Move dissectors to epan/dissectors directory.

Also move ncp222.py, x11-fields, process-x11-fields.pl,
make-reg-dotc, and make-reg-dotc.py.

Adjust #include lines in files that include packet-*.h
files.

svn path=/trunk/; revision=11410

1 files changed, 1900 insertions, 0 deletions

diff --git a/epan/dissectors/packet-dcerpc-rs_pgo.c b/epan/dissectors/packet-dcerpc-rs_pgo.c
new file mode 100644
index 0000000000..8357184eec
--- /dev/null
+++ b/epan/dissectors/packet-dcerpc-rs_pgo.c
@@ -0,0 +1,1900 @@
+/* packet-dcerpc-rs_pgo.c
+ *
+ * Routines for dcerpc Afs4Int dissection
+ * Copyright 2002, Jaime Fournier <Jaime.Fournier@hush.com>
+ * This information is based off the released idl files from opengroup.
+ * ftp://ftp.opengroup.org/pub/dce122/dce/src/security.tar.gz  security/idl/rs_pgo.idl
+ *
+ * $Id$
+ *
+ * Ethereal - Network traffic analyzer
+ * By Gerald Combs <gerald@ethereal.com>
+ * Copyright 1998 Gerald Combs
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
+ */
+
+#ifdef HAVE_CONFIG_H
+#include "config.h"
+#endif
+
+
+#ifdef HAVE_SYS_TYPES_H
+#include <sys/types.h>
+#endif
+
+#include <string.h>
+
+#include <glib.h>
+#include <epan/packet.h>
+#include "packet-dcerpc.h"
+#include "packet-dcerpc-dce122.h"
+/* 
+delete
+dissect_rgy_acct_user_flags_t
+*/
+
+static int proto_rs_pgo = -1;
+static int hf_rs_pgo_opnum = -1;
+static int hf_rgy_name_domain = -1;
+static int hf_rgy_sec_rgy_name_max_len = -1;
+static int hf_rgy_sec_rgy_name_t_size = -1;
+static int hf_rgy_sec_rgy_name_t = -1;
+static int hf_rgy_get_rqst_name_domain = -1;
+static int hf_rgy_get_rqst_var = -1;
+static int hf_rgy_get_rqst_var2 = -1;
+static int hf_rgy_get_rqst_key_size = -1;
+static int hf_rgy_get_rqst_key_t = -1;
+static int hf_rgy_key_transfer_rqst_var1 = -1;
+static int hf_rgy_key_transfer_rqst_var2 = -1;
+static int hf_rgy_key_transfer_rqst_var3 = -1;
+static int hf_rgy_is_member_rqst_var1 = -1;
+static int hf_rgy_is_member_rqst_var2 = -1;
+static int hf_rgy_is_member_rqst_var3 = -1;
+static int hf_rgy_is_member_rqst_var4 = -1;
+static int hf_rgy_is_member_rqst_key1 = -1;
+static int hf_rgy_is_member_rqst_key2 = -1;
+static int hf_rgy_is_member_rqst_key1_size = -1;
+static int hf_rgy_is_member_rqst_key2_size = -1;
+static int hf_rs_var1 = -1;
+static int hf_rs_pgo_query_result_t = -1;
+static int hf_sec_rgy_pgo_item_t = -1;
+static int hf_rs_pgo_id_key_t = -1;
+static int hf_rs_pgo_query_t = -1;
+static int hf_rs_pgo_query_key_t = -1;
+static int hf_error_status_t = -1;
+static int hf_sec_rgy_pgo_flags_t = -1;
+static int hf_sec_passwd_version_t = -1;
+static int hf_rgy_acct_user_flags_t = -1;
+static int hf_rs_sec_rgy_pgo_item_t_quota = -1;
+static int hf_rs_sec_rgy_pgo_item_t_unix_num = -1;
+static int hf_rs_timeval = -1;
+static int hf_rs_uuid1 = -1;
+static int hf_sec_attr_component_name_t_handle = -1;
+static int hf_sec_attr_component_name_t_valid = -1;
+static int hf_sec_passwd_type_t = -1;
+static int hf_sec_rgy_acct_admin_flags = -1;
+static int hf_sec_rgy_acct_auth_flags_t = -1;
+static int hf_sec_rgy_acct_key_t = -1;
+static int hf_sec_rgy_domain_t = -1;
+static int hf_sec_rgy_name_t_principalName_string = -1;
+static int hf_sec_rgy_name_t_size = -1;
+static int hf_sec_rgy_pname_t_principalName_string = -1;
+static int hf_sec_rgy_unix_sid_t_group = -1;
+static int hf_sec_rgy_unix_sid_t_org = -1;
+static int hf_sec_rgy_unix_sid_t_person = -1;
+static int hf_sec_timeval_sec_t = -1;
+static int hf_rs_pgo_unix_num_key_t = -1;
+
+static gint ett_rs_cache_data_t = -1;
+static gint ett_sec_rgy_domain_t = -1;
+static gint ett_rgy_acct_user_flags_t = -1;
+static gint ett_sec_attr_component_name_t = -1;
+static gint ett_sec_passwd_type_t = -1;
+static gint ett_sec_rgy_acct_admin_flags_t = -1;
+static gint ett_sec_rgy_acct_admin_t = -1;
+static gint ett_sec_rgy_acct_auth_flags_t = -1;
+static gint ett_sec_rgy_acct_key_t = -1;
+static gint ett_sec_rgy_acct_user_t = -1;
+static gint ett_sec_rgy_cursor_t = -1;
+static gint ett_sec_rgy_foreign_id_t = -1;
+static gint ett_sec_rgy_login_name_t = -1;
+static gint ett_sec_rgy_name_t = -1;
+static gint ett_sec_rgy_pgo_item_t = -1;
+static gint ett_sec_rgy_pname_t = -1;
+static gint ett_sec_rgy_sid_t = -1;
+static gint ett_sec_rgy_unix_passwd_buf_t = -1;
+static gint ett_sec_rgy_unix_sid_t = -1;
+static gint ett_sec_timeval_sec_t = -1;
+static gint ett_sec_rgy_pgo_flags_t = -1;
+static gint ett_error_status_t = -1;
+static gint ett_rs_pgo_query_t = -1;
+static gint ett_rs_pgo_query_key_t = -1;
+static gint ett_rs_pgo_id_key_t = -1;
+static gint ett_rs_pgo_unix_num_key_t = -1;
+static gint ett_rs_pgo_query_result_t = -1;
+static gint ett_rs_pgo_result_t = -1;
+static guint8 *st_str;
+
+
+#define sec_rgy_acct_admin_valid  0x1
+#define sec_rgy_acct_admin_audit   0x2
+#define sec_rgy_acct_admin_server  0x4
+#define sec_rgy_acct_admin_client  0x8
+#define sec_rgy_acct_admin_flags_none  0
+#define sec_rgy_acct_auth_post_dated        0x1
+#define sec_rgy_acct_auth_forwardable       0x2
+#define sec_rgy_acct_auth_tgt               0x4
+#define sec_rgy_acct_auth_renewable         0x8
+#define sec_rgy_acct_auth_proxiable        0x10
+#define sec_rgy_acct_auth_dup_skey   0x20
+#define sec_rgy_acct_auth_user_to_user  0x40
+#define sec_rgy_acct_auth_flags_none  0
+#define sec_rgy_acct_user_passwd_valid   0x1
+#define sec_rgy_acct_user_flags_none  0
+#define rs_acct_part_user        0x1
+#define rs_acct_part_admin      0x2
+#define rs_acct_part_passwd    0x4
+#define rs_acct_part_unused     0x8
+#define rs_acct_part_login_name  0x10
+#define sec_rgy_pgo_is_an_alias   0x1
+#define sec_rgy_pgo_is_required   0x2
+#define sec_rgy_pgo_projlist_ok  0x4
+#define sec_rgy_pgo_flags_none  0
+#define sec_rgy_acct_user_passwd_valid  0x1
+#define sec_rgy_acct_user_flags_none  0
+
+static gint ett_rs_pgo = -1;
+
+static e_uuid_t uuid_rs_pgo =
+  { 0x4c878280, 0x3000, 0x0000, {0x0d, 0x00, 0x02, 0x87, 0x14, 0x00, 0x00,
+				 0x00}
+};
+static guint16 ver_rs_pgo = 1;
+
+
+static int
+dissect_error_status_t (tvbuff_t * tvb, int offset,
+			packet_info * pinfo, proto_tree * parent_tree,
+			guint8 * drep)
+{
+  proto_item *item = NULL;
+  proto_tree *tree = NULL;
+  int old_offset = offset;
+  guint32 st;
+  dcerpc_info *di;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+  if (parent_tree)
+    {
+      item = proto_tree_add_text (parent_tree, tvb, offset, -1,
+				  "error_status_t");
+      tree = proto_item_add_subtree (item, ett_error_status_t);
