aboutsummaryrefslogtreecommitdiffstats
path: root/epan/dissectors/packet-smb.h
AgeCommit message (Collapse)AuthorFilesLines
2014-09-16Fix spelling: cant-->can't, wont-->won't, etcBill Meier1-1/+1
Change-Id: I4497f1b8b6eab0e576d9dd31b732965f9a6679c6 Reviewed-on: https://code.wireshark.org/review/4124 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-03-04Remove all $Id$ from top of fileAlexis La Goutte1-2/+0
(Using sed : sed -i '/^ \* \$Id\$/,+1 d') Fix manually some typo (in export_object_dicom.c and crc16-plain.c) Change-Id: I4c1ae68d1c4afeace8cb195b53c715cf9e1227a8 Reviewed-on: https://code.wireshark.org/review/497 Reviewed-by: Anders Broman <a.broman58@gmail.com>
2013-12-03Dissectors should not use dfilter.h, don't include it.Jakub Zawadzki1-0/+1
XXX ncp2222 dissector is using dfilter_compile(), why? svn path=/trunk/; revision=53766
2013-11-27- Create/use several extended value_stringsBill Meier1-131/+91
(sort associated value_string arrays as needed); - Use new VALUE_STRING_LIST mechanism/macros to create enums and value_string arrays for: WERR_errors, DOS_errors, SRV_errors, and HRD_errors; - Declare certain global value_string arrays as static (local) and use global extended value_strings to reference same; (e.g., ms_coiuntry_codes value_string_array) - Rename SMBE_... defs used in several different value_string arrays to prevent potential name collisions: ( e.g., for SRV_errors: SMBE_... ==> SMBE_SRV_...) Done for value_string arrays: DOS_errors, SRV_errors, HRD_errors; - WERR_errors value_string array: Note that WERR associated defs no longer exist in the latest samba doserr.h. (The WERR_errors defs were originally generated from the samba doserr.h). For now: WERR_errors kept as is. - ToDo: Fix PIDL-generated dcerpc dissectors to use NT_errors_ext and WERR_errors_ext extended value_strings. - Add editor modelines to a few files. - Make whitespace changes. svn path=/trunk/; revision=53614
2013-10-25Remove SMB's use of private_data and just pass the data through all of the ↵Michael Mann1-4/+4
dissection functions svn path=/trunk/; revision=52856
2013-10-13whitespace fixes; mostly: remove trailing blanksBill Meier1-1/+1
svn path=/trunk/; revision=52591
2013-09-01More dissectors to wmem. There are no more dissectors using se_tree now, just aEvan Huus1-3/+5
few other places. svn path=/trunk/; revision=51622
2013-03-09From Jose Pico via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8377 ↵Alexis La Goutte1-18/+18
NEW FEATURE IMPLEMENTED: SMB2 SUPPORT FOR EXPORT->OBJECTS->SMB Added functionality: - SMB2 support for Export->Objects->SMB - support for SMB_COM_CREATE, SMB_COM_OPEN, SMB_COM_READ and SMB_COM_WRITE commands - Ability to choose between File Id and full file name as identifier for file re-building. Implemented as an option under Edit->Preferences->Protocols->SMB and Edit->Preferences->Protocols->SMB2. Other minor changes and fixes: - Full filename in file - Inclusion of IP of SMB server when treeid name (i.e. hostname) is not known - UTF-8 filenames encoding before passing them to Export Object Window - Re-written insert_chunk function of export_object_smb.c to make it easier to debug - Fixed of an error in insert_chunk function of export_object_smb.c (the verification of next free_chunk was always skipped after deleting one free_chunk). - Removed duplicated code by inserting the function feed_eo_smb in packet-smb.c and packet-smb2.c - Changed the label of Export->Objects->SMB menu into Export->Objects->SMB/SMB2 svn path=/trunk/; revision=48210
2013-03-01Export libwireshark symbols using WS_DLL_PUBLIC defineBalint Reczey1-5/+7
Also remove old WS_VAR_IMPORT define and related Makefile magic everywhere in the project. svn path=/trunk/; revision=47992
2012-06-28Update Free Software Foundation address.Jakub Zawadzki1-1/+1
(COPYING will be updated in next commit) svn path=/trunk/; revision=43536
2012-06-19From Richard Sharpe:Anders Broman1-0/+3
packet-smb.c does not properly handle NT TRANSACT requests (and probably TRANSACT and TRANSACT2 requests) https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7351 svn path=/trunk/; revision=43347
2011-10-01From Stefan Metzmacher: Support for SMB 2.22 features;Bill Meier1-0/+2
"Patches to add most things for SMB 2.22" https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6394 svn path=/trunk/; revision=39205
2011-05-19Give some routines used for info levels that appear both in set and getGuy Harris1-5/+5
