2 This file was automatically generated by Pidl
3 from lsa.idl and lsa.cnf.
5 Pidl is a perl based IDL compiler for DCE/RPC idl files.
6 It is maintained by the Samba team, not the Wireshark team.
7 Instructions on how to download and install Pidl can be
8 found at https://wiki.wireshark.org/Pidl
14 #include <wsutil/array.h>
15 #include <epan/packet.h>
18 #include "packet-dcerpc.h"
19 #include "packet-dcerpc-nt.h"
20 #include "packet-windows-common.h"
21 #include "packet-dcerpc-lsa.h"
22 void proto_register_dcerpc_lsarpc(void);
23 void proto_reg_handoff_dcerpc_lsarpc(void);
25 /* Ett declarations */
26 static int ett_lsarpc_names
;
27 static int ett_dcerpc_lsarpc
;
28 static int ett_lsarpc_security_secinfo
;
29 static int ett_lsarpc_kerb_EncTypes
;
30 static int ett_lsarpc_lsa_String
;
31 static int ett_lsarpc_lsa_StringLarge
;
32 static int ett_lsarpc_lsa_Strings
;
33 static int ett_lsarpc_lsa_AsciiString
;
34 static int ett_lsarpc_lsa_AsciiStringLarge
;
35 static int ett_lsarpc_lsa_BinaryString
;
36 static int ett_lsarpc_lsa_LUID
;
37 static int ett_lsarpc_lsa_PrivEntry
;
38 static int ett_lsarpc_lsa_PrivArray
;
39 static int ett_lsarpc_lsa_QosInfo
;
40 static int ett_lsarpc_lsa_ObjectAttribute
;
41 static int ett_lsarpc_lsa_PolicyAccessMask
;
42 static int ett_lsarpc_lsa_AccountAccessMask
;
43 static int ett_lsarpc_lsa_SecretAccessMask
;
44 static int ett_lsarpc_lsa_TrustedAccessMask
;
45 static int ett_lsarpc_lsa_AuditLogInfo
;
46 static int ett_lsarpc_lsa_AuditEventsInfo
;
47 static int ett_lsarpc_lsa_DomainInfo
;
48 static int ett_lsarpc_lsa_PDAccountInfo
;
49 static int ett_lsarpc_lsa_ServerRole
;
50 static int ett_lsarpc_lsa_ReplicaSourceInfo
;
51 static int ett_lsarpc_lsa_DefaultQuotaInfo
;
52 static int ett_lsarpc_lsa_ModificationInfo
;
53 static int ett_lsarpc_lsa_AuditFullSetInfo
;
54 static int ett_lsarpc_lsa_AuditFullQueryInfo
;
55 static int ett_lsarpc_lsa_DnsDomainInfo
;
56 static int ett_lsarpc_lsa_PolicyInformation
;
57 static int ett_lsarpc_lsa_SidPtr
;
58 static int ett_lsarpc_lsa_SidArray
;
59 static int ett_lsarpc_lsa_DomainList
;
60 static int ett_lsarpc_lsa_TranslatedSid
;
61 static int ett_lsarpc_lsa_TransSidArray
;
62 static int ett_lsarpc_lsa_RefDomainList
;
63 static int ett_lsarpc_lsa_TranslatedName
;
64 static int ett_lsarpc_lsa_TransNameArray
;
65 static int ett_lsarpc_lsa_LUIDAttribute
;
66 static int ett_lsarpc_lsa_PrivilegeSet
;
67 static int ett_lsarpc_lsa_DATA_BUF
;
68 static int ett_lsarpc_lsa_DATA_BUF2
;
69 static int ett_lsarpc_lsa_TrustDirection
;
70 static int ett_lsarpc_lsa_TrustAttributes
;
71 static int ett_lsarpc_lsa_TrustDomainInfoName
;
72 static int ett_lsarpc_lsa_TrustDomainInfoControllers
;
73 static int ett_lsarpc_lsa_TrustDomainInfoPosixOffset
;
74 static int ett_lsarpc_lsa_TrustDomainInfoPassword
;
75 static int ett_lsarpc_lsa_TrustDomainInfoBasic
;
76 static int ett_lsarpc_lsa_TrustDomainInfoInfoEx
;
77 static int ett_lsarpc_lsa_TrustDomainInfoBuffer
;
78 static int ett_lsarpc_lsa_TrustDomainInfoAuthInfo
;
79 static int ett_lsarpc_lsa_TrustDomainInfoFullInfo
;
80 static int ett_lsarpc_lsa_TrustDomainInfoAuthInfoInternal
;
81 static int ett_lsarpc_lsa_TrustDomainInfoFullInfoInternal
;
82 static int ett_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES
;
83 static int ett_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES
;
84 static int ett_lsarpc_lsa_TrustDomainInfoInfoEx2Internal
;
85 static int ett_lsarpc_lsa_TrustDomainInfoFullInfo2Internal
;
86 static int ett_lsarpc_lsa_TrustDomainInfoSupportedEncTypes
;
87 static int ett_lsarpc_lsa_TrustedDomainInfo
;
88 static int ett_lsarpc_lsa_DATA_BUF_PTR
;
89 static int ett_lsarpc_lsa_RightAttribute
;
90 static int ett_lsarpc_lsa_RightSet
;
91 static int ett_lsarpc_lsa_DomainListEx
;
92 static int ett_lsarpc_lsa_DomainInfoQoS
;
93 static int ett_lsarpc_lsa_krbAuthenticationOptions
;
94 static int ett_lsarpc_lsa_DomainInfoKerberos
;
95 static int ett_lsarpc_lsa_DomainInfoEfs
;
96 static int ett_lsarpc_lsa_DomainInformationPolicy
;
97 static int ett_lsarpc_lsa_TranslatedName2
;
98 static int ett_lsarpc_lsa_TransNameArray2
;
99 static int ett_lsarpc_lsa_TranslatedSid2
;
100 static int ett_lsarpc_lsa_TransSidArray2
;
101 static int ett_lsarpc_lsa_TranslatedSid3
;
102 static int ett_lsarpc_lsa_TransSidArray3
;
103 static int ett_lsarpc_lsa_ForestTrustRecordFlags
;
104 static int ett_lsarpc_lsa_ForestTrustBinaryData
;
105 static int ett_lsarpc_lsa_ForestTrustDomainInfo
;
106 static int ett_lsarpc_lsa_ForestTrustData
;
107 static int ett_lsarpc_lsa_ForestTrustRecord
;
108 static int ett_lsarpc_lsa_ForestTrustInformation
;
109 static int ett_lsarpc_lsa_ForestTrustCollisionRecord
;
110 static int ett_lsarpc_lsa_ForestTrustCollisionInfo
;
111 static int ett_lsarpc_lsa_RevisionSupportedFeature
;
112 static int ett_lsarpc_lsa_revision_info1
;
113 static int ett_lsarpc_lsa_revision_info
;
114 static int ett_lsarpc_lsa_ForestTrustData2
;
115 static int ett_lsarpc_lsa_ForestTrustRecord2
;
116 static int ett_lsarpc_lsa_ForestTrustInformation2
;
119 /* Header field declarations */
120 static int hf_lsarpc_String_name
;
121 static int hf_lsarpc_account_access_mask
;
122 static int hf_lsarpc_domain_access_mask
;
123 static int hf_lsarpc_efs_blob_len
;
124 static int hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_PRIVILEGES
;
125 static int hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_QUOTAS
;
126 static int hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS
;
127 static int hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_VIEW
;
128 static int hf_lsarpc_lsa_AddAccountRights_handle
;
129 static int hf_lsarpc_lsa_AddAccountRights_rights
;
130 static int hf_lsarpc_lsa_AddAccountRights_sid
;
131 static int hf_lsarpc_lsa_AddPrivilegesToAccount_handle
;
132 static int hf_lsarpc_lsa_AddPrivilegesToAccount_privs
;
133 static int hf_lsarpc_lsa_AsciiStringLarge_length
;
134 static int hf_lsarpc_lsa_AsciiStringLarge_size
;
135 static int hf_lsarpc_lsa_AsciiStringLarge_string
;
136 static int hf_lsarpc_lsa_AsciiString_length
;
137 static int hf_lsarpc_lsa_AsciiString_size
;
138 static int hf_lsarpc_lsa_AsciiString_string
;
139 static int hf_lsarpc_lsa_AuditEventsInfo_auditing_mode
;
140 static int hf_lsarpc_lsa_AuditEventsInfo_count
;
141 static int hf_lsarpc_lsa_AuditEventsInfo_settings
;
142 static int hf_lsarpc_lsa_AuditFullQueryInfo_log_is_full
;
143 static int hf_lsarpc_lsa_AuditFullQueryInfo_shutdown_on_full
;
144 static int hf_lsarpc_lsa_AuditFullSetInfo_shutdown_on_full
;
145 static int hf_lsarpc_lsa_AuditLogInfo_maximum_log_size
;
146 static int hf_lsarpc_lsa_AuditLogInfo_next_audit_record
;
147 static int hf_lsarpc_lsa_AuditLogInfo_percent_full
;
148 static int hf_lsarpc_lsa_AuditLogInfo_retention_time
;
149 static int hf_lsarpc_lsa_AuditLogInfo_shutdown_in_progress
;
150 static int hf_lsarpc_lsa_AuditLogInfo_time_to_shutdown
;
151 static int hf_lsarpc_lsa_BinaryString_array
;
152 static int hf_lsarpc_lsa_BinaryString_length
;
153 static int hf_lsarpc_lsa_BinaryString_size
;
154 static int hf_lsarpc_lsa_CloseTrustedDomainEx_handle
;
155 static int hf_lsarpc_lsa_Close_handle
;
156 static int hf_lsarpc_lsa_CreateAccount_access_mask
;
157 static int hf_lsarpc_lsa_CreateAccount_acct_handle
;
158 static int hf_lsarpc_lsa_CreateAccount_handle
;
159 static int hf_lsarpc_lsa_CreateAccount_sid
;
160 static int hf_lsarpc_lsa_CreateSecret_access_mask
;
161 static int hf_lsarpc_lsa_CreateSecret_handle
;
162 static int hf_lsarpc_lsa_CreateSecret_name
;
163 static int hf_lsarpc_lsa_CreateSecret_sec_handle
;
164 static int hf_lsarpc_lsa_CreateTrustedDomainEx2_access_mask
;
165 static int hf_lsarpc_lsa_CreateTrustedDomainEx2_auth_info_internal
;
166 static int hf_lsarpc_lsa_CreateTrustedDomainEx2_info
;
167 static int hf_lsarpc_lsa_CreateTrustedDomainEx2_policy_handle
;
168 static int hf_lsarpc_lsa_CreateTrustedDomainEx2_trustdom_handle
;
169 static int hf_lsarpc_lsa_CreateTrustedDomainEx3_access_mask
;
170 static int hf_lsarpc_lsa_CreateTrustedDomainEx3_auth_info_internal
;
171 static int hf_lsarpc_lsa_CreateTrustedDomainEx3_info
;
172 static int hf_lsarpc_lsa_CreateTrustedDomainEx3_policy_handle