+    }
+
+  offset =
+    dissect_ndr_uint32 (tvb, offset, pinfo, tree, drep, hf_error_status_t,
+			&st);
+  st_str = val_to_str (st, dce_error_vals, "%u");
+
+  if (check_col (pinfo->cinfo, COL_INFO))
+    col_append_fstr (pinfo->cinfo, COL_INFO, " st:%s ", st_str);
+
+  proto_item_set_len (item, offset - old_offset);
+  return offset;
+}
+
+
+static int
+dissect_sec_rgy_pname_t (tvbuff_t * tvb, int offset,
+			 packet_info * pinfo, proto_tree * parent_tree,
+			 guint8 * drep)
+{
+
+
+  proto_item *item = NULL;
+  proto_tree *tree = NULL;
+  int old_offset = offset;
+#define    sec_rgy_pname_t_size 257
+/*
+dissect    sec_rgy_pname const signed32        sec_rgy_pname_t_size  = 257; * Include final '\0' *
+          typedef [string] char sec_rgy_pname_t[sec_rgy_pname_t_size];
+*/
+  guint32 string_size;
+  const guint8 *namestring;
+  dcerpc_info *di;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+
+  if (parent_tree)
+    {
+      item =
+	proto_tree_add_text (parent_tree, tvb, offset, -1, "sec_rgy_pname_t");
+      tree = proto_item_add_subtree (item, ett_sec_rgy_pname_t);
+    }
+
+  offset =
+    dissect_ndr_uint32 (tvb, offset, pinfo, tree, drep,
+			sec_rgy_pname_t_size, &string_size);
+  if (check_col (pinfo->cinfo, COL_INFO))
+    col_append_fstr (pinfo->cinfo, COL_INFO, " String_size:%u", string_size);
+  if (string_size < sec_rgy_pname_t_size)
+    {
+/* proto_tree_add_string(tree, id, tvb, start, length, value_ptr); */
+
+      proto_tree_add_string (tree, hf_sec_rgy_pname_t_principalName_string,
+			     tvb, offset, string_size, tvb_get_ptr (tvb,
+								    offset,
+								    string_size));
+      if (string_size > 1)
+	{
+	  namestring = tvb_get_ptr (tvb, offset, string_size);
+	  offset += string_size;
+	  if (check_col (pinfo->cinfo, COL_INFO))
+	    col_append_fstr (pinfo->cinfo, COL_INFO, " Principal:%s",
+			     namestring);
+	}
+    }
+  else
+    {
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_fstr (pinfo->cinfo, COL_INFO,
+			 " :FIXME!: Invalid string length of  %u",
+			 string_size);
+    }
+
+  proto_item_set_len (item, offset - old_offset);
+  return offset;
+}
+
+static int
+dissect_sec_rgy_pgo_flags_t (tvbuff_t * tvb, int offset,
+			     packet_info * pinfo, proto_tree * parent_tree,
+			     guint8 * drep)
+{
+
+/*
+
+*/
+
+  proto_item *item = NULL;
+  proto_tree *tree = NULL;
+  int old_offset = offset;
+  dcerpc_info *di;
+  guint32 flags;
+
+/*
+    typedef bitset  sec_rgy_pgo_flags_t;
+*/
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+
+  if (parent_tree)
+    {
+      item =
+	proto_tree_add_text (parent_tree, tvb, offset, -1,
+			     "sec_rgy_pgo_flags_t ");
+      tree = proto_item_add_subtree (item, ett_sec_rgy_pgo_flags_t);
+    }
+
+  offset =
+    dissect_ndr_uint32 (tvb, offset, pinfo, tree, drep,
+			hf_sec_rgy_pgo_flags_t, &flags);
+
+/*
+     *
+     * s e c _ r g y _ p g o _ f l a g s _ t
+     *
+
+        * pgo item is an alias *
+        const unsigned32 sec_rgy_pgo_is_an_alias  = 0x1;
+
+        * pgo item is required - cannot be deleted *
+        const unsigned32 sec_rgy_pgo_is_required  = 0x2;
+
+        *
+         * projlist_ok: on person items indicates person can have a concurrent
+         * group set on group items indicates this group can appear on a
+         * concurrent group set.  On org items this flag is undefined.
+         *
+        const unsigned32 sec_rgy_pgo_projlist_ok = 0x4;
+
+        *
+        * bits 4-32 unused
+        *
+        const unsigned32 sec_rgy_pgo_flags_none = 0;
+*/
+#define sec_rgy_pgo_is_an_alias   0x1
+#define sec_rgy_pgo_is_required    0x2
+#define sec_rgy_pgo_projlist_ok 0x4
+#define sec_rgy_pgo_flags_none  0
+
+
+  if (check_col (pinfo->cinfo, COL_INFO))
+    col_append_str (pinfo->cinfo, COL_INFO, " PgoFlags=");
+  if ((flags & sec_rgy_pgo_is_an_alias) == sec_rgy_pgo_is_an_alias)
+    {
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_str (pinfo->cinfo, COL_INFO, ":IS_AN_ALIAS");
+    }
+  if ((flags & sec_rgy_pgo_is_required) == sec_rgy_pgo_is_required)
+    {
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_str (pinfo->cinfo, COL_INFO, ":IS_REQUIRED");
+    }
+  if ((flags & sec_rgy_pgo_projlist_ok) == sec_rgy_pgo_projlist_ok)
+    {
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_str (pinfo->cinfo, COL_INFO, ":PROJLIST_OK");
+    }
+  if ((flags & sec_rgy_acct_admin_client) == sec_rgy_acct_admin_client)
+    {
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_str (pinfo->cinfo, COL_INFO, ":NONE");
+    }
+  if ((flags & sec_rgy_pgo_flags_none) == sec_rgy_pgo_flags_none)
+    {
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_str (pinfo->cinfo, COL_INFO, ":NONE");
+    }
+
+  proto_item_set_len (item, offset - old_offset);
+  return offset;
+}
+
+
+
+
+static int
+dissect_rs_cache_data_t (tvbuff_t * tvb, int offset,
+			 packet_info * pinfo, proto_tree * parent_tree,
+			 guint8 * drep)
+{
+
+/*
+    typedef struct {
+        uuid_t              site_id;
+        sec_timeval_sec_t   person_dtm;
+        sec_timeval_sec_t   group_dtm;
+        sec_timeval_sec_t   org_dtm;
+    } rs_cache_data_t;
+*/
+
+
+  proto_item *item = NULL;
+  proto_tree *tree = NULL;
+  int old_offset = offset;
+  dcerpc_info *di;
+  guint32 person_dtm, group_dtm, org_dtm;
+  e_uuid_t uuid1;
+
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+
+  if (parent_tree)
+    {
+      item =
+	proto_tree_add_text (parent_tree, tvb, offset, -1, "rs_cache_data_t");
+      tree = proto_item_add_subtree (item, ett_rs_cache_data_t);
+    }
+
+
+  offset =
+    dissect_ndr_uuid_t (tvb, offset, pinfo, tree, drep, hf_rs_uuid1, &uuid1);
+  offset =
+    dissect_dcerpc_time_t (tvb, offset, pinfo, tree, drep, hf_rs_timeval,
+			   &person_dtm);
+  offset =
+    dissect_dcerpc_time_t (tvb, offset, pinfo, tree, drep, hf_rs_timeval,
+			   &group_dtm);
+  offset =
+    dissect_dcerpc_time_t (tvb, offset, pinfo, tree, drep, hf_rs_timeval,
+			   &org_dtm);
+
+  if (check_col (pinfo->cinfo, COL_INFO))
+    col_append_fstr (pinfo->cinfo, COL_INFO,
+		     " siteid %08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x person_dtm:%u group_dtm:%u org_dtm:%u",
+		     uuid1.Data1, uuid1.Data2, uuid1.Data3, uuid1.Data4[0],
+		     uuid1.Data4[1], uuid1.Data4[2], uuid1.Data4[3],
+		     uuid1.Data4[4], uuid1.Data4[5], uuid1.Data4[6],
+		     uuid1.Data4[7], person_dtm, group_dtm, org_dtm);
