/* packet-dcerpc-nt.h
* Routines for DCERPC over SMB packet disassembly
- * Copyright 2001, Tim Potter <tpot@samba.org>
+ * Copyright 2001-2003 Tim Potter <tpot@samba.org>
*
- * $Id: packet-dcerpc-nt.h,v 1.4 2002/01/29 09:13:28 guy Exp $
+ * $Id: packet-dcerpc-nt.h,v 1.41 2003/02/08 09:41:44 guy Exp $
*
* Ethereal - Network traffic analyzer
* By Gerald Combs <gerald@ethereal.com>
* Copyright 1998 Gerald Combs
- *
+ *
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 2
* of the License, or (at your option) any later version.
- *
+ *
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
- *
+ *
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
*/
#ifndef __PACKET_DCERPC_NT_H
-#define __PACKET_DCEPRC_NT_H
+#define __PACKET_DCERPC_NT_H
-/* Routines for parsing simple types */
+/*
+ * ett_ value for Unicode strings.
+ */
+extern gint ett_nt_unicode_string;
-int prs_align(int offset, int n);
+/* Routines for handling deferral of referants in NDR */
-int prs_uint8(tvbuff_t *tvb, int offset, packet_info *pinfo,
- proto_tree *tree, guint8 *data, char *name);
+#define ALIGN_TO_4_BYTES \
+ { dcerpc_info *xzdi; \
+ xzdi=pinfo->private_data; \
+ if(!xzdi->conformant_run) { \
+ if(offset&0x03) { \
+ offset=(offset&0xfffffffc)+4; \
+ } \
+ } \
+ }
+
+int
+dissect_ndr_counted_string_cb(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *tree,
+ char *drep, int hf_index,
+ dcerpc_callback_fnct_t *callback,
+ void *callback_args);
+
+int
+dissect_ndr_counted_string_ptr(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *parent_tree,
+ char *drep);
+
+int
+dissect_ndr_counted_string(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *parent_tree,
+ char *drep, int hf_index, int levels);
+
+int
+dissect_ndr_counted_byte_array(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *parent_tree,
+ char *drep, int hf_index);
+
+int
+dissect_ndr_nt_acct_ctrl(tvbuff_t *tvb, int offset, packet_info *pinfo,
+ proto_tree *parent_tree, char *drep);
+int
+dissect_ndr_nt_NTTIME (tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *tree,
+ char *drep, int hf_index);
+int
+dissect_ndr_nt_LOGON_HOURS(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *parent_tree,
+ char *drep);
+int
+dissect_ndr_nt_SID(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *tree,
+ char *drep);
+int
+dissect_ndr_nt_PSID(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *parent_tree,
+ char *drep);
+int
+dissect_ndr_nt_PSID_ARRAY(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *parent_tree,
+ char *drep);
+
+int
+dissect_ndr_nt_SID_AND_ATTRIBUTES_ARRAY(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *parent_tree,
+ char *drep);
+int
+dissect_ndr_nt_SID_AND_ATTRIBUTES(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *parent_tree,
+ char *drep);
+
+/*
+ * Policy handle hashing
+ */
-int prs_uint8s(tvbuff_t *tvb, int offset, packet_info *pinfo,
- proto_tree *tree, int count, guint8 **data, char *name);
+/* Store open and close packet numbers for a policy handle */
-int prs_uint16(tvbuff_t *tvb, int offset, packet_info *pinfo,
- proto_tree *tree, guint16 *data, char *name);
+void
+dcerpc_smb_store_pol_pkts(e_ctx_hnd *policy_hnd, guint32 open_frame,
+ guint32 close_frame);
-int prs_uint16s(tvbuff_t *tvb, int offset, packet_info *pinfo,
- proto_tree *tree, int count, guint16 **data, char *name);
+/* Store a name with a policy handle */
-int prs_uint32(tvbuff_t *tvb, int offset, packet_info *pinfo,
