static gint hf_ntlmssp_decode_NTLMv2_RESPONSE_response = -1;
static gint hf_ntlmssp_CHALLENGE_MESSAGE_TargetNameInfoMaxLen = -1;
static gint hf_ntlmssp_ntlmssp_VERSION_Reserved = -1;
-static gint hf_ntlmssp_ntlmssp_AvValue_AvNbComputerName = -1;
static gint hf_ntlmssp_CHALLENGE_MESSAGE_Reserved = -1;
-static gint hf_ntlmssp_ntlmssp_AvValue_AvTimestamp = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_OEM = -1;
+static gint hf_ntlmssp_ntlmssp_NTLM_RESPONSE_valdefault_v2 = -1;
static gint hf_ntlmssp_Restriction_Encoding_MachineId = -1;
static gint hf_ntlmssp_NEGOTIATE_MESSAGE_WorkstationLen = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_NTLM = -1;
-static gint hf_ntlmssp_ntlmssp_AvValue_ChannelBindings = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_Signature = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_SEAL = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_KEY_EXCH = -1;
static gint hf_ntlmssp_LMv2_RESPONSE_ChallengeFromClient = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_NtChallengeResponse_ = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_LmChallengeResponse = -1;
+static gint hf_ntlmssp_ntlmssp_AvValue_valMsvAvDnsTreeName_AvDnsTreeName = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED = -1;
static gint hf_ntlmssp_NTLMSSP_MESSAGE_SIGNATURE_Checksum = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_Version = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_NETWARE = -1;
static gint hf_ntlmssp_NTLMv2_CLIENT_CHALLENGE_RespType = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_UserNameMaxLen = -1;
-static gint hf_ntlmssp_ntlmssp_Version_version = -1;
+static gint hf_ntlmssp_ntlmssp_LM_RESPONSE_val24_v1 = -1;
static gint hf_ntlmssp_CHALLENGE_MESSAGE_TargetNameLen = -1;
static gint hf_ntlmssp_NEGOTIATE_MESSAGE_DomainNameMaxLen = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_56 = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_EncryptedRandomSessionKeyMaxLen = -1;
static gint hf_ntlmssp_NEGOTIATE_MESSAGE_MessageType = -1;
-static gint hf_ntlmssp_ntlmssp_AvValue_AvNbDomainName = -1;
+static gint hf_ntlmssp_ntlmssp_AvValue_valMsvAvTargetName_AvTargetName = -1;
static gint hf_ntlmssp_ntlmssp_AvFlags_NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_VERSION = -1;
static gint hf_ntlmssp_CHALLENGE_MESSAGE_TargetName_ = -1;
+static gint hf_ntlmssp_ntlmssp_AvValue_valMsvChannelBindings_ChannelBindings = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_REQUEST_TARGET = -1;
+static gint hf_ntlmssp_ntlmssp_Version_valNTLMSSP_NEGOTIATE_VERSION_version = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_Workstation_ = -1;
+static gint hf_ntlmssp_ntlmssp_AvValue_valMsvAvDnsComputerName_AvDnsComputerName = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_DomainNameMaxLen = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_TARGET_TYPE_DOMAIN = -1;
static gint hf_ntlmssp_decode_CHALLENGE_MESSAGE_challenge = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_UserName_ = -1;
-static gint hf_ntlmssp_ntlmssp_LM_RESPONSE_v1 = -1;
static gint hf_ntlmssp_CHALLENGE_MESSAGE_TargetName = -1;
static gint hf_ntlmssp_NTLMv2_CLIENT_CHALLENGE_Reserved2 = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_MessageType = -1;
-static gint hf_ntlmssp_ntlmssp_NTLM_RESPONSE_v2 = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_WorkstationLen = -1;
static gint hf_ntlmssp_NTLMSSP_MESSAGE_SIGNATURE_Version = -1;
static gint hf_ntlmssp_AV_PAIR_AvLen = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_WorkstationMaxLen = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_LmChallengeResponseMaxLen = -1;
static gint hf_ntlmssp_AV_PAIR_AvId = -1;
-static gint hf_ntlmssp_ntlmssp_AvValue_blob = -1;
static gint hf_ntlmssp_CHALLENGE_MESSAGE_ServerChallenge = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_NT_ONLY = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_SIGN = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_NtChallengeResponse = -1;
static gint hf_ntlmssp_decode_NEGOTIATE_MESSAGE_negotiate = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_UserName = -1;
-static gint hf_ntlmssp_ntlmssp_AvValue_AvFlags = -1;
static gint hf_ntlmssp_CHALLENGE_MESSAGE_Signature = -1;
static gint hf_ntlmssp_NTLMSSP_MESSAGE_SIGNATURE_NTLMv2_Version = -1;
static gint hf_ntlmssp_Restriction_Encoding_Z4 = -1;
-static gint hf_ntlmssp_ntlmssp_AvValue_AvDnsTreeName = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_EncryptedRandomSessionKey = -1;
+static gint hf_ntlmssp_ntlmssp_AvValue_valMsvAvFlags_AvFlags = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_NtChallengeResponseLen = -1;
static gint hf_ntlmssp_NTLMSSP_MESSAGE_SIGNATURE_SeqNum = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_REQUEST_NON_NT_SESSION_KEY = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_NtChallengeResponseMaxLen = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_DomainNameLen = -1;