;
173 static int hf_lsarpc_lsa_CreateTrustedDomainEx3_trustdom_handle
;
174 static int hf_lsarpc_lsa_CreateTrustedDomainEx_access_mask
;
175 static int hf_lsarpc_lsa_CreateTrustedDomainEx_auth_info
;
176 static int hf_lsarpc_lsa_CreateTrustedDomainEx_info
;
177 static int hf_lsarpc_lsa_CreateTrustedDomainEx_policy_handle
;
178 static int hf_lsarpc_lsa_CreateTrustedDomainEx_trustdom_handle
;
179 static int hf_lsarpc_lsa_CreateTrustedDomain_access_mask
;
180 static int hf_lsarpc_lsa_CreateTrustedDomain_info
;
181 static int hf_lsarpc_lsa_CreateTrustedDomain_policy_handle
;
182 static int hf_lsarpc_lsa_CreateTrustedDomain_trustdom_handle
;
183 static int hf_lsarpc_lsa_DATA_BUF2_data
;
184 static int hf_lsarpc_lsa_DATA_BUF2_size
;
185 static int hf_lsarpc_lsa_DATA_BUF_PTR_buf
;
186 static int hf_lsarpc_lsa_DATA_BUF_data
;
187 static int hf_lsarpc_lsa_DATA_BUF_length
;
188 static int hf_lsarpc_lsa_DATA_BUF_size
;
189 static int hf_lsarpc_lsa_DefaultQuotaInfo_max_wss
;
190 static int hf_lsarpc_lsa_DefaultQuotaInfo_min_wss
;
191 static int hf_lsarpc_lsa_DefaultQuotaInfo_non_paged_pool
;
192 static int hf_lsarpc_lsa_DefaultQuotaInfo_paged_pool
;
193 static int hf_lsarpc_lsa_DefaultQuotaInfo_pagefile
;
194 static int hf_lsarpc_lsa_DefaultQuotaInfo_unknown
;
195 static int hf_lsarpc_lsa_DeleteObject_handle
;
196 static int hf_lsarpc_lsa_DeleteTrustedDomain_dom_sid
;
197 static int hf_lsarpc_lsa_DeleteTrustedDomain_handle
;
198 static int hf_lsarpc_lsa_Delete_handle
;
199 static int hf_lsarpc_lsa_DnsDomainInfo_dns_domain
;
200 static int hf_lsarpc_lsa_DnsDomainInfo_dns_forest
;
201 static int hf_lsarpc_lsa_DnsDomainInfo_domain_guid
;
202 static int hf_lsarpc_lsa_DnsDomainInfo_name
;
203 static int hf_lsarpc_lsa_DnsDomainInfo_sid
;
204 static int hf_lsarpc_lsa_DomainInfoEfs_blob_size
;
205 static int hf_lsarpc_lsa_DomainInfoEfs_efs_blob
;
206 static int hf_lsarpc_lsa_DomainInfoKerberos_authentication_options
;
207 static int hf_lsarpc_lsa_DomainInfoKerberos_clock_skew
;
208 static int hf_lsarpc_lsa_DomainInfoKerberos_reserved
;
209 static int hf_lsarpc_lsa_DomainInfoKerberos_service_tkt_lifetime
;
210 static int hf_lsarpc_lsa_DomainInfoKerberos_user_tkt_lifetime
;
211 static int hf_lsarpc_lsa_DomainInfoKerberos_user_tkt_renewaltime
;
212 static int hf_lsarpc_lsa_DomainInfoQoS_quality_of_service
;
213 static int hf_lsarpc_lsa_DomainInfo_name
;
214 static int hf_lsarpc_lsa_DomainInfo_sid
;
215 static int hf_lsarpc_lsa_DomainInformationPolicy_efs_info
;
216 static int hf_lsarpc_lsa_DomainInformationPolicy_kerberos_info
;
217 static int hf_lsarpc_lsa_DomainInformationPolicy_qos_info
;
218 static int hf_lsarpc_lsa_DomainListEx_count
;
219 static int hf_lsarpc_lsa_DomainListEx_domains
;
220 static int hf_lsarpc_lsa_DomainList_count
;
221 static int hf_lsarpc_lsa_DomainList_domains
;
222 static int hf_lsarpc_lsa_EnumAccountRights_handle
;
223 static int hf_lsarpc_lsa_EnumAccountRights_rights
;
224 static int hf_lsarpc_lsa_EnumAccountRights_sid
;
225 static int hf_lsarpc_lsa_EnumAccountsWithUserRight_handle
;
226 static int hf_lsarpc_lsa_EnumAccountsWithUserRight_name
;
227 static int hf_lsarpc_lsa_EnumAccountsWithUserRight_sids
;
228 static int hf_lsarpc_lsa_EnumAccounts_handle
;
229 static int hf_lsarpc_lsa_EnumAccounts_num_entries
;
230 static int hf_lsarpc_lsa_EnumAccounts_resume_handle
;
231 static int hf_lsarpc_lsa_EnumAccounts_sids
;
232 static int hf_lsarpc_lsa_EnumPrivsAccount_handle
;
233 static int hf_lsarpc_lsa_EnumPrivsAccount_privs
;
234 static int hf_lsarpc_lsa_EnumPrivs_handle
;
235 static int hf_lsarpc_lsa_EnumPrivs_max_count
;
236 static int hf_lsarpc_lsa_EnumPrivs_privs
;
237 static int hf_lsarpc_lsa_EnumPrivs_resume_handle
;
238 static int hf_lsarpc_lsa_EnumTrustDom_domains
;
239 static int hf_lsarpc_lsa_EnumTrustDom_handle
;
240 static int hf_lsarpc_lsa_EnumTrustDom_max_size
;
241 static int hf_lsarpc_lsa_EnumTrustDom_resume_handle
;
242 static int hf_lsarpc_lsa_EnumTrustedDomainsEx_domains
;
243 static int hf_lsarpc_lsa_EnumTrustedDomainsEx_handle
;
244 static int hf_lsarpc_lsa_EnumTrustedDomainsEx_max_size
;
245 static int hf_lsarpc_lsa_EnumTrustedDomainsEx_resume_handle
;
246 static int hf_lsarpc_lsa_ForestTrustBinaryData_data
;
247 static int hf_lsarpc_lsa_ForestTrustBinaryData_length
;
248 static int hf_lsarpc_lsa_ForestTrustCollisionInfo_count
;
249 static int hf_lsarpc_lsa_ForestTrustCollisionInfo_entries
;
250 static int hf_lsarpc_lsa_ForestTrustCollisionRecord_flags
;
251 static int hf_lsarpc_lsa_ForestTrustCollisionRecord_index
;
252 static int hf_lsarpc_lsa_ForestTrustCollisionRecord_name
;
253 static int hf_lsarpc_lsa_ForestTrustCollisionRecord_type
;
254 static int hf_lsarpc_lsa_ForestTrustData2_data
;
255 static int hf_lsarpc_lsa_ForestTrustData2_domain_info
;
256 static int hf_lsarpc_lsa_ForestTrustData2_scanner_info
;
257 static int hf_lsarpc_lsa_ForestTrustData2_top_level_name
;
258 static int hf_lsarpc_lsa_ForestTrustData2_top_level_name_ex
;
259 static int hf_lsarpc_lsa_ForestTrustData_data
;
260 static int hf_lsarpc_lsa_ForestTrustData_domain_info
;
261 static int hf_lsarpc_lsa_ForestTrustData_top_level_name
;
262 static int hf_lsarpc_lsa_ForestTrustData_top_level_name_ex
;
263 static int hf_lsarpc_lsa_ForestTrustDomainInfo_dns_domain_name
;
264 static int hf_lsarpc_lsa_ForestTrustDomainInfo_domain_sid
;
265 static int hf_lsarpc_lsa_ForestTrustDomainInfo_netbios_domain_name
;
266 static int hf_lsarpc_lsa_ForestTrustInformation2_count
;
267 static int hf_lsarpc_lsa_ForestTrustInformation2_entries
;
268 static int hf_lsarpc_lsa_ForestTrustInformation_count
;
269 static int hf_lsarpc_lsa_ForestTrustInformation_entries
;
270 static int hf_lsarpc_lsa_ForestTrustRecord2_flags
;
271 static int hf_lsarpc_lsa_ForestTrustRecord2_forest_trust_data
;
272 static int hf_lsarpc_lsa_ForestTrustRecord2_time
;
273 static int hf_lsarpc_lsa_ForestTrustRecord2_type
;
274 static int hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_ADMIN
;
275 static int hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_CONFLICT
;
276 static int hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_ADMIN
;
277 static int hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_CONFLICT
;
278 static int hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_ADMIN
;
279 static int hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_CONFLICT
;
280 static int hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_NEW
;
281 static int hf_lsarpc_lsa_ForestTrustRecord_flags
;
282 static int hf_lsarpc_lsa_ForestTrustRecord_forest_trust_data
;
283 static int hf_lsarpc_lsa_ForestTrustRecord_time
;
284 static int hf_lsarpc_lsa_ForestTrustRecord_type
;
285 static int hf_lsarpc_lsa_GetSystemAccessAccount_access_mask
;
286 static int hf_lsarpc_lsa_GetSystemAccessAccount_handle
;
287 static int hf_lsarpc_lsa_GetUserName_account_name
;
288 static int hf_lsarpc_lsa_GetUserName_authority_name
;
289 static int hf_lsarpc_lsa_GetUserName_system_name
;
290 static int hf_lsarpc_lsa_LUIDAttribute_attribute
;
291 static int hf_lsarpc_lsa_LUIDAttribute_luid
;
292 static int hf_lsarpc_lsa_LUID_high
;
293 static int hf_lsarpc_lsa_LUID_low
;
294 static int hf_lsarpc_lsa_LookupNames2_client_revision
;
295 static int hf_lsarpc_lsa_LookupNames2_count
;
296 static int hf_lsarpc_lsa_LookupNames2_domains
;
297 static int hf_lsarpc_lsa_LookupNames2_handle
;
298 static int hf_lsarpc_lsa_LookupNames2_level
;
299 static int hf_lsarpc_lsa_LookupNames2_lookup_options
;
300 static int hf_lsarpc_lsa_LookupNames2_names
;
301 static int hf_lsarpc_lsa_LookupNames2_num_names
;
302 static int hf_lsarpc_lsa_LookupNames2_sids
;
303 static int hf_lsarpc_lsa_LookupNames3_client_revision
;
304 static int hf_lsarpc_lsa_LookupNames3_count
;
305 static int hf_lsarpc_lsa_LookupNames3_domains
;
306 static int hf_lsarpc_lsa_LookupNames3_handle
;
307 static int hf_lsarpc_lsa_LookupNames3_level
;
308 static int hf_lsarpc_lsa_LookupNames3_lookup_options
;
309 static int hf_lsarpc_lsa_LookupNames3_names
;
310 static int hf_lsarpc_lsa_LookupNames3_num_names
;
311 static int hf_lsarpc_lsa_LookupNames3_sids
;
