diff options
author | sahlberg <sahlberg@f5534014-38df-0310-8fa8-9805f1628bb7> | 2006-09-22 00:01:38 +0000 |
---|---|---|
committer | sahlberg <sahlberg@f5534014-38df-0310-8fa8-9805f1628bb7> | 2006-09-22 00:01:38 +0000 |
commit | 34270aa8d5cb8fa0850cb42c685eb1b0d9a9d5f0 (patch) | |
tree | 54c97f0eee74c6b37b22119f3c9c6ffd836faa1b /epan/dissectors/packet-dcerpc-eventlog.h | |
parent | 484e287925429003acc8d5f7e35433bef19f7e97 (diff) |
updates to eventlog to use the pidl generated dissector and enhance the conformance file to dissect parts of the eventlog Records.
(record dissection is incomplete since this is not really NDR encoded but better than nothing)
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@19279 f5534014-38df-0310-8fa8-9805f1628bb7
Diffstat (limited to 'epan/dissectors/packet-dcerpc-eventlog.h')
-rw-r--r-- | epan/dissectors/packet-dcerpc-eventlog.h | 71 |
1 files changed, 19 insertions, 52 deletions
diff --git a/epan/dissectors/packet-dcerpc-eventlog.h b/epan/dissectors/packet-dcerpc-eventlog.h index 18d9a6f048..529fa7a558 100644 --- a/epan/dissectors/packet-dcerpc-eventlog.h +++ b/epan/dissectors/packet-dcerpc-eventlog.h @@ -1,57 +1,24 @@ -/* packet-dcerpc-eventlog.h - * Routines for SMB \pipe\eventlog packet disassembly - * Copyright 2004 Jean-Baptiste Marchand <jbm@hsc.fr> - * - * $Id$ - * - * Wireshark - Network traffic analyzer - * By Gerald Combs <gerald@wireshark.org> - * Copyright 1998 Gerald Combs - * - * This program is free software; you can redistribute it and/or - * modify it under the terms of the GNU General Public License - * as published by the Free Software Foundation; either version 2 - * of the License, or (at your option) any later version. - * - * This program is distributed in the hope that it will be useful, - * but WITHOUT ANY WARRANTY; without even the implied warranty of - * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the - * GNU General Public License for more details. - * - * You should have received a copy of the GNU General Public License - * along with this program; if not, write to the Free Software - * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. - */ +/* autogenerated by pidl */ -#ifndef __PACKET_DCERPC_EVENTLOG_H -#define __PACKET_DCERPC_EVENTLOG_H +/* DO NOT EDIT + This filter was automatically generated + from eventlog.idl and eventlog.cnf. + + Pidl is a perl based IDL compiler for DCE/RPC idl files. + It is maintained by the Samba team, not the Wireshark team. + Instructions on how to download and install Pidl can be + found at http://wiki.wireshark.org/Pidl +*/ -/* MSRPC functions available in the eventlog interface */ -#define EVENTLOG_CLEAR 0x00 -#define EVENTLOG_BACKUP 0x01 -#define EVENTLOG_CLOSE 0x02 -#define EVENTLOG_DEREGISTER_EVT_SRC 0x03 -#define EVENTLOG_NUMOFRECORDS 0x04 -#define EVENTLOG_GET_OLDEST_RECORD 0x05 -#define EVENTLOG_NOTIFY_CHANGE 0x06 -#define EVENTLOG_OPEN 0x07 -#define EVENTLOG_REGISTER_EVT_SRC 0x08 -#define EVENTLOG_OPEN_BACKUP 0x09 -#define EVENTLOG_READ 0x0a -#define EVENTLOG_REPORT 0x0b -#define EVENTLOG_CLEAR_ASCII 0x0c -#define EVENTLOG_BACKUP_ASCII 0x0d -#define EVENTLOG_OPEN_ASCII 0x0e -#define EVENTLOG_REGISTER_EVT_SRC_ASCII 0x0f -#define EVENTLOG_OPEN_BACKUP_ASCII 0x10 -#define EVENTLOG_READ_ASCII 0x11 -#define EVENTLOG_REPORT_ASCII 0x12 -#define EVENTLOG_REGISTER_CLUSTER_SVC 0x13 -#define EVENTLOG_DEREGISTER_CLUSTER_SVC 0x14 -#define EVENTLOG_WRITE_CLUSTER_EVENTS 0x15 -#define EVENTLOG_GET_INFO 0x16 -#define EVENTLOG_FLUSH 0x17 +#ifndef __PACKET_DCERPC_EVENTLOG_H +#define __PACKET_DCERPC_EVENTLOG_H -#endif /* packet-dcerpc-eventlog.h */ +#include "packet-dcerpc-lsa.h" +int eventlog_dissect_bitmap_eventlogReadFlags(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, guint8 *drep, int hf_index, guint32 param); +int eventlog_dissect_bitmap_eventlogEventTypes(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, guint8 *drep, int hf_index, guint32 param); +int eventlog_dissect_struct_OpenUnknown0(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *parent_tree, guint8 *drep, int hf_index, guint32 param _U_); +int eventlog_dissect_struct_Record(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *parent_tree, guint8 *drep, int hf_index, guint32 param _U_); +int eventlog_dissect_struct_ChangeUnknown0(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *parent_tree, guint8 *drep, int hf_index, guint32 param _U_); +#endif /* __PACKET_DCERPC_EVENTLOG_H */ |