static gint hf_ntlmssp_NEGOTIATE_MESSAGE_Signature = -1;
-static gint hf_ntlmssp_ntlmssp_AvValue_AvRestrictions = -1;
static gint hf_ntlmssp_MIC_MIC = -1;
static gint hf_ntlmssp_AV_PAIR_Value_ = -1;
static gint hf_ntlmssp_Restriction_Encoding_Size = -1;
static gint hf_ntlmssp_NTLMv2_CLIENT_CHALLENGE_HiRespType = -1;
static gint hf_ntlmssp_NTLMv2_CLIENT_CHALLENGE_ChallengeFromClient = -1;
static gint hf_ntlmssp_ntlmssp_AvFlags_NTLMSSP_AVFLAG_CONSTRAINTED_ACCOUNT = -1;
+static gint hf_ntlmssp_ntlmssp_AvValue_valdefault_blob = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_ANONYMOUS = -1;
static gint hf_ntlmssp_NTLMSSP_MESSAGE_SIGNATURE_RandomPad = -1;
+static gint hf_ntlmssp_ntlmssp_NTLM_RESPONSE_val0x18_v1 = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_NegotiateFlags = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_TARGET_TYPE_SHARE = -1;
static gint hf_ntlmssp_NEGOTIATE_MESSAGE_Workstation_ = -1;
-static gint hf_ntlmssp_ntlmssp_NTLM_RESPONSE_v1 = -1;
static gint hf_ntlmssp_NEGOTIATE_MESSAGE_Version = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_LM_KEY = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_UNICODE = -1;
static gint hf_ntlmssp_opnum = -1;
static gint hf_ntlmssp_ntlmssp_VERSION_ProductBuild = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_DATAGRAM = -1;
+static gint hf_ntlmssp_ntlmssp_AvValue_valMsvAvNbDomainName_AvNbDomainName = -1;
+static gint hf_ntlmssp_ntlmssp_AvValue_valMsvAvNbComputerName_AvNbComputerName = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_DomainName = -1;
-static gint hf_ntlmssp_ntlmssp_AvValue_AvDnsComputerName = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_128 = -1;
static gint hf_ntlmssp_NTLMv2_CLIENT_CHALLENGE_Reserved3 = -1;
static gint hf_ntlmssp_NEGOTIATE_MESSAGE_NegotiateFlags = -1;
static gint hf_ntlmssp_NEGOTIATE_MESSAGE_Workstation = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY = -1;
static gint hf_ntlmssp_CHALLENGE_MESSAGE_NegotiateFlags = -1;
-static gint hf_ntlmssp_ntlmssp_AvValue_AvTargetName = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_TARGET_TYPE_SERVER = -1;
static gint hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED = -1;
static gint hf_ntlmssp_CHALLENGE_MESSAGE_MessageType = -1;
static gint hf_ntlmssp_NEGOTIATE_MESSAGE_DomainName = -1;
static gint hf_ntlmssp_ntlmssp_VERSION_ProductMajorVersion = -1;
static gint hf_ntlmssp_AUTHENTICATE_MESSAGE_Workstation = -1;
-static gint hf_ntlmssp_ntlmssp_AvValue_AvDnsDomainName = -1;
+static gint hf_ntlmssp_ntlmssp_AvValue_valMsvAvDnsDomainName_AvDnsDomainName = -1;
static gint hf_ntlmssp_NTLMv2_CLIENT_CHALLENGE_TimeStamp = -1;
+static gint hf_ntlmssp_ntlmssp_AvValue_valMsAvRestrictions_AvRestrictions = -1;
+static gint hf_ntlmssp_ntlmssp_AvValue_valMsvAvTimestamp_AvTimestamp = -1;
static gint proto_dcerpc_ntlmssp = -1;
/* Version information */
static int ntlmssp_dissect_element_VERSION_Reserved(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int ntlmssp_dissect_element_VERSION_Reserved_(tvbuff_t *tvb _U_, int offset _U_,int length _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int ntlmssp_dissect_element_VERSION_NTLMRevisionCurrent(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
-static int ntlmssp_dissect_element_Version_version(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
+static int ntlmssp_dissect_element_Version_valNTLMSSP_NEGOTIATE_VERSION_version(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int ntlmssp_dissect_element_NEGOTIATE_MESSAGE_Signature(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int ntlmssp_dissect_element_NEGOTIATE_MESSAGE_Signature_(tvbuff_t *tvb _U_, int offset _U_,int length _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int ntlmssp_dissect_element_NEGOTIATE_MESSAGE_MessageType(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
"NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE is SET",
"NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE is NOT SET",
};
-static int ntlmssp_dissect_element_AvValue_AvNbComputerName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
-static int ntlmssp_dissect_element_AvValue_AvNbDomainName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
-static int ntlmssp_dissect_element_AvValue_AvDnsComputerName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
-static int ntlmssp_dissect_element_AvValue_AvDnsDomainName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
-static int ntlmssp_dissect_element_AvValue_AvDnsTreeName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
-static int ntlmssp_dissect_element_AvValue_AvFlags(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
-static int ntlmssp_dissect_element_AvValue_AvTimestamp(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
-static int ntlmssp_dissect_element_AvValue_AvRestrictions(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
-static int ntlmssp_dissect_element_AvValue_AvTargetName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
