static int lsarpc_dissect_element_lsa_DomainInfoEfs_blob_size(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int lsarpc_dissect_element_lsa_DomainInfoEfs_efs_blob(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
static int lsarpc_dissect_element_lsa_DomainInfoEfs_efs_blob_(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
+static int lsarpc_dissect_element_lsa_DomainInfoEfs_efs_blob__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_);
const value_string lsarpc_lsa_DomainInfoEnum_vals[] = {
{ LSA_DOMAIN_INFO_POLICY_QOS, "LSA_DOMAIN_INFO_POLICY_QOS" },
{ LSA_DOMAIN_INFO_POLICY_EFS, "LSA_DOMAIN_INFO_POLICY_EFS" },
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
ALIGN_TO_4_BYTES;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_4_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
int
lsarpc_dissect_enum_lsa_SecurityImpersonationLevel(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_)
{
- guint16 parameter=0;
+ guint1632 parameter=0;
if(param){
- parameter=(guint16)*param;
+ parameter=(guint1632)*param;
}
- offset = dissect_ndr_uint16(tvb, offset, pinfo, tree, drep, hf_index, ¶meter);
+ offset = dissect_ndr_uint1632(tvb, offset, pinfo, tree, drep, hf_index, ¶meter);
if(param){
*param=(guint32)parameter;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
ALIGN_TO_4_BYTES;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_4_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
ALIGN_TO_4_BYTES;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_4_BYTES;
+ }
+
return offset;
}
int
lsarpc_dissect_enum_lsa_PolicyAuditEventType(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_)
{
- guint16 parameter=0;
+ guint1632 parameter=0;
if(param){
- parameter=(guint16)*param;
+ parameter=(guint1632)*param;
}
- offset = dissect_ndr_uint16(tvb, offset, pinfo, tree, drep, hf_index, ¶meter);
+ offset = dissect_ndr_uint1632(tvb, offset, pinfo, tree, drep, hf_index, ¶meter);
if(param){
*param=(guint32)parameter;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
int
lsarpc_dissect_enum_lsa_PolicyServerRole(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_)
{
- guint16 parameter=0;
+ guint1632 parameter=0;
if(param){
- parameter=(guint16)*param;
+ parameter=(guint1632)*param;
}
- offset = dissect_ndr_uint16(tvb, offset, pinfo, tree, drep, hf_index, ¶meter);
+ offset = dissect_ndr_uint1632(tvb, offset, pinfo, tree, drep, hf_index, ¶meter);
if(param){
*param=(guint32)parameter;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_2_BYTES;
+ ALIGN_TO_3_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_3_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
ALIGN_TO_8_BYTES;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_8_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
ALIGN_TO_8_BYTES;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_8_BYTES;
+ }
+
return offset;
}
proto_item_set_len(item, offset-old_offset);
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
ALIGN_TO_2_BYTES;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_2_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
int
lsarpc_dissect_enum_lsa_PolicyInfo(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_)
{
- guint16 parameter=0;
+ guint1632 parameter=0;
if(param){
- parameter=(guint16)*param;
+ parameter=(guint1632)*param;
}
- offset = dissect_ndr_uint16(tvb, offset, pinfo, tree, drep, hf_index, ¶meter);
+ offset = dissect_ndr_uint1632(tvb, offset, pinfo, tree, drep, hf_index, ¶meter);
if(param){
*param=(guint32)parameter;
}
}
proto_item_set_len(item, offset-old_offset);
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
int
lsarpc_dissect_enum_lsa_SidType(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_)
{
- guint16 parameter=0;
+ guint1632 parameter=0;
if(param){
- parameter=(guint16)*param;
+ parameter=(guint1632)*param;
}
- offset = dissect_ndr_uint16(tvb, offset, pinfo, tree, drep, hf_index, ¶meter);
+ offset = dissect_ndr_uint1632(tvb, offset, pinfo, tree, drep, hf_index, ¶meter);
if(param){
*param=(guint32)parameter;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