names beginning with dissect_qspi_, and give some of them names with the info level structure in them rather than the SNIA CIFS specification section number. Have separate routines for SMB_INFO_STANDARD and SMB_INFO_QUERY_EA_SIZE; SMB_INFO_STANDARD is specified differently in the SNIA CIFS specification and the MS-CIFS specification, and some captures have the SNIA CIFS version, with the EA length and some have the MS-CIFS version without it. The dissector for SMB_INFO_STANDARD will dissect it if it's there and not say "this structure is truncated" if it's not there. Rename dissect_qfi_SMB_FILE_ALTERNATE_NAME_INFO() to dissect_qfi_SMB_FILE_NAME_INFO(), as it also dissects SMB_QUERY_FILE_NAME_INFO. Merge the dissectors for SMB_FILE_ALLOCATION_INFO and SMB_SET_FILE_ALLOCATION_INFO, and for SMB_FILE_END_OF_FILE_INFO and SMB_SET_FILE_END_OF_FILE_INFO, as the structures are the same. Dissect some presumed "passthrough info levels" the same way the corresponding official SMB infos are dissected. Expand some comments for info level dissectors to give the MS-CIFS section number and to give some other details. If an info level is truncated, put in an expert info error. If we don't know about a given info level, just dissect the body as "Information level unknown", rather than having it dissected as an "unknown information" trailer. svn path=/trunk/; revision=37297
2010-10-29Use value_string_ext fcns to access certain value_string arrays.Bill Meier1-4/+4
svn path=/trunk/; revision=34692
2010-10-22From CaL Turney:Anders Broman1-0/+2
Add support for well-known SIDs/RIDs and option to display in hex. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5286 svn path=/trunk/; revision=34613
2010-08-10Dissect SMB_FILE_ATTRIBUTES, when used as file attributes rather thanGuy Harris1-1/+1
search attributes, as a 16-bit quantity, with only the bits specified by section 2.2.1.2.4 of [MS-CIFS]. Use dissect_file_ext_attr() in all cases where we're dissecting SMB_EXT_FILE_ATTR, as specified by section 2.2.1.2.3 of [MS-CIFS]. svn path=/trunk/; revision=33753
2010-06-16Go back to 64-bit sizes, but, before passing those sizes toGuy Harris1-1/+1
g_try_malloc() or g_try_realloc(), check whether they fit in a gsize and: if not, just pretend the allocation failed; if so, cast them to gsize to squelch compiler warnings. svn path=/trunk/; revision=33239
2010-06-16Use gsize for file offset.Stig Bjørlykke1-1/+1
svn path=/trunk/; revision=33237
2010-06-15From David Perez & Jose Pico from Taddong S.L. via bug 4451:Stig Bjørlykke1-3/+30
This functionality keeps track of all SMB objects contained in a capture, and is able to export to a file a full or partial captured file that has been transfered through the SMB protocol. In a partial capture, the holes produced by the non-captured information are filled out with zeros. It includes the needed modifications of the SMB dissector in the way it keeps track of the opened SMB files and also to feed the eo_smb tap listener. svn path=/trunk/; revision=33227
2008-09-24track smb dialects between negprot request to the responses so we can Ronnie Sahlberg1-1/+2
show the name of the selected dialect in the response and not just the index svn path=/trunk/; revision=26263
2008-08-26#include <emem.h> not req'dBill Meier1-1/+0
svn path=/trunk/; revision=26091
2007-06-18Fix Windows build-bot warnings:Stephen Fisher1-2/+2
packet-smb.c(5479) : error C2220: warning treated as error - no object file generated packet-smb.c(5479) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data packet-smb.c(5480) : warning C4244: '=' : conversion from 'unsigned short ' to 'unsigned char ', possible loss of data svn path=/trunk/; revision=22134
2007-06-17track filenames between rename requests and responses to make it easier to Ronnie Sahlberg1-1/+8
diagnose why a rename failed svn path=/trunk/; revision=22122
2007-06-17remember locking info between requests and repsonses so it is easier to Ronnie Sahlberg1-1/+17
diagnose why an operation returned an error svn path=/trunk/; revision=22121
2007-05-22show the filename that was to be deleted in the Delete replyRonnie Sahlberg1-0/+1
svn path=/trunk/; revision=21897
2007-05-22remember the object name from a QUERY_PATH_INFO and show it as a Ronnie Sahlberg1-0/+1
generated item in the response. also show the infolevel in the response as a generated item svn path=/trunk/; revision=21880
2007-05-22add the disposition to the data we store for how a fid is openedRonnie Sahlberg1-0/+1
svn path=/trunk/; revision=21873
2007-05-21add tracking of OFFSET/LENGTH to reads/writes so we can easily see in a ↵Ronnie Sahlberg1-1/+2