-static int ntlmssp_dissect_element_AvValue_ChannelBindings(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
-static int ntlmssp_dissect_element_AvValue_ChannelBindings_(tvbuff_t *tvb _U_, int offset _U_,int length _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
-static int ntlmssp_dissect_element_AvValue_blob(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
+static int ntlmssp_dissect_element_AvValue_valMsvAvNbComputerName_AvNbComputerName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
+static int ntlmssp_dissect_element_AvValue_valMsvAvNbDomainName_AvNbDomainName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
+static int ntlmssp_dissect_element_AvValue_valMsvAvDnsComputerName_AvDnsComputerName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
+static int ntlmssp_dissect_element_AvValue_valMsvAvDnsDomainName_AvDnsDomainName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
+static int ntlmssp_dissect_element_AvValue_valMsvAvDnsTreeName_AvDnsTreeName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
+static int ntlmssp_dissect_element_AvValue_valMsvAvFlags_AvFlags(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
+static int ntlmssp_dissect_element_AvValue_valMsvAvTimestamp_AvTimestamp(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
+static int ntlmssp_dissect_element_AvValue_valMsAvRestrictions_AvRestrictions(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
+static int ntlmssp_dissect_element_AvValue_valMsvAvTargetName_AvTargetName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
+static int ntlmssp_dissect_element_AvValue_valMsvChannelBindings_ChannelBindings(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
+static int ntlmssp_dissect_element_AvValue_valMsvChannelBindings_ChannelBindings_(tvbuff_t *tvb _U_, int offset _U_,int length _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
+static int ntlmssp_dissect_element_AvValue_valdefault_blob(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int ntlmssp_dissect_element_AV_PAIR_AvId(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, guint1632 *AvId);
static int ntlmssp_dissect_element_AV_PAIR_AvLen(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int ntlmssp_dissect_element_AV_PAIR_Value(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, guint1632 *AvId);
static int ntlmssp_dissect_element_LMv2_RESPONSE_Response_(tvbuff_t *tvb _U_, int offset _U_,int length _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int ntlmssp_dissect_element_LMv2_RESPONSE_ChallengeFromClient(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int ntlmssp_dissect_element_LMv2_RESPONSE_ChallengeFromClient_(tvbuff_t *tvb _U_, int offset _U_,int length _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
-static int ntlmssp_dissect_element_LM_RESPONSE_v1(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
+static int ntlmssp_dissect_element_LM_RESPONSE_val24_v1(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int ntlmssp_dissect_element_NTLM_RESPONSE_Response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int ntlmssp_dissect_element_NTLM_RESPONSE_Response_(tvbuff_t *tvb _U_, int offset _U_,int length _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int ntlmssp_dissect_element_NTLMv2_CLIENT_CHALLENGE_RespType(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int ntlmssp_dissect_element_NTLMv2_RESPONSE_Response(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int ntlmssp_dissect_element_NTLMv2_RESPONSE_Response_(tvbuff_t *tvb _U_, int offset _U_,int length _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int ntlmssp_dissect_element_NTLMv2_RESPONSE_Challenge(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
-static int ntlmssp_dissect_element_NTLM_RESPONSE_v1(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
-static int ntlmssp_dissect_element_NTLM_RESPONSE_v2(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
+static int ntlmssp_dissect_element_NTLM_RESPONSE_val0x18_v1(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
+static int ntlmssp_dissect_element_NTLM_RESPONSE_valdefault_v2(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int ntlmssp_dissect_element_MIC_MIC(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int ntlmssp_dissect_element_MIC_MIC_(tvbuff_t *tvb _U_, int offset _U_,int length _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int ntlmssp_dissect_element_AUTHENTICATE_MESSAGE_Signature(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
/* IDL: } */
static int
-ntlmssp_dissect_element_Version_version(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
+ntlmssp_dissect_element_Version_valNTLMSSP_NEGOTIATE_VERSION_version(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
{
- offset = ntlmssp_dissect_struct_VERSION(tvb,offset,pinfo,tree,drep,hf_ntlmssp_ntlmssp_Version_version,0);
+ offset = ntlmssp_dissect_struct_VERSION(tvb,offset,pinfo,tree,drep,hf_ntlmssp_ntlmssp_Version_valNTLMSSP_NEGOTIATE_VERSION_version,0);