312 static int hf_lsarpc_lsa_LookupNames4_client_revision
;
313 static int hf_lsarpc_lsa_LookupNames4_count
;
314 static int hf_lsarpc_lsa_LookupNames4_domains
;
315 static int hf_lsarpc_lsa_LookupNames4_level
;
316 static int hf_lsarpc_lsa_LookupNames4_lookup_options
;
317 static int hf_lsarpc_lsa_LookupNames4_names
;
318 static int hf_lsarpc_lsa_LookupNames4_num_names
;
319 static int hf_lsarpc_lsa_LookupNames4_sids
;
320 static int hf_lsarpc_lsa_LookupNames_count
;
321 static int hf_lsarpc_lsa_LookupNames_domains
;
322 static int hf_lsarpc_lsa_LookupNames_handle
;
323 static int hf_lsarpc_lsa_LookupNames_level
;
324 static int hf_lsarpc_lsa_LookupNames_names
;
325 static int hf_lsarpc_lsa_LookupNames_num_names
;
326 static int hf_lsarpc_lsa_LookupNames_sids
;
327 static int hf_lsarpc_lsa_LookupPrivDisplayName_disp_name
;
328 static int hf_lsarpc_lsa_LookupPrivDisplayName_handle
;
329 static int hf_lsarpc_lsa_LookupPrivDisplayName_language_id
;
330 static int hf_lsarpc_lsa_LookupPrivDisplayName_language_id_sys
;
331 static int hf_lsarpc_lsa_LookupPrivDisplayName_name
;
332 static int hf_lsarpc_lsa_LookupPrivDisplayName_returned_language_id
;
333 static int hf_lsarpc_lsa_LookupPrivName_handle
;
334 static int hf_lsarpc_lsa_LookupPrivName_luid
;
335 static int hf_lsarpc_lsa_LookupPrivName_name
;
336 static int hf_lsarpc_lsa_LookupPrivValue_handle
;
337 static int hf_lsarpc_lsa_LookupPrivValue_luid
;
338 static int hf_lsarpc_lsa_LookupPrivValue_name
;
339 static int hf_lsarpc_lsa_LookupSids2_client_revision
;
340 static int hf_lsarpc_lsa_LookupSids2_count
;
341 static int hf_lsarpc_lsa_LookupSids2_domains
;
342 static int hf_lsarpc_lsa_LookupSids2_handle
;
343 static int hf_lsarpc_lsa_LookupSids2_level
;
344 static int hf_lsarpc_lsa_LookupSids2_lookup_options
;
345 static int hf_lsarpc_lsa_LookupSids2_names
;
346 static int hf_lsarpc_lsa_LookupSids2_sids
;
347 static int hf_lsarpc_lsa_LookupSids3_client_revision
;
348 static int hf_lsarpc_lsa_LookupSids3_count
;
349 static int hf_lsarpc_lsa_LookupSids3_domains
;
350 static int hf_lsarpc_lsa_LookupSids3_level
;
351 static int hf_lsarpc_lsa_LookupSids3_lookup_options
;
352 static int hf_lsarpc_lsa_LookupSids3_names
;
353 static int hf_lsarpc_lsa_LookupSids3_sids
;
354 static int hf_lsarpc_lsa_LookupSids_count
;
355 static int hf_lsarpc_lsa_LookupSids_domains
;
356 static int hf_lsarpc_lsa_LookupSids_handle
;
357 static int hf_lsarpc_lsa_LookupSids_level
;
358 static int hf_lsarpc_lsa_LookupSids_names
;
359 static int hf_lsarpc_lsa_LookupSids_sids
;
360 static int hf_lsarpc_lsa_ModificationInfo_db_create_time
;
361 static int hf_lsarpc_lsa_ModificationInfo_modified_id
;
362 static int hf_lsarpc_lsa_ObjectAttribute_attributes
;
363 static int hf_lsarpc_lsa_ObjectAttribute_len
;
364 static int hf_lsarpc_lsa_ObjectAttribute_object_name
;
365 static int hf_lsarpc_lsa_ObjectAttribute_root_dir
;
366 static int hf_lsarpc_lsa_ObjectAttribute_sec_desc
;
367 static int hf_lsarpc_lsa_ObjectAttribute_sec_qos
;
368 static int hf_lsarpc_lsa_OpenAccount_access_mask
;
369 static int hf_lsarpc_lsa_OpenAccount_acct_handle
;
370 static int hf_lsarpc_lsa_OpenAccount_handle
;
371 static int hf_lsarpc_lsa_OpenAccount_sid
;
372 static int hf_lsarpc_lsa_OpenPolicy2_access_mask
;
373 static int hf_lsarpc_lsa_OpenPolicy2_attr
;
374 static int hf_lsarpc_lsa_OpenPolicy2_handle
;
375 static int hf_lsarpc_lsa_OpenPolicy2_system_name
;
376 static int hf_lsarpc_lsa_OpenPolicy3_access_mask
;
377 static int hf_lsarpc_lsa_OpenPolicy3_attr
;
378 static int hf_lsarpc_lsa_OpenPolicy3_handle
;
379 static int hf_lsarpc_lsa_OpenPolicy3_in_revision_info
;
380 static int hf_lsarpc_lsa_OpenPolicy3_in_version
;
381 static int hf_lsarpc_lsa_OpenPolicy3_out_revision_info
;
382 static int hf_lsarpc_lsa_OpenPolicy3_out_version
;
383 static int hf_lsarpc_lsa_OpenPolicy3_system_name
;
384 static int hf_lsarpc_lsa_OpenPolicy_access_mask
;
385 static int hf_lsarpc_lsa_OpenPolicy_attr
;
386 static int hf_lsarpc_lsa_OpenPolicy_handle
;
387 static int hf_lsarpc_lsa_OpenPolicy_system_name
;
388 static int hf_lsarpc_lsa_OpenSecret_access_mask
;
389 static int hf_lsarpc_lsa_OpenSecret_handle
;
390 static int hf_lsarpc_lsa_OpenSecret_name
;
391 static int hf_lsarpc_lsa_OpenSecret_sec_handle
;
392 static int hf_lsarpc_lsa_OpenTrustedDomainByName_access_mask
;
393 static int hf_lsarpc_lsa_OpenTrustedDomainByName_handle
;
394 static int hf_lsarpc_lsa_OpenTrustedDomainByName_name
;
395 static int hf_lsarpc_lsa_OpenTrustedDomainByName_trustdom_handle
;
396 static int hf_lsarpc_lsa_OpenTrustedDomain_access_mask
;
397 static int hf_lsarpc_lsa_OpenTrustedDomain_handle
;
398 static int hf_lsarpc_lsa_OpenTrustedDomain_sid
;
399 static int hf_lsarpc_lsa_OpenTrustedDomain_trustdom_handle
;
400 static int hf_lsarpc_lsa_PDAccountInfo_name
;
401 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_AUDIT_LOG_ADMIN
;
402 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_CREATE_ACCOUNT
;
403 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_CREATE_PRIVILEGE
;
404 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_CREATE_SECRET
;
405 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_GET_PRIVATE_INFORMATION
;
406 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_LOOKUP_NAMES
;
407 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_NOTIFICATION
;
408 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_SERVER_ADMIN
;
409 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_SET_AUDIT_REQUIREMENTS
;
410 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS
;
411 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_TRUST_ADMIN
;
412 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_VIEW_AUDIT_INFORMATION
;
413 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_VIEW_LOCAL_INFORMATION
;
414 static int hf_lsarpc_lsa_PolicyInformation_account_domain
;
415 static int hf_lsarpc_lsa_PolicyInformation_audit_events
;
416 static int hf_lsarpc_lsa_PolicyInformation_audit_log
;
417 static int hf_lsarpc_lsa_PolicyInformation_auditfullquery
;
418 static int hf_lsarpc_lsa_PolicyInformation_auditfullset
;
419 static int hf_lsarpc_lsa_PolicyInformation_dns
;
420 static int hf_lsarpc_lsa_PolicyInformation_dns_int
;
421 static int hf_lsarpc_lsa_PolicyInformation_domain
;
422 static int hf_lsarpc_lsa_PolicyInformation_l_account_domain
;
423 static int hf_lsarpc_lsa_PolicyInformation_mod
;
424 static int hf_lsarpc_lsa_PolicyInformation_pd
;
425 static int hf_lsarpc_lsa_PolicyInformation_quota
;
426 static int hf_lsarpc_lsa_PolicyInformation_replica
;
427 static int hf_lsarpc_lsa_PolicyInformation_role
;
428 static int hf_lsarpc_lsa_PrivArray_count
;
429 static int hf_lsarpc_lsa_PrivArray_privs
;
430 static int hf_lsarpc_lsa_PrivEntry_luid
;
431 static int hf_lsarpc_lsa_PrivEntry_name
;
432 static int hf_lsarpc_lsa_PrivilegeSet_count
;
433 static int hf_lsarpc_lsa_PrivilegeSet_set
;
434 static int hf_lsarpc_lsa_PrivilegeSet_unknown
;
435 static int hf_lsarpc_lsa_QosInfo_context_mode
;
436 static int hf_lsarpc_lsa_QosInfo_effective_only
;
437 static int hf_lsarpc_lsa_QosInfo_impersonation_level
;
438 static int hf_lsarpc_lsa_QosInfo_len
;
439 static int hf_lsarpc_lsa_QueryDomainInformationPolicy_handle
;
440 static int hf_lsarpc_lsa_QueryDomainInformationPolicy_info
;
441 static int hf_lsarpc_lsa_QueryDomainInformationPolicy_level
;
442 static int hf_lsarpc_lsa_QueryInfoPolicy2_handle
;
443 static int hf_lsarpc_lsa_QueryInfoPolicy2_info
;
444 static int hf_lsarpc_lsa_QueryInfoPolicy2_level
;
445 static int hf_lsarpc_lsa_QueryInfoPolicy_handle
;
446 static int hf_lsarpc_lsa_QueryInfoPolicy_info
;
447 static int hf_lsarpc_lsa_QueryInfoPolicy_level
;
448 static int hf_lsarpc_lsa_QuerySecret_new_mtime
;
449 static int hf_lsarpc_lsa_QuerySecret_new_val
;
450 static int hf_lsarpc_lsa_QuerySecret_old_mtime
;
451 static int hf_lsarpc_lsa_QuerySecret_old_val
;
452 static int hf_lsarpc_lsa_QuerySecret_sec_handle
;
453 static int hf_lsarpc_lsa_QuerySecurity_handle
;
454 static int hf_lsarpc_lsa_QuerySecurity_sdbuf
;
455 static int hf_lsarpc_lsa_QuerySecurity_sec_info
;
456 static int hf_lsarpc_lsa_QueryTrustedDomainInfoByName_handle