failed read/write what offset/length was requested svn path=/trunk/; revision=21858
2007-05-21track FIDs on a per transaction (request+response) basis and make sure the ↵Ronnie Sahlberg1-2/+7
FID is printed in both packets of a transaction. this makes filters such as "smb.file==foo.txt" work much better since they now show both the read/write request and also the response packets. this is similar to what we already do in nfs for filehandles svn path=/trunk/; revision=21856
2007-05-10add more tracking of FID propertiesRonnie Sahlberg1-2/+20
track create_flags, access_mask, file_attributes, share_access and create options for all FIDs svn path=/trunk/; revision=21743
2007-05-10prettify dissection of FIDs,Ronnie Sahlberg1-1/+2
put the filename, if known, on the fid expansion line also place a "generated" fid in failed ntcreateandx so it is easier to quickly see which file the ntcreateandx failed for svn path=/trunk/; revision=21739
2007-05-07add dissection of smb1 ioctl data by tying it into the dissectors for Ronnie Sahlberg1-0/+1
ioctl data that already exists for smb2 svn path=/trunk/; revision=21713
2007-04-26As with other types of extra info, tag the UID extra info. Don't addGuy Harris1-6/+7
stuff to the UID tree unless it's UID stuff. Also, as we appear to allow for null domain and account information in dissect_smb_uid(), check for null information before trying to add it to the top-level item. svn path=/trunk/; revision=21597
2007-04-24add a missing change from the previous commitRonnie Sahlberg1-0/+3
svn path=/trunk/; revision=21548
2007-03-26From Peter Johansson:Stephen Fisher1-0/+2
Fix warnings svn path=/trunk/; revision=21214
2006-08-16track fid types between NT TRans QUERY_SECURITY_DESCRIPTOR and dissect the ↵Ronnie Sahlberg1-0/+1
ACEs properly svn path=/trunk/; revision=18926
2006-08-16 add a type field for the fid tracking structure and initialize it to UNKNOWNRonnie Sahlberg1-1/+15
when files are opened using NTCreateAndX and if we recognize the type set the type field to either FILE, DIR or PIPE This is useful to know when dissecting things like security descriptors since it tells us how to dissect the specific bits of the access mask. Only do this for NTCreateAndX for now. It is trivial to add similar tracking to some of the older obsolete calls used to open fids but no clients ever use those old calls any more. svn path=/trunk/; revision=18922
2006-08-14rename some structures and defines from the se_tree to the emem_tree prefixRonnie Sahlberg1-2/+2
svn path=/trunk/; revision=18894
2006-06-20Change ETH_VAR_IMPORT to WS_VAR_IMPORT. Try to fix a duplicate variableGerald Combs1-4/+4
definition in the Catapult DCT2000 code. svn path=/trunk/; revision=18524
2006-06-19add tracking of TID -> sharenamesRonnie Sahlberg1-0/+3
reuse the recent structure for fid->filename mappings since the problemspace is virtually the same (go to tired of trying to find the sharename in 10mpacket traces with 1000s of shares) svn path=/trunk/; revision=18516
2006-06-19add infrastructure to make tracking of fid->filename easy to implement and useRonnie Sahlberg1-1/+2
svn path=/trunk/; revision=18514
2006-06-18track smb FIDFs when tehy are opened and closed.Ronnie Sahlberg1-1/+4
add an expansion to the fid that display which frame itr was opened in and when it was closed. someone may want to add tracking of actual filenames here as well. i am not sure i need that feature myself so ... svn path=/trunk/; revision=18512
2006-06-18rename add_fid() to dissect_smb_fid() as a firsdt step towards adding ↵Ronnie Sahlberg1-2/+2
tracking of filename/openedframe/closedframe tracking for smb fids svn path=/trunk/; revision=18506
2006-05-21change a whole bunch of ethereal into wiresharkRonnie Sahlberg1-3/+3
svn path=/trunk/; revision=18196
2006-02-07add dissection ofRonnie Sahlberg1-0/+1
SMB/SetFileInfo level 1023 SMB2/SetInfo/FILE_INFO level 0x17 FILE_PIPE_INFO infolevel svn path=/trunk/; revision=17195
2005-11-26add endoffile infolevelRonnie Sahlberg1-0/+1
svn path=/trunk/; revision=16607
2005-11-26more infolevelsRonnie Sahlberg1-0/+1
svn path=/trunk/; revision=16606
2005-11-26assume the four bytes after the fid in notify request is the completion maskRonnie Sahlberg1-0/+1
svn path=/trunk/; revision=16596
2005-11-25add some more infolevelsRonnie Sahlberg1-0/+2
svn path=/trunk/; revision=16585
2005-11-25add dissection of the smb2 impersionationlevel fieldRonnie Sahlberg1-0/+1
svn path=/trunk/; revision=16581
generated by cgit v1.2.3 (git 2.25.1) at 2024-09-20 10:35:41 +0000