* Defines for smb packet dissection
* Copyright 1999, Richard Sharpe <rsharpe@ns.aus.com>
*
- * $Id: smb.h,v 1.29 2001/12/05 08:20:30 guy Exp $
+ * $Id: smb.h,v 1.54 2003/12/18 00:18:55 guy Exp $
*
* Ethereal - Network traffic analyzer
* By Gerald Combs <gerald@ethereal.com>
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 2
* of the License, or (at your option) any later version.
- *
+ *
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
- *
+ *
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
*/
-/*
- * Don't include if already included
- */
-
#ifndef _SMB_H
#define _SMB_H
+extern gboolean sid_name_snooping;
+
/* SMB command codes, from the SNIA CIFS spec. */
+extern const value_string smb_cmd_vals[];
+extern const value_string trans2_cmd_vals[];
+extern const value_string nt_cmd_vals[];
#define SMB_COM_CREATE_DIRECTORY 0x00
#define SMB_COM_DELETE_DIRECTORY 0x01
#define SMBE_nofids 4 /* Too many open files */
#define SMBE_noaccess 5 /* Access denied */
#define SMBE_badfid 6 /* Invalid fid */
+#define SMBE_badmcb 7 /* Memory control blocks destroyed */
#define SMBE_nomem 8 /* Out of memory */
#define SMBE_badmem 9 /* Invalid memory block address */
#define SMBE_badenv 10 /* Invalid environment */
+#define SMBE_badformat 11 /* Invalid format */
#define SMBE_badaccess 12 /* Invalid open mode */
#define SMBE_baddata 13 /* Invalid data (only from ioctl call) */
-#define SMBE_res 14
+#define SMBE_res 14
#define SMBE_baddrive 15 /* Invalid drive */
#define SMBE_remcd 16 /* Attempt to delete current directory */
#define SMBE_diffdevice 17 /* rename/move across different filesystems */
#define SMBE_unsup 50 /* Request unsupported, returned by Win 95, RJS 20Jun98 */
#define SMBE_nosuchshare 67 /* Share does not exits */
#define SMBE_filexists 80 /* File in operation already exists */
+#define SMBE_invalidparam 87 /* Invalid parameter */
#define SMBE_cannotopen 110 /* Cannot open the file specified */
-#define SMBE_unknownlevel 124
+#define SMBE_insufficientbuffer 122/* Insufficient buffer size */
+#define SMBE_invalidname 123 /* Invalid name */
+#define SMBE_unknownlevel 124 /* Unknown info level */
#define SMBE_alreadyexists 183 /* File already exists */
#define SMBE_badpipe 230 /* Named pipe invalid */
#define SMBE_pipebusy 231 /* All instances of pipe are busy */
#define SMBE_pipeclosing 232 /* named pipe close in progress */
#define SMBE_notconnected 233 /* No process on other end of named pipe */
#define SMBE_moredata 234 /* More data to be returned */
+#define SMBE_nomoreitems 259 /* No more items */
#define SMBE_baddirectory 267 /* Invalid directory name in a path. */
#define SMBE_eas_didnt_fit 275 /* Extended attributes didn't fit */
#define SMBE_eas_nsup 282 /* Extended attributes not supported */
#define SMBE_notify_buf_small 1022 /* Buffer too small to return change notify. */
+#define SMBE_serverunavailable 1722/* Server unavailable */
#define SMBE_unknownipc 2142
#define SMBE_noipc 66 /* don't support ipc */
+/* These errors seem to be only returned by the NT printer driver system */
+
+#define SMBE_invalidowner 1307 /* Invalid security descriptor owner */
+#define SMBE_invalidsecuritydescriptor 1338 /* Invalid security descriptor */
+#define SMBE_unknownprinterdriver 1797 /* Unknown printer driver */
+#define SMBE_invalidprintername 1801 /* Invalid printer name */
+#define SMBE_printeralreadyexists 1802 /* Printer already exists */
+#define SMBE_invaliddatatype 1804 /* Invalid datatype */
+#define SMBE_invalidenvironment 1805 /* Invalid environment */
+#define SMBE_invalidformsize 1903 /* Invalid form size */
+#define SMBE_printerdriverinuse 3001 /* Printer driver in use */
+
/* Error codes for the ERRSRV class */
#define SMBE_error 1 /* Non specific error code */
#define SMBE_smbcmd 64 /* Unrecognised command */
#define SMBE_srverror 65 /* smb server internal error */
#define SMBE_filespecs 67 /* fid and pathname invalid combination */
-#define SMBE_badlink 68
+#define SMBE_badlink 68
#define SMBE_badpermits 69 /* Access specified for a file is not valid */
-#define SMBE_badpid 70
+#define SMBE_badpid 70
#define SMBE_setattrmode 71 /* attribute mode invalid */
#define SMBE_paused 81 /* Message server paused */
#define SMBE_msgoff 82 /* Not receiving messages */
#define SMBE_useMPX 250 /* temporarily unable to use raw mode, use MPX mode */
#define SMBE_useSTD 251 /* temporarily unable to use raw mode, use standard mode */
#define SMBE_contMPX 252 /* resume MPX mode */
-#define SMBE_badPW 253 /* Check this out ... */
+#define SMBE_badPW 253 /* Check this out ... */
#define SMBE_nosupport 0xFFFF
#define SMBE_unknownsmb 22 /* from NT 3.5 response */
/* Error codes for the ERRHRD class */
-#define SMBE_nowrite 19 /* read only media */
-#define SMBE_badunit 20 /* Unknown device */