;
457 static int hf_lsarpc_lsa_QueryTrustedDomainInfoByName_info
;
458 static int hf_lsarpc_lsa_QueryTrustedDomainInfoByName_level
;
459 static int hf_lsarpc_lsa_QueryTrustedDomainInfoByName_trusted_domain
;
460 static int hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_dom_sid
;
461 static int hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_handle
;
462 static int hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_info
;
463 static int hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_level
;
464 static int hf_lsarpc_lsa_QueryTrustedDomainInfo_info
;
465 static int hf_lsarpc_lsa_QueryTrustedDomainInfo_level
;
466 static int hf_lsarpc_lsa_QueryTrustedDomainInfo_trustdom_handle
;
467 static int hf_lsarpc_lsa_RefDomainList_count
;
468 static int hf_lsarpc_lsa_RefDomainList_domains
;
469 static int hf_lsarpc_lsa_RefDomainList_max_size
;
470 static int hf_lsarpc_lsa_RemoveAccountRights_handle
;
471 static int hf_lsarpc_lsa_RemoveAccountRights_remove_all
;
472 static int hf_lsarpc_lsa_RemoveAccountRights_rights
;
473 static int hf_lsarpc_lsa_RemoveAccountRights_sid
;
474 static int hf_lsarpc_lsa_RemovePrivilegesFromAccount_handle
;
475 static int hf_lsarpc_lsa_RemovePrivilegesFromAccount_privs
;
476 static int hf_lsarpc_lsa_RemovePrivilegesFromAccount_remove_all
;
477 static int hf_lsarpc_lsa_ReplicaSourceInfo_account
;
478 static int hf_lsarpc_lsa_ReplicaSourceInfo_source
;
479 static int hf_lsarpc_lsa_RetrievePrivateData_handle
;
480 static int hf_lsarpc_lsa_RetrievePrivateData_name
;
481 static int hf_lsarpc_lsa_RetrievePrivateData_val
;
482 static int hf_lsarpc_lsa_RevisionSupportedFeature_LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER
;
483 static int hf_lsarpc_lsa_RightAttribute_name
;
484 static int hf_lsarpc_lsa_RightSet_count
;
485 static int hf_lsarpc_lsa_RightSet_names
;
486 static int hf_lsarpc_lsa_SecretAccessMask_LSA_SECRET_QUERY_VALUE
;
487 static int hf_lsarpc_lsa_SecretAccessMask_LSA_SECRET_SET_VALUE
;
488 static int hf_lsarpc_lsa_ServerRole_role
;
489 static int hf_lsarpc_lsa_SetDomainInformationPolicy_handle
;
490 static int hf_lsarpc_lsa_SetDomainInformationPolicy_info
;
491 static int hf_lsarpc_lsa_SetDomainInformationPolicy_level
;
492 static int hf_lsarpc_lsa_SetInfoPolicy2_handle
;
493 static int hf_lsarpc_lsa_SetInfoPolicy2_info
;
494 static int hf_lsarpc_lsa_SetInfoPolicy2_level
;
495 static int hf_lsarpc_lsa_SetInfoPolicy_handle
;
496 static int hf_lsarpc_lsa_SetInfoPolicy_info
;
497 static int hf_lsarpc_lsa_SetInfoPolicy_level
;
498 static int hf_lsarpc_lsa_SetInformationTrustedDomain_info
;
499 static int hf_lsarpc_lsa_SetInformationTrustedDomain_level
;
500 static int hf_lsarpc_lsa_SetInformationTrustedDomain_trustdom_handle
;
501 static int hf_lsarpc_lsa_SetSecObj_handle
;
502 static int hf_lsarpc_lsa_SetSecObj_sdbuf
;
503 static int hf_lsarpc_lsa_SetSecObj_sec_info
;
504 static int hf_lsarpc_lsa_SetSecret_new_val
;
505 static int hf_lsarpc_lsa_SetSecret_old_val
;
506 static int hf_lsarpc_lsa_SetSecret_sec_handle
;
507 static int hf_lsarpc_lsa_SetSystemAccessAccount_access_mask
;
508 static int hf_lsarpc_lsa_SetSystemAccessAccount_handle
;
509 static int hf_lsarpc_lsa_SetTrustedDomainInfoByName_handle
;
510 static int hf_lsarpc_lsa_SetTrustedDomainInfoByName_info
;
511 static int hf_lsarpc_lsa_SetTrustedDomainInfoByName_level
;
512 static int hf_lsarpc_lsa_SetTrustedDomainInfoByName_trusted_domain
;
513 static int hf_lsarpc_lsa_SetTrustedDomainInfo_dom_sid
;
514 static int hf_lsarpc_lsa_SetTrustedDomainInfo_handle
;
515 static int hf_lsarpc_lsa_SetTrustedDomainInfo_info
;
516 static int hf_lsarpc_lsa_SetTrustedDomainInfo_level
;
517 static int hf_lsarpc_lsa_SidArray_num_sids
;
518 static int hf_lsarpc_lsa_SidArray_sids
;
519 static int hf_lsarpc_lsa_SidPtr_sid
;
520 static int hf_lsarpc_lsa_StorePrivateData_handle
;
521 static int hf_lsarpc_lsa_StorePrivateData_name
;
522 static int hf_lsarpc_lsa_StorePrivateData_val
;
523 static int hf_lsarpc_lsa_StringLarge_length
;
524 static int hf_lsarpc_lsa_StringLarge_size
;
525 static int hf_lsarpc_lsa_StringLarge_string
;
526 static int hf_lsarpc_lsa_String_length
;
527 static int hf_lsarpc_lsa_String_size
;
528 static int hf_lsarpc_lsa_String_string
;
529 static int hf_lsarpc_lsa_Strings_count
;
530 static int hf_lsarpc_lsa_Strings_names
;
531 static int hf_lsarpc_lsa_TransNameArray2_count
;
532 static int hf_lsarpc_lsa_TransNameArray2_names
;
533 static int hf_lsarpc_lsa_TransNameArray_count
;
534 static int hf_lsarpc_lsa_TransNameArray_names
;
535 static int hf_lsarpc_lsa_TransSidArray2_count
;
536 static int hf_lsarpc_lsa_TransSidArray2_sids
;
537 static int hf_lsarpc_lsa_TransSidArray3_count
;
538 static int hf_lsarpc_lsa_TransSidArray3_sids
;
539 static int hf_lsarpc_lsa_TransSidArray_count
;
540 static int hf_lsarpc_lsa_TransSidArray_sids
;
541 static int hf_lsarpc_lsa_TranslatedName2_name
;
542 static int hf_lsarpc_lsa_TranslatedName2_sid_index
;
543 static int hf_lsarpc_lsa_TranslatedName2_sid_type
;
544 static int hf_lsarpc_lsa_TranslatedName2_unknown
;
545 static int hf_lsarpc_lsa_TranslatedName_name
;
546 static int hf_lsarpc_lsa_TranslatedName_sid_index
;
547 static int hf_lsarpc_lsa_TranslatedName_sid_type
;
548 static int hf_lsarpc_lsa_TranslatedSid2_rid
;
549 static int hf_lsarpc_lsa_TranslatedSid2_sid_index
;
550 static int hf_lsarpc_lsa_TranslatedSid2_sid_type
;
551 static int hf_lsarpc_lsa_TranslatedSid2_unknown
;
552 static int hf_lsarpc_lsa_TranslatedSid3_flags
;
553 static int hf_lsarpc_lsa_TranslatedSid3_sid
;
554 static int hf_lsarpc_lsa_TranslatedSid3_sid_index
;
555 static int hf_lsarpc_lsa_TranslatedSid3_sid_type
;
556 static int hf_lsarpc_lsa_TranslatedSid_rid
;
557 static int hf_lsarpc_lsa_TranslatedSid_sid_index
;
558 static int hf_lsarpc_lsa_TranslatedSid_sid_type
;
559 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION
;
560 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION
;
561 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION
;
562 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE
;
563 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE
;
564 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_PIM_TRUST
;
565 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN
;
566 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL
;
567 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY
;
568 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION
;
569 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_WITHIN_FOREST
;
570 static int hf_lsarpc_lsa_TrustDirection_LSA_TRUST_DIRECTION_INBOUND
;
571 static int hf_lsarpc_lsa_TrustDirection_LSA_TRUST_DIRECTION_OUTBOUND
;
572 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES_auth_data
;
573 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES_cipher
;
574 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES_salt
;
575 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternal_auth_blob
;
576 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_count
;
577 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info
;
578 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info
;
579 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_count
;
580 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info
;
581 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info
;
582 static int hf_lsarpc_lsa_TrustDomainInfoBasic_netbios_name
;
583 static int hf_lsarpc_lsa_TrustDomainInfoBasic_sid
;
584 static int hf_lsarpc_lsa_TrustDomainInfoBuffer_AuthType
;
585 static int hf_lsarpc_lsa_TrustDomainInfoBuffer_data
;
586 static int hf_lsarpc_lsa_TrustDomainInfoBuffer_last_update_time
;
587 static int hf_lsarpc_lsa_TrustDomainInfoControllers_entries
;
588 static int hf_lsarpc_lsa_TrustDomainInfoControllers_netbios_names
;
589 static int hf_lsarpc_lsa_TrustDomainInfoFullInfo2Internal_auth_info
;
590 static int hf_lsarpc_lsa_TrustDomainInfoFullInfo2Internal_info
;
591 static int hf_lsarpc_lsa_TrustDomainInfoFullInfo2Internal_posix_offset
;
592 static int hf_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES_auth_info
;