ALIGN_TO_4_BYTES;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_4_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
int
lsarpc_dissect_enum_lsa_LookupNamesLevel(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_)
{
- guint16 parameter=0;
+ guint1632 parameter=0;
if(param){
- parameter=(guint16)*param;
+ parameter=(guint1632)*param;
}
- offset = dissect_ndr_uint16(tvb, offset, pinfo, tree, drep, hf_index, ¶meter);
+ offset = dissect_ndr_uint1632(tvb, offset, pinfo, tree, drep, hf_index, ¶meter);
if(param){
*param=(guint32)parameter;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
ALIGN_TO_4_BYTES;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_4_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
ALIGN_TO_4_BYTES;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_4_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
int
lsarpc_dissect_enum_lsa_TrustDomInfoEnum(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_)
{
- guint16 parameter=0;
+ guint1632 parameter=0;
if(param){
- parameter=(guint16)*param;
+ parameter=(guint1632)*param;
}
- offset = dissect_ndr_uint16(tvb, offset, pinfo, tree, drep, hf_index, ¶meter);
+ offset = dissect_ndr_uint1632(tvb, offset, pinfo, tree, drep, hf_index, ¶meter);
if(param){
*param=(guint32)parameter;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
ALIGN_TO_4_BYTES;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_4_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
ALIGN_TO_8_BYTES;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_8_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
proto_item *item = NULL;
proto_tree *tree = NULL;
int old_offset;
- guint16 level;
+ guint1632 level;
old_offset = offset;
if (parent_tree) {
tree = proto_item_add_subtree(item, ett_lsarpc_lsa_TrustedDomainInfo);
}
- offset = dissect_ndr_uint16(tvb, offset, pinfo, tree, drep, hf_index, &level);
- ALIGN_TO_4_BYTES;
+ offset = dissect_ndr_uint1632(tvb, offset, pinfo, tree, drep, hf_index, &level);
+ ALIGN_TO_5_BYTES;
switch(level) {
case LSA_TRUSTED_DOMAIN_INFO_NAME:
}
proto_item_set_len(item, offset-old_offset);
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
ALIGN_TO_8_BYTES;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_8_BYTES;
+ }
+
return offset;
}
return offset;
}
+static int
+lsarpc_dissect_element_lsa_DomainInfoEfs_efs_blob__(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_)
+{
+ offset = PIDL_dissect_uint8(tvb, offset, pinfo, tree, drep, hf_lsarpc_lsa_DomainInfoEfs_efs_blob, 0);
+
+ return offset;
+}
+
int
lsarpc_dissect_struct_lsa_DomainInfoEfs(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_)
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
int
lsarpc_dissect_enum_lsa_DomainInfoEnum(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *tree _U_, guint8 *drep _U_, int hf_index _U_, guint32 *param _U_)
{
- guint16 parameter=0;
+ guint1632 parameter=0;
if(param){
- parameter=(guint16)*param;
+ parameter=(guint1632)*param;
}
- offset = dissect_ndr_uint16(tvb, offset, pinfo, tree, drep, hf_index, ¶meter);
+ offset = dissect_ndr_uint1632(tvb, offset, pinfo, tree, drep, hf_index, ¶meter);
if(param){
*param=(guint32)parameter;
}
}
proto_item_set_len(item, offset-old_offset);
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
ALIGN_TO_4_BYTES;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_4_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
}
offset = dissect_ndr_uint32(tvb, offset, pinfo, tree, drep, hf_index, &level);
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
switch(level) {
case LSA_FOREST_TRUST_TOP_LEVEL_NAME:
}
proto_item_set_len(item, offset-old_offset);
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
ALIGN_TO_8_BYTES;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_8_BYTES;
+ }
+
return offset;
}
{
proto_item *item = NULL;
proto_tree *tree = NULL;
+ dcerpc_info *di = pinfo->private_data;
int old_offset;
- ALIGN_TO_4_BYTES;
+ ALIGN_TO_5_BYTES;
old_offset = offset;
proto_item_set_len(item, offset-old_offset);
+
+ if (di->call_data->flags & DCERPC_IS_NDR64) {
