epan/dissectors/packet-dcerpc-nt.h

   1 /* packet-dcerpc-nt.h
   2  * Routines for DCERPC over SMB packet disassembly
   3  * Copyright 2001-2003 Tim Potter <tpot@samba.org>
   4  *
   5  * $Id$
   6  *
   7  * Ethereal - Network traffic analyzer
   8  * By Gerald Combs <gerald@ethereal.com>
   9  * Copyright 1998 Gerald Combs
  10  *
  11  * This program is free software; you can redistribute it and/or
  12  * modify it under the terms of the GNU General Public License
  13  * as published by the Free Software Foundation; either version 2
  14  * of the License, or (at your option) any later version.
  15  *
  16  * This program is distributed in the hope that it will be useful,
  17  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  18  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  19  * GNU General Public License for more details.
  20  *
  21  * You should have received a copy of the GNU General Public License
  22  * along with this program; if not, write to the Free Software
  23  * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
  24  */
  25
  26 #ifndef __PACKET_DCERPC_NT_H
  27 #define __PACKET_DCERPC_NT_H
  28
  29 /*
  30  * ett_ value for Unicode strings.
  31  */
  32 extern gint ett_nt_unicode_string;
  33
  34 /*
  35  * Platform ID values, used by several dissectors.
  36  */
  37 extern const value_string platform_id_vals[];
  38
  39 /* Routines for handling deferral of referants in NDR */
  40
  41 #define ALIGN_TO_4_BYTES \
  42         { dcerpc_info *xzdi; \
  43           xzdi=pinfo->private_data; \
  44           if(!xzdi->conformant_run) { \
  45                 if(offset&0x03) { \
  46                         offset=(offset&0xfffffffc)+4; \
  47                 } \
  48           } \
  49         }
  50
  51 int
  52 dissect_ndr_counted_string_cb(tvbuff_t *tvb, int offset,
  53                               packet_info *pinfo, proto_tree *tree,
  54                               guint8 *drep, int hf_index,
  55                               dcerpc_callback_fnct_t *callback,
  56                               void *callback_args);
  57
  58 int
  59 dissect_ndr_counted_string_ptr(tvbuff_t *tvb, int offset,
  60                                packet_info *pinfo, proto_tree *parent_tree,
  61                                guint8 *drep);
  62
  63 int
  64 dissect_ndr_counted_string(tvbuff_t *tvb, int offset,
  65                            packet_info *pinfo, proto_tree *parent_tree,
  66                            guint8 *drep, int hf_index, int levels);
  67
  68 int
  69 dissect_ndr_counted_byte_array(tvbuff_t *tvb, int offset,
  70                                packet_info *pinfo, proto_tree *parent_tree,
  71                                guint8 *drep, int hf_index);
  72
  73 int
  74 dissect_ndr_counted_byte_array_cb(tvbuff_t *tvb, int offset,
  75                                   packet_info *pinfo, proto_tree *tree,
  76                                   guint8 *drep, int hf_index,
  77                                   dcerpc_callback_fnct_t *callback,
  78                                   void *callback_args);
  79
  80 int
  81 dissect_ndr_nt_acct_ctrl(tvbuff_t *tvb, int offset, packet_info *pinfo,
  82                         proto_tree *parent_tree, guint8 *drep);
  83 int
  84 dissect_ndr_nt_NTTIME (tvbuff_t *tvb, int offset,
  85                         packet_info *pinfo, proto_tree *tree,
  86                         guint8 *drep, int hf_index);
  87 int
  88 dissect_ndr_nt_LOGON_HOURS(tvbuff_t *tvb, int offset,
  89                         packet_info *pinfo, proto_tree *parent_tree,
  90                         guint8 *drep);
  91 int
  92 dissect_ndr_nt_SID(tvbuff_t *tvb, int offset,
  93                    packet_info *pinfo, proto_tree *tree,
  94                    guint8 *drep);
  95 int
  96 dissect_ndr_nt_PSID(tvbuff_t *tvb, int offset,
  97                     packet_info *pinfo, proto_tree *parent_tree,
  98                     guint8 *drep);
  99 int
 100 dissect_ndr_nt_PSID_ARRAY(tvbuff_t *tvb, int offset,
 101                         packet_info *pinfo, proto_tree *parent_tree,
 102                         guint8 *drep);
 103
 104 int
 105 dissect_ndr_nt_SID_AND_ATTRIBUTES_ARRAY(tvbuff_t *tvb, int offset,