593 static int hf_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES_info_ex
;
594 static int hf_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES_posix_offset
;
595 static int hf_lsarpc_lsa_TrustDomainInfoFullInfoInternal_auth_info
;
596 static int hf_lsarpc_lsa_TrustDomainInfoFullInfoInternal_info_ex
;
597 static int hf_lsarpc_lsa_TrustDomainInfoFullInfoInternal_posix_offset
;
598 static int hf_lsarpc_lsa_TrustDomainInfoFullInfo_auth_info
;
599 static int hf_lsarpc_lsa_TrustDomainInfoFullInfo_info_ex
;
600 static int hf_lsarpc_lsa_TrustDomainInfoFullInfo_posix_offset
;
601 static int hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data
;
602 static int hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_length
;
603 static int hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_info_ex
;
604 static int hf_lsarpc_lsa_TrustDomainInfoInfoEx_domain_name
;
605 static int hf_lsarpc_lsa_TrustDomainInfoInfoEx_netbios_name
;
606 static int hf_lsarpc_lsa_TrustDomainInfoInfoEx_sid
;
607 static int hf_lsarpc_lsa_TrustDomainInfoInfoEx_trust_attributes
;
608 static int hf_lsarpc_lsa_TrustDomainInfoInfoEx_trust_direction
;
609 static int hf_lsarpc_lsa_TrustDomainInfoInfoEx_trust_type
;
610 static int hf_lsarpc_lsa_TrustDomainInfoName_netbios_name
;
611 static int hf_lsarpc_lsa_TrustDomainInfoPassword_old_password
;
612 static int hf_lsarpc_lsa_TrustDomainInfoPassword_password
;
613 static int hf_lsarpc_lsa_TrustDomainInfoPosixOffset_posix_offset
;
614 static int hf_lsarpc_lsa_TrustDomainInfoSupportedEncTypes_enc_types
;
615 static int hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_AUTH
;
616 static int hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_CONTROLLERS
;
617 static int hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_DOMAIN_NAME
;
618 static int hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_POSIX
;
619 static int hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_AUTH
;
620 static int hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_CONTROLLERS
;
621 static int hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_POSIX
;
622 static int hf_lsarpc_lsa_TrustedDomainInfo_auth_info
;
623 static int hf_lsarpc_lsa_TrustedDomainInfo_auth_info_internal
;
624 static int hf_lsarpc_lsa_TrustedDomainInfo_auth_info_internal_aes
;
625 static int hf_lsarpc_lsa_TrustedDomainInfo_controllers
;
626 static int hf_lsarpc_lsa_TrustedDomainInfo_enc_types
;
627 static int hf_lsarpc_lsa_TrustedDomainInfo_full_info
;
628 static int hf_lsarpc_lsa_TrustedDomainInfo_full_info2_internal
;
629 static int hf_lsarpc_lsa_TrustedDomainInfo_full_info_internal
;
630 static int hf_lsarpc_lsa_TrustedDomainInfo_full_info_internal_aes
;
631 static int hf_lsarpc_lsa_TrustedDomainInfo_info_basic
;
632 static int hf_lsarpc_lsa_TrustedDomainInfo_info_ex
;
633 static int hf_lsarpc_lsa_TrustedDomainInfo_info_ex2_internal
;
634 static int hf_lsarpc_lsa_TrustedDomainInfo_name
;
635 static int hf_lsarpc_lsa_TrustedDomainInfo_password
;
636 static int hf_lsarpc_lsa_TrustedDomainInfo_posix_offset
;
637 static int hf_lsarpc_lsa_krbAuthenticationOptions_LSA_POLICY_KERBEROS_VALIDATE_CLIENT
;
638 static int hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_forest_trust_info
;
639 static int hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_handle
;
640 static int hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_highest_record_type
;
641 static int hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name
;
642 static int hf_lsarpc_lsa_lsaRQueryForestTrustInformation_forest_trust_info
;
643 static int hf_lsarpc_lsa_lsaRQueryForestTrustInformation_handle
;
644 static int hf_lsarpc_lsa_lsaRQueryForestTrustInformation_highest_record_type
;
645 static int hf_lsarpc_lsa_lsaRQueryForestTrustInformation_trusted_domain_name
;
646 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation2_check_only
;
647 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation2_collision_info
;
648 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation2_forest_trust_info
;
649 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation2_handle
;
650 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation2_highest_record_type
;
651 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation2_trusted_domain_name
;
652 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation_check_only
;
653 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation_collision_info
;
654 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation_forest_trust_info
;
655 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation_handle
;
656 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation_highest_record_type
;
657 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation_trusted_domain_name
;
658 static int hf_lsarpc_lsa_revision_info1_revision
;
659 static int hf_lsarpc_lsa_revision_info1_supported_features
;
660 static int hf_lsarpc_lsa_revision_info_info1
;
661 static int hf_lsarpc_names
;
662 static int hf_lsarpc_opnum
;
663 static int hf_lsarpc_policy_access_mask
;
664 static int hf_lsarpc_sec_desc_buf_len
;
665 static int hf_lsarpc_secret_access_mask
;
666 static int hf_lsarpc_status
;
668 static int proto_dcerpc_lsarpc
;
669 /* Version information */
672 static e_guid_t uuid_dcerpc_lsarpc
= {
673 0x12345778, 0x1234, 0xabcd,
674 { 0xef, 0x00, 0x01, 0x23, 0x45, 0x67, 0x89, 0xab }
676 static uint16_t ver_dcerpc_lsarpc
= 0;
678 static int lsarpc_dissect_element_lsa_String_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
679 static int lsarpc_dissect_element_lsa_String_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
680 static int lsarpc_dissect_element_lsa_String_string(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
681 static int lsarpc_dissect_element_lsa_String_string_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
682 static int lsarpc_dissect_element_lsa_StringLarge_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
683 static int lsarpc_dissect_element_lsa_StringLarge_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
684 static int lsarpc_dissect_element_lsa_StringLarge_string(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
685 static int lsarpc_dissect_element_lsa_StringLarge_string_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
686 static int lsarpc_dissect_element_lsa_Strings_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
687 static int lsarpc_dissect_element_lsa_Strings_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
688 static int lsarpc_dissect_element_lsa_Strings_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
689 static int lsarpc_dissect_element_lsa_Strings_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
690 static int lsarpc_dissect_element_lsa_AsciiString_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
691 static int lsarpc_dissect_element_lsa_AsciiString_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
692 static int lsarpc_dissect_element_lsa_AsciiString_string(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
693 static int lsarpc_dissect_element_lsa_AsciiString_string_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
694 static int lsarpc_dissect_element_lsa_AsciiString_string__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
695 static int lsarpc_dissect_element_lsa_AsciiStringLarge_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
696 static int lsarpc_dissect_element_lsa_AsciiStringLarge_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
697 static int lsarpc_dissect_element_lsa_AsciiStringLarge_string(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
698 static int lsarpc_dissect_element_lsa_AsciiStringLarge_string_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
699 static int lsarpc_dissect_element_lsa_AsciiStringLarge_string__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
700 static int lsarpc_dissect_element_lsa_BinaryString_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
701 static int lsarpc_dissect_element_lsa_BinaryString_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
702 static int lsarpc_dissect_element_lsa_BinaryString_array(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
