aboutsummaryrefslogtreecommitdiffstats
path: root/epan/dissectors/packet-smb2.h
AgeCommit message (Collapse)AuthorFilesLines
2012-06-28Update Free Software Foundation address.Jakub Zawadzki1-1/+1
(COPYING will be updated in next commit) svn path=/trunk/; revision=43536
2012-05-22SMB2: Add dissection of the encrypted SMB2 headersRonnie Sahlberg1-0/+9
From Matthieu Patou <mat@matws.net> svn path=/trunk/; revision=42768
2010-10-29Use value_string_ext fcns to access certain value_string arrays.Bill Meier1-3/+3
svn path=/trunk/; revision=34692
2008-02-14fixup SMB2 header and decode async commands correctlyRonnie Sahlberg1-8/+9
svn path=/trunk/; revision=24321
2007-05-22Trivial warning fixes:Jörg Mayer1-1/+1
opcua: warning: function declaration isn't a prototype rest: comma at end of enumerator svn path=/trunk/; revision=21885
2007-05-15add dissection of the end_of_chain bit in the header flagsRonnie Sahlberg1-0/+1
svn path=/trunk/; revision=21794
2007-05-15from metzeRonnie Sahlberg1-1/+8
patch to find and enhancement of extra_info handling svn path=/trunk/; revision=21793
2007-05-07add dissection of smb1 ioctl data by tying it into the dissectors for Ronnie Sahlberg1-0/+1
ioctl data that already exists for smb2 svn path=/trunk/; revision=21713
2007-05-07change the smb2 ioctl function to take a pointer to a uint32 (ioctl Ronnie Sahlberg1-1/+1
function code) instead of a structure extend the nt trans structure to contain a ioctl function code for smb1 svn path=/trunk/; revision=21712
2007-05-07remove the ioctl function and table from the smb dissector and just use Ronnie Sahlberg1-0/+1
the one in smb2 instead since the smb2 one is more developed. svn path=/trunk/; revision=21711
2006-06-20Change ETH_VAR_IMPORT to WS_VAR_IMPORT. Try to fix a duplicate variableGerald Combs1-1/+1
definition in the Catapult DCT2000 code. svn path=/trunk/; revision=18524
2006-05-21change a whole bunch of ethereal into wiresharkRonnie Sahlberg1-3/+3
svn path=/trunk/; revision=18196
2006-04-05from metzeRonnie Sahlberg1-1/+1
dissect smb2 break responses used by a server to break an oplock these unsolicited responses are sent with a commandseqnum of -1 so mark these in the header as unsolicited as well svn path=/trunk/; revision=17820
2006-02-07smb2 signingRonnie Sahlberg1-0/+1
add dissection of the "Signature present" bit and the 16 byte signature field in the header svn path=/trunk/; revision=17206
2006-02-07handmerged patch from metze it conflicted with recent P bit patch i checked inRonnie Sahlberg1-2/+3
svn path=/trunk/; revision=17202
2006-02-07add dissection of the P (PID Valid) bit in the headerRonnie Sahlberg1-0/+1
If the P bit is NOT set, then flag the PID field as "(not valid)" Sicne the TID might be undefined/0 in the response to a "pending" read we cant use that solely to determine if a read was for a named/pipe (==dcerpc) Assume that only NamedPipe reads can be STATUS_PENDING and thus have the P bit set and assume it IS dcerpc if the P bit is set. svn path=/trunk/; revision=17197
2005-12-24from metzeRonnie Sahlberg1-11/+4
update to tid and uid tracking svn path=/trunk/; revision=16893
2005-12-07tap the ntlmssp protocol and extract the account/domain names when users ↵Ronnie Sahlberg1-0/+10
authenticate. If known put the account name, domain name, host name and which frame the suer authenticated in in an expansion below UID in the SMB2 header svn path=/trunk/; revision=16723
2005-12-05updates for FILE_OBJECTID_BUFFER and have smb call this (no more unknown ↵Ronnie Sahlberg1-0/+3
bytes in smb for objectid) svn path=/trunk/; revision=16682
2005-12-01move the ioctl function code to the si structure so we can switch on this ↵Ronnie Sahlberg1-0/+1
later in the ioctl_data dissector svn path=/trunk/; revision=16634
2005-11-12add initial decode of dcerpc over smb2Ronnie Sahlberg1-1/+11
it does not yet multiplex between different files but it is better than nothing svn path=/trunk/; revision=16484
2005-11-12in order to handle dcerpc over smb2 later and to make the heuristics ↵Ronnie Sahlberg1-1/+13
stronger for determining what might and what might not be a pipe add TID tracking. for all TreeConnect requests/resposnes seen, store the name->tid mapping and other metadata. as a freebee the disswection of the tid in the ehader is aware of this table so when a tid value is dissected in the header and we known the name for this tid then put it in an expansion below the tid. svn path=/trunk/; revision=16483
2005-11-12start separating things out into structuresRonnie Sahlberg1-3/+25
we can regenerate from the header we need to remember between request/response we need on a per conersation bases to reduce the amount of data we store in the per req/resp pair since there will be many of them and we want that struct as small as possible. svn path=/trunk/; revision=16482
2005-11-12Propset svn:...Jörg Mayer1-1/+1
svn path=/trunk/; revision=16478
2005-11-11break out some structures into packet-smb2.h so we can start tapping in laterRonnie Sahlberg1-0/+50
we will do service-response-time statistics before other inferior products have even noticed a new protocol is in town. svn path=/trunk/; revision=16463