- proto_tree *tree, guint32 *data, char *name);
+void
+dcerpc_smb_store_pol_name(e_ctx_hnd *policy_hnd, char *name);
-int prs_uint32s(tvbuff_t *tvb, int offset, packet_info *pinfo,
- proto_tree *tree, int count, guint32 **data, char *name);
+/* Fetch details stored with a policy handle */
-/* Parse NT status code */
+gboolean
+dcerpc_smb_fetch_pol(e_ctx_hnd *policy_hnd, char **name,
+ guint32 *open_frame, guint32 *close_frame);
-int prs_ntstatus(tvbuff_t *tvb, int offset, packet_info *pinfo,
- proto_tree *tree);
+/* Check for unparsed data at the end of a frame */
-/* Parse some common RPC structures */
+void
+dcerpc_smb_check_long_frame(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *tree);
-char *fake_unicode(guint16 *data, int len);
+/* Dissect NT specific things */
-int prs_UNISTR2(tvbuff_t *tvb, int offset, packet_info *pinfo,
- proto_tree *tree, int flags, char **data, char *name);
+int
+dissect_ntstatus(tvbuff_t *tvb, gint offset, packet_info *pinfo,
+ proto_tree *tree, char *drep,
+ int hfindex, guint32 *pdata);
-int prs_policy_hnd(tvbuff_t *tvb, int offset, packet_info *pinfo,
- proto_tree *tree, const guint8 **data);
+int
+dissect_doserror(tvbuff_t *tvb, gint offset, packet_info *pinfo,
+ proto_tree *tree, char *drep,
+ int hfindex, guint32 *pdata);
-/* Routines for handling deferral of referants in NDR */
+int
+dissect_nt_policy_hnd(tvbuff_t *tvb, gint offset, packet_info *pinfo,
+ proto_tree *tree, char *drep, int hfindex,
+ e_ctx_hnd *pdata, gboolean is_open, gboolean is_close);
+
+int
+dissect_nt_GUID(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *parent_tree,
+ char *drep);
+
+int
+dissect_nt_LUID(tvbuff_t *tvb, int offset,
+ packet_info *pinfo, proto_tree *tree,
+ char *drep);
+
+/* Stored here instead of packet-dcerpc{,-ndr}.c as they are probably not
+ official NDR representations. */
+
+int dissect_dcerpc_uint8s(tvbuff_t *tvb, gint offset, packet_info *pinfo,
+ proto_tree *tree, char *drep,
+ int hfindex, int length, const guint8 **pdata);
+
+int dissect_ndr_uint8s(tvbuff_t *tvb, gint offset, packet_info *pinfo,
+ proto_tree *tree, char *drep,
+ int hfindex, int length, const guint8 **pdata);
+
+int dissect_dcerpc_uint16s(tvbuff_t *tvb, gint offset, packet_info *pinfo,
+ proto_tree *tree, char *drep,
+ int hfindex, int length);
+
+int dissect_ndr_uint16s(tvbuff_t *tvb, gint offset, packet_info *pinfo,
+ proto_tree *tree, char *drep,
+ int hfindex, int length);
+
+int dissect_ndr_str_pointer_item(tvbuff_t *tvb, gint offset,
+ packet_info *pinfo, proto_tree *tree,
+ char *drep, int type, char *text,
+ int hf_index, int levels);
+
+/*
+ * Helper routines for dissecting NDR strings
+ */
+
+/* Number of levels to go up appending string to pointer item */
+#define CB_STR_ITEM_LEVELS(x) ((x) & 0xFFFF)
+#define CB_STR_COL_INFO 0x10000 /* Append string to COL_INFO */
+#define CB_STR_SAVE 0x20000 /* Save string to dcv->private_data */
-#define PARSE_SCALARS 1
-#define PARSE_BUFFERS 2
+void cb_str_postprocess(packet_info *pinfo, proto_tree *tree _U_,
+ proto_item *item, tvbuff_t *tvb,
+ int start_offset, int end_offset,
+ void *callback_args);
-int prs_push_ptr(tvbuff_t *tvb, int offset, packet_info *pinfo,
- proto_tree *tree, GList **ptr_list, char *name);
+/* Initialise DCERPC over SMB */
-guint32 prs_pop_ptr(GList **ptr_list, char *name);
+void dcerpc_smb_init(int proto_dcerpc);
#endif /* packet-dcerpc-nt.h */
git.samba.org / obnox / wireshark / wip.git / blobdiff