1 /* packet-dcerpc-browser.c
2 * Routines for DCERPC Browser packet disassembly
3 * Copyright 2001, Ronnie Sahlberg
5 * $Id: packet-dcerpc-browser.c,v 1.14 2004/01/19 20:10:33 jmayer Exp $
7 * Ethereal - Network traffic analyzer
8 * By Gerald Combs <gerald@ethereal.com>
9 * Copyright 1998 Gerald Combs
11 * This program is free software; you can redistribute it and/or
12 * modify it under the terms of the GNU General Public License
13 * as published by the Free Software Foundation; either version 2
14 * of the License, or (at your option) any later version.
16 * This program is distributed in the hope that it will be useful,
17 * but WITHOUT ANY WARRANTY; without even the implied warranty of
18 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
19 * GNU General Public License for more details.
21 * You should have received a copy of the GNU General Public License
22 * along with this program; if not, write to the Free Software
23 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
26 /* The IDL file for this interface can be extracted by grepping for idl
35 #include <epan/packet.h>
36 #include "packet-dcerpc.h"
37 #include "packet-dcerpc-browser.h"
38 #include "packet-dcerpc-nt.h"
41 static int proto_dcerpc_browser = -1;
42 static int hf_browser_opnum = -1;
43 static int hf_browser_rc = -1;
44 static int hf_browser_unknown_long = -1;
45 static int hf_browser_unknown_hyper = -1;
46 static int hf_browser_unknown_bytes = -1;
47 static int hf_browser_unknown_string = -1;
50 static gint ett_dcerpc_browser = -1;
54 dissect_browser_long_pointer(tvbuff_t *tvb, int offset,
55 packet_info *pinfo, proto_tree *tree,
60 di=pinfo->private_data;
61 offset = dissect_ndr_uint32 (tvb, offset, pinfo, tree, drep,
69 IDL [ uuid(6bffd098-a112-3610-9833-012892020162),
71 IDL implicit_handle(handle_t rpc_binding)
72 IDL ] interface browser
76 static e_uuid_t uuid_dcerpc_browser = {
77 0x6bffd098, 0xa112, 0x3610,
78 { 0x98, 0x33, 0x01, 0x28, 0x92, 0x02, 0x01, 0x62 }
81 static guint16 ver_dcerpc_browser = 0;
87 IDL [size_is(element_7)] [unique] byte *element_8;
91 dissect_browser_TYPE_4_data(tvbuff_t *tvb, int offset,
92 packet_info *pinfo, proto_tree *tree,
98 di=pinfo->private_data;
99 if(di->conformant_run){
100 /* this call is to make ethereal eat the array header for the conformant run */
101 offset =dissect_ndr_ucarray(tvb, offset, pinfo, tree, drep, NULL);
105 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
106 hf_browser_unknown_long, &len);
108 proto_tree_add_item(tree, hf_browser_unknown_bytes, tvb, offset, len,
115 dissect_browser_TYPE_4(tvbuff_t *tvb, int offset,
116 packet_info *pinfo, proto_tree *tree,
119 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
120 hf_browser_unknown_long, NULL);
122 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
123 dissect_browser_TYPE_4_data, NDR_POINTER_UNIQUE,
124 "unknown TYPE_4", -1);
133 IDL [size_is(element_5)] [unique] byte *element_6;
137 dissect_browser_TYPE_3_data(tvbuff_t *tvb, int offset,
138 packet_info *pinfo, proto_tree *tree,
144 di=pinfo->private_data;
145 if(di->conformant_run){
146 /* this call is to make ethereal eat the array header for the conformant run */
147 offset =dissect_ndr_ucarray(tvb, offset, pinfo, tree, drep, NULL);
152 /* this is really the length of the encoded data */
153 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
154 hf_browser_unknown_long, &len);
155 proto_tree_add_item(tree, hf_browser_unknown_bytes, tvb, offset, len,
162 dissect_browser_TYPE_3(tvbuff_t *tvb, int offset,
163 packet_info *pinfo, proto_tree *tree,
166 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
167 hf_browser_unknown_long, NULL);
169 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
170 dissect_browser_TYPE_3_data, NDR_POINTER_UNIQUE,
171 "unknown TYPE_3", -1);
179 IDL typedef [switch_type(long)] union {
180 IDL [case(100)] [unique] TYPE_3 *element_3;
181 IDL [case(101)] [unique] TYPE_4 *element_4;