return offset;
}
switch(level) {
case NTLMSSP_NEGOTIATE_VERSION:
- offset = ntlmssp_dissect_element_Version_version(tvb, offset, pinfo, tree, drep);
+ offset = ntlmssp_dissect_element_Version_valNTLMSSP_NEGOTIATE_VERSION_version(tvb, offset, pinfo, tree, drep);
break;
default:
/* IDL: } */
static int
-ntlmssp_dissect_element_AvValue_AvNbComputerName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
+ntlmssp_dissect_element_AvValue_valMsvAvNbComputerName_AvNbComputerName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
{
return offset;
}
static int
-ntlmssp_dissect_element_AvValue_AvNbDomainName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
+ntlmssp_dissect_element_AvValue_valMsvAvNbDomainName_AvNbDomainName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
{
return offset;
}
static int
-ntlmssp_dissect_element_AvValue_AvDnsComputerName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
+ntlmssp_dissect_element_AvValue_valMsvAvDnsComputerName_AvDnsComputerName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
{
return offset;
}
static int
-ntlmssp_dissect_element_AvValue_AvDnsDomainName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
+ntlmssp_dissect_element_AvValue_valMsvAvDnsDomainName_AvDnsDomainName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
{
return offset;
}
static int
-ntlmssp_dissect_element_AvValue_AvDnsTreeName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
+ntlmssp_dissect_element_AvValue_valMsvAvDnsTreeName_AvDnsTreeName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
{
return offset;
}
static int
-ntlmssp_dissect_element_AvValue_AvFlags(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
+ntlmssp_dissect_element_AvValue_valMsvAvFlags_AvFlags(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
{
- offset = ntlmssp_dissect_bitmap_AvFlags(tvb, offset, pinfo, tree, drep, hf_ntlmssp_ntlmssp_AvValue_AvFlags, 0);
+ offset = ntlmssp_dissect_bitmap_AvFlags(tvb, offset, pinfo, tree, drep, hf_ntlmssp_ntlmssp_AvValue_valMsvAvFlags_AvFlags, 0);
return offset;
}
static int
-ntlmssp_dissect_element_AvValue_AvTimestamp(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
+ntlmssp_dissect_element_AvValue_valMsvAvTimestamp_AvTimestamp(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
{
- offset = dissect_ndr_nt_NTTIME(tvb, offset, pinfo, tree, drep, hf_ntlmssp_ntlmssp_AvValue_AvTimestamp);
+ offset = dissect_ndr_nt_NTTIME(tvb, offset, pinfo, tree, drep, hf_ntlmssp_ntlmssp_AvValue_valMsvAvTimestamp_AvTimestamp);
return offset;
}
static int
-ntlmssp_dissect_element_AvValue_AvRestrictions(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
+ntlmssp_dissect_element_AvValue_valMsAvRestrictions_AvRestrictions(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
{
- offset = ntlmssp_dissect_struct_Restriction_Encoding(tvb,offset,pinfo,tree,drep,hf_ntlmssp_ntlmssp_AvValue_AvRestrictions,0);
+ offset = ntlmssp_dissect_struct_Restriction_Encoding(tvb,offset,pinfo,tree,drep,hf_ntlmssp_ntlmssp_AvValue_valMsAvRestrictions_AvRestrictions,0);
return offset;
}
static int
-ntlmssp_dissect_element_AvValue_AvTargetName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
+ntlmssp_dissect_element_AvValue_valMsvAvTargetName_AvTargetName(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
{
return offset;
}
static int
-ntlmssp_dissect_element_AvValue_ChannelBindings(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
+ntlmssp_dissect_element_AvValue_valMsvChannelBindings_ChannelBindings(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
{
dcerpc_info *di = (dcerpc_info*)pinfo->private_data;
int conformant = di->conformant_run;
if (!conformant) {
- offset = ntlmssp_dissect_element_AvValue_ChannelBindings_(tvb, offset, 16, pinfo, tree, drep);
+ offset = ntlmssp_dissect_element_AvValue_valMsvChannelBindings_ChannelBindings_(tvb, offset, 16, pinfo, tree, drep);
}
return offset;
}
static int
-ntlmssp_dissect_element_AvValue_ChannelBindings_(tvbuff_t *tvb _U_, int offset _U_,int length _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
+ntlmssp_dissect_element_AvValue_valMsvChannelBindings_ChannelBindings_(tvbuff_t *tvb _U_, int offset _U_,int length _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
{
- proto_tree_add_bytes(tree, hf_ntlmssp_ntlmssp_AvValue_ChannelBindings, tvb, offset, length, tvb_get_ptr(tvb, offset,length)); offset += length;
+ proto_tree_add_bytes(tree, hf_ntlmssp_ntlmssp_AvValue_valMsvChannelBindings_ChannelBindings, tvb, offset, length, tvb_get_ptr(tvb, offset,length)); offset += length;
return offset;
}
static int
-ntlmssp_dissect_element_AvValue_blob(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
+ntlmssp_dissect_element_AvValue_valdefault_blob(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
{
- offset = dissect_ndr_datablob(tvb, offset, pinfo, tree, drep, hf_ntlmssp_ntlmssp_AvValue_blob, 1);