+ ALIGN_TO_5_BYTES;
+ }
+
return offset;
}
{ &hf_lsarpc_lsa_LookupNames3_handle,
{ "Handle", "lsarpc.lsa_LookupNames3.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_level,
- { "Level", "lsarpc.lsa_QueryTrustedDomainInfoBySid.level", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_TrustDomInfoEnum_vals), 0, NULL, HFILL }},
+ { "Level", "lsarpc.lsa_QueryTrustedDomainInfoBySid.level", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_TrustDomInfoEnum_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_OpenTrustedDomain_sid,
{ "Sid", "lsarpc.lsa_OpenTrustedDomain.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_EnumAccounts_handle,
{ &hf_lsarpc_lsa_SetSecret_old_val,
{ "Old Val", "lsarpc.lsa_SetSecret.old_val", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_TrustDomainInfoBuffer_last_update_time,
- { "Last Update Time", "lsarpc.lsa_TrustDomainInfoBuffer.last_update_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }},
+ { "Last Update Time", "lsarpc.lsa_TrustDomainInfoBuffer.last_update_time", FT_ABSOLUTE_TIME, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_DnsDomainInfo_dns_forest,
{ "Dns Forest", "lsarpc.lsa_DnsDomainInfo.dns_forest", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_QueryDomainInformationPolicy_info,
{ &hf_lsarpc_lsa_AuditLogInfo_unknown,
{ "Unknown", "lsarpc.lsa_AuditLogInfo.unknown", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_AuditLogInfo_retention_time,
- { "Retention Time", "lsarpc.lsa_AuditLogInfo.retention_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }},
+ { "Retention Time", "lsarpc.lsa_AuditLogInfo.retention_time", FT_ABSOLUTE_TIME, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_ObjectAttribute_sec_desc,
{ "Sec Desc", "lsarpc.lsa_ObjectAttribute.sec_desc", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_DnsDomainInfo_name,
{ &hf_lsarpc_lsa_TranslatedSid2_sid_index,
{ "Sid Index", "lsarpc.lsa_TranslatedSid2.sid_index", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_QuerySecret_old_mtime,
- { "Old Mtime", "lsarpc.lsa_QuerySecret.old_mtime", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }},
+ { "Old Mtime", "lsarpc.lsa_QuerySecret.old_mtime", FT_ABSOLUTE_TIME, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_OpenTrustedDomain_handle,
{ "Handle", "lsarpc.lsa_OpenTrustedDomain.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_TransNameArray_names,
{ &hf_lsarpc_lsa_TrustedDomainInfo_info11,
{ "Info11", "lsarpc.lsa_TrustedDomainInfo.info11", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_QosInfo_impersonation_level,
- { "Impersonation Level", "lsarpc.lsa_QosInfo.impersonation_level", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_SecurityImpersonationLevel_vals), 0, NULL, HFILL }},
+ { "Impersonation Level", "lsarpc.lsa_QosInfo.impersonation_level", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_SecurityImpersonationLevel_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_QueryInfoPolicy2_level,
- { "Level", "lsarpc.lsa_QueryInfoPolicy2.level", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_PolicyInfo_vals), 0, NULL, HFILL }},
+ { "Level", "lsarpc.lsa_QueryInfoPolicy2.level", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_PolicyInfo_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_TranslatedSid3_sid,
{ "Sid", "lsarpc.lsa_TranslatedSid3.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_TrustDomainInfoBasic_netbios_name,
{ &hf_lsarpc_lsa_AuditFullQueryInfo_unknown,
{ "Unknown", "lsarpc.lsa_AuditFullQueryInfo.unknown", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_LookupNames3_level,
- { "Level", "lsarpc.lsa_LookupNames3.level", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_LookupNamesLevel_vals), 0, NULL, HFILL }},
+ { "Level", "lsarpc.lsa_LookupNames3.level", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_LookupNamesLevel_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_LookupPrivDisplayName_disp_name,
{ "Disp Name", "lsarpc.lsa_LookupPrivDisplayName.disp_name", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_LookupNames_level,