185 dissect_browser_TYPE_2(tvbuff_t *tvb, int offset,
186 packet_info *pinfo, proto_tree *tree,
191 /* this is really the union switch arm */
192 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
193 hf_browser_unknown_long, &level);
199 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
200 dissect_browser_TYPE_3, NDR_POINTER_UNIQUE,
201 "unknown TYPE_3", -1);
204 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
205 dissect_browser_TYPE_4, NDR_POINTER_UNIQUE,
206 "unknown TYPE_4", -1);
217 IDL TYPE_2 element_2;
221 dissect_browser_TYPE_1(tvbuff_t *tvb, int offset,
222 packet_info *pinfo, proto_tree *tree,
225 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
226 hf_browser_unknown_long, NULL);
228 offset = dissect_browser_TYPE_2(tvb, offset, pinfo, tree, drep);
236 IDL long BrowserrServerEnum(
237 IDL [in] [unique] [string] wchar_t *element_9,
238 IDL [in] [unique] [string] wchar_t *element_10,
239 IDL [in] [unique] [string] wchar_t *element_11,
240 IDL [in,out] [ref] TYPE_1 *element_12,
241 IDL [in] long element_13,
242 IDL [out] long element_14,
243 IDL [in] long element_15,
244 IDL [in] [unique] [string] wchar_t *element_16,
245 IDL [in,out] [unique] long *element_17
249 dissect_browser_browserr_server_enum_rqst(tvbuff_t *tvb, int offset,
250 packet_info *pinfo, proto_tree *tree,
253 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
254 NDR_POINTER_UNIQUE, "unknown string",
255 hf_browser_unknown_string, 0);
257 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
258 NDR_POINTER_UNIQUE, "unknown string",
259 hf_browser_unknown_string, 0);
261 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
262 NDR_POINTER_UNIQUE, "unknown string",
263 hf_browser_unknown_string, 0);
265 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
266 dissect_browser_TYPE_1, NDR_POINTER_REF,
267 "unknown TYPE_1", -1);
269 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
270 hf_browser_unknown_long, NULL);
272 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
273 hf_browser_unknown_long, NULL);
275 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
276 NDR_POINTER_UNIQUE, "unknown string",
277 hf_browser_unknown_string, 0);
279 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
280 dissect_browser_long_pointer, NDR_POINTER_UNIQUE,
281 "unknown long", hf_browser_unknown_long);
286 dissect_browser_browserr_server_enum_reply(tvbuff_t *tvb, int offset,
287 packet_info *pinfo, proto_tree *tree,
290 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
291 dissect_browser_TYPE_1, NDR_POINTER_REF,
292 "unknown TYPE_1", -1);
294 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
295 hf_browser_unknown_long, NULL);
297 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
298 dissect_browser_long_pointer, NDR_POINTER_UNIQUE,
299 "unknown long", hf_browser_unknown_long);
301 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
302 hf_browser_rc, NULL);
308 IDL long BrowserrDebugCall(
309 IDL [in] [unique] [string] wchar_t *element_18,
310 IDL [in] long element_19,
311 IDL [in] long element_20
315 dissect_browser_browserr_debug_call_rqst(tvbuff_t *tvb, int offset,
316 packet_info *pinfo, proto_tree *tree,
319 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
320 NDR_POINTER_UNIQUE, "unknown string",
321 hf_browser_unknown_string, 0);
323 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
324 hf_browser_unknown_long, NULL);
326 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
327 hf_browser_unknown_long, NULL);
332 dissect_browser_browserr_debug_call_reply(tvbuff_t *tvb, int offset,
333 packet_info *pinfo, proto_tree *tree,
336 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
337 hf_browser_rc, NULL);
344 IDL long BrowserrQueryOtherDomains(
345 IDL [in] [unique] [string] wchar_t *element_21,
346 IDL [in,out] [ref] TYPE_1 *element_22,
347 IDL [out] long element_23
351 dissect_browser_browserr_query_other_domains_rqst(tvbuff_t *tvb, int offset,
