osmocom
/
wireshark
14
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity
21,475 Commits 26 Branches 0 Tags 795 MiB
Commit Graph

37 Commits

Author SHA1 Message Date
Ronnie Sahlberg bc33880788 show the filename that was to be deleted in the Delete reply 
svn path=/trunk/; revision=21897
 2007-05-22 23:05:25 +00:00
Ronnie Sahlberg 050a0508e1 remember the object name from a QUERY_PATH_INFO and show it as a 
generated item in the response.

also show the infolevel in the response as a generated item


svn path=/trunk/; revision=21880
 2007-05-22 03:33:51 +00:00
Ronnie Sahlberg 196ed78ce8 add the disposition to the data we store for how a fid is opened 
svn path=/trunk/; revision=21873
 2007-05-22 01:26:32 +00:00
Ronnie Sahlberg 52143e84d0 add tracking of OFFSET/LENGTH to reads/writes so we can easily see in a failed read/write 
what offset/length was requested


svn path=/trunk/; revision=21858
 2007-05-21 07:17:36 +00:00
Ronnie Sahlberg 7a68b1be72 track FIDs on a per transaction (request+response) basis and make sure the FID is printed 
in both packets of a transaction.

this makes filters such as "smb.file==foo.txt" work much better since they now show both 
the read/write request and also the response packets.
this is similar to what we already do in nfs for filehandles



svn path=/trunk/; revision=21856
 2007-05-21 03:44:49 +00:00
Ronnie Sahlberg f43afbaf35 add more tracking of FID properties 
track create_flags, access_mask, file_attributes, share_access and 
create options for all FIDs


svn path=/trunk/; revision=21743
 2007-05-10 20:53:35 +00:00
Ronnie Sahlberg e5e23150ab prettify dissection of FIDs, 
put the filename, if known, on the fid expansion line

also place a "generated" fid in failed ntcreateandx so it is easier to 
quickly see which file the ntcreateandx failed for


svn path=/trunk/; revision=21739
 2007-05-10 02:34:06 +00:00
Ronnie Sahlberg 0eae1cc0bd add dissection of smb1 ioctl data by tying it into the dissectors for 
ioctl data that already exists for smb2


svn path=/trunk/; revision=21713
 2007-05-07 09:07:29 +00:00
Guy Harris 65b4512fe3 As with other types of extra info, tag the UID extra info. Don't add 
stuff to the UID tree unless it's UID stuff.

Also, as we appear to allow for null domain and account information in
dissect_smb_uid(), check for null information before trying to add it to
the top-level item.

svn path=/trunk/; revision=21597
 2007-04-26 19:44:18 +00:00
Ronnie Sahlberg 3a0cdfb42b add a missing change from the previous commit 
svn path=/trunk/; revision=21548
 2007-04-24 05:09:53 +00:00
Stephen Fisher d565967b58 From Peter Johansson: 
Fix warnings


svn path=/trunk/; revision=21214
 2007-03-26 21:16:21 +00:00
Ronnie Sahlberg d08c190fe0 track fid types between NT TRans QUERY_SECURITY_DESCRIPTOR and dissect the ACEs properly 
svn path=/trunk/; revision=18926
 2006-08-16 09:22:36 +00:00
Ronnie Sahlberg 0902016b42 add a type field for the fid tracking structure and initialize it to UNKNOWN 
when files are opened using NTCreateAndX  and if we recognize the type   set the type field to either FILE, DIR or PIPE

This is useful to know when dissecting things like security descriptors since it tells us how to dissect the specific bits of the access mask.


Only do this for NTCreateAndX for now.   It is trivial to add similar tracking to some of the older   obsolete   calls used to open fids    but no clients ever use those old calls any more.





svn path=/trunk/; revision=18922
 2006-08-16 08:00:46 +00:00
Ronnie Sahlberg 8ce8e719e0 rename some structures and defines from the se_tree to the emem_tree prefix 
svn path=/trunk/; revision=18894
 2006-08-14 08:29:29 +00:00
Gerald Combs f7e38bd5e6 Change ETH_VAR_IMPORT to WS_VAR_IMPORT. Try to fix a duplicate variable 
definition in the Catapult DCT2000 code.

svn path=/trunk/; revision=18524
 2006-06-20 18:30:54 +00:00
Ronnie Sahlberg 75030295d1 add tracking of TID -> sharenames 
reuse the recent structure for fid->filename mappings since the problemspace is virtually the same