+
+  proto_item_set_len (item, offset - old_offset);
+  return offset;
+}
+
+
+
+static int
+dissect_sec_rgy_name_t (tvbuff_t * tvb, int offset,
+			packet_info * pinfo, proto_tree * parent_tree,
+			guint8 * drep)
+{
+
+
+  proto_item *item = NULL;
+  proto_tree *tree = NULL;
+  int old_offset = offset;
+#define    sec_rgy_name_t_size  1025
+/*    typedef [string] char sec_rgy_name_t[sec_rgy_name_t_size]; */
+  guint32 string_size;
+  const guint8 *namestring;
+  dcerpc_info *di;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+
+  if (parent_tree)
+    {
+      item =
+	proto_tree_add_text (parent_tree, tvb, offset, -1, "sec_rgy_name_t");
+      tree = proto_item_add_subtree (item, ett_sec_rgy_name_t);
+    }
+
+  offset =
+    dissect_ndr_uint32 (tvb, offset, pinfo, tree, drep,
+			hf_sec_rgy_name_t_size, &string_size);
+  if (check_col (pinfo->cinfo, COL_INFO))
+    col_append_fstr (pinfo->cinfo, COL_INFO, " String_size:%u", string_size);
+  if (string_size < sec_rgy_name_t_size)
+    {
+/* proto_tree_add_string(tree, id, tvb, start, length, value_ptr); */
+
+      proto_tree_add_string (tree, hf_sec_rgy_name_t_principalName_string,
+			     tvb, offset, string_size, tvb_get_ptr (tvb,
+								    offset,
+								    string_size));
+      if (string_size > 1)
+	{
+	  namestring = tvb_get_ptr (tvb, offset, string_size);
+	  offset += string_size;
+	  if (check_col (pinfo->cinfo, COL_INFO))
+	    col_append_fstr (pinfo->cinfo, COL_INFO, " Principal:%s",
+			     namestring);
+	}
+    }
+  else
+    {
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_fstr (pinfo->cinfo, COL_INFO,
+			 " :FIXME!: Invalid string length of  %u",
+			 string_size);
+    }
+
+  proto_item_set_len (item, offset - old_offset);
+  return offset;
+}
+
+
+static int
+dissect_sec_rgy_domain_t (tvbuff_t * tvb, int offset,
+			  packet_info * pinfo, proto_tree * parent_tree,
+			  guint8 * drep)
+{
+
+/*
+    typedef signed32    sec_rgy_domain_t;
+*/
+
+  proto_item *item = NULL;
+  proto_tree *tree = NULL;
+  int old_offset = offset;
+  dcerpc_info *di;
+  guint32 domain_t;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+
+  if (parent_tree)
+    {
+      item =
+	proto_tree_add_text (parent_tree, tvb, offset, -1, "sec_rgy_domain_t");
+      tree = proto_item_add_subtree (item, ett_sec_rgy_domain_t);
+    }
+
+
+  offset =
+    dissect_ndr_uint32 (tvb, offset, pinfo, tree, drep, hf_sec_rgy_domain_t,
+			&domain_t);
+
+  if (check_col (pinfo->cinfo, COL_INFO))
+    col_append_fstr (pinfo->cinfo, COL_INFO, " sec_rgy_domain_t:%u",
+		     domain_t);
+
+
+  proto_item_set_len (item, offset - old_offset);
+  return offset;
+}
+
+static int
+dissect_sec_rgy_pgo_item_t (tvbuff_t * tvb, int offset,
+			    packet_info * pinfo, proto_tree * parent_tree,
+			    guint8 * drep)
+{
+
+/*
+    typedef struct {
+        uuid_t              id;
+        signed32            unix_num;
+        signed32            quota;
+        sec_rgy_pgo_flags_t flags;
+        sec_rgy_pname_t     fullname;
+    }               sec_rgy_pgo_item_t;
+
+*/
+
+  proto_item *item = NULL;
+  proto_tree *tree = NULL;
+  int old_offset = offset;
+  dcerpc_info *di;
+  e_uuid_t id;
+  guint32 unix_num, quota;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+
+  if (parent_tree)
+    {
+      item =
+	proto_tree_add_text (parent_tree, tvb, offset, -1,
+			     " sec_rgy_pgo_item_t ");
+      tree = proto_item_add_subtree (item, ett_sec_rgy_pgo_item_t);
+    }
+
+  offset =
+    dissect_ndr_uuid_t (tvb, offset, pinfo, tree, drep, hf_rs_uuid1, &id);
+  offset =
+    dissect_ndr_uint32 (tvb, offset, pinfo, tree, drep,
+			hf_rs_sec_rgy_pgo_item_t_unix_num, &unix_num);
+  offset =
+    dissect_ndr_uint32 (tvb, offset, pinfo, tree, drep,
+			hf_rs_sec_rgy_pgo_item_t_quota, &quota);
+  offset = dissect_sec_rgy_pgo_flags_t (tvb, offset, pinfo, tree, drep);
+  offset += 4;			/* XXX */
+  offset = dissect_sec_rgy_pname_t (tvb, offset, pinfo, tree, drep);
+
+  if (check_col (pinfo->cinfo, COL_INFO))
+    col_append_fstr (pinfo->cinfo, COL_INFO,
+		     " sec_rgy_pgo_item_t - id %08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x unix_num:%u quota:%u",
+		     id.Data1, id.Data2, id.Data3, id.Data4[0],
+		     id.Data4[1], id.Data4[2], id.Data4[3],
+		     id.Data4[4], id.Data4[5], id.Data4[6],
+		     id.Data4[7], unix_num, quota);
+
+  proto_item_set_len (item, offset - old_offset);
+  return offset;
+}
+
+
+static int
+dissect_sec_rgy_cursor_t (tvbuff_t * tvb, int offset,
+			  packet_info * pinfo, proto_tree * parent_tree,
+			  guint8 * drep)
+{
+
+/*
+     * Database cursor for iterative operations
+     *
+    typedef struct {
+        uuid_t          source;
+        signed32        handle;
+        boolean32       valid;
+    }               sec_rgy_cursor_t;
+
+ 
+*/
+
+  proto_item *item = NULL;
+  proto_tree *tree = NULL;
+  int old_offset = offset;
+  dcerpc_info *di;
+  e_uuid_t source;
+  guint32 handle, valid;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+
+  if (parent_tree)
+    {
+      item =
+	proto_tree_add_text (parent_tree, tvb, offset, -1,
+			     " sec_rgy_cursor_t ");
+      tree = proto_item_add_subtree (item, ett_sec_rgy_cursor_t);
+    }
+
+  offset =
+    dissect_ndr_uuid_t (tvb, offset, pinfo, tree, drep, hf_rs_uuid1, &source);
+  offset =
+    dissect_ndr_uint32 (tvb, offset, pinfo, tree, drep,
+			hf_rs_sec_rgy_pgo_item_t_unix_num, &handle);
+  offset =
+    dissect_ndr_uint32 (tvb, offset, pinfo, tree, drep,
+			hf_rs_sec_rgy_pgo_item_t_quota, &valid);
+
+  if (check_col (pinfo->cinfo, COL_INFO))
+    col_append_fstr (pinfo->cinfo, COL_INFO,
+		     " sec_rgy_cursor_t - source %08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x handle:%u valid:%u",
+		     source.Data1, source.Data2, source.Data3,
+		     source.Data4[0], source.Data4[1], source.Data4[2],
+		     source.Data4[3], source.Data4[4], source.Data4[5],
+		     source.Data4[6], source.Data4[7], handle, valid);
+
+  proto_item_set_len (item, offset - old_offset);
+  return offset;
+}
+
+static int
+dissect_rs_pgo_query_t (tvbuff_t * tvb, int offset,
+			packet_info * pinfo, proto_tree * parent_tree,
+			guint8 * drep)
+{
+
+  typedef enum
+  {
+    rs_pgo_query_name,
+    rs_pgo_query_id,
+    rs_pgo_query_unix_num,
+    rs_pgo_query_next,
+    rs_pgo_query_none
+  } rs_pgo_query_t;
+
+
+  proto_item *item = NULL;
+  proto_tree *tree = NULL;
+  int old_offset = offset;
