* Routines for the efsrpc MSRPC interface\r
* Copyright 2004 Ronnie Sahlberg, Jean-Baptiste Marchand\r
*\r
- * $Id: packet-dcerpc-efs.c,v 1.1 2004/04/29 22:40:21 sahlberg Exp $\r
+ * $Id: packet-dcerpc-efs.c,v 1.2 2004/05/19 04:52:31 tpot Exp $\r
*\r
* Ethereal - Network traffic analyzer\r
* By Gerald Combs <gerald@ethereal.com>\r
packet_info *pinfo, proto_tree *tree,\r
guint8 *drep)\r
{\r
- offset = dissect_ndr_nt_SID(tvb, offset,\r
- pinfo, tree, drep, -1);\r
+ offset = dissect_ndr_nt_SID(tvb, offset, pinfo, tree, drep);\r
\r
return offset;\r
}\r
* Copyright 2001,2003 Tim Potter <tpot@samba.org>
* 2002 Added LSA command dissectors Ronnie Sahlberg
*
- * $Id: packet-dcerpc-lsa.c,v 1.93 2004/03/30 07:39:04 sharpe Exp $
+ * $Id: packet-dcerpc-lsa.c,v 1.94 2004/05/19 04:52:31 tpot Exp $
*
* Ethereal - Network traffic analyzer
* By Gerald Combs <gerald@ethereal.com>
static int hf_lsa_index = -1;
static int hf_lsa_fqdomain = -1;
static int hf_lsa_domain = -1;
-static int hf_lsa_domain_sid = -1;
static int hf_lsa_acct = -1;
static int hf_lsa_server_role = -1;
static int hf_lsa_source = -1;
hf_lsa_domain, 0);
/* sid */
- offset = dissect_ndr_nt_PSID(tvb, offset,
- pinfo, tree, drep, hf_lsa_domain_sid);
+ offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep);
proto_item_set_len(item, offset-old_offset);
return offset;
hf_lsa_domain, 0);
/* sid */
- offset = dissect_ndr_nt_PSID(tvb, offset,
- pinfo, tree, drep, hf_lsa_domain_sid);
+ offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep);
proto_item_set_len(item, offset-old_offset);
return offset;
pinfo, tree, drep);
/* SID pointer */
- offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep, hf_lsa_domain_sid);
+ offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep);
proto_item_set_len(item, offset-old_offset);
return offset;
hf_lsa_name, 0);
/* sid */
- offset = dissect_ndr_nt_PSID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep);
proto_item_set_len(item, offset-old_offset);
return offset;
hf_lsa_flat_name, 0);
/* sid */
- offset = dissect_ndr_nt_PSID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep);
/* direction */
offset = dissect_ndr_uint32 (tvb, offset, pinfo, tree, drep,
offset = dissect_nt_policy_hnd(tvb, offset, pinfo, tree, drep,
hf_lsa_hnd, NULL, NULL, FALSE, FALSE);
- offset = dissect_ndr_nt_SID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_SID(tvb, offset, pinfo, tree, drep);
/* unknown */
offset = dissect_ndr_uint32 (tvb, offset, pinfo, tree, drep,
offset = dissect_nt_policy_hnd(tvb, offset, pinfo, tree, drep,
hf_lsa_hnd, NULL, NULL, FALSE, FALSE);
- offset = dissect_ndr_nt_SID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_SID(tvb, offset, pinfo, tree, drep);
offset = lsa_dissect_ACCESS_MASK(tvb, offset,
pinfo, tree, drep);
offset = dissect_nt_policy_hnd(tvb, offset, pinfo, tree, drep,
hf_lsa_hnd, NULL, NULL, FALSE, FALSE);
- offset = dissect_ndr_nt_SID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_SID(tvb, offset, pinfo, tree, drep);
return offset;
}
hf_lsa_domain, 0);
/* sid */
- offset = dissect_ndr_nt_PSID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep);
