aboutsummaryrefslogtreecommitdiffstats
path: root/epan/dissectors/packet-smb.h
AgeCommit message (Collapse)AuthorFilesLines
2012-06-28Update Free Software Foundation address.Jakub Zawadzki1-1/+1
(COPYING will be updated in next commit) svn path=/trunk/; revision=43536
2012-06-19From Richard Sharpe:Anders Broman1-0/+3
packet-smb.c does not properly handle NT TRANSACT requests (and probably TRANSACT and TRANSACT2 requests) https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7351 svn path=/trunk/; revision=43347
2011-10-01From Stefan Metzmacher: Support for SMB 2.22 features;Bill Meier1-0/+2
"Patches to add most things for SMB 2.22" https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6394 svn path=/trunk/; revision=39205
2011-05-19Give some routines used for info levels that appear both in set and getGuy Harris1-5/+5
names beginning with dissect_qspi_, and give some of them names with the info level structure in them rather than the SNIA CIFS specification section number. Have separate routines for SMB_INFO_STANDARD and SMB_INFO_QUERY_EA_SIZE; SMB_INFO_STANDARD is specified differently in the SNIA CIFS specification and the MS-CIFS specification, and some captures have the SNIA CIFS version, with the EA length and some have the MS-CIFS version without it. The dissector for SMB_INFO_STANDARD will dissect it if it's there and not say "this structure is truncated" if it's not there. Rename dissect_qfi_SMB_FILE_ALTERNATE_NAME_INFO() to dissect_qfi_SMB_FILE_NAME_INFO(), as it also dissects SMB_QUERY_FILE_NAME_INFO. Merge the dissectors for SMB_FILE_ALLOCATION_INFO and SMB_SET_FILE_ALLOCATION_INFO, and for SMB_FILE_END_OF_FILE_INFO and SMB_SET_FILE_END_OF_FILE_INFO, as the structures are the same. Dissect some presumed "passthrough info levels" the same way the corresponding official SMB infos are dissected. Expand some comments for info level dissectors to give the MS-CIFS section number and to give some other details. If an info level is truncated, put in an expert info error. If we don't know about a given info level, just dissect the body as "Information level unknown", rather than having it dissected as an "unknown information" trailer. svn path=/trunk/; revision=37297
2010-10-29Use value_string_ext fcns to access certain value_string arrays.Bill Meier1-4/+4
svn path=/trunk/; revision=34692
2010-10-22From CaL Turney:Anders Broman1-0/+2
Add support for well-known SIDs/RIDs and option to display in hex. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5286 svn path=/trunk/; revision=34613
2010-08-10Dissect SMB_FILE_ATTRIBUTES, when used as file attributes rather thanGuy Harris1-1/+1
search attributes, as a 16-bit quantity, with only the bits specified by section 2.2.1.2.4 of [MS-CIFS]. Use dissect_file_ext_attr() in all cases where we're dissecting SMB_EXT_FILE_ATTR, as specified by section 2.2.1.2.3 of [MS-CIFS]. svn path=/trunk/; revision=33753
2010-06-16Go back to 64-bit sizes, but, before passing those sizes toGuy Harris1-1/+1
g_try_malloc() or g_try_realloc(), check whether they fit in a gsize and: if not, just pretend the allocation failed; if so, cast them to gsize to squelch compiler warnings. svn path=/trunk/; revision=33239
2010-06-16Use gsize for file offset.Stig Bjørlykke1-1/+1
svn path=/trunk/; revision=33237
2010-06-15From David Perez & Jose Pico from Taddong S.L. via bug 4451:Stig Bjørlykke1-3/+30
This functionality keeps track of all SMB objects contained in a capture, and is able to export to a file a full or partial captured file that has been transfered through the SMB protocol. In a partial capture, the holes produced by the non-captured information are filled out with zeros. It includes the needed modifications of the SMB dissector in the way it keeps track of the opened SMB files and also to feed the eo_smb tap listener. svn path=/trunk/; revision=33227
2008-09-24track smb dialects between negprot request to the responses so we can Ronnie Sahlberg1-1/+2
show the name of the selected dialect in the response and not just the index svn path=/trunk/; revision=26263
2008-08-26#include <emem.h> not req'dBill Meier1-1/+0
svn path=/trunk/; revision=26091
2007-06-18Fix Windows build-bot warnings:Stephen Fisher1-2/+2
packet-smb.c(5479) : error C2220: warning treated as error - no object file generated packet-smb.c(5479) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data packet-smb.c(5480) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data svn path=/trunk/; revision=22134
2007-06-17track filenames between rename requests and responses to make it easier to Ronnie Sahlberg1-1/+8
diagnose why a rename failed svn path=/trunk/; revision=22122
2007-06-17remember locking info between requests and repsonses so it is easier to Ronnie Sahlberg1-1/+17
diagnose why an operation returned an error svn path=/trunk/; revision=22121
2007-05-22show the filename that was to be deleted in the Delete replyRonnie Sahlberg1-0/+1
svn path=/trunk/; revision=21897
2007-05-22remember the object name from a QUERY_PATH_INFO and show it as a Ronnie Sahlberg1-0/+1
generated item in the response. also show the infolevel in the response as a generated item svn path=/trunk/; revision=21880
2007-05-22add the disposition to the data we store for how a fid is openedRonnie Sahlberg1-0/+1
svn path=/trunk/; revision=21873
2007-05-21add tracking of OFFSET/LENGTH to reads/writes so we can easily see in a ↵Ronnie Sahlberg1-1/+2