+  dcerpc_info *di;
+  guint8 query_t;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+
+  if (parent_tree)
+    {
+      item =
+	proto_tree_add_text (parent_tree, tvb, offset, -1, "rs_pgo_query_t ");
+      tree = proto_item_add_subtree (item, ett_rs_pgo_query_t);
+    }
+  offset =
+    dissect_ndr_uint8 (tvb, offset, pinfo, tree, drep, hf_rs_pgo_query_t,
+		       &query_t);
+  if (check_col (pinfo->cinfo, COL_INFO))
+    col_append_str (pinfo->cinfo, COL_INFO, " rs_pgo_query_t:");
+
+  switch (query_t)
+    {
+    case rs_pgo_query_name:
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_str (pinfo->cinfo, COL_INFO, "NAME");
+      break;
+    case rs_pgo_query_id:
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_str (pinfo->cinfo, COL_INFO, "ID");
+      break;
+    case rs_pgo_query_unix_num:
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_str (pinfo->cinfo, COL_INFO, "UNIX_NUM");
+      break;
+    case rs_pgo_query_next:
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_str (pinfo->cinfo, COL_INFO, "NEXT");
+      break;
+    case rs_pgo_query_none:
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_str (pinfo->cinfo, COL_INFO, "NONE");
+      break;
+    default:
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_fstr (pinfo->cinfo, COL_INFO, " unknown:%u", query_t);
+      break;
+      ;
+    }
+
+
+  proto_item_set_len (item, offset - old_offset);
+  return offset;
+}
+static int
+dissect_rs_pgo_id_key_t (tvbuff_t * tvb, int offset,
+			 packet_info * pinfo, proto_tree * parent_tree,
+			 guint8 * drep)
+{
+
+/*
+    typedef struct {
+        uuid_t          id;
+        sec_rgy_name_t  scope;
+    } rs_pgo_id_key_t;
+
+*/
+
+  proto_item *item = NULL;
+  proto_tree *tree = NULL;
+  int old_offset = offset;
+  dcerpc_info *di;
+  e_uuid_t id;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+
+  if (parent_tree)
+    {
+      item =
+	proto_tree_add_text (parent_tree, tvb, offset, -1,
+			     "rs_pgo_id_key_t ");
+      tree = proto_item_add_subtree (item, ett_rs_pgo_id_key_t);
+    }
+
+  offset =
+    dissect_ndr_uuid_t (tvb, offset, pinfo, tree, drep, hf_rs_uuid1, &id);
+  offset = dissect_sec_rgy_name_t (tvb, offset, pinfo, tree, drep);
+
+  if (check_col (pinfo->cinfo, COL_INFO))
+    col_append_fstr (pinfo->cinfo, COL_INFO,
+		     " rs_pgo_id_key_t - id %08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x",
+		     id.Data1, id.Data2, id.Data3, id.Data4[0],
+		     id.Data4[1], id.Data4[2], id.Data4[3],
+		     id.Data4[4], id.Data4[5], id.Data4[6], id.Data4[7]);
+
+  proto_item_set_len (item, offset - old_offset);
+  return offset;
+}
+
+
+static int
+dissect_rs_pgo_result_t (tvbuff_t * tvb, int offset,
+			 packet_info * pinfo, proto_tree * parent_tree,
+			 guint8 * drep)
+{
+
+/*
+    typedef struct {
+        sec_rgy_name_t      name;
+        sec_rgy_pgo_item_t  item;
+    } rs_pgo_result_t;
+
+
+*/
+
+  proto_item *item = NULL;
+  proto_tree *tree = NULL;
+  int old_offset = offset;
+  dcerpc_info *di;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+  if (parent_tree)
+    {
+      item =
+	proto_tree_add_text (parent_tree, tvb, offset, -1,
+			     "rs_pgo_result_t ");
+      tree = proto_item_add_subtree (item, ett_rs_pgo_result_t);
+    }
+
+  offset = dissect_sec_rgy_name_t (tvb, offset, pinfo, tree, drep);
+  offset = dissect_sec_rgy_pgo_item_t (tvb, offset, pinfo, tree, drep);
+
+  proto_item_set_len (item, offset - old_offset);
+  return offset;
+}
+
+
+
+static int
+dissect_rs_pgo_unix_num_key_t (tvbuff_t * tvb, int offset,
+			       packet_info * pinfo, proto_tree * parent_tree,
+			       guint8 * drep)
+{
+
+/*
+    typedef struct {
+        signed32        unix_num;
+        sec_rgy_name_t  scope;
+    } rs_pgo_unix_num_key_t;
+
+
+r
+
+*/
+
+  proto_item *item = NULL;
+  proto_tree *tree = NULL;
+  int old_offset = offset;
+  dcerpc_info *di;
+  guint32 rs_pgo_unix_num_key_t;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+
+  if (parent_tree)
+    {
+      item =
+	proto_tree_add_text (parent_tree, tvb, offset, -1,
+			     " rs_pgo_unix_num_key_t ");
+      tree = proto_item_add_subtree (item, ett_rs_pgo_unix_num_key_t);
+    }
+
+  offset =
+    dissect_ndr_uint32 (tvb, offset, pinfo, tree, drep,
+			hf_rs_pgo_unix_num_key_t, &rs_pgo_unix_num_key_t);
+  offset = dissect_sec_rgy_name_t (tvb, offset, pinfo, tree, drep);
+
+  if (check_col (pinfo->cinfo, COL_INFO))
+    col_append_fstr (pinfo->cinfo, COL_INFO,
+		     " rs_pgo_unix_num_key_t:%u", rs_pgo_unix_num_key_t);
+
+  proto_item_set_len (item, offset - old_offset);
+  return offset;
+}
+
+
+static int
+dissect_rs_pgo_query_key_t (tvbuff_t * tvb, int offset,
+			    packet_info * pinfo, proto_tree * parent_tree,
+			    guint8 * drep)
+{
+
+  typedef enum
+  {
+    rs_pgo_query_name,
+    rs_pgo_query_id,
+    rs_pgo_query_unix_num,
+    rs_pgo_query_next,
+    rs_pgo_query_none
+  } rs_pgo_query_t;
+/*
+    typedef union switch (rs_pgo_query_t query) tagged_union {
+        case rs_pgo_query_name:
+            sec_rgy_name_t              name;
+
+        case rs_pgo_query_id:
+            rs_pgo_id_key_t             id_key;
+
+        case rs_pgo_query_unix_num:
+            rs_pgo_unix_num_key_t       unix_num_key;
+
+        case rs_pgo_query_next:
+            sec_rgy_name_t              scope;
+
+        default:
+            ;                       * empty branch of union *
+
+    } rs_pgo_query_key_t;
+*/
+
+
+  proto_item *item = NULL;
+  proto_tree *tree = NULL;
+  int old_offset = offset;
+  dcerpc_info *di;
+  guint16 query_t;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+
+  if (parent_tree)
+    {
+      item =
+	proto_tree_add_text (parent_tree, tvb, offset, -1,
+			     "rs_pgo_query_key_t ");
+      tree = proto_item_add_subtree (item, ett_rs_pgo_query_key_t);
+    }
+  offset =
+    dissect_ndr_uint16 (tvb, offset, pinfo, tree, drep, hf_rs_pgo_query_key_t,
+			&query_t);
+  if (check_col (pinfo->cinfo, COL_INFO))
+    col_append_str (pinfo->cinfo, COL_INFO, " rs_pgo_query_key_t:");
+  offset += 4;
+  switch (query_t)
+    {
+    case rs_pgo_query_name:
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_str (pinfo->cinfo, COL_INFO, "NAME");
+      offset = dissect_sec_rgy_name_t (tvb, offset, pinfo, tree, drep);
+      break;
+    case rs_pgo_query_id:
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_str (pinfo->cinfo, COL_INFO, "ID");
