aboutsummaryrefslogtreecommitdiffstats
path: root/epan/dissectors/packet-dcerpc.h
AgeCommit message (Collapse)AuthorFilesLines
2011-07-19Add a DREP_LITTLE_ENDIAN for the DCE RPC endianness bit in the dataGuy Harris1-0/+11
representation. Use it rather than a raw 0x10. Add a DREP_ENC_INTEGER() macro that takes a pointer to the data representation and returns either ENC_LITTLE_ENDIAN or ENC_BIG_ENDIAN; use it for the encoding argument to proto_tree_add_item(), rather than just the AND of drep[0] and DREP_LITTLE_ENDIAN, as it's not a boolean any more, and for string values we'll be supporting character encodings as well and thus won't be able to trust that the 0x10 bit will mean "little endian". Use ENC_NA for some other encoding values, i.e. for FT_BYTES and the like. Fix a couple of places in the DCOM dissector where we were passing the byte-order bit rather than the field value to proto_tree_add_uint_format(). Clean up white space. svn path=/trunk/; revision=38128
2010-12-23From Julien Kerihuel:Jaap Keuter1-1/+1
I've just finished to write a ncacn_http dissector for Wireshark which provides the ability to dissect Outlook anywhere packets properly (as specified by [MS-RPCH].pdf documentation. svn path=/trunk/; revision=35259
2010-01-20From Julien Kerihuel, add support forRonnie Sahlberg1-0/+1
unaligned unmarshalling of dissectors generated by PIDL. This will allow us to use PIDL and additional IDLs from the samba project since they use "noalign" for certain protocols. This may also allow us to use PIDL to describe, and machinegenerate dissectors for normal, non-DCERPC, protocols. This patch for PIDL is still under review, but the PIDL patch is l;ikely to be committed soonish. svn path=/trunk/; revision=31583
2009-10-04merge some changes to samr from the samba idlRonnie Sahlberg1-0/+1
svn path=/trunk/; revision=30272
2009-10-03rename 2or4 to a new type guint1632 and call the dissector for this Ronnie Sahlberg1-2/+5
function dissect_ndr_uint1632() svn path=/trunk/; revision=30265
2009-10-03rename dissect_ndr_4or8 to dissect_ndr_uint3264 to match hte name of Ronnie Sahlberg1-2/+5
the new datatype uint3264. create a fake guint3264 type as well svn path=/trunk/; revision=30264
2009-10-03add a helper that supports decoding either a 16 or 32 bit integer based Ronnie Sahlberg1-0/+3
on whether nrd or ndr64 is used. svn path=/trunk/; revision=30263
2009-10-03teach the dce/rpc pointer dissector about ndr64 and make it dissect Ronnie Sahlberg1-2/+5
pointers as 8 byte entities when ndr64 is negotiated svn path=/trunk/; revision=30253
2009-10-01we need to copy the information about the transport syntax, i.e. i fit Ronnie Sahlberg1-1/+3
is ndr64 or not, from the bind information to the data we store for each individual pdu, since the trnasport syntax may change dynamically back and forth between "normal" and "ndr64" on the same conversation. svn path=/trunk/; revision=30226
2009-06-14From Didier Gautheron via bug 3531: Gerald Combs1-0/+7
Recent glib versions always include signal.h in gbacktrace.h On Linux PPC signal.h defines PT_R4 which is also defined by samba and compilation fails. svn path=/trunk/; revision=28727
2008-10-01add more policy handle types for the new LSA dissectorRonnie Sahlberg1-0/+4
svn path=/trunk/; revision=26319
2008-02-08based on the novell idllib sources :Ronnie Sahlberg1-0/+1
add dissection of the 16 byte header prior to the NDR data when NDR is transported as a blob ontop of !dcerpc like the LOGON_INFO in the PAC in kerberos svn path=/trunk/; revision=24289
2007-08-28rename dcerpc_smb_store_pol_name to dcerpc_store_polhnd_nameRonnie Sahlberg1-2/+31