703 static int lsarpc_dissect_element_lsa_BinaryString_array_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
704 static int lsarpc_dissect_element_lsa_BinaryString_array__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
705 static int lsarpc_dissect_element_lsa_LUID_low(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
706 static int lsarpc_dissect_element_lsa_LUID_high(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
707 static int lsarpc_dissect_element_lsa_PrivEntry_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
708 static int lsarpc_dissect_element_lsa_PrivEntry_luid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
709 static int lsarpc_dissect_element_lsa_PrivArray_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
710 static int lsarpc_dissect_element_lsa_PrivArray_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
711 static int lsarpc_dissect_element_lsa_PrivArray_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
712 static int lsarpc_dissect_element_lsa_PrivArray_privs__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
713 const value_string lsarpc_lsa_SecurityImpersonationLevel_vals
[] = {
714 { LSA_SECURITY_ANONYMOUS
, "LSA_SECURITY_ANONYMOUS" },
715 { LSA_SECURITY_IDENTIFICATION
, "LSA_SECURITY_IDENTIFICATION" },
716 { LSA_SECURITY_IMPERSONATION
, "LSA_SECURITY_IMPERSONATION" },
717 { LSA_SECURITY_DELEGATION
, "LSA_SECURITY_DELEGATION" },
720 static int lsarpc_dissect_element_lsa_QosInfo_len(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
721 static int lsarpc_dissect_element_lsa_QosInfo_impersonation_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
722 static int lsarpc_dissect_element_lsa_QosInfo_context_mode(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
723 static int lsarpc_dissect_element_lsa_QosInfo_effective_only(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
724 static int lsarpc_dissect_element_lsa_ObjectAttribute_len(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
725 static int lsarpc_dissect_element_lsa_ObjectAttribute_root_dir(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
726 static int lsarpc_dissect_element_lsa_ObjectAttribute_root_dir_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
727 static int lsarpc_dissect_element_lsa_ObjectAttribute_object_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
728 static int lsarpc_dissect_element_lsa_ObjectAttribute_object_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
729 static int lsarpc_dissect_element_lsa_ObjectAttribute_attributes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
730 static int lsarpc_dissect_element_lsa_ObjectAttribute_sec_desc(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
731 static int lsarpc_dissect_element_lsa_ObjectAttribute_sec_desc_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
732 static int lsarpc_dissect_element_lsa_ObjectAttribute_sec_qos(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
733 static int lsarpc_dissect_element_lsa_ObjectAttribute_sec_qos_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
734 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_VIEW_LOCAL_INFORMATION_tfs
= {
735 "LSA_POLICY_VIEW_LOCAL_INFORMATION is SET",
736 "LSA_POLICY_VIEW_LOCAL_INFORMATION is NOT SET",
738 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_VIEW_AUDIT_INFORMATION_tfs
= {
739 "LSA_POLICY_VIEW_AUDIT_INFORMATION is SET",
740 "LSA_POLICY_VIEW_AUDIT_INFORMATION is NOT SET",
742 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_GET_PRIVATE_INFORMATION_tfs
= {
743 "LSA_POLICY_GET_PRIVATE_INFORMATION is SET",
744 "LSA_POLICY_GET_PRIVATE_INFORMATION is NOT SET",
746 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_TRUST_ADMIN_tfs
= {
747 "LSA_POLICY_TRUST_ADMIN is SET",
748 "LSA_POLICY_TRUST_ADMIN is NOT SET",
750 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_CREATE_ACCOUNT_tfs
= {
751 "LSA_POLICY_CREATE_ACCOUNT is SET",
752 "LSA_POLICY_CREATE_ACCOUNT is NOT SET",
754 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_CREATE_SECRET_tfs
= {
755 "LSA_POLICY_CREATE_SECRET is SET",
756 "LSA_POLICY_CREATE_SECRET is NOT SET",
758 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_CREATE_PRIVILEGE_tfs
= {
759 "LSA_POLICY_CREATE_PRIVILEGE is SET",
760 "LSA_POLICY_CREATE_PRIVILEGE is NOT SET",
762 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS_tfs
= {
763 "LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS is SET",
764 "LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS is NOT SET",
766 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_SET_AUDIT_REQUIREMENTS_tfs
= {
767 "LSA_POLICY_SET_AUDIT_REQUIREMENTS is SET",
768 "LSA_POLICY_SET_AUDIT_REQUIREMENTS is NOT SET",
770 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_AUDIT_LOG_ADMIN_tfs
= {
771 "LSA_POLICY_AUDIT_LOG_ADMIN is SET",
772 "LSA_POLICY_AUDIT_LOG_ADMIN is NOT SET",
774 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_SERVER_ADMIN_tfs
= {
775 "LSA_POLICY_SERVER_ADMIN is SET",
776 "LSA_POLICY_SERVER_ADMIN is NOT SET",
778 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_LOOKUP_NAMES_tfs
= {
779 "LSA_POLICY_LOOKUP_NAMES is SET",
780 "LSA_POLICY_LOOKUP_NAMES is NOT SET",
782 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_NOTIFICATION_tfs
= {
783 "LSA_POLICY_NOTIFICATION is SET",
784 "LSA_POLICY_NOTIFICATION is NOT SET",
786 static const true_false_string lsa_AccountAccessMask_LSA_ACCOUNT_VIEW_tfs
= {
787 "LSA_ACCOUNT_VIEW is SET",
788 "LSA_ACCOUNT_VIEW is NOT SET",
790 static const true_false_string lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_PRIVILEGES_tfs
= {
791 "LSA_ACCOUNT_ADJUST_PRIVILEGES is SET",
792 "LSA_ACCOUNT_ADJUST_PRIVILEGES is NOT SET",
794 static const true_false_string lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_QUOTAS_tfs
= {
795 "LSA_ACCOUNT_ADJUST_QUOTAS is SET",
796 "LSA_ACCOUNT_ADJUST_QUOTAS is NOT SET",
798 static const true_false_string lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS_tfs
= {
799 "LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS is SET",
800 "LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS is NOT SET",
802 static const true_false_string lsa_SecretAccessMask_LSA_SECRET_SET_VALUE_tfs
= {
803 "LSA_SECRET_SET_VALUE is SET",
804 "LSA_SECRET_SET_VALUE is NOT SET",
806 static const true_false_string lsa_SecretAccessMask_LSA_SECRET_QUERY_VALUE_tfs
= {
807 "LSA_SECRET_QUERY_VALUE is SET",
808 "LSA_SECRET_QUERY_VALUE is NOT SET",
810 static const true_false_string lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_DOMAIN_NAME_tfs
= {
811 "LSA_TRUSTED_QUERY_DOMAIN_NAME is SET",
812 "LSA_TRUSTED_QUERY_DOMAIN_NAME is NOT SET",
814 static const true_false_string lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_CONTROLLERS_tfs
= {
815 "LSA_TRUSTED_QUERY_CONTROLLERS is SET",
816 "LSA_TRUSTED_QUERY_CONTROLLERS is NOT SET",
818 static const true_false_string lsa_TrustedAccessMask_LSA_TRUSTED_SET_CONTROLLERS_tfs
= {
819 "LSA_TRUSTED_SET_CONTROLLERS is SET",
820 "LSA_TRUSTED_SET_CONTROLLERS is NOT SET",
822 static const true_false_string lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_POSIX_tfs
= {
823 "LSA_TRUSTED_QUERY_POSIX is SET",
824 "LSA_TRUSTED_QUERY_POSIX is NOT SET",
826 static const true_false_string lsa_TrustedAccessMask_LSA_TRUSTED_SET_POSIX_tfs
= {
827 "LSA_TRUSTED_SET_POSIX is SET",
828 "LSA_TRUSTED_SET_POSIX is NOT SET",
830 static const true_false_string lsa_TrustedAccessMask_LSA_TRUSTED_SET_AUTH_tfs
= {
831 "LSA_TRUSTED_SET_AUTH is SET",
832 "LSA_TRUSTED_SET_AUTH is NOT SET",
834 static const true_false_string lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_AUTH_tfs
= {
835 "LSA_TRUSTED_QUERY_AUTH is SET",
836 "LSA_TRUSTED_QUERY_AUTH is NOT SET",
838 static int lsarpc_dissect_element_lsa_AuditLogInfo_percent_full(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
839 static int lsarpc_dissect_element_lsa_AuditLogInfo_maximum_log_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
840 static int lsarpc_dissect_element_lsa_AuditLogInfo_retention_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