+      offset = dissect_rs_pgo_id_key_t (tvb, offset, pinfo, tree, drep);
+      break;
+    case rs_pgo_query_unix_num:
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_str (pinfo->cinfo, COL_INFO, "UNIX_NUM");
+      offset = dissect_rs_pgo_unix_num_key_t (tvb, offset, pinfo, tree, drep);
+      break;
+    case rs_pgo_query_next:
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_str (pinfo->cinfo, COL_INFO, "NEXT");
+      offset = dissect_sec_rgy_name_t (tvb, offset, pinfo, tree, drep);
+      break;
+    case rs_pgo_query_none:
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_str (pinfo->cinfo, COL_INFO, "NONE");
+      break;
+
+    default:
+      if (check_col (pinfo->cinfo, COL_INFO))
+	col_append_fstr (pinfo->cinfo, COL_INFO, " unknown:%u", query_t);
+      ;
+    }
+
+  proto_item_set_len (item, offset - old_offset);
+  return offset;
+}
+
+
+static int
+dissect_rs_pgo_query_result_t (tvbuff_t * tvb, int offset,
+			       packet_info * pinfo, proto_tree * parent_tree,
+			       guint8 * drep)
+{
+  proto_item *item = NULL;
+  proto_tree *tree = NULL;
+  int old_offset = offset;
+  guint32 st;
+  dcerpc_info *di;
+  guint8 *status;
+#define error_status_ok 0
+
+  /*
+     typedef union switch (signed32 status) tagged_union {
+     case error_status_ok:
+     rs_pgo_result_t     result;
+
+     default:
+     ;                      * empty branch of union *
+
+     } rs_pgo_query_result_t;
+   */
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+  if (parent_tree)
+    {
+      item = proto_tree_add_text (parent_tree, tvb, offset, -1,
+				  "rs_pgo_query_result_t");
+      tree = proto_item_add_subtree (item, ett_rs_pgo_query_result_t);
+    }
+
+  offset =
+    dissect_ndr_uint32 (tvb, offset, pinfo, tree, drep,
+			hf_rs_pgo_query_result_t, &st);
+  status = val_to_str (st, dce_error_vals, "%u");
+
+  if (check_col (pinfo->cinfo, COL_INFO))
+    col_append_fstr (pinfo->cinfo, COL_INFO, " status:%s ", status);
+
+  offset += 4;			/* XXX */
+
+  switch (st)
+    {
+    case error_status_ok:
+      offset = dissect_rs_pgo_result_t (tvb, offset, pinfo, tree, drep);
+      break;
+    default:
+      ;
+
+    }
+
+  proto_item_set_len (item, offset - old_offset);
+  return offset;
+}
+
+
+
+static int
+rs_pgo_dissect_add_rqst (tvbuff_t * tvb, int offset,
+			 packet_info * pinfo, proto_tree * tree,
+			 guint8 * drep)
+{
+  dcerpc_info *di;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+/*
+        [in]        sec_rgy_domain_t    name_domain,
+        [in]        sec_rgy_name_t      pgo_name,
+        [in]        sec_rgy_pgo_item_t  *pgo_item,
+*/
+
+  offset = dissect_sec_rgy_domain_t (tvb, offset, pinfo, tree, drep);
+  offset += 4;
+  offset = dissect_sec_rgy_name_t (tvb, offset, pinfo, tree, drep);
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_sec_rgy_pgo_item_t, NDR_POINTER_REF,
+			 "sec_rgy_pgo_item_t: ", -1);
+
+  return offset;
+}
+static int
+rs_pgo_dissect_add_resp (tvbuff_t * tvb, int offset,
+			 packet_info * pinfo, proto_tree * tree,
+			 guint8 * drep)
+{
+  dcerpc_info *di;
+  guint32 buff_remain;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+/*
+        [out]       rs_cache_data_t     *cache_info,
+        [out]       error_status_t      *status
+*/
+
+ buff_remain = tvb_length_remaining(tvb, offset);
+
+/* found several add_member responses that had 8 bytes of data. first was 4 0's and last was 3 zeros and a 1 */
+if (buff_remain > 8) {
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_rs_cache_data_t, NDR_POINTER_REF,
+			 "cache_info: ", -1);
+}
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_error_status_t, NDR_POINTER_REF, "status: ",
+			 -1);
+  return offset;
+}
+
+static int
+rs_pgo_dissect_delete_rqst (tvbuff_t * tvb, int offset,
+			    packet_info * pinfo, proto_tree * tree,
+			    guint8 * drep)
+{
+  dcerpc_info *di;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+/*
+        [in]        sec_rgy_domain_t    name_domain,
+        [in]        sec_rgy_name_t      pgo_name,
+*/
+  offset = dissect_sec_rgy_domain_t (tvb, offset, pinfo, tree, drep);
+  offset = dissect_sec_rgy_name_t (tvb, offset, pinfo, tree, drep);
+
+  return offset;
+}
+
+static int
+rs_pgo_dissect_delete_resp (tvbuff_t * tvb, int offset,
+			    packet_info * pinfo, proto_tree * tree,
+			    guint8 * drep)
+{
+  dcerpc_info *di;
+  guint32 buff_remain;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+/*
+        [out]       rs_cache_data_t     *cache_info,
+        [out]       error_status_t      *status
+*/
+ buff_remain = tvb_length_remaining(tvb, offset);
+
+/* found several add_member responses that had 8 bytes of data. first was 4 0's and last was 3 zeros and a 1 */
+ 
+  if (buff_remain > 8) {
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_rs_cache_data_t, NDR_POINTER_REF,
+			 "cache_info:", -1);
+  }
+
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_error_status_t, NDR_POINTER_REF, "status:",
+			 -1);
+
+  return offset;
+}
+
+static int
+rs_pgo_dissect_replace_rqst (tvbuff_t * tvb, int offset,
+			     packet_info * pinfo, proto_tree * tree,
+			     guint8 * drep)
+{
+  dcerpc_info *di;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+/*
+        [in]        sec_rgy_domain_t    name_domain,
+        [in]        sec_rgy_name_t      pgo_name,
+        [in]        sec_rgy_pgo_item_t  *pgo_item,
+*/
+  offset = dissect_sec_rgy_domain_t (tvb, offset, pinfo, tree, drep);
+  offset = dissect_sec_rgy_name_t (tvb, offset, pinfo, tree, drep);
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_sec_rgy_pgo_item_t, NDR_POINTER_REF,
+			 "pgo_item:", -1);
+
+  return offset;
+}
+
+static int
+rs_pgo_dissect_replace_resp (tvbuff_t * tvb, int offset,
+			     packet_info * pinfo, proto_tree * tree,
+			     guint8 * drep)
+{
+  dcerpc_info *di;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+/*
+        [out]       rs_cache_data_t     *cache_info,
+        [out]       error_status_t      *status
+  
+*/
+
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_rs_cache_data_t, NDR_POINTER_REF,
+			 "cache_info:", -1);
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_error_status_t, NDR_POINTER_REF, "status:",
+			 -1);
+
+  return offset;
+}
+
+
+static int
+rs_pgo_dissect_add_member_rqst (tvbuff_t * tvb, int offset,
+				packet_info * pinfo, proto_tree * tree,
+				guint8 * drep)
+{
+
+  dcerpc_info *di;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+