proto_item_set_len(item, offset-old_offset);
return offset;
hf_lsa_hnd, NULL, NULL, FALSE, FALSE);
/* [in, ref] SID *account */
- offset = dissect_ndr_nt_SID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_SID(tvb, offset, pinfo, tree, drep);
/* [in] ACCESS_MASK access */
offset = lsa_dissect_ACCESS_MASK(tvb, offset,
hf_lsa_hnd, NULL, NULL, FALSE, FALSE);
/* [in, ref] SID *account */
- offset = dissect_ndr_nt_SID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_SID(tvb, offset, pinfo, tree, drep);
return offset;
}
hf_lsa_hnd, NULL, NULL, FALSE, FALSE);
/* [in, ref] SID *account */
- offset = dissect_ndr_nt_SID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_SID(tvb, offset, pinfo, tree, drep);
/* [in, ref] LSA_UNICODE_STRING_ARRAY *rights */
offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
hf_lsa_hnd, NULL, NULL, FALSE, FALSE);
/* [in, ref] SID *account */
- offset = dissect_ndr_nt_SID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_SID(tvb, offset, pinfo, tree, drep);
/* remove all */
offset = dissect_ndr_uint8 (tvb, offset, pinfo, tree, drep,
hf_lsa_hnd, NULL, NULL, FALSE, FALSE);
/* [in, ref] SID *sid */
- offset = dissect_ndr_nt_SID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_SID(tvb, offset, pinfo, tree, drep);
/* [in] TRUSTED_INFORMATION_CLASS level */
offset = dissect_ndr_uint16 (tvb, offset, pinfo, tree, drep,
hf_lsa_hnd, NULL, NULL, FALSE, FALSE);
/* [in, ref] SID *sid */
- offset = dissect_ndr_nt_SID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_SID(tvb, offset, pinfo, tree, drep);
/* [in] TRUSTED_INFORMATION_CLASS level */
offset = dissect_ndr_uint16 (tvb, offset, pinfo, tree, drep,
offset = dissect_nt_policy_hnd(tvb, offset, pinfo, tree, drep,
hf_lsa_hnd, NULL, NULL, FALSE, FALSE);
- offset = dissect_ndr_nt_SID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_SID(tvb, offset, pinfo, tree, drep);
offset = lsa_dissect_ACCESS_MASK(tvb, offset,
pinfo, tree, drep);
{ "Domain", "lsa.domain", FT_STRING, BASE_NONE,
NULL, 0x0, "Domain", HFILL }},
- { &hf_lsa_domain_sid,
- { "Domain SID", "lsa.domain_sid", FT_STRING, BASE_NONE,
- NULL, 0x0, "The Domain SID", HFILL }},
-
{ &hf_lsa_acct,
{ "Account", "lsa.acct", FT_STRING, BASE_NONE,
NULL, 0x0, "Account", HFILL }},
* Copyright 2001,2003 Tim Potter <tpot@samba.org>
* 2002 structure and command dissectors by Ronnie Sahlberg
*
- * $Id: packet-dcerpc-netlogon.c,v 1.105 2004/05/01 00:34:28 sahlberg Exp $
+ * $Id: packet-dcerpc-netlogon.c,v 1.106 2004/05/19 04:52:31 tpot Exp $
*
* Ethereal - Network traffic analyzer
* By Gerald Combs <gerald@ethereal.com>
static int hf_netlogon_logon_srv = -1;
static int hf_netlogon_principal = -1;
static int hf_netlogon_logon_dom = -1;
-static int hf_netlogon_resourcegroupdomainsid = -1;
static int hf_netlogon_resourcegroupcount = -1;
static int hf_netlogon_downlevel_domain_name = -1;
static int hf_netlogon_dns_domain_name = -1;
offset = dissect_ndr_counted_string(tvb, offset, pinfo, tree, drep,
hf_netlogon_logon_dom, 0);
- offset = dissect_ndr_nt_PSID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep);
for(i=0;i<2;i++){
offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
offset = dissect_ndr_counted_string(tvb, offset, pinfo, tree, drep,
hf_netlogon_logon_dom, 0);
- offset = dissect_ndr_nt_PSID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep);
for(i=0;i<2;i++){
offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
offset = dissect_ndr_counted_string(tvb, offset, pinfo, tree, drep,
hf_netlogon_logon_dom, 0);
- offset = dissect_ndr_nt_PSID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep);
for(i=0;i<2;i++){
offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
dissect_ndr_nt_SID_AND_ATTRIBUTES_ARRAY, NDR_POINTER_UNIQUE,
"SID_AND_ATTRIBUTES_ARRAY:", -1);
- offset = dissect_ndr_nt_PSID(tvb, offset,
- pinfo, tree, drep, hf_netlogon_resourcegroupdomainsid);
+ offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep);
offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
hf_netlogon_resourcegroupcount, &rgc);
offset = dissect_ndr_counted_string(tvb, offset, pinfo, tree, drep,
hf_netlogon_domain_name, 0);
- offset = dissect_ndr_nt_PSID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep);
offset = netlogon_dissect_QUOTA_LIMITS(tvb, offset,
pinfo, tree, drep);
hf_netlogon_user_rid, NULL);
break;
case 13:
- offset = dissect_ndr_nt_PSID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep);
break;
case 14:
- offset = dissect_ndr_nt_PSID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep);
break;
case 15:
- offset = dissect_ndr_nt_PSID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep);
break;
case 16:
- offset = dissect_ndr_nt_PSID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep);
break;
case 17:
- offset = dissect_ndr_nt_PSID(tvb, offset,
- pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep);
break;
case 18:
offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo,
hf_netlogon_trust_attribs, &tmp);
/* SID pointer */
- offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep);
/* GUID */
offset = dissect_nt_GUID(tvb, offset, pinfo, tree, drep);
{ "Domain", "netlogon.domain", FT_STRING, BASE_NONE,
NULL, 0, "Domain", HFILL }},
- { &hf_netlogon_resourcegroupdomainsid,
- { "ResourceGroupDomainSID", "netlogon.resourcegroupdomainsid", FT_STRING, BASE_NONE,
- NULL, 0, "Resource Group Domain SID", HFILL }},
-
{ &hf_netlogon_resourcegroupcount,
{ "ResourceGroup count", "netlogon.resourcegroupcount", FT_UINT32, BASE_DEC,
NULL, 0, "Number of Resource Groups", HFILL }},
* Routines for DCERPC over SMB packet disassembly
* Copyright 2001-2003, Tim Potter <tpot@samba.org>
*
- * $Id: packet-dcerpc-nt.c,v 1.79 2004/05/15 10:05:09 tpot Exp $
+ * $Id: packet-dcerpc-nt.c,v 1.80 2004/05/19 04:52:31 tpot Exp $
*
* Ethereal - Network traffic analyzer
* By Gerald Combs <gerald@ethereal.com>
/* SID dissection routines */
-static int hf_nt_count= -1;
+static int hf_nt_count = -1;
+static int hf_nt_domain_sid = -1;
int
dissect_ndr_nt_SID(tvbuff_t *tvb, int offset, packet_info *pinfo,
- proto_tree *tree, guint8 *drep, int hf_sid)
+ proto_tree *tree, guint8 *drep)
{
dcerpc_info *di = (dcerpc_info *)pinfo->private_data;
dcerpc_call_value *dcv = (dcerpc_call_value *)di->call_data;
