aboutsummaryrefslogtreecommitdiffstats
path: root/packet-smb-logon.c
Commit message (Collapse)AuthorAgeFilesLines
* Removed trailing whitespaces from .h and .c files using theJörg Mayer2002-08-281-15/+15
| | | | | | | winapi_cleanup tool written by Patrik Stridvall for the wine project. svn path=/trunk/; revision=6117
* There are multiple types of "Announce change to UAS or SAM" messages;Guy Harris2002-06-241-42/+51
| | | | | | some have a bunch of stuff that others don't. svn path=/trunk/; revision=5752
* Get rid of some unused arguments, and mark some others as unused.Guy Harris2002-04-301-68/+66
| | | | | | | | Remove the declaration of "dissect_nt_sid()" from "packet-dcerpc-samr.c"; get it by including "packet-smb-common.h", instead. svn path=/trunk/; revision=5313
* Add support for dissecting NT FILETIME time stamp values.Guy Harris2002-01-281-2/+2
| | | | | | Get rid of a level of hierarchy in some SMB field names. svn path=/trunk/; revision=4613
* In the "Announce change to UAS or SAM" NETLOGON message, dissect theGuy Harris2002-01-251-9/+6
| | | | | | | | | "Large Serial Number" as a 64-bit little-endian integer, and dissect the "NT Date/Time" as a FILETIME by calling "dissect_smb_64bit_time()". Export "dissect_smb_64bit_time()" so that we can do so. svn path=/trunk/; revision=4609
* From Tim Potter: NT SID dissection.Guy Harris2002-01-251-25/+9
| | | | | | | Don't label the SID in an ACE as an "NT SID SID", label it as an "NT ACE SID". svn path=/trunk/; revision=4607
* Replace a bunch of "tvb_length()" and "tvb_length_remaining()" calls inGuy Harris2002-01-241-3/+3
| | | | | | | | | | | | arguments to "proto_tree_add_text()", and to "proto_tree_add_XXX()" calls that add FT_NONE or FT_PROTO items to the protocol tree, with -1. Replace some calls to "tvb_length()" or "tvb_length_remaining()" with calls to "tvb_reported_length()" and "tvb_reported_length_remaining()", as those give the actual length of the data in the packet, not just the data that happened to be captured. svn path=/trunk/; revision=4605
* Move the pointer to the "column_info" structure in the "frame_data"Guy Harris2001-12-101-7/+7
| | | | | | | | | | | | | | | structure to the "packet_info" structure; only stuff that's permanently stored with each frame should be in the "frame_data" structure, and the "column_info" structure is not guaranteed to hold the column values for that frame at all times - it was only in the "frame_data" structure so that it could be passed to dissectors, and, as all dissectors are now passed a pointer to a "packet_info" structure, it could just as well be put in the "packet_info" structure. That saves memory, by shrinking the "frame_data" structure (there's one of those per frame), and also lets us clean up the code a bit. svn path=/trunk/; revision=4370
* Make the register routines for the mailslot, pipe, browser, andGuy Harris2001-11-191-5/+3
| | | | | | | | mailslot-based logon protocols just be regular register routines, detected by the script that generates the "register.c" file, rather than special stuff known to the SMB dissector. svn path=/trunk/; revision=4222
* Set "pinfo->current_proto" in the browsser dissector.Guy Harris2001-07-131-4/+6
| | | | | | | | | | | | | Set the protocol and info columns before fetching anything that might cause an exception. Add some more different fields for the different types of host names in browser packets. Force an exception to be thrown if there's no NUL terminator for a name in the tvbuff. svn path=/trunk/; revision=3711
* Get rid of an unused variable.Guy Harris2001-07-081-3/+1
| | | | svn path=/trunk/; revision=3669
* Add some XXX comments on questions about some packet information.Guy Harris2001-07-081-2/+12
| | | | svn path=/trunk/; revision=3668
* Display LMNT tokens with the value 0xffff as "Windows NT Networking";Guy Harris2001-07-081-72/+185
