aboutsummaryrefslogtreecommitdiffstats
path: root/packet-smb-sidsnooping.c
AgeCommit message (Collapse)AuthorFilesLines
2003-03-25Non-void functions must always return a value; the SID snooping tapGuy Harris1-1/+2
listener isn't a GUI tap, so it should always return 0. svn path=/trunk/; revision=7364
2003-03-25Added SMB option : sid_name_snooping.Ronnie Sahlberg1-0/+230
This feature, when enabled through Edit/preferences/protocols/smb, will look at certain SMB and CIFS related protocols to discover the mapping between SIDs and their Names. For those SIDs whose name has been snooped/discovered ethereal will also add "(<name>)" to the end of the SID when printed in the tree pane through the function dissect_nt_sid(). Currently the feature is not too exciting since the only thing that packet-smb-sidsnooping.c will look at to build this mapping table is replies to the LSA/QueryInfoPolicy infolevel 3 packets and thus discover mappings between a Domain SID and a Domain Name. In the near future this future will be enhanced to also look at more interesting calls such as LSA/LookupSIDs2 and similar. svn path=/trunk/; revision=7362