+ offset = dissect_ndr_datablob(tvb, offset, pinfo, tree, drep, hf_ntlmssp_ntlmssp_AvValue_valdefault_blob, 1);
return offset;
}
break;
case MsvAvNbComputerName:
- offset = ntlmssp_dissect_element_AvValue_AvNbComputerName(tvb, offset, pinfo, tree, drep);
+ offset = ntlmssp_dissect_element_AvValue_valMsvAvNbComputerName_AvNbComputerName(tvb, offset, pinfo, tree, drep);
break;
case MsvAvNbDomainName:
- offset = ntlmssp_dissect_element_AvValue_AvNbDomainName(tvb, offset, pinfo, tree, drep);
+ offset = ntlmssp_dissect_element_AvValue_valMsvAvNbDomainName_AvNbDomainName(tvb, offset, pinfo, tree, drep);
break;
case MsvAvDnsComputerName:
- offset = ntlmssp_dissect_element_AvValue_AvDnsComputerName(tvb, offset, pinfo, tree, drep);
+ offset = ntlmssp_dissect_element_AvValue_valMsvAvDnsComputerName_AvDnsComputerName(tvb, offset, pinfo, tree, drep);
break;
case MsvAvDnsDomainName:
- offset = ntlmssp_dissect_element_AvValue_AvDnsDomainName(tvb, offset, pinfo, tree, drep);
+ offset = ntlmssp_dissect_element_AvValue_valMsvAvDnsDomainName_AvDnsDomainName(tvb, offset, pinfo, tree, drep);
break;
case MsvAvDnsTreeName:
- offset = ntlmssp_dissect_element_AvValue_AvDnsTreeName(tvb, offset, pinfo, tree, drep);
+ offset = ntlmssp_dissect_element_AvValue_valMsvAvDnsTreeName_AvDnsTreeName(tvb, offset, pinfo, tree, drep);
break;
case MsvAvFlags:
- offset = ntlmssp_dissect_element_AvValue_AvFlags(tvb, offset, pinfo, tree, drep);
+ offset = ntlmssp_dissect_element_AvValue_valMsvAvFlags_AvFlags(tvb, offset, pinfo, tree, drep);
break;
case MsvAvTimestamp:
- offset = ntlmssp_dissect_element_AvValue_AvTimestamp(tvb, offset, pinfo, tree, drep);
+ offset = ntlmssp_dissect_element_AvValue_valMsvAvTimestamp_AvTimestamp(tvb, offset, pinfo, tree, drep);
break;
case MsAvRestrictions:
- offset = ntlmssp_dissect_element_AvValue_AvRestrictions(tvb, offset, pinfo, tree, drep);
+ offset = ntlmssp_dissect_element_AvValue_valMsAvRestrictions_AvRestrictions(tvb, offset, pinfo, tree, drep);
break;
case MsvAvTargetName:
- offset = ntlmssp_dissect_element_AvValue_AvTargetName(tvb, offset, pinfo, tree, drep);
+ offset = ntlmssp_dissect_element_AvValue_valMsvAvTargetName_AvTargetName(tvb, offset, pinfo, tree, drep);
break;
case MsvChannelBindings:
- offset = ntlmssp_dissect_element_AvValue_ChannelBindings(tvb, offset, pinfo, tree, drep);
+ offset = ntlmssp_dissect_element_AvValue_valMsvChannelBindings_ChannelBindings(tvb, offset, pinfo, tree, drep);
break;
default:
- offset = ntlmssp_dissect_element_AvValue_blob(tvb, offset, pinfo, tree, drep);
+ offset = ntlmssp_dissect_element_AvValue_valdefault_blob(tvb, offset, pinfo, tree, drep);
break;
}
proto_item_set_len(item, offset-old_offset);
/* IDL: } */
static int
-ntlmssp_dissect_element_LM_RESPONSE_v1(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
+ntlmssp_dissect_element_LM_RESPONSE_val24_v1(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
{
- offset = ntlmssp_dissect_struct_LM_RESPONSE(tvb,offset,pinfo,tree,drep,hf_ntlmssp_ntlmssp_LM_RESPONSE_v1,0);
+ offset = ntlmssp_dissect_struct_LM_RESPONSE(tvb,offset,pinfo,tree,drep,hf_ntlmssp_ntlmssp_LM_RESPONSE_val24_v1,0);
return offset;
}
switch(level) {
case 24:
- offset = ntlmssp_dissect_element_LM_RESPONSE_v1(tvb, offset, pinfo, tree, drep);
+ offset = ntlmssp_dissect_element_LM_RESPONSE_val24_v1(tvb, offset, pinfo, tree, drep);
break;
default:
/* IDL: } */
static int
-ntlmssp_dissect_element_NTLM_RESPONSE_v1(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
+ntlmssp_dissect_element_NTLM_RESPONSE_val0x18_v1(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
{
- offset = ntlmssp_dissect_struct_NTLM_RESPONSE(tvb,offset,pinfo,tree,drep,hf_ntlmssp_ntlmssp_NTLM_RESPONSE_v1,0);
+ offset = ntlmssp_dissect_struct_NTLM_RESPONSE(tvb,offset,pinfo,tree,drep,hf_ntlmssp_ntlmssp_NTLM_RESPONSE_val0x18_v1,0);
return offset;
}
static int
-ntlmssp_dissect_element_NTLM_RESPONSE_v2(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
+ntlmssp_dissect_element_NTLM_RESPONSE_valdefault_v2(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
{
- offset = ntlmssp_dissect_struct_NTLMv2_RESPONSE(tvb,offset,pinfo,tree,drep,hf_ntlmssp_ntlmssp_NTLM_RESPONSE_v2,0);
+ offset = ntlmssp_dissect_struct_NTLMv2_RESPONSE(tvb,offset,pinfo,tree,drep,hf_ntlmssp_ntlmssp_NTLM_RESPONSE_valdefault_v2,0);
return offset;
}
break;
case 0x18:
- offset = ntlmssp_dissect_element_NTLM_RESPONSE_v1(tvb, offset, pinfo, tree, drep);
+ offset = ntlmssp_dissect_element_NTLM_RESPONSE_val0x18_v1(tvb, offset, pinfo, tree, drep);
break;
default:
- offset = ntlmssp_dissect_element_NTLM_RESPONSE_v2(tvb, offset, pinfo, tree, drep);
+ offset = ntlmssp_dissect_element_NTLM_RESPONSE_valdefault_v2(tvb, offset, pinfo, tree, drep);
break;
}
proto_item_set_len(item, offset-old_offset);
{ "Targetnameinfomaxlen", "ntlmssp.CHALLENGE_MESSAGE.TargetNameInfoMaxLen", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_ntlmssp_VERSION_Reserved,
