* Routines for DCERPC over SMB packet disassembly
* Copyright 2001, Tim Potter <tpot@samba.org>
*
- * $Id: packet-dcerpc-nt.h,v 1.3 2002/01/25 08:35:59 guy Exp $
+ * $Id: packet-dcerpc-nt.h,v 1.27 2002/06/28 01:23:26 tpot Exp $
*
* Ethereal - Network traffic analyzer
* By Gerald Combs <gerald@ethereal.com>
#ifndef __PACKET_DCERPC_NT_H
#define __PACKET_DCEPRC_NT_H
+/*
+ * ett_ value for Unicode strings.
+ */
+extern gint ett_nt_unicode_string;
+
/* Routines for parsing simple types */
int prs_align(int offset, int n);
proto_tree *tree, guint8 *data, char *name);
int prs_uint8s(tvbuff_t *tvb, int offset, packet_info *pinfo,
- proto_tree *tree, int count, guint8 **data, char *name);
+ proto_tree *tree, int count, int *data_offset, char *name);
int prs_uint16(tvbuff_t *tvb, int offset, packet_info *pinfo,
proto_tree *tree, guint16 *data, char *name);
int prs_uint16s(tvbuff_t *tvb, int offset, packet_info *pinfo,
- proto_tree *tree, int count, guint16 **data, char *name);
+ proto_tree *tree, int count, int *data_offset, char *name);
int prs_uint32(tvbuff_t *tvb, int offset, packet_info *pinfo,
proto_tree *tree, guint32 *data, char *name);
int prs_uint32s(tvbuff_t *tvb, int offset, packet_info *pinfo,
- proto_tree *tree, int count, guint32 **data, char *name);
+ proto_tree *tree, int count, int *data_offset, char *name);
/* Parse NT status code */
/* Parse some common RPC structures */
-char *fake_unicode(guint16 *data, int len);
+char *fake_unicode(tvbuff_t *tvb, int offset, int len);
int prs_UNISTR2(tvbuff_t *tvb, int offset, packet_info *pinfo,
proto_tree *tree, int flags, char **data, char *name);
-int prs_policy_hnd(tvbuff_t *tvb, int offset, packet_info *pinfo,
- proto_tree *tree, const guint8 **data);
-
/* Routines for handling deferral of referants in NDR */
#define PARSE_SCALARS 1
guint32 prs_pop_ptr(GList **ptr_list, char *name);
-int dissect_ndr_nt_UNICODE_STRING (tvbuff_t *tvb, int offset,
- packet_info *pinfo, proto_tree *parent_tree,
- char *drep, int hf_index);
-int dissect_ndr_nt_STRING (tvbuff_t *tvb, int offset,
- packet_info *pinfo, proto_tree *parent_tree,
- char *drep, int hf_index);
+
+
+#define ALIGN_TO_4_BYTES \
+ { dcerpc_info *xzdi; \
+ xzdi=pinfo->private_data; \
+ if(!xzdi->conformant_run) { \
+ if(offset&0x03) { \
+ offset=(offset&0xfffffffc)+4; \
+ } \
+ } \
+ }
+
+int
+dissect_ndr_nt_UNICODE_STRING_str(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *tree,
+ char *drep);
+int
+dissect_ndr_nt_UNICODE_STRING(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *parent_tree,
+ char *drep, int hf_index, int levels);
+int
+dissect_ndr_nt_STRING_string (tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *tree,
+ char *drep);
+int
+dissect_ndr_nt_STRING (tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *parent_tree,
+ char *drep, int hf_index, int levels);
+int
+dissect_ndr_nt_acct_ctrl(tvbuff_t *tvb, int offset, packet_info *pinfo,
+ proto_tree *parent_tree, char *drep);
+int
+dissect_ndr_nt_NTTIME (tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *tree,
+ char *drep, int hf_index);
+int
+dissect_ndr_nt_LOGON_HOURS(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *parent_tree,
+ char *drep);
+int
+dissect_ndr_nt_SID(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *tree,
+ char *drep);
+int
+dissect_ndr_nt_PSID(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *parent_tree,
+ char *drep);
+int
+dissect_ndr_nt_PSID_ARRAY(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *parent_tree,
+ char *drep);
+
+int
+dissect_ndr_nt_SID_AND_ATTRIBUTES_ARRAY(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *parent_tree,
+ char *drep);
+int
+dissect_ndr_nt_SID_AND_ATTRIBUTES(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *parent_tree,
+ char *drep);
+
+/*
+ * Policy handle hashing
+ */
+
+/* Store open and close packet numbers for a policy handle */
+
+void
+dcerpc_smb_store_pol_pkts(e_ctx_hnd *policy_hnd, guint32 open_frame,
+ guint32 close_frame);
+
+/* Store a name with a policy handle */
+
+void
+dcerpc_smb_store_pol_name(e_ctx_hnd *policy_hnd, char *name);
+
+/* Fetch details stored with a policy handle */
+
+gboolean
+dcerpc_smb_fetch_pol(e_ctx_hnd *policy_hnd, char **name,
+ guint32 *open_frame, guint32 *close_frame);
+
+/* Check for unparsed data at the end of a frame */
+
+void
+dcerpc_smb_check_long_frame(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *tree);
+
+/* Dissect NT specific things */
+
+int
+dissect_ntstatus(tvbuff_t *tvb, gint offset, packet_info *pinfo,
+ proto_tree *tree, char *drep,
+ int hfindex, guint32 *pdata);
+
+int
+dissect_doserror(tvbuff_t *tvb, gint offset, packet_info *pinfo,
+ proto_tree *tree, char *drep,
+ int hfindex, guint32 *pdata);
+
+int
+dissect_nt_policy_hnd(tvbuff_t *tvb, gint offset, packet_info *pinfo,
+ proto_tree *tree, char *drep, int hfindex,
+ e_ctx_hnd *pdata, gboolean is_open, gboolean is_close);
+
+int
+dissect_nt_GUID(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *parent_tree,
+ char *drep);
+
+int
+dissect_nt_LUID(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *tree,
+ char *drep);
+
+/* Stored here instead of packet-dcerpc{,-ndr}.c as they are probably not
+ official NDR representations. */
+
+int dissect_dcerpc_uint8s(tvbuff_t *tvb, gint offset, packet_info *pinfo,
+ proto_tree *tree, char *drep,
+ int hfindex, int length, guint8 **pdata);
+
+int dissect_ndr_uint8s(tvbuff_t *tvb, gint offset, packet_info *pinfo,
+ proto_tree *tree, char *drep,
+ int hfindex, int length, guint8 **pdata);
+
+int dissect_dcerpc_uint16s(tvbuff_t *tvb, gint offset, packet_info *pinfo,
+ proto_tree *tree, char *drep,
+ int hfindex, int length, guint16 **pdata);
+
+int dissect_ndr_uint16s(tvbuff_t *tvb, gint offset, packet_info *pinfo,
+ proto_tree *tree, char *drep,
+ int hfindex, int length, guint16 **pdata);
#endif /* packet-dcerpc-nt.h */
git.samba.org / obnox / wireshark / wip.git / blobdiff