| | | | | | | | | | | | | | | | | | | | | | that's how Network Monitor displays them. (What are they if they're not 0xffff?). The PDC Startup announcement message, if not short, includes an LMNT token between the NT version and LM20 token. After the DB Count in an Announce change to UAS or SAM message there are that number of DBChange Info Structures, according to Network Monitor; dissect them. After that, there is a domain SID size, and, if that size is non-zero, a domain SID, and only then In a SAM LOGON request, the domain SID size is a 4-byte quantity, not a 2-byte quantity, and is followed by a domain SID, an NT version, an LMNT token, and an LM token, according to Network Monitor. Display the NT version in decimal, as that's how Network Monitor displays it. svn path=/trunk/; revision=3666
* Assume the last token in a Announce Change to UAS or SAM message is anGuy Harris2001-07-081-5/+3
| | | | | | | LM token - it appears to have the value 0xffff in several captures, and follows an "LMNT Token" field, so it might be an LM token. svn path=/trunk/; revision=3663
* Tvbuffified SMB NETLOGON dissector, from Ronnie Sahlberg.Guy Harris2001-07-081-362/+678
| | | | | | | Fixed up some longstanding bugs (predating the tvbuffification) discovered during regression testing of the tvbuffification. svn path=/trunk/; revision=3661
* Move the declaration of routines exported from "packet-smb-browse.c"Guy Harris2001-03-181-9/+14
| | | | | | | | | | | | into a "packet-smb-browse.h" header file, and have modules that import those routines include "packet-smb-browse.h" rather than declaring the routines themselves; do the same for routines exported from "packet-smb-logon.c". Make routines and arrays not exported static, and make routines that return a true/false return value "gboolean" rather than "guint32". svn path=/trunk/; revision=3147
* Get rid of trailing blanks in strings.Guy Harris2001-01-111-3/+3
| | | | svn path=/trunk/; revision=2879
* Have "proto_register_protocol()" build a list of data structures forGuy Harris2001-01-031-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | protocols, in addition to adding structures to the list of filterable fields. Give it an extra argument that specifies a "short name" for the protocol, for use in such places as pinfo->current_proto; the dialog box for constructing filters; the preferences tab for the protocol; and so on (although we're not yet using it in all those places). Make the preference name that appears in the preferences file and the command line for the DIAMETER protocol "diameter", not "Diameter"; the convention is that the name in question be all-lower-case. Make some routines and variables that aren't exported static. Update a comment in the ICP dissector to make it clear that the dissector won't see fragments other than the first fragment of a fragmented datagram. svn path=/trunk/; revision=2810
* For each column, have both a buffer into which strings for that columnGuy Harris2000-11-191-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | can be put, and a pointer to the string for the column, which might or might not point to that buffer. Add a routine "col_set_str()", which sets the string for the column to the string passed to it as an argument; it should only be handed a static string (a string constant would be ideal). It doesn't do any copying, so it's faster than "col_add_str()". Make the routines that append to columns check whether the pointer to the string for the column points to the buffer for the column and, if not, copy the string for the column to the buffer for the column so that you can append to it (so you can use "col_set_str()" and then use "col_append_str()" or "col_append_fstr()"). Convert a bunch of "col_add_str()" calls that take a string constant as an argument to "col_set_str()" calls. Convert some "col_add_fstr()" calls that take a string constant as the only argument - i.e., the format string doesn't have any "%" slots into which to put strings for subsequent arguments to "col_set_str()" calls (those calls are just like "col_add_str()" calls). Replace an END_OF_FRAME reference in a tvbuffified dissector with a "tvb_length(tvb)" call. svn path=/trunk/; revision=2670
* A small fix to display SAM Response User Unknown responses correctly.Richard Sharpe2000-10-311-2/+4
| | | | | | The Cmd variable was being clamped below that value ... svn path=/trunk/; revision=2544
