diff options
| author | Matthieu Patou <mat@matws.net> | 2014-10-10 20:30:59 -0400 |
|---|---|---|
| committer | Michael Mann <mmann78@netscape.net> | 2014-10-12 14:08:44 +0000 |
| commit | 29afac24a579b01c029b2b5404bda7a102fe2232 (patch) | |
| tree | b45e1f75ecfe36917c44570754781a8f034c2f02 /epan/dissectors/packet-dcerpc-nt.c | |
| parent | b3490c20ce1fe06fe1feec9d9a5c98e51c898908 (diff) | |
Add support for NTTIME_hyper and NTTIME_1sec
It's hyper with 8 bytes alignment it can have 1/100000 sec resolution or 1sec resolution
Bug: 10541
Change-Id: Iecc4c6d1bd1695a4c02db72e1617134254810cd9
Reviewed-on: https://code.wireshark.org/review/4606
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
Diffstat (limited to 'epan/dissectors/packet-dcerpc-nt.c')
| -rw-r--r-- | epan/dissectors/packet-dcerpc-nt.c | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/epan/dissectors/packet-dcerpc-nt.c b/epan/dissectors/packet-dcerpc-nt.c index e6e0569a15..d66612a96f 100644 --- a/epan/dissectors/packet-dcerpc-nt.c +++ b/epan/dissectors/packet-dcerpc-nt.c @@ -470,6 +470,22 @@ dissect_ndr_nt_NTTIME (tvbuff_t *tvb, int offset, return offset; } +int +dissect_ndr_nt_NTTIME_hyper (tvbuff_t *tvb, int offset, + packet_info *pinfo _U_, proto_tree *tree, + dcerpc_info *di, guint8 *drep _U_, int hf_index, gboolean onesec_resolution) +{ + if(di->conformant_run){ + /*just a run to handle conformant arrays, nothing to dissect */ + return offset; + } + + ALIGN_TO_8_BYTES; + + offset = dissect_nt_64bit_time_opt(tvb, tree, offset, hf_index, onesec_resolution); + return offset; +} + /* Define this symbol to display warnings about request/response and policy handle hash table collisions. This happens when a packet with the same conversation, smb fid and dcerpc call id occurs. I think this |