 106                         packet_info *pinfo, proto_tree *parent_tree,
 107                         guint8 *drep);
 108 int
 109 dissect_ndr_nt_SID_AND_ATTRIBUTES(tvbuff_t *tvb, int offset,
 110                         packet_info *pinfo, proto_tree *parent_tree,
 111                         guint8 *drep);
 112
 113 /*
 114  * Policy handle hashing
 115  */
 116
 117 /* Store open and close packet numbers for a policy handle */
 118
 119 void
 120 dcerpc_smb_store_pol_pkts(e_ctx_hnd *policy_hnd, packet_info *pinfo,
 121                           gboolean is_open, gboolean is_close);
 122
 123 /* Store a name with a policy handle */
 124
 125 void
 126 dcerpc_smb_store_pol_name(e_ctx_hnd *policy_hnd, packet_info *pinfo,
 127                           char *name);
 128
 129 /* Fetch details stored with a policy handle */
 130
 131 gboolean
 132 dcerpc_smb_fetch_pol(e_ctx_hnd *policy_hnd, char **name,
 133                      guint32 *open_frame, guint32 *close_frame,
 134                      guint32 cur_frame);
 135
 136 /* Dissect NT specific things */
 137
 138 int
 139 dissect_ntstatus(tvbuff_t *tvb, gint offset, packet_info *pinfo,
 140                  proto_tree *tree, guint8 *drep,
 141                  int hfindex, guint32 *pdata);
 142
 143 int
 144 dissect_doserror(tvbuff_t *tvb, gint offset, packet_info *pinfo,
 145                  proto_tree *tree, guint8 *drep,
 146                  int hfindex, guint32 *pdata);
 147
 148 int
 149 dissect_nt_policy_hnd(tvbuff_t *tvb, gint offset, packet_info *pinfo,
 150                       proto_tree *tree, guint8 *drep, int hfindex,
 151                       e_ctx_hnd *pdata, proto_item **pitem,
 152                       gboolean is_open, gboolean is_close);
 153
 154 int
 155 dissect_nt_GUID(tvbuff_t *tvb, int offset,
 156                         packet_info *pinfo, proto_tree *parent_tree,
 157                         guint8 *drep);
 158
 159 int
 160 dissect_nt_LUID(tvbuff_t *tvb, int offset,
 161                         packet_info *pinfo, proto_tree *tree,
 162                         guint8 *drep);
 163
 164 /* Stored here instead of packet-dcerpc{,-ndr}.c as they are probably not
 165    official NDR representations. */
 166
 167 int dissect_dcerpc_uint8s(tvbuff_t *tvb, gint offset, packet_info *pinfo,
 168                           proto_tree *tree, guint8 *drep,
 169                           int hfindex, int length, const guint8 **pdata);
 170
 171 int dissect_ndr_uint8s(tvbuff_t *tvb, gint offset, packet_info *pinfo,
 172                        proto_tree *tree, guint8 *drep,
 173                        int hfindex, int length, const guint8 **pdata);
 174
 175 int dissect_dcerpc_uint16s(tvbuff_t *tvb, gint offset, packet_info *pinfo,
 176                            proto_tree *tree, guint8 *drep,
 177                            int hfindex, int length);
 178
 179 int dissect_ndr_uint16s(tvbuff_t *tvb, gint offset, packet_info *pinfo,
 180                         proto_tree *tree, guint8 *drep,
 181                         int hfindex, int length);
 182
 183 int dissect_ndr_str_pointer_item(tvbuff_t *tvb, gint offset,
 184                                  packet_info *pinfo, proto_tree *tree,
 185                                  guint8 *drep, int type, char *text,
 186                                  int hf_index, int levels);
 187
 188 /*
 189  * Helper routines for dissecting NDR strings
 190  */
 191
 192 /* Number of levels to go up appending string to pointer item */
 193 #define CB_STR_ITEM_LEVELS(x)   ((x) & 0xFFFF)
 194 #define CB_STR_COL_INFO 0x10000 /* Append string to COL_INFO */
 195 #define CB_STR_SAVE     0x20000 /* Save string to dcv->private_data */
 196
 197 void cb_wstr_postprocess(packet_info *pinfo, proto_tree *tree _U_,
 198                         proto_item *item, tvbuff_t *tvb,
 199                         int start_offset, int end_offset,
 200                         void *callback_args);
 201 void cb_str_postprocess(packet_info *pinfo, proto_tree *tree _U_,
 202                         proto_item *item, tvbuff_t *tvb,
 203                         int start_offset, int end_offset,
 204                         void *callback_args);
 205
 206 /* Initialise DCERPC over SMB */
 207
 208 void dcerpc_smb_init(int proto_dcerpc);
 209
 210 #endif /* packet-dcerpc-nt.h */