352 packet_info *pinfo, proto_tree *tree,
355 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
356 NDR_POINTER_UNIQUE, "unknown string",
357 hf_browser_unknown_string, 0);
359 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
360 dissect_browser_TYPE_1, NDR_POINTER_REF,
361 "unknown TYPE_1", -1);
366 dissect_browser_browserr_query_other_domains_reply(tvbuff_t *tvb, int offset,
367 packet_info *pinfo, proto_tree *tree,
370 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
371 hf_browser_unknown_long, NULL);
373 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
374 hf_browser_rc, NULL);
381 IDL long BrowserrResetNetlogonState(
382 IDL [in] [unique] [string] wchar_t *element_24
386 dissect_browser_browserr_reset_netlogon_state_rqst(tvbuff_t *tvb, int offset,
387 packet_info *pinfo, proto_tree *tree,
390 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
391 NDR_POINTER_UNIQUE, "unknown string",
392 hf_browser_unknown_string, 0);
397 dissect_browser_browserr_reset_netlogon_state_reply(tvbuff_t *tvb, int offset,
398 packet_info *pinfo, proto_tree *tree,
401 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
402 hf_browser_rc, NULL);
409 IDL long BrowserrDebugTrace(
410 IDL [in] [unique] [string] wchar_t *element_25,
411 IDL [in] [string] char element_26
415 dissect_browser_browserr_debug_trace_rqst(tvbuff_t *tvb, int offset,
416 packet_info *pinfo, proto_tree *tree,
419 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
420 NDR_POINTER_UNIQUE, "unknown string",
421 hf_browser_unknown_string, 0);
423 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
424 NDR_POINTER_REF, "unknown string",
425 hf_browser_unknown_string, 0);
430 dissect_browser_browserr_debug_trace_reply(tvbuff_t *tvb, int offset,
431 packet_info *pinfo, proto_tree *tree,
434 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
435 hf_browser_rc, NULL);
444 IDL TYPE_6 element_27;
445 IDL TYPE_6 element_28;
446 IDL TYPE_6 element_29;
462 IDL TYPE_6 element_45;
466 IDL hyper element_46;
470 dissect_browser_TYPE_5(tvbuff_t *tvb, int offset,
471 packet_info *pinfo, proto_tree *tree,
474 offset = dissect_ndr_uint64(tvb, offset, pinfo, tree, drep,
475 hf_browser_unknown_hyper, NULL);
477 offset = dissect_ndr_uint64(tvb, offset, pinfo, tree, drep,
478 hf_browser_unknown_hyper, NULL);
480 offset = dissect_ndr_uint64(tvb, offset, pinfo, tree, drep,
481 hf_browser_unknown_hyper, NULL);
483 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
484 hf_browser_unknown_long, NULL);
486 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
487 hf_browser_unknown_long, NULL);
489 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
490 hf_browser_unknown_long, NULL);
492 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
493 hf_browser_unknown_long, NULL);
495 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
496 hf_browser_unknown_long, NULL);
498 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
499 hf_browser_unknown_long, NULL);
501 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
502 hf_browser_unknown_long, NULL);
504 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
505 hf_browser_unknown_long, NULL);
507 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
508 hf_browser_unknown_long, NULL);
510 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
511 hf_browser_unknown_long, NULL);
513 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
514 hf_browser_unknown_long, NULL);
516 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
517 hf_browser_unknown_long, NULL);
519 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
520 hf_browser_unknown_long, NULL);
522 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
523 hf_browser_unknown_long, NULL);
525 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
526 hf_browser_unknown_long, NULL);
528 offset = dissect_ndr_uint64(tvb, offset, pinfo, tree, drep,
529 hf_browser_unknown_hyper, NULL);
536 IDL long BrowserrQueryStatistics(
