aboutsummaryrefslogtreecommitdiffstats
path: root/packet-dcerpc.c
AgeCommit message (Collapse)AuthorFilesLines
2001-12-05Support for reassembly of DCERPC over SMB, from Ronnie Sahlberg.Guy Harris1-2/+2
svn path=/trunk/; revision=4335
2001-11-27Add { 0, NULL } terminators to some "value_string" arrays lacking them.Guy Harris1-4/+8
Make some static that don't need to be exported. svn path=/trunk/; revision=4288
2001-11-27When returning the length of the DCE RPC PDU, add 4 if the packet wasGuy Harris1-5/+13
preceded by 4 bytes of zero padding. svn path=/trunk/; revision=4287
2001-11-27Rename the heuristic dissector table "msrpc" to "smb_transact", toGuy Harris1-2/+2
indicate that it's to be used for SMB transactions; a different table, using different dissectors, would be needed for, say, reads and writes over a named pipe, as those are byte streams and SMB transactions are packets, so the dissectors for the first one need to worry about multiple PDUs per segment and desegmentation, while the dissectors for the second one don't - and, in fact, can't do desegmentation stuff. svn path=/trunk/; revision=4286
2001-11-27From Todd Sabin:Guy Harris1-43/+140
o Modifies the dcerpc handoff to subdissectors slightly. It also needs to pass the data representation to the subdissector. Also, if no subdissector is found, it puts a "Stub data" entry in the tree. o Adds optional TCP desegmentation to the dcerpc layer. Note that dcerpc has it's own ability to fragment PDUs. This isn't for dealing with that, but with the case of a single PDU being broken over more than one TCP segment. o Adds a little bit of dissection to packet-dcerpc-epm.c. Mainly just proof of concept for the dcerpc handoff stuff. (Writing this is how I realized the need for the drep.) o Adds packet-dcerpc-ndr.c, which will contain NDR dissection routines for use by subdissectors. Also, support added for multiple PDUs per segment for DCERPC-over-TCP (and, potentially, other byte-stream transports). svn path=/trunk/; revision=4285
2001-11-18From Tim Potter: use the FID, for DCE RPC-over-SMB, as part of theGuy Harris1-3/+29
conversation matching. svn path=/trunk/; revision=4220
2001-11-12From Tim Potter: added code to call request and reply subdissectors in DCEGuy Harris1-6/+13
RPC. svn path=/trunk/; revision=4195
2001-11-12Support for DCE RPC atop SMB, and support for several Microsoft DCE RPCGuy Harris1-1/+2
services used with SMB, from Tim Potter. svn path=/trunk/; revision=4194
2001-10-05Update from Todd Sabin to the data representation decoding:Guy Harris1-23/+30
Fixes a typo in the offset used for the floating point byte (offset should be offset+1), changes cn_drep* to just drep* (since it's the same for connection oriented and connectionless packets), and adds the corresponding code to the connectionless side of things. svn path=/trunk/; revision=3998
2001-09-30For requests and responses for unknown interfaces, put an entry into theGuy Harris1-98/+164
DCE RPC protocol tree for the stub data. Use the counts of context items and transfer syntax items when dissecting a bind or alter context PDU. In bind and alter context PDUs, create the conversation, attach the context ID and interface to it, and put the interface information into the Info column as soon as the first context item is dissected, so that if we get an exception after that, we've still processed the context ID and interface information. Use the count of results when dissecting a bind ack PDU. In bind ack PDUs, dissect the transfer syntax and syntax version fields, and put the opnum and context ID information into the Info column as soon as it's dissected. When dissecting a connection-oriented request or response, don't make the tvbuff the full fragment length if we don't have that much data in the frame being dissected. (We should do TCP reassembly there, eventually.) In connection-oriented response PDUs, put the opnum and context ID information into the Info column as soon as it's dissected. svn path=/trunk/; revision=3982
2001-09-30Committing Pasi Eronen's patches to dcerpc.Richard Sharpe1-2/+40
svn path=/trunk/; revision=3980
2001-09-28From Todd Sabin: dissect the auth info in connection oriented dcerpcGuy Harris1-5/+89
packets. Make a "dissect_netbios_payload()" routine, called from the NetBIOS-over-802.2 (NBF), NetBIOS-over-IPX, and NetBIOS-over-TCP dissectors. Take Todd Sabin's changes to add a heuristic dissector list to the NBSS dissector, and apply them to "dissect_netbios_payload()" instead. Make the SMB dissector heuristic, returning FALSE if it doesn't see 0xFF S M B at the beginning of the packet, and have "dissect_netbios_payload()" first try the heuristic dissector list, then try the SMB dissector if no other heuristic dissector claims the packet, then just dissect the payload as data. From Todd Sabin: have the DCE/RPC dissector register as a heuristic dissector for NetBIOS. svn path=/trunk/; revision=3969
2001-09-03Instead of having a single datum attached to a conversation, have a listGuy Harris1-3/+3
of protocol-id-plus-datum pairs, so that multiple protocols can attach information to the same conversation. Dissectors that attach information to a conversation should not assume that if they find a conversation it has one of its data attached to it; the conversation might've been created by another dissector. svn path=/trunk/; revision=3901
2001-07-11Not all C compilers allow C++-style comments.Guy Harris1-2/+2
svn path=/trunk/; revision=3685
2001-07-11Support for dissectors of protocols running atop DCE RPC registeringGuy Harris1-174/+541
themselves with the DCE RPC dissector, and support for some of the protocols atop DCE RPC that are part of DCE RPC, from Todd Sabin. svn path=/trunk/; revision=3681
2001-06-18From Joerg Mayer: explicitly fill in all members of aGuy Harris1-63/+63
"header_field_info" structure, including the ones that are later set by the routines to register fields. svn path=/trunk/; revision=3561
2001-04-27More signed-vs-unsigned changes from Joerg Mayer.Guy Harris1-2/+2
svn path=/trunk/; revision=3386
2001-04-19DCE RPC updates from Todd Sabin.Guy Harris1-157/+483
svn path=/trunk/; revision=3338
2001-03-18Change some "MSRPC"s to "DCERPC"s.Guy Harris1-13/+9
There's no need to clear the Info column right before setting it; we don't use any information from the packet other than stuff we've already determined is there (as part of the heuristic test for a DCE RPC packet), so there's no risk that we'll throw an exception before the Info column is set. Use "col_set_str()", rather than "col_add_str()" or "col_add_fstr()", to set the Protocol and Info columns. svn path=/trunk/; revision=3145
2001-03-18DCE RPC support, from Todd Sabin.Guy Harris1-0/+559
svn path=/trunk/; revision=3144
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-01 18:34:19 +0000