{ "Reserved", "ntlmssp.ntlmssp_VERSION.Reserved", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_ntlmssp_ntlmssp_AvValue_AvNbComputerName,
- { "Avnbcomputername", "ntlmssp.ntlmssp_AvValue.AvNbComputerName", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_CHALLENGE_MESSAGE_Reserved,
{ "Reserved", "ntlmssp.CHALLENGE_MESSAGE.Reserved", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_ntlmssp_ntlmssp_AvValue_AvTimestamp,
- { "Avtimestamp", "ntlmssp.ntlmssp_AvValue.AvTimestamp", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_OEM,
{ "Ntlmssp Negotiate Oem", "ntlmssp.NEGOTIATE.NTLMSSP_NEGOTIATE_OEM", FT_BOOLEAN, 32, TFS(&NEGOTIATE_NTLMSSP_NEGOTIATE_OEM_tfs), ( 0x00000002 ), NULL, HFILL }},
+ { &hf_ntlmssp_ntlmssp_NTLM_RESPONSE_valdefault_v2,
+ { "V2", "ntlmssp.ntlmssp_NTLM_RESPONSE_valdefault.v2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_Restriction_Encoding_MachineId,
{ "Machineid", "ntlmssp.Restriction_Encoding.MachineId", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_MESSAGE_WorkstationLen,
{ "Workstationlen", "ntlmssp.NEGOTIATE_MESSAGE.WorkstationLen", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_NTLM,
{ "Ntlmssp Negotiate Ntlm", "ntlmssp.NEGOTIATE.NTLMSSP_NEGOTIATE_NTLM", FT_BOOLEAN, 32, TFS(&NEGOTIATE_NTLMSSP_NEGOTIATE_NTLM_tfs), ( 0x00000200 ), NULL, HFILL }},
- { &hf_ntlmssp_ntlmssp_AvValue_ChannelBindings,
- { "Channelbindings", "ntlmssp.ntlmssp_AvValue.ChannelBindings", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_AUTHENTICATE_MESSAGE_Signature,
{ "Signature", "ntlmssp.AUTHENTICATE_MESSAGE.Signature", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_SEAL,
{ "Subcontext length", "ntlmssp.AUTHENTICATE_MESSAGE.subcontext", FT_UINT0, BASE_HEX, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_AUTHENTICATE_MESSAGE_LmChallengeResponse,
{ "Lmchallengeresponse", "ntlmssp.AUTHENTICATE_MESSAGE.LmChallengeResponse", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
+ { &hf_ntlmssp_ntlmssp_AvValue_valMsvAvDnsTreeName_AvDnsTreeName,
+ { "Avdnstreename", "ntlmssp.ntlmssp_AvValue_valMsvAvDnsTreeName.AvDnsTreeName", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED,
{ "Ntlmssp Negotiate Oem Workstation Supplied", "ntlmssp.NEGOTIATE.NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED", FT_BOOLEAN, 32, TFS(&NEGOTIATE_NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED_tfs), ( 0x00002000 ), NULL, HFILL }},
{ &hf_ntlmssp_NTLMSSP_MESSAGE_SIGNATURE_Checksum,
{ "Resptype", "ntlmssp.NTLMv2_CLIENT_CHALLENGE.RespType", FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_AUTHENTICATE_MESSAGE_UserNameMaxLen,
{ "Usernamemaxlen", "ntlmssp.AUTHENTICATE_MESSAGE.UserNameMaxLen", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_ntlmssp_ntlmssp_Version_version,
- { "Version", "ntlmssp.ntlmssp_Version.version", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
+ { &hf_ntlmssp_ntlmssp_LM_RESPONSE_val24_v1,
+ { "V1", "ntlmssp.ntlmssp_LM_RESPONSE_val24.v1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_CHALLENGE_MESSAGE_TargetNameLen,
{ "Targetnamelen", "ntlmssp.CHALLENGE_MESSAGE.TargetNameLen", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_MESSAGE_DomainNameMaxLen,
{ "Encryptedrandomsessionkeymaxlen", "ntlmssp.AUTHENTICATE_MESSAGE.EncryptedRandomSessionKeyMaxLen", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_MESSAGE_MessageType,
{ "Messagetype", "ntlmssp.NEGOTIATE_MESSAGE.MessageType", FT_UINT32, BASE_DEC, VALS(ntlmssp_ntlmssp_MessageType_vals), 0, NULL, HFILL }},
- { &hf_ntlmssp_ntlmssp_AvValue_AvNbDomainName,
- { "Avnbdomainname", "ntlmssp.ntlmssp_AvValue.AvNbDomainName", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
+ { &hf_ntlmssp_ntlmssp_AvValue_valMsvAvTargetName_AvTargetName,
+ { "Avtargetname", "ntlmssp.ntlmssp_AvValue_valMsvAvTargetName.AvTargetName", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_ntlmssp_AvFlags_NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE,
{ "Ntlmssp Avflag Mic In Authenticate Message", "ntlmssp.ntlmssp_AvFlags.NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE", FT_BOOLEAN, 32, TFS(&ntlmssp_AvFlags_NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE_tfs), ( 0x00000002 ), NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_VERSION,
{ "Ntlmssp Negotiate Version", "ntlmssp.NEGOTIATE.NTLMSSP_NEGOTIATE_VERSION", FT_BOOLEAN, 32, TFS(&NEGOTIATE_NTLMSSP_NEGOTIATE_VERSION_tfs), ( 0x02000000 ), NULL, HFILL }},
{ &hf_ntlmssp_CHALLENGE_MESSAGE_TargetName_,
{ "Subcontext length", "ntlmssp.CHALLENGE_MESSAGE.subcontext", FT_UINT0, BASE_HEX, NULL, 0, NULL, HFILL }},
+ { &hf_ntlmssp_ntlmssp_AvValue_valMsvChannelBindings_ChannelBindings,
+ { "Channelbindings", "ntlmssp.ntlmssp_AvValue_valMsvChannelBindings.ChannelBindings", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_NTLMSSP_REQUEST_TARGET,
{ "Ntlmssp Request Target", "ntlmssp.NEGOTIATE.NTLMSSP_REQUEST_TARGET", FT_BOOLEAN, 32, TFS(&NEGOTIATE_NTLMSSP_REQUEST_TARGET_tfs), ( 0x00000004 ), NULL, HFILL }},