- { "Level", "lsarpc.lsa_LookupNames.level", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_LookupNamesLevel_vals), 0, NULL, HFILL }},
+ { "Level", "lsarpc.lsa_LookupNames.level", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_LookupNamesLevel_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_LookupNames4_count,
{ "Count", "lsarpc.lsa_LookupNames4.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_LookupNames_names,
{ &hf_lsarpc_lsa_ForestTrustData_top_level_name,
{ "Top Level Name", "lsarpc.lsa_ForestTrustData.top_level_name", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_TranslatedName2_sid_type,
- { "Sid Type", "lsarpc.lsa_TranslatedName2.sid_type", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_SidType_vals), 0, NULL, HFILL }},
+ { "Sid Type", "lsarpc.lsa_TranslatedName2.sid_type", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_SidType_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_OpenTrustedDomain_trustdom_handle,
{ "Trustdom Handle", "lsarpc.lsa_OpenTrustedDomain.trustdom_handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_TrustDomainInfoFullInfo_info_ex,
{ &hf_lsarpc_lsa_DomainInfo_sid,
{ "Sid", "lsarpc.lsa_DomainInfo.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_QueryTrustedDomainInfoByName_level,
- { "Level", "lsarpc.lsa_QueryTrustedDomainInfoByName.level", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_TrustDomInfoEnum_vals), 0, NULL, HFILL }},
+ { "Level", "lsarpc.lsa_QueryTrustedDomainInfoByName.level", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_TrustDomInfoEnum_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_TrustDomainInfoInfoEx_sid,
{ "Sid", "lsarpc.lsa_TrustDomainInfoInfoEx.sid", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info,
{ &hf_lsarpc_lsa_PrivArray_count,
{ "Count", "lsarpc.lsa_PrivArray.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_QueryTrustedDomainInfo_level,
- { "Level", "lsarpc.lsa_QueryTrustedDomainInfo.level", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_TrustDomInfoEnum_vals), 0, NULL, HFILL }},
+ { "Level", "lsarpc.lsa_QueryTrustedDomainInfo.level", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_TrustDomInfoEnum_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_DATA_BUF_size,
{ "Size", "lsarpc.lsa_DATA_BUF.size", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_QueryDomainInformationPolicy_level,
- { "Level", "lsarpc.lsa_QueryDomainInformationPolicy.level", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_DomainInfoEnum_vals), 0, NULL, HFILL }},
+ { "Level", "lsarpc.lsa_QueryDomainInformationPolicy.level", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_DomainInfoEnum_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_DomainAccessMask_LSA_DOMAIN_SET_AUTH,
{ "Lsa Domain Set Auth", "lsarpc.lsa_DomainAccessMask.LSA_DOMAIN_SET_AUTH", FT_BOOLEAN, 32, TFS(&lsa_DomainAccessMask_LSA_DOMAIN_SET_AUTH_tfs), ( 0x00000020 ), NULL, HFILL }},
{ &hf_lsarpc_lsa_StringLarge_string,
{ &hf_lsarpc_lsa_DomainAccessMask_LSA_DOMAIN_SET_POSIX,
{ "Lsa Domain Set Posix", "lsarpc.lsa_DomainAccessMask.LSA_DOMAIN_SET_POSIX", FT_BOOLEAN, 32, TFS(&lsa_DomainAccessMask_LSA_DOMAIN_SET_POSIX_tfs), ( 0x00000010 ), NULL, HFILL }},
{ &hf_lsarpc_lsa_SetDomainInformationPolicy_level,
- { "Level", "lsarpc.lsa_SetDomainInformationPolicy.level", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_DomainInfoEnum_vals), 0, NULL, HFILL }},
+ { "Level", "lsarpc.lsa_SetDomainInformationPolicy.level", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_DomainInfoEnum_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_account_access_mask,
{ "Access Mask", "lsarpc.policy.access_mask", FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_SetInfoPolicy2_info,
{ &hf_lsarpc_lsa_LookupNames2_num_names,
{ "Num Names", "lsarpc.lsa_LookupNames2.num_names", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_SetInfoPolicy2_level,
- { "Level", "lsarpc.lsa_SetInfoPolicy2.level", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_PolicyInfo_vals), 0, NULL, HFILL }},
