-dcerpc-nt.h
|
|
|
|
|
* Routines for DCERPC over SMB packet disassembly
|
|
|
|
|
* Copyright 2001, Tim Potter <tpot@samba.org>
|
|
|
|
|
*
|
Use "dissect_ndr_nt_UNICODE_STRING_str()", not
"dissect_ndr_nt_UNICODE_STRING_string()", in
"samr_dissect_connect2_server()"; that eliminates an unnecessary extra
level of protocol tree.
That removes the last call to "dissect_ndr_nt_UNICODE_STRING_string()";
eliminate that routine.
In "dissect_ndr_nt_UNICODE_STRING()", initially create the subtree with
the name of the field as a string, so that if an exception is thrown
before the name is set, the subtree won't show up as blank when
displayed or printed. Also pass in the name to "dissect_ndr_pointer()",
so the same happens for subtrees below it. Append only the string data,
not its name, to items up the tree, as the name was put in when the item
was created. Also, when adding a colon before the string, put a space
after the colon, as is done elsewhere in Ethereal.
When appending additional strings, put the blank before the new string,
not after it.
In "dissect_ndr_nt_STRING()", put the subtree into the string with the
name of the field, rather than just "String". Pass in that name to
"dissect_ndr_pointer()", so subtrees below it get a name when they're
initially created.
Get rid of colons in the name string passed to "dissect_ndr_pointer()"
in some calls. Supply a non-null name string in more calls to
"dissect_ndr_pointer()", and fix some calls to pass in the name of the
field being handed to "dissect_ndr_pointer()".
There's no need to fetch the entire "header_field_info" structure for a
protocol field in order to get the field's name - just use
"proto_registrar_get_name()" to get the name.
Use a length of -1, not 0, when creating a subtree whose length will be
set when the dissection of the items under the subtree is complete; that
way, if an exception is thrown while dissecting the items - which means
the item goes past the end of the tvbuff - the item will refer to all
data to the end of the tvbuff, rather than referring to nothing.
Fix a typo in the name of the "hf_samr_unknown_string" field.
svn path=/trunk/; revision=4912
2002-03-10 21:30:11 +00:00
|
|
|
* $Id: packet-dcerpc-nt.h,v 1.7 2002/03/10 21:30:10 guy Exp $
|
2001-12-16 20:17:10 +00:00
|
|
|
*
|
|
|
|
|
* Ethereal - Network traffic analyzer
|
|
|
|
|
* By Gerald Combs <gerald@ethereal.com>
|
|
|
|
|
* Copyright 1998 Gerald Combs
|
|
|
|
|
*
|
|
|
|
|
* This program is free software; you can redistribute it and/or
|
|
|
|
|
* modify it under the terms of the GNU General Public License
|
|
|
|
|
* as published by the Free Software Foundation; either version 2
|
|
|
|
|
* of the License, or (at your option) any later version.
|
|
|
|
|
*
|
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
|
* GNU General Public License for more details.
|
|
|
|
|
*
|
|
|
|
|
* You should have received a copy of the GNU General Public License
|
|
|
|
|
* along with this program; if not, write to the Free Software
|
|
|
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
#ifndef __PACKET_DCERPC_NT_H
|
|
|
|
|
#define __PACKET_DCEPRC_NT_H
|
|
|
|
|
|
|
|
|
|
/* Routines for parsing simple types */
|
|
|
|
|
|
|
|
|
|
int prs_align(int offset, int n);
|
|
|
|
|
|
|
|
|
|
int prs_uint8(tvbuff_t *tvb, int offset, packet_info *pinfo,
|
|
|
|
|
proto_tree *tree, guint8 *data, char *name);
|
|
|
|
|
|
|
|
|
|
int prs_uint8s(tvbuff_t *tvb, int offset, packet_info *pinfo,
|
|
|
|
|
proto_tree *tree, int count, guint8 **data, char *name);
|
|
|
|
|
|
|
|
|
|
int prs_uint16(tvbuff_t *tvb, int offset, packet_info *pinfo,
|
|
|
|
|
proto_tree *tree, guint16 *data, char *name);
|
|
|
|
|
|
|
|
|
|
int prs_uint16s(tvbuff_t *tvb, int offset, packet_info *pinfo,
|
|
|
|
|
proto_tree *tree, int count, guint16 **data, char *name);
|
|
|
|
|
|
|
|
|
|
int prs_uint32(tvbuff_t *tvb, int offset, packet_info *pinfo,
|
|
|
|
|
proto_tree *tree, guint32 *data, char *name);
|
|
|
|
|
|
|
|
|
|
int prs_uint32s(tvbuff_t *tvb, int offset, packet_info *pinfo,
|
|
|
|
|
proto_tree *tree, int count, guint32 **data, char *name);
|
|
|
|
|
|
|
|
|
|
/* Parse NT status code */
|
|
|
|
|
|
|
|
|
|
int prs_ntstatus(tvbuff_t *tvb, int offset, packet_info *pinfo,
|
|
|
|
|
proto_tree *tree);
|
|
|
|
|
|
|
|
|
|
/* Parse some common RPC structures */
|
|
|
|
|
|
2002-01-03 20:42:41 +00:00
|
|
|
char *fake_unicode(guint16 *data, int len);
|
|
|
|
|
|
2001-12-16 20:17:10 +00:00
|
|
|
int prs_UNISTR2(tvbuff_t *tvb, int offset, packet_info *pinfo,
|
|
|
|
|
proto_tree *tree, int flags, char **data, char *name);
|
|
|
|
|
|
|
|
|
|
int prs_policy_hnd(tvbuff_t *tvb, int offset, packet_info *pinfo,
|
2002-01-03 20:42:41 +00:00
|
|
|
proto_tree *tree, const guint8 **data);
|
2001-12-16 20:17:10 +00:00
|
|
|
|
|
|
|
|
/* Routines for handling deferral of referants in NDR */
|
|
|
|
|
|
|
|
|
|
#define PARSE_SCALARS 1
|
|
|
|
|
#define PARSE_BUFFERS 2
|
|
|
|
|
|
|
|
|
|
int prs_push_ptr(tvbuff_t *tvb, int offset, packet_info *pinfo,
|
|
|
|
|
proto_tree *tree, GList **ptr_list, char *name);
|
|
|
|
|
|
|
|
|
|
guint32 prs_pop_ptr(GList **ptr_list, char *name);
|
|
|
|
|
|
2002-03-06 08:58:01 +00:00
|
|
|
|
|
|
|
|
#define ALIGN_TO_4_BYTES {if(offset&0x03)offset=(offset&0xfffffffc)+4;}
|
|
|
|
|
|
|
|
|
|
int
|
|
|
|
|
dissect_ndr_nt_UNICODE_STRING_str(tvbuff_t *tvb, int offset,
|
|
|
|
|
packet_info *pinfo, proto_tree *tree,
|
|
|
|
|
char *drep);
|
|
|
|
|
int
|
|
|
|
|
dissect_ndr_nt_UNICODE_STRING(tvbuff_t *tvb, int offset,
|
|
|
|
|
packet_info *pinfo, proto_tree *parent_tree,
|
|
|
|
|
char *drep, int hf_index, int levels);
|
2002-03-06 10:01:17 +00:00
|
|
|
int
|
|
|
|
|
dissect_ndr_nt_acct_ctrl(tvbuff_t *tvb, int offset, packet_info *pinfo,
|
|
|
|
|
proto_tree *parent_tree, char *drep);
|
2002-03-06 08:58:01 +00:00
|
|
|
|
2001-12-16 20:17:10 +00:00
|
|
|
#endif /* packet-dcerpc-nt.h */
|