841 static int lsarpc_dissect_element_lsa_AuditLogInfo_shutdown_in_progress(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
842 static int lsarpc_dissect_element_lsa_AuditLogInfo_time_to_shutdown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
843 static int lsarpc_dissect_element_lsa_AuditLogInfo_next_audit_record(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
844 const value_string lsarpc_lsa_PolicyAuditPolicy_vals
[] = {
845 { LSA_AUDIT_POLICY_NONE
, "LSA_AUDIT_POLICY_NONE" },
846 { LSA_AUDIT_POLICY_SUCCESS
, "LSA_AUDIT_POLICY_SUCCESS" },
847 { LSA_AUDIT_POLICY_FAILURE
, "LSA_AUDIT_POLICY_FAILURE" },
848 { LSA_AUDIT_POLICY_ALL
, "LSA_AUDIT_POLICY_ALL" },
849 { LSA_AUDIT_POLICY_CLEAR
, "LSA_AUDIT_POLICY_CLEAR" },
852 const value_string lsarpc_lsa_PolicyAuditEventType_vals
[] = {
853 { LSA_AUDIT_CATEGORY_SYSTEM
, "LSA_AUDIT_CATEGORY_SYSTEM" },
854 { LSA_AUDIT_CATEGORY_LOGON
, "LSA_AUDIT_CATEGORY_LOGON" },
855 { LSA_AUDIT_CATEGORY_FILE_AND_OBJECT_ACCESS
, "LSA_AUDIT_CATEGORY_FILE_AND_OBJECT_ACCESS" },
856 { LSA_AUDIT_CATEGORY_USE_OF_USER_RIGHTS
, "LSA_AUDIT_CATEGORY_USE_OF_USER_RIGHTS" },
857 { LSA_AUDIT_CATEGORY_PROCESS_TRACKING
, "LSA_AUDIT_CATEGORY_PROCESS_TRACKING" },
858 { LSA_AUDIT_CATEGORY_SECURITY_POLICY_CHANGES
, "LSA_AUDIT_CATEGORY_SECURITY_POLICY_CHANGES" },
859 { LSA_AUDIT_CATEGORY_ACCOUNT_MANAGEMENT
, "LSA_AUDIT_CATEGORY_ACCOUNT_MANAGEMENT" },
860 { LSA_AUDIT_CATEGORY_DIRECTORY_SERVICE_ACCESS
, "LSA_AUDIT_CATEGORY_DIRECTORY_SERVICE_ACCESS" },
861 { LSA_AUDIT_CATEGORY_ACCOUNT_LOGON
, "LSA_AUDIT_CATEGORY_ACCOUNT_LOGON" },
864 static int lsarpc_dissect_element_lsa_AuditEventsInfo_auditing_mode(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
865 static int lsarpc_dissect_element_lsa_AuditEventsInfo_settings(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
866 static int lsarpc_dissect_element_lsa_AuditEventsInfo_settings_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
867 static int lsarpc_dissect_element_lsa_AuditEventsInfo_settings__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
868 static int lsarpc_dissect_element_lsa_AuditEventsInfo_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
869 static int lsarpc_dissect_element_lsa_DomainInfo_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
870 static int lsarpc_dissect_element_lsa_DomainInfo_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
871 static int lsarpc_dissect_element_lsa_DomainInfo_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
872 static int lsarpc_dissect_element_lsa_PDAccountInfo_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
873 const value_string lsarpc_lsa_Role_vals
[] = {
874 { LSA_ROLE_BACKUP
, "LSA_ROLE_BACKUP" },
875 { LSA_ROLE_PRIMARY
, "LSA_ROLE_PRIMARY" },
878 static int lsarpc_dissect_element_lsa_ServerRole_role(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
879 static int lsarpc_dissect_element_lsa_ReplicaSourceInfo_source(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
880 static int lsarpc_dissect_element_lsa_ReplicaSourceInfo_account(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
881 static int lsarpc_dissect_element_lsa_DefaultQuotaInfo_paged_pool(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
882 static int lsarpc_dissect_element_lsa_DefaultQuotaInfo_non_paged_pool(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
883 static int lsarpc_dissect_element_lsa_DefaultQuotaInfo_min_wss(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
884 static int lsarpc_dissect_element_lsa_DefaultQuotaInfo_max_wss(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
885 static int lsarpc_dissect_element_lsa_DefaultQuotaInfo_pagefile(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
886 static int lsarpc_dissect_element_lsa_DefaultQuotaInfo_unknown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
887 static int lsarpc_dissect_element_lsa_ModificationInfo_modified_id(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
888 static int lsarpc_dissect_element_lsa_ModificationInfo_db_create_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
889 static int lsarpc_dissect_element_lsa_AuditFullSetInfo_shutdown_on_full(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
890 static int lsarpc_dissect_element_lsa_AuditFullQueryInfo_shutdown_on_full(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
891 static int lsarpc_dissect_element_lsa_AuditFullQueryInfo_log_is_full(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
892 static int lsarpc_dissect_element_lsa_DnsDomainInfo_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
893 static int lsarpc_dissect_element_lsa_DnsDomainInfo_dns_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
894 static int lsarpc_dissect_element_lsa_DnsDomainInfo_dns_forest(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
895 static int lsarpc_dissect_element_lsa_DnsDomainInfo_domain_guid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
896 static int lsarpc_dissect_element_lsa_DnsDomainInfo_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
897 static int lsarpc_dissect_element_lsa_DnsDomainInfo_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
898 const value_string lsarpc_lsa_PolicyInfo_vals
[] = {
899 { LSA_POLICY_INFO_AUDIT_LOG
, "LSA_POLICY_INFO_AUDIT_LOG" },
900 { LSA_POLICY_INFO_AUDIT_EVENTS
, "LSA_POLICY_INFO_AUDIT_EVENTS" },
901 { LSA_POLICY_INFO_DOMAIN
, "LSA_POLICY_INFO_DOMAIN" },
902 { LSA_POLICY_INFO_PD
, "LSA_POLICY_INFO_PD" },
903 { LSA_POLICY_INFO_ACCOUNT_DOMAIN
, "LSA_POLICY_INFO_ACCOUNT_DOMAIN" },
904 { LSA_POLICY_INFO_ROLE
, "LSA_POLICY_INFO_ROLE" },
905 { LSA_POLICY_INFO_REPLICA
, "LSA_POLICY_INFO_REPLICA" },
906 { LSA_POLICY_INFO_QUOTA
, "LSA_POLICY_INFO_QUOTA" },
907 { LSA_POLICY_INFO_MOD
, "LSA_POLICY_INFO_MOD" },
908 { LSA_POLICY_INFO_AUDIT_FULL_SET
, "LSA_POLICY_INFO_AUDIT_FULL_SET" },
909 { LSA_POLICY_INFO_AUDIT_FULL_QUERY
, "LSA_POLICY_INFO_AUDIT_FULL_QUERY" },
910 { LSA_POLICY_INFO_DNS
, "LSA_POLICY_INFO_DNS" },
911 { LSA_POLICY_INFO_DNS_INT
, "LSA_POLICY_INFO_DNS_INT" },
912 { LSA_POLICY_INFO_L_ACCOUNT_DOMAIN
, "LSA_POLICY_INFO_L_ACCOUNT_DOMAIN" },
915 static int lsarpc_dissect_element_lsa_PolicyInformation_audit_log(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
916 static int lsarpc_dissect_element_lsa_PolicyInformation_audit_events(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
917 static int lsarpc_dissect_element_lsa_PolicyInformation_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
918 static int lsarpc_dissect_element_lsa_PolicyInformation_pd(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
919 static int lsarpc_dissect_element_lsa_PolicyInformation_account_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
920 static int lsarpc_dissect_element_lsa_PolicyInformation_role(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
921 static int lsarpc_dissect_element_lsa_PolicyInformation_replica(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
922 static int lsarpc_dissect_element_lsa_PolicyInformation_quota(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
923 static int lsarpc_dissect_element_lsa_PolicyInformation_mod(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
924 static int lsarpc_dissect_element_lsa_PolicyInformation_auditfullset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
925 static int lsarpc_dissect_element_lsa_PolicyInformation_auditfullquery(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
926 static int lsarpc_dissect_element_lsa_PolicyInformation_dns(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
927 static int lsarpc_dissect_element_lsa_PolicyInformation_dns_int(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
928 static int lsarpc_dissect_element_lsa_PolicyInformation_l_account_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
929 static int lsarpc_dissect_element_lsa_SidPtr_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
930 static int lsarpc_dissect_element_lsa_SidPtr_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
931 static int lsarpc_dissect_element_lsa_SidArray_num_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