rename dcerpc_smb_fetch_pol to dcerpc_fetch_polhnd_data and also make it take an additional parameter to return the "type" of the policy handle, if such a type was stored. extend the pol_value structure used to track policy handles to also store a type to represent what created the policy handle types could be USER/ALIAS/CONNECT/... etc handles returned from the SAMR interface add a new helper function dcerpc_store_polhnd_type() track policy handles between request/responses for dcerpc update the samr.cnf file to make the samr dissectors for SetSecurity/QuerySecurity dissect the specific bits for the security descriptor correctly based on whether the policy handle refers to a CONNECT/DOMAIN/USER/ALIAS or GROUP svn path=/trunk/; revision=22703
2007-05-08update PIDL_dissect_cvstring so that it can be used in a future pidl to Ronnie Sahlberg1-1/+1
prettify strings svn path=/trunk/; revision=21722
2007-02-27add PIDL friendly helper to manage unicode stringsRonnie Sahlberg1-1/+5
svn path=/trunk/; revision=20941
2007-02-25add new flag for PIDL conformance files : PIDL_SET_COL_INFORonnie Sahlberg1-0/+2
which applies (for now only) to integer types. when this flag is specified as PARAM_VALUE the fields name and its value will be pushed onto the info column of the summary line svn path=/trunk/; revision=20922
2007-02-25move the defines for PIDL_POLHND_{OPEN|CLOSE} to packet-dcerpc.hRonnie Sahlberg1-0/+11
also change their values to use the top order bits of an uint32 instead of the least significant ones svn path=/trunk/; revision=20919
2007-02-25add new PIDL friendly helpers for dissection of integer types.Ronnie Sahlberg1-0/+4
these new helpers take a parameter that can be used to decorate the tree and summary line (when this parameter is acted upon/implemented in the code inside the helpers) WINREG was regenerated using a patched version of PIDL. Mainline version of PIDL does not yet have this patch applied. svn path=/trunk/; revision=20918
2006-09-13the way we pass dcerpc strings from deep down in helpers to high level ↵Ronnie Sahlberg1-2/+24
dissector functions (dcv->private_data) for things such as strings and sids is a mess and very difficult to handle without a lot of memory leakage. the biggest problem in changing this is the dcv->private_data usage. add a dcv->se_data which can keep data around from a request to a response and use this to change the LSA/OpenPolicy2 servername passing from request to response as a test pattern of moving all users of dcv->private data over to use dcv->se_data. once all users are migrated over we can then change the dcv->private data pointer to be of ep scope and thus not need an explicit free (which is quite difficult and it is quite difficult in the old semantics to know WHEN we need to free this pointer) this will eventually make the usage more clean and at the same time close down quite a few memory leaks. eventually this will make dissect_ndr_nt_SID return a pointer to ep allocated memory that need not be explicitely freed. svn path=/trunk/; revision=19226
2006-08-17some further work on the GUID/UUID resolvingsUlf Lamping1-3/+0
most of the relevant code moved to guid_utils lot of corresponding code cleanup in packet-dcerpc.c still using GHashTable still not using a manuf like file svn path=/trunk/; revision=18939
2006-06-29keep the (optional) Object UUID in the call valueUlf Lamping1-2/+5
svn path=/trunk/; revision=18613
2006-06-29the drep parameter of dissect_dcerpc_uuid_t() should be guint8 * instead of ↵Ulf Lamping1-1/+1
char * (just like all the other dissect_dcerpc_...() functions). This should fix some "differ in signedness" warnings (and maybe will raise new ones, which should be fixed at the calling places then) svn path=/trunk/; revision=18605
2006-06-20Change ETH_VAR_IMPORT to WS_VAR_IMPORT. Try to fix a duplicate variableGerald Combs1-2/+2
definition in the Catapult DCT2000 code. svn path=/trunk/; revision=18524
2006-05-21change a whole bunch of ethereal into wiresharkRonnie Sahlberg1-4/+4
svn path=/trunk/; revision=18196
2005-07-26char -> const char warning fixesJörg Mayer1-2/+2
svn path=/trunk/; revision=15079
2005-07-25Warning fixesJörg Mayer1-2/+2
svn path=/trunk/; revision=15067
2005-07-24Constify to remove a bunch of warnings. Add some casts to squelchGuy Harris1-3/+3