failed read/write what offset/length was requested svn path=/trunk/; revision=21858
2007-05-21track FIDs on a per transaction (request+response) basis and make sure the ↵Ronnie Sahlberg1-2/+7
FID is printed in both packets of a transaction. this makes filters such as "smb.file==foo.txt" work much better since they now show both the read/write request and also the response packets. this is similar to what we already do in nfs for filehandles svn path=/trunk/; revision=21856
2007-05-10add more tracking of FID propertiesRonnie Sahlberg1-2/+20
track create_flags, access_mask, file_attributes, share_access and create options for all FIDs svn path=/trunk/; revision=21743
2007-05-10prettify dissection of FIDs,Ronnie Sahlberg1-1/+2
put the filename, if known, on the fid expansion line also place a "generated" fid in failed ntcreateandx so it is easier to quickly see which file the ntcreateandx failed for svn path=/trunk/; revision=21739
2007-05-07add dissection of smb1 ioctl data by tying it into the dissectors for Ronnie Sahlberg1-0/+1
ioctl data that already exists for smb2 svn path=/trunk/; revision=21713
2007-04-26As with other types of extra info, tag the UID extra info. Don't addGuy Harris1-6/+7
stuff to the UID tree unless it's UID stuff. Also, as we appear to allow for null domain and account information in dissect_smb_uid(), check for null information before trying to add it to the top-level item. svn path=/trunk/; revision=21597
2007-04-24add a missing change from the previous commitRonnie Sahlberg1-0/+3
svn path=/trunk/; revision=21548
2007-03-26From Peter Johansson:Stephen Fisher1-0/+2
Fix warnings svn path=/trunk/; revision=21214
2006-08-16track fid types between NT TRans QUERY_SECURITY_DESCRIPTOR and dissect the ↵Ronnie Sahlberg1-0/+1
ACEs properly svn path=/trunk/; revision=18926
2006-08-16 add a type field for the fid tracking structure and initialize it to UNKNOWNRonnie Sahlberg1-1/+15
when files are opened using NTCreateAndX and if we recognize the type set the type field to either FILE, DIR or PIPE This is useful to know when dissecting things like security descriptors since it tells us how to dissect the specific bits of the access mask. Only do this for NTCreateAndX for now. It is trivial to add similar tracking to some of the older obsolete calls used to open fids but no clients ever use those old calls any more. svn path=/trunk/; revision=18922
2006-08-14rename some structures and defines from the se_tree to the emem_tree prefixRonnie Sahlberg1-2/+2
svn path=/trunk/; revision=18894
2006-06-20Change ETH_VAR_IMPORT to WS_VAR_IMPORT. Try to fix a duplicate variableGerald Combs1-4/+4
definition in the Catapult DCT2000 code. svn path=/trunk/; revision=18524
2006-06-19add tracking of TID -> sharenamesRonnie Sahlberg1-0/+3
reuse the recent structure for fid->filename mappings since the problemspace is virtually the same (go to tired of trying to find the sharename in 10mpacket traces with 1000s of shares) svn path=/trunk/; revision=18516
2006-06-19add infrastructure to make tracking of fid->filename easy to implement and useRonnie Sahlberg1-1/+2
svn path=/trunk/; revision=18514
2006-06-18track smb FIDFs when tehy are opened and closed.Ronnie Sahlberg1-1/+4
add an expansion to the fid that display which frame itr was opened in and when it was closed. someone may want to add tracking of actual filenames here as well. i am not sure i need that feature myself so ... svn path=/trunk/; revision=18512
2006-06-18rename add_fid() to dissect_smb_fid() as a firsdt step towards adding ↵Ronnie Sahlberg1-2/+2
tracking of filename/openedframe/closedframe tracking for smb fids svn path=/trunk/; revision=18506
2006-05-21change a whole bunch of ethereal into wiresharkRonnie Sahlberg1-3/+3
svn path=/trunk/; revision=18196
2006-02-07add dissection ofRonnie Sahlberg1-0/+1
SMB/SetFileInfo level 1023 SMB2/SetInfo/FILE_INFO level 0x17 FILE_PIPE_INFO infolevel svn path=/trunk/; revision=17195
2005-11-26add endoffile infolevelRonnie Sahlberg1-0/+1
svn path=/trunk/; revision=16607
2005-11-26more infolevelsRonnie Sahlberg1-0/+1
svn path=/trunk/; revision=16606
2005-11-26assume the four bytes after the fid in notify request is the completion maskRonnie Sahlberg1-0/+1
svn path=/trunk/; revision=16596
2005-11-25add some more infolevelsRonnie Sahlberg1-0/+2
svn path=/trunk/; revision=16585
2005-11-25add dissection of the smb2 impersionationlevel fieldRonnie Sahlberg1-0/+1
svn path=/trunk/; revision=16581
2005-11-25some info level updatesRonnie Sahlberg1-0/+2
svn path=/trunk/; revision=16580
2005-11-25some info level updatesRonnie Sahlberg1-0/+2
svn path=/trunk/; revision=16579
2005-11-18dissect some more infolevelsRonnie Sahlberg1-0/+3
svn path=/trunk/; revision=16543
2005-11-17add dissection of more infolevels for smb2Ronnie Sahlberg1-0/+2
svn path=/trunk/; revision=16539
2005-11-17add dissection of fs_[objectid|full_size]_infoRonnie Sahlberg1-0/+2
svn path=/trunk/; revision=16538
2005-11-17 add dissection of fs quota infoRonnie Sahlberg1-0/+1
svn path=/trunk/; revision=16537
2005-11-17add full dissection of fs_[volume|size|device|atrtibute]_infoRonnie Sahlberg1-0/+5
svn path=/trunk/; revision=16536
2005-11-17add dissection of the security descriptor maskRonnie Sahlberg1-0/+2
svn path=/trunk/; revision=16535
2005-11-12 improve the dissection of Create and fill in most of the fieldsRonnie Sahlberg1-0/+10
svn path=/trunk/; revision=16490
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-29 17:22:08 +0000