+
+/*
+        [in]        sec_rgy_domain_t    name_domain,
+        [in]        sec_rgy_name_t      go_name,
+        [in]        sec_rgy_name_t      person_name,
+*/
+
+  offset = dissect_sec_rgy_domain_t (tvb, offset, pinfo, tree, drep);
+  offset = dissect_sec_rgy_name_t (tvb, offset, pinfo, tree, drep);
+  offset = dissect_sec_rgy_name_t (tvb, offset, pinfo, tree, drep);
+
+
+  return offset;
+
+}
+static int
+rs_pgo_dissect_rename_rqst (tvbuff_t * tvb, int offset,
+			    packet_info * pinfo, proto_tree * tree,
+			    guint8 * drep)
+{
+  dcerpc_info *di;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+/*
+        [in]        sec_rgy_domain_t    name_domain,
+        [in]        sec_rgy_name_t      old_name,
+        [in]        sec_rgy_name_t      new_name,
+*/
+  offset = dissect_sec_rgy_domain_t (tvb, offset, pinfo, tree, drep);
+  offset = dissect_sec_rgy_name_t (tvb, offset, pinfo, tree, drep);
+  offset = dissect_sec_rgy_name_t (tvb, offset, pinfo, tree, drep);
+
+
+  return offset;
+}
+
+static int
+rs_pgo_dissect_rename_resp (tvbuff_t * tvb, int offset,
+			    packet_info * pinfo, proto_tree * tree,
+			    guint8 * drep)
+{
+  dcerpc_info *di;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+/*
+        [out]       rs_cache_data_t     *cache_info,
+        [out]       error_status_t      *status
+*/
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_rs_cache_data_t, NDR_POINTER_REF,
+			 "cache_info:", -1);
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_error_status_t, NDR_POINTER_REF, "status:",
+			 -1);
+
+  return offset;
+}
+
+
+static int
+rs_pgo_dissect_add_member_resp (tvbuff_t * tvb, int offset,
+				packet_info * pinfo, proto_tree * tree,
+				guint8 * drep)
+{
+  dcerpc_info *di;
+  guint32 buff_remain;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+/*
+        [out]       rs_cache_data_t     *cache_info,
+        [out]       error_status_t      *status
+*/
+
+ buff_remain = tvb_length_remaining(tvb, offset);
+
+/* found several add responses that had 8 bytes of data. first was 4 0's and last was 3 zeros and a 1 */
+if (buff_remain > 8) {
+
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_rs_cache_data_t, NDR_POINTER_REF,
+			 "cache_info:", -1);
+}
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_error_status_t, NDR_POINTER_REF, "status:",
+			 -1);
+
+
+  return offset;
+}
+
+static int
+rs_pgo_dissect_delete_member_rqst (tvbuff_t * tvb, int offset,
+				   packet_info * pinfo, proto_tree * tree,
+				   guint8 * drep)
+{
+  dcerpc_info *di;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+/*
+    void rs_pgo_delete_member (
+        [in]        sec_rgy_domain_t    name_domain,
+        [in]        sec_rgy_name_t      go_name,
+        [in]        sec_rgy_name_t      person_name,
+    );
+*/
+
+  offset = dissect_sec_rgy_domain_t (tvb, offset, pinfo, tree, drep);
+  offset = dissect_sec_rgy_name_t (tvb, offset, pinfo, tree, drep);
+  offset = dissect_sec_rgy_name_t (tvb, offset, pinfo, tree, drep);
+
+  return offset;
+
+}
+
+
+static int
+rs_pgo_dissect_get_members_rqst (tvbuff_t * tvb, int offset,
+				 packet_info * pinfo, proto_tree * tree,
+				 guint8 * drep)
+{
+
+  guint32 max_members;
+  dcerpc_info *di;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+/*
+        [in]        sec_rgy_domain_t        name_domain,
+        [in]        sec_rgy_name_t          go_name,
+        [in, out]   sec_rgy_cursor_t        *member_cursor,
+        [in]        signed32                max_members,
+*/
+
+  offset = dissect_sec_rgy_domain_t (tvb, offset, pinfo, tree, drep);
+  offset += 4;
+  offset = dissect_sec_rgy_name_t (tvb, offset, pinfo, tree, drep);
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_sec_rgy_cursor_t, NDR_POINTER_REF,
+			 "member_cursor:", -1);
+  offset =
+    dissect_ndr_uint32 (tvb, offset, pinfo, tree, drep, hf_rs_var1,
+			&max_members);
+
+  if (check_col (pinfo->cinfo, COL_INFO))
+    col_append_fstr (pinfo->cinfo, COL_INFO, " :max_members:%u", max_members);
+
+  return offset;
+}
+
+static int
+rs_pgo_dissect_key_transfer_rqst (tvbuff_t * tvb, int offset,
+				  packet_info * pinfo, proto_tree * tree,
+				  guint8 * drep)
+{
+  dcerpc_info *di;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+/*
+        [in]        sec_rgy_domain_t    name_domain,
+        [in]        rs_pgo_query_t      requested_result_type,
+        [in, out]   rs_pgo_query_key_t  *key,
+*/
+
+  offset += 4;
+  offset = dissect_sec_rgy_domain_t (tvb, offset, pinfo, tree, drep);
+  offset = dissect_rs_pgo_query_t (tvb, offset, pinfo, tree, drep);
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_rs_pgo_query_key_t, NDR_POINTER_REF, "key:",
+			 -1);
+
+  return offset;
+}
+
+static int
+rs_pgo_dissect_key_transfer_resp (tvbuff_t * tvb, int offset,
+				  packet_info * pinfo, proto_tree * tree,
+				  guint8 * drep)
+{
+  dcerpc_info *di;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+/*
+        [in, out]   rs_pgo_query_key_t  *key,
+        [out]       rs_cache_data_t     *cache_info,
+        [out]       error_status_t      *status
+*/
+
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_rs_pgo_query_key_t, NDR_POINTER_REF, "key:",
+			 -1);
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_rs_cache_data_t, NDR_POINTER_REF,
+			 "cache_info:", -1);
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_error_status_t, NDR_POINTER_REF, "status:",
+			 -1);
+
+  return offset;
+}
+
+
+static int
+rs_pgo_dissect_is_member_resp (tvbuff_t * tvb, int offset,
+			       packet_info * pinfo, proto_tree * tree,
+			       guint8 * drep)
+{
+  dcerpc_info *di;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+/*
+        [out]       rs_cache_data_t     *cache_info,
+        [out]       error_status_t      *status
+*/
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_rs_cache_data_t, NDR_POINTER_REF,
+			 "cache_info:", -1);
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_error_status_t, NDR_POINTER_REF, "status:",
+			 -1);
+
+  return offset;
+}
+
+static int
+rs_pgo_dissect_is_member_rqst (tvbuff_t * tvb, int offset,
+			       packet_info * pinfo, proto_tree * tree,
+			       guint8 * drep)
+{
+  dcerpc_info *di;
+/*
+        [in]        sec_rgy_domain_t    name_domain,
+        [in]        sec_rgy_name_t      go_name,
+        [in]        sec_rgy_name_t      person_name,
+*/
+