(presumably-)harmless-but-otherwise-unremovable const-to-nonconst warnings. In the TACACS dissector, clean up the variables used in option parsing to avoid some const-to-nonconst warnings. Clean up some white space. svn path=/trunk/; revision=15043
2005-07-23More 'char*' -> 'const char*' changes to fix warnings.Jörg Mayer1-1/+1
svn path=/trunk/; revision=15015
2005-03-14a lot of people dont specify top level pointers in teh idl and justRonnie Sahlberg1-0/+9
cerlare it as a parameter that is a struct/union and not a ref pointer to one. this is ok since toplevel ref pointers are invisible in the wire encoding anyway. unfortunatelky ethereal dce runtime needed to see that pointer to keep track of whisch one was a toplevel and which one wasnt. implement a new api to call pointers which explicitely specifies whether the pointer is toplevel or embedded. eventually all dce dissectors will use this new interface and the generic dissect_ndr_pointer() can be retired. svn path=/trunk/; revision=13755
2005-03-10change the signature for the functions to decrypt data for theRonnie Sahlberg1-1/+3
dcerpc_auth_subdissector_fns structure. the SignAndSeal decryption (which works really well) needs this. svn path=/trunk/; revision=13688
2005-02-25pinfo->private_data was a quite subptimal ideaRonnie Sahlberg1-12/+1
change the decodeas for dcerpc so that it actually works again for dcerpc over smb svn path=/trunk/; revision=13515
2005-02-14add support for varying arraysRonnie Sahlberg1-0/+5
svn path=/trunk/; revision=13399
2005-02-04add support for varying strings in addition to conformant and varying ↵Ronnie Sahlberg1-0/+8
strings that we already support svn path=/trunk/; revision=13278
2005-01-29Use the 64-bit integer fetch routines to support 64-bit NDR integers.Guy Harris1-2/+2
svn path=/trunk/; revision=13198
2005-01-28we need a dissect_ndr_uint64() that dissects an NDR hyperRonnie Sahlberg1-0/+3
svn path=/trunk/; revision=13185
2005-01-28older MS DCE/RPC interfaces often use a construct that is to be treated as a ↵Ronnie Sahlberg1-1/+1
64 bit integer but in reality is a struct containing 2 32bit integers. this construct is aligned on 4 byte boundaries in ndr and NOT 8 bytes as a real uint64 (== hyper) would be. rename the existing dissect_ndr_uint64 ro dissect_ndr_duint32 (double uint32) to make it reflect better the alignment of the type. svn path=/trunk/; revision=13184
2005-01-12add new function dissect_dcerpc_uuid_t and let dissect_ndr_uuid_t call itUlf Lamping1-0/+4
svn path=/trunk/; revision=13006
2004-12-19(on behalf of the PROFIBUS Nutzerorganisation e.V. Deutschland):Ulf Lamping1-0/+3
another part of the PROFINET dissectors (PN-CBA, including a lot of generic DCOM dissection) still some work to be done ... svn path=/trunk/; revision=12776
2004-09-07First working implementation of "Decode As" for DCE-RPC interface bindings. ↵Ulf Lamping1-5/+26
Ethereal needs to capture the DCE-RPC bind sequence, to get a relationsship between the interface UUID and the current conversation. If this binding wasn't captured, one can use "Decode As" and choose the interface from a list corresponding to a specific conversation. Currently "only" implemented for connectionoriented (TCP) DCE-RPC, but connectionless is a work in progress. svn path=/trunk/; revision=11924
2004-09-06rename add_conv_to_dcerpc_bind_table to dcerpc_add_conv_to_bind_table and ↵Ulf Lamping1-2/+2
don't use packet_info as a parameter svn path=/trunk/; revision=11916
2004-09-04From Eric Wedel: backend things for "Decode As" of DCE-RPC interfacesUlf Lamping1-0/+8
svn path=/trunk/; revision=11894
2004-07-18Move dissectors to epan/dissectors directory.Gilbert Ramirez1-0/+346
Also move ncp222.py, x11-fields, process-x11-fields.pl, make-reg-dotc, and make-reg-dotc.py. Adjust #include lines in files that include packet-*.h files. svn path=/trunk/; revision=11410
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-07 04:50:04 +0000