537 IDL [in] [unique] [string] wchar_t *element_47,
538 IDL [out] [ref] TYPE_5 **element_48
542 dissect_browser_browserr_query_statistics_rqst(tvbuff_t *tvb, int offset,
543 packet_info *pinfo, proto_tree *tree,
546 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
547 NDR_POINTER_UNIQUE, "unknown string",
548 hf_browser_unknown_string, 0);
553 dissect_browser_browserr_query_statistics_reply(tvbuff_t *tvb, int offset,
554 packet_info *pinfo, proto_tree *tree,
557 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
558 dissect_browser_TYPE_5, NDR_POINTER_UNIQUE,
559 "unknown TYPE_5", -1);
561 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
562 hf_browser_rc, NULL);
569 IDL long BrowserrResetStatistics(
570 IDL [in] [unique] [string] wchar_t *element_49
574 dissect_browser_browserr_reset_statistics_rqst(tvbuff_t *tvb, int offset,
575 packet_info *pinfo, proto_tree *tree,
578 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
579 NDR_POINTER_UNIQUE, "unknown string",
580 hf_browser_unknown_string, 0);
585 dissect_browser_browserr_reset_statistics_reply(tvbuff_t *tvb, int offset,
586 packet_info *pinfo, proto_tree *tree,
589 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
590 hf_browser_rc, NULL);
597 IDL long NetrBrowserStatisticsClear(
598 IDL [in] [unique] [string] wchar_t *element_49
602 dissect_browser_netr_browser_statistics_clear_rqst(tvbuff_t *tvb, int offset,
603 packet_info *pinfo, proto_tree *tree,
606 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
607 NDR_POINTER_UNIQUE, "unknown string",
608 hf_browser_unknown_string, 0);
613 dissect_browser_netr_browser_statistics_clear_reply(tvbuff_t *tvb, int offset,
614 packet_info *pinfo, proto_tree *tree,
617 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
618 hf_browser_rc, NULL);
626 IDL TYPE_6 element_59;
627 IDL TYPE_6 element_60;
628 IDL TYPE_6 element_61;
632 IDL TYPE_6 element_65;
645 dissect_browser_TYPE_11(tvbuff_t *tvb, int offset,
646 packet_info *pinfo, proto_tree *tree,
649 offset = dissect_ndr_uint64(tvb, offset, pinfo, tree, drep,
650 hf_browser_unknown_hyper, NULL);
652 offset = dissect_ndr_uint64(tvb, offset, pinfo, tree, drep,
653 hf_browser_unknown_hyper, NULL);
655 offset = dissect_ndr_uint64(tvb, offset, pinfo, tree, drep,
656 hf_browser_unknown_hyper, NULL);
658 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
659 hf_browser_unknown_long, NULL);
661 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
662 hf_browser_unknown_long, NULL);
664 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
665 hf_browser_unknown_long, NULL);
667 offset = dissect_ndr_uint64(tvb, offset, pinfo, tree, drep,
668 hf_browser_unknown_hyper, NULL);
670 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
671 hf_browser_unknown_long, NULL);
673 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
674 hf_browser_unknown_long, NULL);
676 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
677 hf_browser_unknown_long, NULL);
679 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
680 hf_browser_unknown_long, NULL);
682 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
683 hf_browser_unknown_long, NULL);
685 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
686 hf_browser_unknown_long, NULL);
688 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
689 hf_browser_unknown_long, NULL);
691 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
692 hf_browser_unknown_long, NULL);
694 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
695 hf_browser_unknown_long, NULL);
703 IDL [size_is(element_57)] [unique] TYPE_11 *element_58;
707 dissect_browser_TYPE_11_array(tvbuff_t *tvb, int offset,
708 packet_info *pinfo, proto_tree *tree,
711 offset = dissect_ndr_ucarray(tvb, offset, pinfo, tree, drep,
712 dissect_browser_TYPE_11);
718 dissect_browser_TYPE_10(tvbuff_t *tvb, int offset,
719 packet_info *pinfo, proto_tree *tree,
722 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