+ { &hf_ntlmssp_ntlmssp_Version_valNTLMSSP_NEGOTIATE_VERSION_version,
+ { "Version", "ntlmssp.ntlmssp_Version_valNTLMSSP_NEGOTIATE_VERSION.version", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_AUTHENTICATE_MESSAGE_Workstation_,
{ "Subcontext length", "ntlmssp.AUTHENTICATE_MESSAGE.subcontext", FT_UINT0, BASE_HEX, NULL, 0, NULL, HFILL }},
+ { &hf_ntlmssp_ntlmssp_AvValue_valMsvAvDnsComputerName_AvDnsComputerName,
+ { "Avdnscomputername", "ntlmssp.ntlmssp_AvValue_valMsvAvDnsComputerName.AvDnsComputerName", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_AUTHENTICATE_MESSAGE_DomainNameMaxLen,
{ "Domainnamemaxlen", "ntlmssp.AUTHENTICATE_MESSAGE.DomainNameMaxLen", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_NTLMSSP_TARGET_TYPE_DOMAIN,
{ "Challenge", "ntlmssp.decode_CHALLENGE_MESSAGE.challenge", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_AUTHENTICATE_MESSAGE_UserName_,
{ "Subcontext length", "ntlmssp.AUTHENTICATE_MESSAGE.subcontext", FT_UINT0, BASE_HEX, NULL, 0, NULL, HFILL }},
- { &hf_ntlmssp_ntlmssp_LM_RESPONSE_v1,
- { "V1", "ntlmssp.ntlmssp_LM_RESPONSE.v1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_CHALLENGE_MESSAGE_TargetName,
{ "Targetname", "ntlmssp.CHALLENGE_MESSAGE.TargetName", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NTLMv2_CLIENT_CHALLENGE_Reserved2,
{ "Ntlmssp Negotiate This Is Local Call", "ntlmssp.NEGOTIATE.NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL", FT_BOOLEAN, 32, TFS(&NEGOTIATE_NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL_tfs), ( 0x00004000 ), NULL, HFILL }},
{ &hf_ntlmssp_AUTHENTICATE_MESSAGE_MessageType,
{ "Messagetype", "ntlmssp.AUTHENTICATE_MESSAGE.MessageType", FT_UINT32, BASE_DEC, VALS(ntlmssp_ntlmssp_MessageType_vals), 0, NULL, HFILL }},
- { &hf_ntlmssp_ntlmssp_NTLM_RESPONSE_v2,
- { "V2", "ntlmssp.ntlmssp_NTLM_RESPONSE.v2", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_AUTHENTICATE_MESSAGE_WorkstationLen,
{ "Workstationlen", "ntlmssp.AUTHENTICATE_MESSAGE.WorkstationLen", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NTLMSSP_MESSAGE_SIGNATURE_Version,
{ "Lmchallengeresponsemaxlen", "ntlmssp.AUTHENTICATE_MESSAGE.LmChallengeResponseMaxLen", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_AV_PAIR_AvId,
{ "Avid", "ntlmssp.AV_PAIR.AvId", FT_UINT1632, BASE_DEC, VALS(ntlmssp_ntlmssp_AvId_vals), 0, NULL, HFILL }},
- { &hf_ntlmssp_ntlmssp_AvValue_blob,
- { "Blob", "ntlmssp.ntlmssp_AvValue.blob", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_CHALLENGE_MESSAGE_ServerChallenge,
{ "Serverchallenge", "ntlmssp.CHALLENGE_MESSAGE.ServerChallenge", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_NT_ONLY,
{ "Negotiate", "ntlmssp.decode_NEGOTIATE_MESSAGE.negotiate", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_AUTHENTICATE_MESSAGE_UserName,
{ "Username", "ntlmssp.AUTHENTICATE_MESSAGE.UserName", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_ntlmssp_ntlmssp_AvValue_AvFlags,
- { "Avflags", "ntlmssp.ntlmssp_AvValue.AvFlags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_CHALLENGE_MESSAGE_Signature,
{ "Signature", "ntlmssp.CHALLENGE_MESSAGE.Signature", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NTLMSSP_MESSAGE_SIGNATURE_NTLMv2_Version,
{ "Version", "ntlmssp.NTLMSSP_MESSAGE_SIGNATURE_NTLMv2.Version", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_Restriction_Encoding_Z4,
{ "Z4", "ntlmssp.Restriction_Encoding.Z4", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
- { &hf_ntlmssp_ntlmssp_AvValue_AvDnsTreeName,
- { "Avdnstreename", "ntlmssp.ntlmssp_AvValue.AvDnsTreeName", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_AUTHENTICATE_MESSAGE_EncryptedRandomSessionKey,
{ "Encryptedrandomsessionkey", "ntlmssp.AUTHENTICATE_MESSAGE.EncryptedRandomSessionKey", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
+ { &hf_ntlmssp_ntlmssp_AvValue_valMsvAvFlags_AvFlags,
+ { "Avflags", "ntlmssp.ntlmssp_AvValue_valMsvAvFlags.AvFlags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_AUTHENTICATE_MESSAGE_NtChallengeResponseLen,
{ "Ntchallengeresponselen", "ntlmssp.AUTHENTICATE_MESSAGE.NtChallengeResponseLen", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NTLMSSP_MESSAGE_SIGNATURE_SeqNum,
{ "Domainnamelen", "ntlmssp.AUTHENTICATE_MESSAGE.DomainNameLen", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_MESSAGE_Signature,
{ "Signature", "ntlmssp.NEGOTIATE_MESSAGE.Signature", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_ntlmssp_ntlmssp_AvValue_AvRestrictions,
- { "Avrestrictions", "ntlmssp.ntlmssp_AvValue.AvRestrictions", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_MIC_MIC,
{ "Mic", "ntlmssp.MIC.MIC", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_AV_PAIR_Value_,
{ "Challengefromclient", "ntlmssp.NTLMv2_CLIENT_CHALLENGE.ChallengeFromClient", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_ntlmssp_AvFlags_NTLMSSP_AVFLAG_CONSTRAINTED_ACCOUNT,