+ { "Level", "lsarpc.lsa_SetInfoPolicy2.level", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_PolicyInfo_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_EnumPrivsAccount_privs,
{ "Privs", "lsarpc.lsa_EnumPrivsAccount.privs", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_OpenAccount_access_mask,
{ &hf_lsarpc_lsa_TranslatedSid3_unknown,
{ "Unknown", "lsarpc.lsa_TranslatedSid3.unknown", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_TranslatedName_sid_type,
- { "Sid Type", "lsarpc.lsa_TranslatedName.sid_type", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_SidType_vals), 0, NULL, HFILL }},
+ { "Sid Type", "lsarpc.lsa_TranslatedName.sid_type", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_SidType_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_LookupSids2_names,
{ "Names", "lsarpc.lsa_LookupSids2.names", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_EnumPrivsAccount_handle,
{ &hf_lsarpc_lsa_PrivilegeSet_count,
{ "Count", "lsarpc.lsa_PrivilegeSet.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_SetTrustedDomainInfoByName_level,
- { "Level", "lsarpc.lsa_SetTrustedDomainInfoByName.level", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_TrustDomInfoEnum_vals), 0, NULL, HFILL }},
+ { "Level", "lsarpc.lsa_SetTrustedDomainInfoByName.level", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_TrustDomInfoEnum_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_LookupPrivDisplayName_language_id,
{ "Language Id", "lsarpc.lsa_LookupPrivDisplayName.language_id", FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_TransSidArray3_sids,
{ &hf_lsarpc_lsa_TrustedDomainInfo_password,
{ "Password", "lsarpc.lsa_TrustedDomainInfo.password", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_ModificationInfo_db_create_time,
- { "Db Create Time", "lsarpc.lsa_ModificationInfo.db_create_time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }},
+ { "Db Create Time", "lsarpc.lsa_ModificationInfo.db_create_time", FT_ABSOLUTE_TIME, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_NOTIFICATION,
{ "Lsa Policy Notification", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_NOTIFICATION", FT_BOOLEAN, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_NOTIFICATION_tfs), ( 0x00001000 ), NULL, HFILL }},
{ &hf_lsarpc_lsa_PolicyInformation_domain,
{ &hf_lsarpc_lsa_LookupSids3_unknown2,
{ "Unknown2", "lsarpc.lsa_LookupSids3.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_TranslatedSid_sid_type,
- { "Sid Type", "lsarpc.lsa_TranslatedSid.sid_type", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_SidType_vals), 0, NULL, HFILL }},
+ { "Sid Type", "lsarpc.lsa_TranslatedSid.sid_type", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_SidType_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_LookupNames2_count,
{ "Count", "lsarpc.lsa_LookupNames2.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_ForestTrustDomainInfo_dns_domain_name,
{ &hf_lsarpc_lsa_SidArray_num_sids,
{ "Num Sids", "lsarpc.lsa_SidArray.num_sids", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_LookupNames4_level,
- { "Level", "lsarpc.lsa_LookupNames4.level", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_LookupNamesLevel_vals), 0, NULL, HFILL }},
+ { "Level", "lsarpc.lsa_LookupNames4.level", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_LookupNamesLevel_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_handle,
{ "Handle", "lsarpc.lsa_QueryTrustedDomainInfoBySid.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_RightSet_names,
{ &hf_lsarpc_lsa_EnumAccountRights_handle,
{ "Handle", "lsarpc.lsa_EnumAccountRights.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_AuditLogInfo_time_to_shutdown,
- { "Time To Shutdown", "lsarpc.lsa_AuditLogInfo.time_to_shutdown", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }},
+ { "Time To Shutdown", "lsarpc.lsa_AuditLogInfo.time_to_shutdown", FT_ABSOLUTE_TIME, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_VIEW,
{ "Lsa Account View", "lsarpc.lsa_AccountAccessMask.LSA_ACCOUNT_VIEW", FT_BOOLEAN, 32, TFS(&lsa_AccountAccessMask_LSA_ACCOUNT_VIEW_tfs), ( 0x00000001 ), NULL, HFILL }},