723 hf_browser_unknown_long, NULL);
725 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
726 dissect_browser_TYPE_11_array, NDR_POINTER_UNIQUE,
727 "unknown TYPE_11_ARRAY", -1);
736 IDL [size_is(element_55)] [unique] byte *element_56;
740 dissect_browser_TYPE_9_data(tvbuff_t *tvb, int offset,
741 packet_info *pinfo, proto_tree *tree,
747 di=pinfo->private_data;
748 if(di->conformant_run){
749 /* this call is to make ethereal eat the array header for the conformant run */
750 offset =dissect_ndr_ucarray(tvb, offset, pinfo, tree, drep, NULL);
755 /* this is really the length of the encoded data */
756 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
757 hf_browser_unknown_long, &len);
759 proto_tree_add_item(tree, hf_browser_unknown_bytes, tvb, offset, len,
766 dissect_browser_TYPE_9(tvbuff_t *tvb, int offset,
767 packet_info *pinfo, proto_tree *tree,
770 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
771 hf_browser_unknown_long, NULL);
773 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
774 dissect_browser_TYPE_9_data, NDR_POINTER_UNIQUE,
775 "unknown TYPE_9", -1);
782 IDL typedef [switch_type(long)] union {
783 IDL [case(100)] [unique] TYPE_9 *element_53;
784 IDL [case(101)] [unique] TYPE_10 *element_54;
788 dissect_browser_TYPE_8(tvbuff_t *tvb, int offset,
789 packet_info *pinfo, proto_tree *tree,
794 /* this is really the union switch arm */
795 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
796 hf_browser_unknown_long, &level);
802 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
803 dissect_browser_TYPE_9, NDR_POINTER_UNIQUE,
804 "unknown TYPE_9", -1);
807 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
808 dissect_browser_TYPE_10, NDR_POINTER_UNIQUE,
809 "unknown TYPE_10", -1);
820 IDL TYPE_8 element_52;
824 dissect_browser_TYPE_7(tvbuff_t *tvb, int offset,
825 packet_info *pinfo, proto_tree *tree,
828 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
829 hf_browser_unknown_long, NULL);
831 offset = dissect_browser_TYPE_8(tvb, offset, pinfo, tree, drep);
838 IDL long NetrBrowserStatisticsGet(
839 IDL [in] [unique] [string] wchar_t *element_75,
840 IDL [in] long element_76,
841 IDL [in,out] [ref] TYPE_7 *element_77
845 dissect_browser_netr_browser_statistics_get_rqst(tvbuff_t *tvb, int offset,
846 packet_info *pinfo, proto_tree *tree,
849 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
850 NDR_POINTER_UNIQUE, "unknown string",
851 hf_browser_unknown_string, 0);
853 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
854 hf_browser_unknown_long, NULL);
856 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
857 dissect_browser_TYPE_7, NDR_POINTER_REF,
858 "unknown TYPE_7", -1);
863 dissect_browser_netr_browser_statistics_get_reply(tvbuff_t *tvb, int offset,
864 packet_info *pinfo, proto_tree *tree,
867 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
868 dissect_browser_TYPE_7, NDR_POINTER_REF,
869 "unknown TYPE_7", -1);
871 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
872 hf_browser_rc, NULL);
879 IDL long BrowserrSetNetlogonState(
880 IDL [in] [unique] [string] wchar_t *element_78,
881 IDL [in] [ref] [string] wchar_t *element_79,
882 IDL [in] [unique] [string] wchar_t *element_80,
883 IDL [in] long element_81
887 dissect_browser_browserr_set_netlogon_state_rqst(tvbuff_t *tvb, int offset,
888 packet_info *pinfo, proto_tree *tree,
891 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
892 NDR_POINTER_UNIQUE, "unknown string",
893 hf_browser_unknown_string, 0);
895 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
896 NDR_POINTER_REF, "unknown string",
897 hf_browser_unknown_string, 0);
899 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
900 NDR_POINTER_UNIQUE, "unknown string",
901 hf_browser_unknown_string, 0);
903 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
904 hf_browser_unknown_long, NULL);
909 dissect_browser_browserr_set_netlogon_state_reply(tvbuff_t *tvb, int offset,