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+  offset += 4;
+  offset = dissect_sec_rgy_domain_t (tvb, offset, pinfo, tree, drep);
+  offset = dissect_sec_rgy_name_t (tvb, offset, pinfo, tree, drep);
+  offset += 4;
+  offset = dissect_sec_rgy_name_t (tvb, offset, pinfo, tree, drep);
+
+
+  return offset;
+
+}
+
+
+static int
+rs_pgo_dissect_get_rqst (tvbuff_t * tvb, int offset,
+			 packet_info * pinfo, proto_tree * tree,
+			 guint8 * drep)
+{
+  dcerpc_info *di;
+  guint32 allow_aliases;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+/*
+        [in]        sec_rgy_domain_t        name_domain,
+        [in]        rs_pgo_query_key_t      *key,
+        [in]        boolean32               allow_aliases,
+        [in, out]   sec_rgy_cursor_t        *item_cursor,
+*/
+
+  offset = dissect_sec_rgy_domain_t (tvb, offset, pinfo, tree, drep);
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_rs_pgo_query_key_t, NDR_POINTER_REF, "key:",
+			 -1);
+  offset =
+    dissect_ndr_uint32 (tvb, offset, pinfo, tree, drep, hf_rs_var1,
+			&allow_aliases);
+
+  if (check_col (pinfo->cinfo, COL_INFO))
+    col_append_fstr (pinfo->cinfo, COL_INFO, " :allow_aliases:%u",
+		     allow_aliases);
+
+
+  offset += 4;			/* XXX */
+
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_sec_rgy_cursor_t, NDR_POINTER_REF,
+			 "item_cursor:", -1);
+  return offset;
+
+}
+
+static int
+rs_pgo_dissect_get_resp (tvbuff_t * tvb, int offset,
+			 packet_info * pinfo, proto_tree * tree,
+			 guint8 * drep)
+{
+
+  dcerpc_info *di;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+/*
+        [in, out]   sec_rgy_cursor_t        *item_cursor,
+        [out]       rs_cache_data_t         *cache_info,
+        [out]       rs_pgo_query_result_t   *result
+*/
+
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_sec_rgy_cursor_t, NDR_POINTER_REF,
+			 "item_cursor:", -1);
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_rs_cache_data_t, NDR_POINTER_REF,
+			 "cache_info:", -1);
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_rs_pgo_query_result_t, NDR_POINTER_REF,
+			 "result:", -1);
+
+  return offset;
+
+}
+
+static int
+rs_pgo_dissect_delete_member_resp (tvbuff_t * tvb, int offset,
+				   packet_info * pinfo, proto_tree * tree,
+				   guint8 * drep)
+{
+
+  dcerpc_info *di;
+
+  di = pinfo->private_data;
+  if (di->conformant_run)
+    {
+      return offset;
+    }
+
+/*
+        [out]       rs_cache_data_t     *cache_info,
+        [out]       error_status_t      *status
+ 
+*/
+
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_rs_cache_data_t, NDR_POINTER_REF,
+			 "cache_info:", -1);
+  offset =
+    dissect_ndr_pointer (tvb, offset, pinfo, tree, drep,
+			 dissect_error_status_t, NDR_POINTER_REF, "status:",
+			 -1);
+
+  return offset;
+
+}
+
+
+static dcerpc_sub_dissector rs_pgo_dissectors[] = {
+  {0, "add", rs_pgo_dissect_add_rqst, rs_pgo_dissect_add_resp},
+  {1, "delete", rs_pgo_dissect_delete_rqst, rs_pgo_dissect_delete_resp},
+  {2, "replace", rs_pgo_dissect_replace_rqst, rs_pgo_dissect_replace_resp},
+  {3, "rename", rs_pgo_dissect_rename_rqst, rs_pgo_dissect_rename_resp},
+  {4, "get", rs_pgo_dissect_get_rqst, rs_pgo_dissect_get_resp},
+  {5, "key_transfer", rs_pgo_dissect_key_transfer_rqst,
+   rs_pgo_dissect_key_transfer_resp},
+  {6, "add_member", rs_pgo_dissect_add_member_rqst,
+   rs_pgo_dissect_add_member_resp}, 
+  {7, "delete_member", rs_pgo_dissect_delete_member_rqst,
+   rs_pgo_dissect_delete_member_resp},
+  {8, "is_member", rs_pgo_dissect_is_member_rqst,
+   rs_pgo_dissect_is_member_resp},
+  {9, "get_members", rs_pgo_dissect_get_members_rqst, NULL},
+  {0, NULL, NULL, NULL},
+};
+
+
+void
+proto_register_rs_pgo (void)
+{
+  static hf_register_info hf[] = {
+    {&hf_rs_pgo_opnum,
+     {"Operation", "rs_pgo.opnum", FT_UINT16, BASE_DEC, NULL, 0x0,
+      "Operation", HFILL}},
+    {&hf_error_status_t,
+     {"hf_error_status_t", "hf_error_status_t", FT_UINT32, BASE_DEC, NULL,
+      0x0, "", HFILL}},
+    {&hf_rgy_acct_user_flags_t,
+     {"hf_rgy_acct_user_flags_t ", "hf_rgy_acct_user_flags_t", FT_UINT32,
+      BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_rgy_get_rqst_key_size,
+     {"hf_rgy_get_rqst_key_size ", "hf_rgy_get_rqst_key_size", FT_UINT32,
+      BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_rgy_get_rqst_key_t,
+     {"hf_rgy_get_rqst_key_t ", "hf_rgy_get_rqst_key_t", FT_UINT32, BASE_DEC,
+      NULL, 0x0, "", HFILL}},
+    {&hf_rgy_get_rqst_name_domain,
+     {"hf_rgy_get_rqst_name_domain ", "hf_rgy_get_rqst_name_domain",
+      FT_UINT32, BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_rgy_get_rqst_var,
+     {"hf_rgy_get_rqst_var ", "hf_rgy_get_rqst_var", FT_UINT32, BASE_DEC,
+      NULL, 0x0, "", HFILL}},
+    {&hf_rgy_get_rqst_var2,
+     {"hf_rgy_get_rqst_var2 ", "hf_rgy_get_rqst_var2", FT_UINT32, BASE_DEC,
+      NULL, 0x0, "", HFILL}},
+    {&hf_rgy_is_member_rqst_key1,
+     {"hf_rgy_is_member_rqst_key1 ", "hf_rgy_is_member_rqst_key1", FT_UINT32,
+      BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_rgy_is_member_rqst_key1_size,
+     {"hf_rgy_is_member_rqst_key1_size ", "hf_rgy_is_member_rqst_key1_size",
+      FT_UINT32, BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_rgy_is_member_rqst_key2,
+     {"hf_rgy_is_member_rqst_key2 ", "hf_rgy_is_member_rqst_key2", FT_UINT32,
+      BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_rgy_is_member_rqst_key2_size,
+     {"hf_rgy_is_member_rqst_key2_size ", "hf_rgy_is_member_rqst_key2_size",
+      FT_UINT32, BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_rgy_is_member_rqst_var1,
+     {"hf_rgy_is_member_rqst_var1 ", "hf_rgy_is_member_rqst_var1", FT_UINT32,
+      BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_rgy_is_member_rqst_var2,
+     {"hf_rgy_is_member_rqst_var2 ", "hf_rgy_is_member_rqst_var2", FT_UINT32,
+      BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_rgy_is_member_rqst_var3,
+     {"hf_rgy_is_member_rqst_var3 ", "hf_rgy_is_member_rqst_var3", FT_UINT32,
+      BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_rgy_is_member_rqst_var4,
+     {"hf_rgy_is_member_rqst_var4 ", "hf_rgy_is_member_rqst_var4", FT_UINT32,
+      BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_rgy_key_transfer_rqst_var1,
+     {"hf_rgy_key_transfer_rqst_var1 ", "hf_rgy_key_transfer_rqst_var1",
+      FT_UINT32, BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_rgy_key_transfer_rqst_var2,