offset = dissect_ndr_uint32 (tvb, offset, pinfo, tree, drep,
hf_nt_count, NULL);
- offset = dissect_nt_sid(tvb, offset, tree, name, &sid_str, hf_sid);
+ offset = dissect_nt_sid(tvb, offset, tree, name, &sid_str,
+ hf_nt_domain_sid);
/* dcv can be null, for example when this ndr structure is embedded
* inside non-dcerpc pdus, i.e. kerberos PAC structure
dissect_ndr_nt_SID_hf_through_ptr(tvbuff_t *tvb, int offset, packet_info *pinfo,
proto_tree *tree, guint8 *drep)
{
- dcerpc_info *di = (dcerpc_info *)pinfo->private_data;
+ offset = dissect_ndr_nt_SID(tvb, offset, pinfo, tree, drep);
- offset = dissect_ndr_nt_SID(tvb, offset, pinfo, tree, drep, di->hf_index);
return offset;
}
int
dissect_ndr_nt_PSID(tvbuff_t *tvb, int offset,
packet_info *pinfo, proto_tree *parent_tree,
- guint8 *drep, int hf_sid)
+ guint8 *drep)
{
proto_item *item=NULL;
proto_tree *tree=NULL;
offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
dissect_ndr_nt_SID_hf_through_ptr, NDR_POINTER_UNIQUE,
- "SID pointer", hf_sid);
+ "SID pointer", hf_nt_domain_sid);
proto_item_set_len(item, offset-old_offset);
return offset;
packet_info *pinfo, proto_tree *parent_tree,
guint8 *drep)
{
- offset=dissect_ndr_nt_PSID(tvb, offset, pinfo, parent_tree, drep, -1);
+ offset=dissect_ndr_nt_PSID(tvb, offset, pinfo, parent_tree, drep);
return offset;
}
tree = proto_item_add_subtree(item, ett_nt_sid_and_attributes);
}
- offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_PSID(tvb, offset, pinfo, tree, drep);
offset = dissect_ndr_uint32 (tvb, offset, pinfo, tree, drep,
hf_nt_attrib, NULL);
/* SIDs */
+ { &hf_nt_domain_sid,
+ { "Domain SID", "nt.domain_sid",
+ FT_STRING, BASE_NONE, NULL, 0x0,
+ "The Domain SID", HFILL }},
+
{ &hf_nt_count,
{ "Count", "nt.count",
FT_UINT32, BASE_DEC, NULL, 0x0,
* Routines for DCERPC over SMB packet disassembly
* Copyright 2001-2003 Tim Potter <tpot@samba.org>
*
- * $Id: packet-dcerpc-nt.h,v 1.49 2004/01/19 20:10:35 jmayer Exp $
+ * $Id: packet-dcerpc-nt.h,v 1.50 2004/05/19 04:52:31 tpot Exp $
*
* Ethereal - Network traffic analyzer
* By Gerald Combs <gerald@ethereal.com>
guint8 *drep);
int
dissect_ndr_nt_SID(tvbuff_t *tvb, int offset,
- packet_info *pinfo, proto_tree *tree,
- guint8 *drep, int hf_sid);
+ packet_info *pinfo, proto_tree *tree,
+ guint8 *drep);
int
dissect_ndr_nt_PSID(tvbuff_t *tvb, int offset,
- packet_info *pinfo, proto_tree *parent_tree,
- guint8 *drep, int hf_sid);
+ packet_info *pinfo, proto_tree *parent_tree,
+ guint8 *drep);
int
dissect_ndr_nt_PSID_ARRAY(tvbuff_t *tvb, int offset,
packet_info *pinfo, proto_tree *parent_tree,
* Copyright 2001,2003 Tim Potter <tpot@samba.org>
* 2002 Added all command dissectors Ronnie Sahlberg
*
- * $Id: packet-dcerpc-samr.c,v 1.106 2004/05/15 10:05:09 tpot Exp $
+ * $Id: packet-dcerpc-samr.c,v 1.107 2004/05/19 04:52:30 tpot Exp $
*
* Ethereal - Network traffic analyzer
* By Gerald Combs <gerald@ethereal.com>
dissect_ndr_nt_SID_no_hf(tvbuff_t *tvb, int offset, packet_info *pinfo,
proto_tree *tree, guint8 *drep)
{
- offset = dissect_ndr_nt_SID(tvb, offset, pinfo, tree, drep, -1);
+ offset = dissect_ndr_nt_SID(tvb, offset, pinfo, tree, drep);
return offset;
}