910 packet_info *pinfo, proto_tree *tree,
913 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
914 hf_browser_rc, NULL);
925 IDL [size_is(element_82)] [unique] byte *element_83;
929 dissect_browser_TYPE_12_data(tvbuff_t *tvb, int offset,
930 packet_info *pinfo, proto_tree *tree,
936 di=pinfo->private_data;
937 if(di->conformant_run){
938 /* this call is to make ethereal eat the array header for the conformant run */
939 offset =dissect_ndr_ucarray(tvb, offset, pinfo, tree, drep, NULL);
944 /* this is really the length of the encoded data */
945 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
946 hf_browser_unknown_long, &len);
948 proto_tree_add_item(tree, hf_browser_unknown_bytes, tvb, offset, len,
955 dissect_browser_TYPE_12(tvbuff_t *tvb, int offset,
956 packet_info *pinfo, proto_tree *tree,
959 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
960 hf_browser_unknown_long, NULL);
962 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
963 dissect_browser_TYPE_12_data, NDR_POINTER_UNIQUE,
964 "unknown TYPE_12", -1);
971 IDL long BrowserrQueryEmulatedDomains(
972 IDL [in] [unique] [string] wchar_t *element_84,
973 IDL [in,out] [ref] TYPE_12 *element_85
977 dissect_browser_browserr_query_emulated_domains_rqst(tvbuff_t *tvb, int offset,
978 packet_info *pinfo, proto_tree *tree,
981 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
982 NDR_POINTER_UNIQUE, "unknown string",
983 hf_browser_unknown_string, 0);
985 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
986 dissect_browser_TYPE_12, NDR_POINTER_REF,
987 "unknown TYPE_12", -1);
992 dissect_browser_browserr_query_emulated_domains_reply(tvbuff_t *tvb, int offset,
993 packet_info *pinfo, proto_tree *tree,
996 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
997 dissect_browser_TYPE_12, NDR_POINTER_REF,
998 "unknown TYPE_12", -1);
1000 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
1001 hf_browser_rc, NULL);
1008 IDL long BrowserrServerEnumEx(
1009 IDL [in] [unique] [string] wchar_t *element_86,
1010 IDL [in] [unique] [string] wchar_t *element_87,
1011 IDL [in] [unique] [string] wchar_t *element_88,
1012 IDL [in,out] [ref] TYPE_1 *element_89,
1013 IDL [in] long element_90,
1014 IDL [out] long element_91,
1015 IDL [in] long element_92,
1016 IDL [in] [unique] [string] wchar_t *element_93,
1017 IDL [in] [unique] [string] wchar_t *element_94
1021 dissect_browser_browserr_server_enum_ex_rqst(tvbuff_t *tvb, int offset,
1022 packet_info *pinfo, proto_tree *tree,
1025 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
1026 NDR_POINTER_UNIQUE, "unknown string",
1027 hf_browser_unknown_string, 0);
1029 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
1030 NDR_POINTER_UNIQUE, "unknown string",
1031 hf_browser_unknown_string, 0);
1033 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
1034 NDR_POINTER_UNIQUE, "unknown string",
1035 hf_browser_unknown_string, 0);
1037 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
1038 dissect_browser_TYPE_1, NDR_POINTER_REF,
1039 "unknown TYPE_1", -1);
1041 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
1042 hf_browser_unknown_long, NULL);
1044 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
1045 hf_browser_unknown_long, NULL);
1047 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
1048 NDR_POINTER_UNIQUE, "unknown string",
1049 hf_browser_unknown_string, 0);
1051 offset = dissect_ndr_str_pointer_item(tvb, offset, pinfo, tree, drep,
1052 NDR_POINTER_UNIQUE, "unknown string",
1053 hf_browser_unknown_string, 0);
1058 dissect_browser_browserr_server_enum_ex_reply(tvbuff_t *tvb, int offset,
1059 packet_info *pinfo, proto_tree *tree,
1062 offset = dissect_ndr_pointer(tvb, offset, pinfo, tree, drep,
1063 dissect_browser_TYPE_1, NDR_POINTER_REF,
1064 "unknown TYPE_1", -1);
1066 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
1067 hf_browser_unknown_long, NULL);
1069 offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep,