+     {"hf_rgy_key_transfer_rqst_var2 ", "hf_rgy_key_transfer_rqst_var2",
+      FT_UINT32, BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_rgy_key_transfer_rqst_var3,
+     {"hf_rgy_key_transfer_rqst_var3 ", "hf_rgy_key_transfer_rqst_var3",
+      FT_UINT32, BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_rgy_name_domain,
+     {"hf_rgy_name_domain ", "hf_rgy_name_domain", FT_UINT32, BASE_DEC, NULL,
+      0x0, "", HFILL}},
+    {&hf_rgy_sec_rgy_name_max_len,
+     {"hf_rgy_sec_rgy_name_max_len ", "hf_rgy_sec_rgy_name_max_len",
+      FT_UINT32, BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_rgy_sec_rgy_name_t,
+     {"hf_rgy_sec_rgy_name_t ", "hf_rgy_sec_rgy_name_t", FT_UINT32, BASE_DEC,
+      NULL, 0x0, "", HFILL}},
+    {&hf_rgy_sec_rgy_name_t_size,
+     {"hf_rgy_sec_rgy_name_t_size ", "hf_rgy_sec_rgy_name_t_size", FT_UINT32,
+      BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_rs_pgo_id_key_t,
+     {"hf_rs_pgo_id_key_t ", "hf_rs_pgo_id_key_t", FT_UINT32, BASE_DEC, NULL,
+      0x0, "", HFILL}},
+    {&hf_rs_pgo_query_key_t,
+     {"hf_rs_pgo_query_key_t ", "hf_rs_pgo_query_key_t", FT_UINT32, BASE_DEC,
+      NULL, 0x0, "", HFILL}},
+    {&hf_rs_pgo_query_result_t,
+     {"hf_rs_pgo_query_result_t ", "hf_rs_pgo_query_result_t", FT_UINT32,
+      BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_rs_pgo_query_t,
+     {"hf_rs_pgo_query_t ", "hf_rs_pgo_query_t", FT_UINT32, BASE_DEC, NULL,
+      0x0, "", HFILL}},
+    {&hf_rs_sec_rgy_pgo_item_t_quota,
+     {"hf_rs_sec_rgy_pgo_item_t_quota ", "hf_rs_sec_rgy_pgo_item_t_quota",
+      FT_UINT32, BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_rs_sec_rgy_pgo_item_t_unix_num,
+     {"hf_rs_sec_rgy_pgo_item_t_unix_num ",
+      "hf_rs_sec_rgy_pgo_item_t_unix_num", FT_UINT32, BASE_DEC, NULL, 0x0, "",
+      HFILL}},
+    {&hf_rs_timeval,
+     {"hf_rs_timeval ", "hf_rs_timeval", FT_RELATIVE_TIME, BASE_DEC, NULL,
+      0x0, "", HFILL}},
+    {&hf_rs_uuid1,
+     {"hf_rs_uuid1 ", "hf_rs_uuid1", FT_STRING, BASE_NONE, NULL, 0x0, "UUID",
+      HFILL}},
+    {&hf_rs_var1,
+     {"hf_rs_var1 ", "hf_rs_var1", FT_UINT32, BASE_DEC, NULL, 0x0, "",
+      HFILL}},
+    {&hf_sec_attr_component_name_t_handle,
+     {"hf_sec_attr_component_name_t_handle ",
+      "hf_sec_attr_component_name_t_handle", FT_UINT32, BASE_DEC, NULL, 0x0,
+      "", HFILL}},
+    {&hf_sec_attr_component_name_t_valid,
+     {"hf_sec_attr_component_name_t_valid ",
+      "hf_sec_attr_component_name_t_valid", FT_UINT32, BASE_DEC, NULL, 0x0,
+      "", HFILL}},
+    {&hf_sec_passwd_type_t,
+     {"hf_sec_passwd_type_t ", "hf_sec_passwd_type_t", FT_UINT32, BASE_DEC,
+      NULL, 0x0, "", HFILL}},
+    {&hf_sec_passwd_version_t,
+     {"hf_sec_passwd_version_t ", "hf_sec_passwd_version_t", FT_UINT32,
+      BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_sec_rgy_acct_admin_flags,
+     {"hf_sec_rgy_acct_admin_flags ", "hf_sec_rgy_acct_admin_flags",
+      FT_UINT32, BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_sec_rgy_acct_auth_flags_t,
+     {"hf_sec_rgy_acct_auth_flags_t ", "hf_sec_rgy_acct_auth_flags_t",
+      FT_UINT32, BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_sec_rgy_acct_key_t,
+     {"hf_sec_rgy_acct_key_t ", "hf_sec_rgy_acct_key_t", FT_UINT32, BASE_DEC,
+      NULL, 0x0, "", HFILL}},
+    {&hf_sec_rgy_domain_t,
+     {"hf_sec_rgy_domain_t ", "hf_sec_rgy_domain_t", FT_UINT32, BASE_DEC,
+      NULL, 0x0, "", HFILL}},
+    {&hf_sec_rgy_name_t_principalName_string,
+     {"hf_sec_rgy_name_t_principalName_string ",
+      "hf_sec_rgy_name_t_principalName_string", FT_STRING, BASE_NONE, NULL,
+      0x0, "", HFILL}},
+    {&hf_sec_rgy_name_t_size,
+     {"hf_sec_rgy_name_t_size ", "hf_sec_rgy_name_t_size", FT_UINT32,
+      BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_sec_rgy_pgo_flags_t,
+     {"hf_sec_rgy_pgo_flags_t ", "hf_sec_rgy_pgo_flags_t", FT_UINT32,
+      BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_sec_rgy_pgo_item_t,
+     {"hf_sec_rgy_pgo_item_t ", "hf_sec_rgy_pgo_item_t", FT_UINT32, BASE_DEC,
+      NULL, 0x0, "", HFILL}},
+    {&hf_sec_rgy_pname_t_principalName_string,
+     {"hf_sec_rgy_pname_t_principalName_string ",
+      "hf_sec_rgy_pname_t_principalName_string", FT_STRING, BASE_NONE, NULL,
+      0x0, "", HFILL}},
+    {&hf_sec_rgy_unix_sid_t_group,
+     {"hf_sec_rgy_unix_sid_t_group ", "hf_sec_rgy_unix_sid_t_group",
+      FT_UINT32, BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_sec_rgy_unix_sid_t_org,
+     {"hf_sec_rgy_unix_sid_t_org ", "hf_sec_rgy_unix_sid_t_org", FT_UINT32,
+      BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_sec_rgy_unix_sid_t_person,
+     {"hf_sec_rgy_unix_sid_t_person ", "hf_sec_rgy_unix_sid_t_person",
+      FT_UINT32, BASE_DEC, NULL, 0x0, "", HFILL}},
+    {&hf_sec_timeval_sec_t,
+     {"hf_sec_timeval_sec_t ", "hf_sec_timeval_sec_t", FT_UINT32, BASE_DEC,
+      NULL, 0x0, "", HFILL}},
+    {&hf_rs_pgo_unix_num_key_t,
+     {"hf_rs_pgo_unix_num_key_t", "hf_rs_pgo_unix_num_key_t", FT_UINT32,
+      BASE_DEC,
+      NULL, 0x0, "", HFILL}},
+
+  };
+
+  static gint *ett[] = {
+    &ett_error_status_t,
+    &ett_rgy_acct_user_flags_t,
+    &ett_rs_pgo,
+    &ett_rs_pgo_id_key_t,
+    &ett_rs_pgo_query_key_t,
+    &ett_rs_pgo_query_result_t,
+    &ett_rs_pgo_query_t,
+    &ett_rs_pgo_result_t,
+    &ett_rs_pgo_unix_num_key_t,
+    &ett_sec_attr_component_name_t,
+    &ett_sec_passwd_type_t,
+    &ett_sec_rgy_acct_admin_flags_t,
+    &ett_sec_rgy_acct_admin_t,
+    &ett_sec_rgy_acct_auth_flags_t,
+    &ett_sec_rgy_acct_key_t,
+    &ett_sec_rgy_acct_user_t,
+    &ett_sec_rgy_cursor_t,
+    &ett_sec_rgy_foreign_id_t,
+    &ett_sec_rgy_login_name_t,
+    &ett_sec_rgy_name_t,
+    &ett_sec_rgy_domain_t,
+    &ett_sec_rgy_pgo_flags_t,
+    &ett_sec_rgy_pgo_item_t,
+    &ett_sec_rgy_pname_t,
+    &ett_sec_rgy_sid_t,
+    &ett_sec_rgy_unix_passwd_buf_t,
+    &ett_sec_rgy_unix_sid_t,
+    &ett_sec_timeval_sec_t,
+    &ett_rs_cache_data_t,
+  };
+  proto_rs_pgo =
+    proto_register_protocol ("DCE Name Service", "RS_PGO", "rs_pgo");
+  proto_register_field_array (proto_rs_pgo, hf, array_length (hf));
+  proto_register_subtree_array (ett, array_length (ett));
+}
+
+void
+proto_reg_handoff_rs_pgo (void)
+{
+  /* Register the protocol as dcerpc */
+  dcerpc_init_uuid (proto_rs_pgo, ett_rs_pgo, &uuid_rs_pgo, ver_rs_pgo,
+		    rs_pgo_dissectors, hf_rs_pgo_opnum);
+}