{ &hf_lsarpc_lsa_TrustDomainInfoInfoEx_domain_name,
{ &hf_lsarpc_lsa_PrivEntry_name,
{ "Name", "lsarpc.lsa_PrivEntry.name", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_ServerRole_role,
- { "Role", "lsarpc.lsa_ServerRole.role", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_PolicyServerRole_vals), 0, NULL, HFILL }},
+ { "Role", "lsarpc.lsa_ServerRole.role", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_PolicyServerRole_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_TranslatedSid3_sid_type,
- { "Sid Type", "lsarpc.lsa_TranslatedSid3.sid_type", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_SidType_vals), 0, NULL, HFILL }},
+ { "Sid Type", "lsarpc.lsa_TranslatedSid3.sid_type", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_SidType_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_LookupNames4_num_names,
{ "Num Names", "lsarpc.lsa_LookupNames4.num_names", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_ForestTrustRecord_level,
{ &hf_lsarpc_lsa_EnumPrivs_max_count,
{ "Max Count", "lsarpc.lsa_EnumPrivs.max_count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_LookupNames2_level,
- { "Level", "lsarpc.lsa_LookupNames2.level", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_LookupNamesLevel_vals), 0, NULL, HFILL }},
+ { "Level", "lsarpc.lsa_LookupNames2.level", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_LookupNamesLevel_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_LookupNames3_unknown2,
{ "Unknown2", "lsarpc.lsa_LookupNames3.unknown2", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_DATA_BUF_length,
{ &hf_lsarpc_lsa_TranslatedName_name,
{ "Name", "lsarpc.lsa_TranslatedName.name", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_QueryInfoPolicy_level,
- { "Level", "lsarpc.lsa_QueryInfoPolicy.level", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_PolicyInfo_vals), 0, NULL, HFILL }},
+ { "Level", "lsarpc.lsa_QueryInfoPolicy.level", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_PolicyInfo_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_LookupSids_domains,
{ "Domains", "lsarpc.lsa_LookupSids.domains", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_TranslatedSid_rid,
{ &hf_lsarpc_lsa_TranslatedSid2_rid,
{ "Rid", "lsarpc.lsa_TranslatedSid2.rid", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_TranslatedSid2_sid_type,
- { "Sid Type", "lsarpc.lsa_TranslatedSid2.sid_type", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_SidType_vals), 0, NULL, HFILL }},
+ { "Sid Type", "lsarpc.lsa_TranslatedSid2.sid_type", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_SidType_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_OpenTrustedDomainByName_handle,
{ "Handle", "lsarpc.lsa_OpenTrustedDomainByName.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_EnumTrustedDomainsEx_handle,
{ &hf_lsarpc_lsa_ModificationInfo_modified_id,
{ "Modified Id", "lsarpc.lsa_ModificationInfo.modified_id", FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_QuerySecret_new_mtime,
- { "New Mtime", "lsarpc.lsa_QuerySecret.new_mtime", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0, NULL, HFILL }},
+ { "New Mtime", "lsarpc.lsa_QuerySecret.new_mtime", FT_ABSOLUTE_TIME, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_LookupPrivValue_handle,
{ "Handle", "lsarpc.lsa_LookupPrivValue.handle", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_TransSidArray2_count,
{ &hf_lsarpc_lsa_TrustedDomainInfo_full_info,
{ "Full Info", "lsarpc.lsa_TrustedDomainInfo.full_info", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_SetInfoPolicy_level,
- { "Level", "lsarpc.lsa_SetInfoPolicy.level", FT_UINT16, BASE_DEC, VALS(lsarpc_lsa_PolicyInfo_vals), 0, NULL, HFILL }},
+ { "Level", "lsarpc.lsa_SetInfoPolicy.level", FT_UINT1632, BASE_DEC, VALS(lsarpc_lsa_PolicyInfo_vals), 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_LookupSids3_count,
{ "Count", "lsarpc.lsa_LookupSids3.count", FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL }},
{ &hf_lsarpc_lsa_TranslatedSid3_sid_index,