(go to tired of trying to find the sharename in 10mpacket traces with 1000s of shares)



svn path=/trunk/; revision=18516
 2006-06-19 09:44:15 +00:00
Ronnie Sahlberg 986085204d add infrastructure to make tracking of fid->filename easy to implement and use 
svn path=/trunk/; revision=18514
 2006-06-19 07:39:19 +00:00
Ronnie Sahlberg d76b58cbfb track smb FIDFs when tehy are opened and closed. 
add an expansion to the fid that display which frame itr was opened in and when it was closed.



someone may want to add tracking of actual filenames here as well.   i am not sure i need that feature myself   so ...



svn path=/trunk/; revision=18512
 2006-06-18 05:45:40 +00:00
Ronnie Sahlberg a5db166102 rename add_fid() to dissect_smb_fid() as a firsdt step towards adding tracking of filename/openedframe/closedframe tracking for smb fids 
svn path=/trunk/; revision=18506
 2006-06-18 01:58:34 +00:00
Ronnie Sahlberg feab79e328 change a whole bunch of ethereal into wireshark 
svn path=/trunk/; revision=18196
 2006-05-21 04:49:01 +00:00
Ronnie Sahlberg baed8f0888 add dissection of 
SMB/SetFileInfo level 1023
SMB2/SetInfo/FILE_INFO level 0x17

FILE_PIPE_INFO   infolevel


svn path=/trunk/; revision=17195
 2006-02-07 08:48:51 +00:00
Ronnie Sahlberg 55beaa37cf add endoffile infolevel 
svn path=/trunk/; revision=16607
 2005-11-26 21:59:48 +00:00
Ronnie Sahlberg f699f011fc more infolevels 
svn path=/trunk/; revision=16606
 2005-11-26 21:44:37 +00:00
Ronnie Sahlberg d149d98fc3 assume the four bytes after the fid in notify request is the completion mask 
svn path=/trunk/; revision=16596
 2005-11-26 00:34:22 +00:00
Ronnie Sahlberg 704abdc0e5 add some more infolevels 
svn path=/trunk/; revision=16585
 2005-11-25 08:02:40 +00:00
Ronnie Sahlberg 261aade300 add dissection of the smb2 impersionationlevel field 
svn path=/trunk/; revision=16581
 2005-11-25 06:19:41 +00:00
Ronnie Sahlberg c76c376968 some info level updates 
svn path=/trunk/; revision=16580
 2005-11-25 06:04:11 +00:00
Ronnie Sahlberg cfc56af514 some info level updates 
svn path=/trunk/; revision=16579
 2005-11-25 05:41:00 +00:00
Ronnie Sahlberg 3f047721a3 dissect some more infolevels 
svn path=/trunk/; revision=16543
 2005-11-18 07:31:18 +00:00
Ronnie Sahlberg 3afd94f519 add dissection of more infolevels for smb2 
svn path=/trunk/; revision=16539
 2005-11-17 22:30:19 +00:00
Ronnie Sahlberg e5b6a6426b add dissection of fs_[objectid|full_size]_info 
svn path=/trunk/; revision=16538
 2005-11-17 14:22:11 +00:00
Ronnie Sahlberg 6ac4fe9a25 add dissection of fs quota info 
svn path=/trunk/; revision=16537
 2005-11-17 14:00:07 +00:00
Ronnie Sahlberg 1b809cfcd7 add full dissection of fs_[volume|size|device|atrtibute]_info 
svn path=/trunk/; revision=16536
 2005-11-17 13:43:22 +00:00
Ronnie Sahlberg 675d0862b5 add dissection of the security descriptor mask 
svn path=/trunk/; revision=16535
 2005-11-17 12:30:36 +00:00
Ronnie Sahlberg 15f13b23a0 improve the dissection of Create and fill in most of the fields 
svn path=/trunk/; revision=16490
 2005-11-12 11:27:34 +00:00
Ronnie Sahlberg 8b68d91039 dissect more of Close request/response 
svn path=/trunk/; revision=16487
 2005-11-12 10:07:12 +00:00
Guy Harris ab2dca9114 Move some headers for stuff defined by a dissector into epan/dissectors 
- and rename smb.h to packet-smb.h, as it's packet-smb.c's header file.

svn path=/trunk/; revision=15845
 2005-09-17 00:31:15 +00:00