diff options
| author | Ronnie Sahlberg <ronnie_sahlberg@ozemail.com.au> | 2003-04-12 08:14:02 +0000 |
|---|---|---|
| committer | Ronnie Sahlberg <ronnie_sahlberg@ozemail.com.au> | 2003-04-12 08:14:02 +0000 |
| commit | f4695593855519560de16ebd40b51f10bc1b6ec7 (patch) | |
| tree | d720679c92a8b91aaf529e8efc74ec18ea4a545b /smb.h | |
| parent | 151bd457db53123ffff9fc25b32191c8b092df1d (diff) | |
Rewrite the DCERPC over SMB reassembly completely.
Move the actual reassembly to packet-smb-pipe.c instead of having it inside
the packet-smb.b/Write_andX and ReadAndX dissectors.
Change the dissector to only call dcerpc dissector from the packet where
reassembly was completed instead of always from the first fragment.
Add display fiulter field for the other fragments that display which frame the dcerpc pdu was reassembled in.
This is needed in order to be able to reassemble the type of dcerpc fragments
that are sent between nt4 dc's.
The DCERPC fragment reassembly in the dcerpc layer is still broken though, and
i think it has been broken for quite some time. That will be addressed shortly.
svn path=/trunk/; revision=7445
Diffstat (limited to 'smb.h')
| -rw-r--r-- | smb.h | 6 |
1 files changed, 5 insertions, 1 deletions
@@ -2,7 +2,7 @@ * Defines for smb packet dissection * Copyright 1999, Richard Sharpe <rsharpe@ns.aus.com> * - * $Id: smb.h,v 1.50 2003/03/25 09:41:42 sahlberg Exp $ + * $Id: smb.h,v 1.51 2003/04/12 08:14:02 sahlberg Exp $ * * Ethereal - Network traffic analyzer * By Gerald Combs <gerald@ethereal.com> @@ -291,6 +291,10 @@ typedef struct conv_tables { GHashTable *matched; /* this tables is used by DCERPC over SMB reassembly*/ GHashTable *dcerpc_fid_to_frame; + /* this table is to keep track of which frames we saw which dcerpc + pdu in */ + GHashTable *dcerpc_frame_to_dcerpc_pdu; + /* This table is used to track TID->services for a conversation */ GHashTable *tid_service; gboolean raw_ntlmssp; /* Do extended security exc use raw ntlmssp */ |