1070 hf_browser_rc, NULL);
1080 static dcerpc_sub_dissector dcerpc_browser_dissectors[] = {
1081 { BROWSER_BROWSERR_SERVER_ENUM, "BrowserrServerEnum",
1082 dissect_browser_browserr_server_enum_rqst,
1083 dissect_browser_browserr_server_enum_reply },
1084 { BROWSER_BROWSERR_DEBUG_CALL, "BrowserrDebugCall",
1085 dissect_browser_browserr_debug_call_rqst,
1086 dissect_browser_browserr_debug_call_reply },
1087 { BROWSER_BROWSERR_QUERY_OTHER_DOMAINS,
1088 "BrowserrQueryOtherDomains",
1089 dissect_browser_browserr_query_other_domains_rqst,
1090 dissect_browser_browserr_query_other_domains_reply },
1091 { BROWSER_BROWSERR_RESET_NETLOGON_STATE,
1092 "BrowserrResetNetlogonState",
1093 dissect_browser_browserr_reset_netlogon_state_rqst,
1094 dissect_browser_browserr_reset_netlogon_state_reply },
1095 { BROWSER_BROWSERR_DEBUG_TRACE,
1096 "BrowserrDebugTrace",
1097 dissect_browser_browserr_debug_trace_rqst,
1098 dissect_browser_browserr_debug_trace_reply },
1099 { BROWSER_BROWSERR_QUERY_STATISTICS,
1100 "BrowserrQueryStatistics",
1101 dissect_browser_browserr_query_statistics_rqst,
1102 dissect_browser_browserr_query_statistics_reply },
1103 { BROWSER_BROWSERR_RESET_STATISTICS,
1104 "BrowserrResetStatistics",
1105 dissect_browser_browserr_reset_statistics_rqst,
1106 dissect_browser_browserr_reset_statistics_reply },
1107 { BROWSER_NETR_BROWSER_STATISTICS_CLEAR,
1108 "NetrBrowserStatisticsClear",
1109 dissect_browser_netr_browser_statistics_clear_rqst,
1110 dissect_browser_netr_browser_statistics_clear_reply },
1111 { BROWSER_NETR_BROWSER_STATISTICS_GET,
1112 "NetrBrowserStatisticsGet",
1113 dissect_browser_netr_browser_statistics_get_rqst,
1114 dissect_browser_netr_browser_statistics_get_reply },
1115 { BROWSER_BROWSERR_SET_NETLOGON_STATE,
1116 "BrowserrSetNetlogonState",
1117 dissect_browser_browserr_set_netlogon_state_rqst,
1118 dissect_browser_browserr_set_netlogon_state_reply },
1119 { BROWSER_BROWSERR_QUERY_EMULATED_DOMAINS,
1120 "BrowserrQueryEmulatedDomains",
1121 dissect_browser_browserr_query_emulated_domains_rqst,
1122 dissect_browser_browserr_query_emulated_domains_reply },
1123 { BROWSER_BROWSERR_SERVER_ENUM_EX,
1124 "BrowserrServerEnumEx",
1125 dissect_browser_browserr_server_enum_ex_rqst,
1126 dissect_browser_browserr_server_enum_ex_reply },
1128 {0, NULL, NULL, NULL }
1132 proto_register_dcerpc_browser(void)
1134 static hf_register_info hf[] = {
1136 { &hf_browser_opnum, {
1137 "Operation", "rpc_browser.opnum", FT_UINT16, BASE_DEC,
1138 NULL, 0x0, "Operation", HFILL }},
1141 "Return code", "rpc_browser.rc", FT_UINT32, BASE_HEX,
1142 VALS(NT_errors), 0x0, "Browser return code", HFILL }},
1144 { &hf_browser_unknown_long, {
1145 "Unknown long", "rpc_browser.unknown.long", FT_UINT32, BASE_HEX,
1146 NULL, 0x0, "Unknown long. If you know what this is, contact ethereal developers.", HFILL }},
1148 { &hf_browser_unknown_hyper, {
1149 "Unknown hyper", "rpc_browser.unknown.hyper", FT_UINT64, BASE_HEX,
1150 NULL, 0x0, "Unknown hyper. If you know what this is, contact ethereal developers.", HFILL }},
1152 { &hf_browser_unknown_bytes, {
1153 "Unknown bytes", "rpc_browser.unknown.bytes", FT_BYTES, BASE_HEX,
1154 NULL, 0x0, "Unknown bytes. If you know what this is, contact ethereal developers.", HFILL }},
1156 { &hf_browser_unknown_string, {
1157 "Unknown string", "rpc_browser.unknown.string", FT_STRING, BASE_HEX,
1158 NULL, 0x0, "Unknown string. If you know what this is, contact ethereal developers.", HFILL }}
1161 static gint *ett[] = {
1165 proto_dcerpc_browser = proto_register_protocol(
1166 "RPC Browser", "RPC_BROWSER", "rpc_browser");
1168 proto_register_field_array(proto_dcerpc_browser, hf,
1170 proto_register_subtree_array(ett, array_length(ett));
1174 proto_reg_handoff_dcerpc_browser(void)
1176 /* Register protocol as dcerpc */
1178 dcerpc_init_uuid(proto_dcerpc_browser, ett_dcerpc_browser,
1179 &uuid_dcerpc_browser, ver_dcerpc_browser,
1180 dcerpc_browser_dissectors, hf_browser_opnum);