{ "Ntlmssp Avflag Constrainted Account", "ntlmssp.ntlmssp_AvFlags.NTLMSSP_AVFLAG_CONSTRAINTED_ACCOUNT", FT_BOOLEAN, 32, TFS(&ntlmssp_AvFlags_NTLMSSP_AVFLAG_CONSTRAINTED_ACCOUNT_tfs), ( 0x00000001 ), NULL, HFILL }},
+ { &hf_ntlmssp_ntlmssp_AvValue_valdefault_blob,
+ { "Blob", "ntlmssp.ntlmssp_AvValue_valdefault.blob", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_NTLMSSP_ANONYMOUS,
{ "Ntlmssp Anonymous", "ntlmssp.NEGOTIATE.NTLMSSP_ANONYMOUS", FT_BOOLEAN, 32, TFS(&NEGOTIATE_NTLMSSP_ANONYMOUS_tfs), ( 0x00000800 ), NULL, HFILL }},
{ &hf_ntlmssp_NTLMSSP_MESSAGE_SIGNATURE_RandomPad,
{ "Randompad", "ntlmssp.NTLMSSP_MESSAGE_SIGNATURE.RandomPad", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
+ { &hf_ntlmssp_ntlmssp_NTLM_RESPONSE_val0x18_v1,
+ { "V1", "ntlmssp.ntlmssp_NTLM_RESPONSE_val0x18.v1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_AUTHENTICATE_MESSAGE_NegotiateFlags,
{ "Negotiateflags", "ntlmssp.AUTHENTICATE_MESSAGE.NegotiateFlags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_NTLMSSP_TARGET_TYPE_SHARE,
{ "Ntlmssp Target Type Share", "ntlmssp.NEGOTIATE.NTLMSSP_TARGET_TYPE_SHARE", FT_BOOLEAN, 32, TFS(&NEGOTIATE_NTLMSSP_TARGET_TYPE_SHARE_tfs), ( 0x00040000 ), NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_MESSAGE_Workstation_,
{ "Subcontext length", "ntlmssp.NEGOTIATE_MESSAGE.subcontext", FT_UINT0, BASE_HEX, NULL, 0, NULL, HFILL }},
- { &hf_ntlmssp_ntlmssp_NTLM_RESPONSE_v1,
- { "V1", "ntlmssp.ntlmssp_NTLM_RESPONSE.v1", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_MESSAGE_Version,
{ "Version", "ntlmssp.NEGOTIATE_MESSAGE.Version", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_LM_KEY,
{ "Productbuild", "ntlmssp.ntlmssp_VERSION.ProductBuild", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_DATAGRAM,
{ "Ntlmssp Negotiate Datagram", "ntlmssp.NEGOTIATE.NTLMSSP_NEGOTIATE_DATAGRAM", FT_BOOLEAN, 32, TFS(&NEGOTIATE_NTLMSSP_NEGOTIATE_DATAGRAM_tfs), ( 0x00000040 ), NULL, HFILL }},
+ { &hf_ntlmssp_ntlmssp_AvValue_valMsvAvNbDomainName_AvNbDomainName,
+ { "Avnbdomainname", "ntlmssp.ntlmssp_AvValue_valMsvAvNbDomainName.AvNbDomainName", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
+ { &hf_ntlmssp_ntlmssp_AvValue_valMsvAvNbComputerName_AvNbComputerName,
+ { "Avnbcomputername", "ntlmssp.ntlmssp_AvValue_valMsvAvNbComputerName.AvNbComputerName", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_AUTHENTICATE_MESSAGE_DomainName,
{ "Domainname", "ntlmssp.AUTHENTICATE_MESSAGE.DomainName", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_ntlmssp_ntlmssp_AvValue_AvDnsComputerName,
- { "Avdnscomputername", "ntlmssp.ntlmssp_AvValue.AvDnsComputerName", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_128,
{ "Ntlmssp Negotiate 128", "ntlmssp.NEGOTIATE.NTLMSSP_NEGOTIATE_128", FT_BOOLEAN, 32, TFS(&NEGOTIATE_NTLMSSP_NEGOTIATE_128_tfs), ( 0x20000000 ), NULL, HFILL }},
{ &hf_ntlmssp_NTLMv2_CLIENT_CHALLENGE_Reserved3,
{ "Ntlmssp Negotiate Extended Sessionsecurity", "ntlmssp.NEGOTIATE.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY", FT_BOOLEAN, 32, TFS(&NEGOTIATE_NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY_tfs), ( 0x00080000 ), NULL, HFILL }},
{ &hf_ntlmssp_CHALLENGE_MESSAGE_NegotiateFlags,
{ "Negotiateflags", "ntlmssp.CHALLENGE_MESSAGE.NegotiateFlags", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
- { &hf_ntlmssp_ntlmssp_AvValue_AvTargetName,
- { "Avtargetname", "ntlmssp.ntlmssp_AvValue.AvTargetName", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_NTLMSSP_TARGET_TYPE_SERVER,
{ "Ntlmssp Target Type Server", "ntlmssp.NEGOTIATE.NTLMSSP_TARGET_TYPE_SERVER", FT_BOOLEAN, 32, TFS(&NEGOTIATE_NTLMSSP_TARGET_TYPE_SERVER_tfs), ( 0x00020000 ), NULL, HFILL }},
{ &hf_ntlmssp_NEGOTIATE_NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED,
{ "Productmajorversion", "ntlmssp.ntlmssp_VERSION.ProductMajorVersion", FT_UINT8, BASE_DEC, VALS(ntlmssp_ntlmssp_WindowsMajorVersion_vals), 0, NULL, HFILL }},
{ &hf_ntlmssp_AUTHENTICATE_MESSAGE_Workstation,
{ "Workstation", "ntlmssp.AUTHENTICATE_MESSAGE.Workstation", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
- { &hf_ntlmssp_ntlmssp_AvValue_AvDnsDomainName,
- { "Avdnsdomainname", "ntlmssp.ntlmssp_AvValue.AvDnsDomainName", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
+ { &hf_ntlmssp_ntlmssp_AvValue_valMsvAvDnsDomainName_AvDnsDomainName,
+ { "Avdnsdomainname", "ntlmssp.ntlmssp_AvValue_valMsvAvDnsDomainName.AvDnsDomainName", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_ntlmssp_NTLMv2_CLIENT_CHALLENGE_TimeStamp,
{ "Timestamp", "ntlmssp.NTLMv2_CLIENT_CHALLENGE.TimeStamp", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }},
+ { &hf_ntlmssp_ntlmssp_AvValue_valMsAvRestrictions_AvRestrictions,
+ { "Avrestrictions", "ntlmssp.ntlmssp_AvValue_valMsAvRestrictions.AvRestrictions", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
+ { &hf_ntlmssp_ntlmssp_AvValue_valMsvAvTimestamp_AvTimestamp,
+ { "Avtimestamp", "ntlmssp.ntlmssp_AvValue_valMsvAvTimestamp.AvTimestamp", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }},
};