-#define SMBE_notready 21 /* Drive not ready */
-#define SMBE_badcmd 22 /* Unknown command */
-#define SMBE_data 23 /* Data (CRC) error */
-#define SMBE_badreq 24 /* Bad request structure length */
-#define SMBE_seek 25
-#define SMBE_badmedia 26
-#define SMBE_badsector 27
-#define SMBE_nopaper 28
-#define SMBE_write 29
-#define SMBE_read 30
-#define SMBE_general 31
-#define SMBE_badshare 32
-#define SMBE_lock 33
-#define SMBE_wrongdisk 34
-#define SMBE_FCBunavail 35
-#define SMBE_sharebufexc 36
+#define SMBE_nowrite 19 /* read only media */
+#define SMBE_badunit 20 /* Unknown device */
+#define SMBE_notready 21 /* Drive not ready */
+#define SMBE_badcmd 22 /* Unknown command */
+#define SMBE_data 23 /* Data (CRC) error */
+#define SMBE_badreq 24 /* Bad request structure length */
+#define SMBE_seek 25 /* Seek error */
+#define SMBE_badmedia 26 /* Unknown media type */
+#define SMBE_badsector 27 /* Sector not found */
+#define SMBE_nopaper 28 /* Printer out of paper */
+#define SMBE_write 29 /* Write fault */
+#define SMBE_read 30 /* Read fault */
+#define SMBE_general 31 /* General failure */
+#define SMBE_badshare 32 /* An open conflicts with an existing open */
+#define SMBE_lock 33 /* Lock conflict or invalid mode, or unlock of
+ lock held by another process */
+#define SMBE_wrongdisk 34 /* The wrong disk was found in a drive */
+#define SMBE_FCBunavail 35 /* No FCBs are available to process request */
+#define SMBE_sharebufexc 36 /* A sharing buffer has been exceeded */
#define SMBE_diskfull 39
+/* the information we need to keep around for NT transatcion commands */
+typedef struct {
+ int subcmd;
+} smb_nt_transact_info_t;
+
+/* the information we need to keep around for transaction2 commands */
+typedef struct {
+ int subcmd;
+ int info_level;
+ gboolean resume_keys; /* if "return resume" keys set in T2 FIND_FIRST request */
+} smb_transact2_info_t;
+
/*
* The information we need to save about a request in order to show the
* frame number of the request in the dissection of the reply.
*/
+#define SMB_SIF_TID_IS_IPC 0x0001
typedef struct {
guint32 frame_req, frame_res;
+ nstime_t req_time;
+ guint16 flags;
+ guint8 cmd;
void *extra_info;
} smb_saved_info_t;
#define TRANSACTION_PIPE 0
#define TRANSACTION_MAILSLOT 1
+/* these are defines used to represent different types of TIDs.
+ dont use the value 0 for any of these */
+#define TID_NORMAL 1
+#define TID_IPC 2
+
/* this is the structure which is associated with each conversation */
typedef struct conv_tables {
/* these two tables are used to match requests with responses */
GHashTable *unmatched;
GHashTable *matched;
- /* this tables is used by DCERPC over SMB reassembly*/
- GHashTable *dcerpc_fid_to_frame;
+
+ /* This table is used to track TID->services for a conversation */
+ GHashTable *tid_service;
+ gboolean raw_ntlmssp; /* Do extended security exc use raw ntlmssp */
} conv_tables_t;
typedef struct smb_info {
- int cmd, mid;
+ guint8 cmd;
+ int tid, pid, uid, mid;
gboolean unicode; /* Are strings in this SMB Unicode? */
gboolean request; /* Is this a request? */
gboolean unidir;
/*
* Show file data for a read or write.
*/
-extern int dissect_file_data(tvbuff_t *tvb, packet_info *pinfo,
- proto_tree *tree, int offset, guint16 bc, guint16 datalen);
+extern int dissect_file_data(tvbuff_t *tvb, proto_tree *tree, int offset,
+ guint16 bc, guint16 datalen);
/*
* Add a FID to the protocol tree and the Info column.
/*
* Dissect named pipe state information.
*/
-extern int dissect_ipc_state(tvbuff_t *tvb, packet_info *pinfo,
- proto_tree *parent_tree, int offset, gboolean setstate);
+extern int dissect_ipc_state(tvbuff_t *tvb, proto_tree *parent_tree,
+ int offset, gboolean setstate);
extern gboolean smb_dcerpc_reassembly;
-extern GHashTable *dcerpc_fragment_table;
+
+/*
+ * NT and DOS error codes used by other dissectors.
+ */
+extern const value_string NT_errors[];
+extern const value_string DOS_errors[];
+extern const value_string ms_country_codes[];
+
+/*
+ * Access mask values
+ */
+
+/* Generic rights */
+
+#define GENERIC_RIGHTS_MASK 0xF0000000
+
+#define GENERIC_ALL_ACCESS 0x10000000
+#define GENERIC_EXECUTE_ACCESS 0x20000000
+#define GENERIC_WRITE_ACCESS 0x40000000
+#define GENERIC_READ_ACCESS 0x80000000
+
+/* Misc/reserved */
+
+#define ACCESS_SACL_ACCESS 0x00800000
+#define SYSTEM_SECURITY_ACCESS 0x01000000
+#define MAXIMUM_ALLOWED_ACCESS 0x02000000
+
+/* Standard rights */
+
+#define STANDARD_RIGHTS_MASK 0x00FF0000
+
+#define DELETE_ACCESS 0x00010000
+#define READ_CONTROL_ACCESS 0x00020000
+#define WRITE_DAC_ACCESS 0x00040000
+#define WRITE_OWNER_ACCESS 0x00080000
+#define SYNCHRONIZE_ACCESS 0x00100000
+
+/* Specific rights */
+
+#define SPECIFIC_RIGHTS_MASK 0x0000FFFF /* Specific rights defined per-object */
#endif
git.samba.org / obnox / wireshark / wip.git / blobdiff