* Add the "Edit:Protocols..." feature which currently only implementsLaurent Deniel2000-08-131-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the following: It is now possible to enable/disable a particular protocol decoding (i.e. the protocol dissector is void or not). When a protocol is disabled, it is displayed as Data and of course, all linked sub-protocols are disabled as well. Disabling a protocol could be interesting: - in case of buggy dissectors - in case of wrong heuristics - for performance reasons - to decode the data as another protocol (TODO) Currently (if I am not wrong), all dissectors but NFS can be disabled (and dissectors that do not register protocols :-) I do not like the way the RPC sub-dissectors are disabled (in the sub-dissectors) since this could be done in the RPC dissector itself, knowing the sub-protocol hfinfo entry (this is why, I've not modified the NFS one yet). Two functions are added in proto.c : gboolean proto_is_protocol_enabled(int n); void proto_set_decoding(int n, gboolean enabled); and two MACROs which can be used in dissectors: OLD_CHECK_DISPLAY_AS_DATA(index, pd, offset, fd, tree) CHECK_DISPLAY_AS_DATA(index, tvb, pinfo, tree) See also the XXX in proto_dlg.c and proto.c around the new functions. svn path=/trunk/; revision=2267
* Use "BYTES_ARE_IN_FRAME()" rather than explicitly checking an offset andGuy Harris2000-08-061-11/+16
| | | | | | | | | | | | | packet length. Use "IS_DATA_IN_FRAME()", rather than checking if "offset+1" is greater than "pi.captured_len", to check whether there's any data left in the packet. Check whether data is in the packet *before* extracting it and stuffing an item into the tree with it. svn path=/trunk/; revision=2216
* Don't use "fd->pkt_len" when checking to see if you've run off the endGuy Harris2000-08-061-3/+3
| | | | | | | | | | | | | | | | | | of the packet, use "pi.captured_len" - "fd->pkt_len" may include data that isn't in the capture, due to a short snapshot length. Don't use "fd->cap_len" when checking to see if you've run off the end of the packe, use "pi.captured_len" - "fd->cap_len" isn't adjusted to reflect any length fields, but "pi.captured_len" is (removing, for example, Ethernet padding from the packet). Use "END_OF_FRAME" rather than "pi.captured_len - offset", to make it a bit clearer what's being done. In the V.120 dissector, use "tvb_length()" when adding the top-level protocol tree entry for V.120, as it's a tvbuffified dissector. svn path=/trunk/; revision=2214
* Add routines for adding items to a protocol tree that take arguments ofGuy Harris2000-05-311-2/+2
| | | | | | | | | | | | | | | | | a particular type, rather than taking a varargs list, along the lines of the "proto_tree_add_XXX_format()" routines. Replace most calls to "proto_tree_add_item()" and "proto_tree_add_item_hidden()" with calls to those routines. Rename "proto_tree_add_item()" and "proto_tree_add_item_hidden()" to "proto_tree_add_item_old()" and "proto_tree_add_item_hidden_old()", and add new "proto_tree_add_item()" and "proto_tree_add_item_hidden()" routines that don't take the item to be added as an argument - instead, they fetch the argument from the packet whose tvbuff was handed to them, from the offset handed to them. svn path=/trunk/; revision=2031
* Add tvbuff class.Gilbert Ramirez2000-05-111-14/+14
| | | | | | | | | | | | | | | Add exceptions routines. Convert proto_tree_add_*() routines to require tvbuff_t* argument. Convert all dissectors to pass NULL argument ("NullTVB" macro == NULL) as the tvbuff_t* argument to proto_tree_add_*() routines. dissect_packet() creates a tvbuff_t, wraps the next dissect call in a TRY block, will print "Short Frame" on the proto_tree if a BoundsError exception is caught. The FDDI dissector is converted to use tvbuff's. svn path=/trunk/; revision=1939
* Small fix for Jeff FosterRichard Sharpe2000-02-211-3/+3
| | | | svn path=/trunk/; revision=1662
* Fixing the GetDC response handling so it understands the short ones thatRichard Sharpe2000-02-211-5/+20
| | | | | | | are sent in response to Win9X requests as well as the longer ones that are sent to WinNT and above requests. svn path=/trunk/; revision=1661
* Jeff Foster's SMB Mailslot and Netlogin dissectors; he splitGuy Harris2000-02-141-0/+555
"packet-smb.c" up into several files. svn path=/trunk/; revision=1629
generated by cgit v1.2.3 (git 2.25.1) at 2025-02-25 15:59:45 +0000