932 static int lsarpc_dissect_element_lsa_SidArray_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
933 static int lsarpc_dissect_element_lsa_SidArray_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
934 static int lsarpc_dissect_element_lsa_SidArray_sids__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
935 static int lsarpc_dissect_element_lsa_DomainList_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
936 static int lsarpc_dissect_element_lsa_DomainList_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
937 static int lsarpc_dissect_element_lsa_DomainList_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
938 static int lsarpc_dissect_element_lsa_DomainList_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
939 const value_string lsarpc_lsa_SidType_vals
[] = {
940 { SID_NAME_USE_NONE
, "SID_NAME_USE_NONE" },
941 { SID_NAME_USER
, "SID_NAME_USER" },
942 { SID_NAME_DOM_GRP
, "SID_NAME_DOM_GRP" },
943 { SID_NAME_DOMAIN
, "SID_NAME_DOMAIN" },
944 { SID_NAME_ALIAS
, "SID_NAME_ALIAS" },
945 { SID_NAME_WKN_GRP
, "SID_NAME_WKN_GRP" },
946 { SID_NAME_DELETED
, "SID_NAME_DELETED" },
947 { SID_NAME_INVALID
, "SID_NAME_INVALID" },
948 { SID_NAME_UNKNOWN
, "SID_NAME_UNKNOWN" },
949 { SID_NAME_COMPUTER
, "SID_NAME_COMPUTER" },
950 { SID_NAME_LABEL
, "SID_NAME_LABEL" },
953 static int lsarpc_dissect_element_lsa_TranslatedSid_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
954 static int lsarpc_dissect_element_lsa_TranslatedSid_rid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
955 static int lsarpc_dissect_element_lsa_TranslatedSid_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
956 static int lsarpc_dissect_element_lsa_TransSidArray_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
957 static int lsarpc_dissect_element_lsa_TransSidArray_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
958 static int lsarpc_dissect_element_lsa_TransSidArray_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
959 static int lsarpc_dissect_element_lsa_TransSidArray_sids__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
960 static int lsarpc_dissect_element_lsa_RefDomainList_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
961 static int lsarpc_dissect_element_lsa_RefDomainList_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
962 static int lsarpc_dissect_element_lsa_RefDomainList_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
963 static int lsarpc_dissect_element_lsa_RefDomainList_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
964 static int lsarpc_dissect_element_lsa_RefDomainList_max_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
965 const value_string lsarpc_lsa_LookupNamesLevel_vals
[] = {
966 { LSA_LOOKUP_NAMES_ALL
, "LSA_LOOKUP_NAMES_ALL" },
967 { LSA_LOOKUP_NAMES_DOMAINS_ONLY
, "LSA_LOOKUP_NAMES_DOMAINS_ONLY" },
968 { LSA_LOOKUP_NAMES_PRIMARY_DOMAIN_ONLY
, "LSA_LOOKUP_NAMES_PRIMARY_DOMAIN_ONLY" },
969 { LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY
, "LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY" },
970 { LSA_LOOKUP_NAMES_FOREST_TRUSTS_ONLY
, "LSA_LOOKUP_NAMES_FOREST_TRUSTS_ONLY" },
971 { LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY2
, "LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY2" },
972 { LSA_LOOKUP_NAMES_RODC_REFERRAL_TO_FULL_DC
, "LSA_LOOKUP_NAMES_RODC_REFERRAL_TO_FULL_DC" },
975 static int lsarpc_dissect_element_lsa_TranslatedName_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
976 static int lsarpc_dissect_element_lsa_TranslatedName_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
977 static int lsarpc_dissect_element_lsa_TranslatedName_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
978 static int lsarpc_dissect_element_lsa_TransNameArray_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
979 static int lsarpc_dissect_element_lsa_TransNameArray_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
980 static int lsarpc_dissect_element_lsa_TransNameArray_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
981 static int lsarpc_dissect_element_lsa_TransNameArray_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
982 static int lsarpc_dissect_element_lsa_LUIDAttribute_luid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
983 static int lsarpc_dissect_element_lsa_LUIDAttribute_attribute(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
984 static int lsarpc_dissect_element_lsa_PrivilegeSet_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
985 static int lsarpc_dissect_element_lsa_PrivilegeSet_unknown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
986 static int lsarpc_dissect_element_lsa_PrivilegeSet_set(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, struct ndr_generic_array
*nga
);
987 static int lsarpc_dissect_element_lsa_PrivilegeSet_set_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
988 static int lsarpc_dissect_conformant_lsa_PrivilegeSet_set(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, struct ndr_generic_array
*nga
);
989 static int lsarpc_dissect_element_lsa_DATA_BUF_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
990 static int lsarpc_dissect_element_lsa_DATA_BUF_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
991 static int lsarpc_dissect_element_lsa_DATA_BUF_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
992 static int lsarpc_dissect_element_lsa_DATA_BUF_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
993 static int lsarpc_dissect_element_lsa_DATA_BUF_data__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
994 static int lsarpc_dissect_element_lsa_DATA_BUF2_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
995 static int lsarpc_dissect_element_lsa_DATA_BUF2_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
996 static int lsarpc_dissect_element_lsa_DATA_BUF2_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
997 static int lsarpc_dissect_element_lsa_DATA_BUF2_data__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
998 const value_string lsarpc_lsa_TrustDomInfoEnum_vals
[] = {
999 { LSA_TRUSTED_DOMAIN_INFO_NAME
, "LSA_TRUSTED_DOMAIN_INFO_NAME" },
1000 { LSA_TRUSTED_DOMAIN_INFO_CONTROLLERS
, "LSA_TRUSTED_DOMAIN_INFO_CONTROLLERS" },
1001 { LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET
, "LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET" },
1002 { LSA_TRUSTED_DOMAIN_INFO_PASSWORD
, "LSA_TRUSTED_DOMAIN_INFO_PASSWORD" },
1003 { LSA_TRUSTED_DOMAIN_INFO_BASIC
, "LSA_TRUSTED_DOMAIN_INFO_BASIC" },
1004 { LSA_TRUSTED_DOMAIN_INFO_INFO_EX
, "LSA_TRUSTED_DOMAIN_INFO_INFO_EX" },
1005 { LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO
, "LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO" },
1006 { LSA_TRUSTED_DOMAIN_INFO_FULL_INFO
, "LSA_TRUSTED_DOMAIN_INFO_FULL_INFO" },
1007 { LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL
, "LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL" },
1008 { LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL
, "LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL" },
1009 { LSA_TRUSTED_DOMAIN_INFO_INFO_EX2_INTERNAL
, "LSA_TRUSTED_DOMAIN_INFO_INFO_EX2_INTERNAL" },
1010 { LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_2_INTERNAL
, "LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_2_INTERNAL" },
1011 { LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES
, "LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES" },
1012 { LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL_AES
, "LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL_AES" },
1013 { LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL_AES
, "LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL_AES" },
1016 static const true_false_string lsa_TrustDirection_LSA_TRUST_DIRECTION_INBOUND_tfs
= {
1017 "LSA_TRUST_DIRECTION_INBOUND is SET",
1018 "LSA_TRUST_DIRECTION_INBOUND is NOT SET",
1020 static const true_false_string lsa_TrustDirection_LSA_TRUST_DIRECTION_OUTBOUND_tfs
= {
1021 "LSA_TRUST_DIRECTION_OUTBOUND is SET",
1022 "LSA_TRUST_DIRECTION_OUTBOUND is NOT SET",
1024 const value_string lsarpc_lsa_TrustType_vals
[] = {
1025 { LSA_TRUST_TYPE_DOWNLEVEL
, "LSA_TRUST_TYPE_DOWNLEVEL" },
1026 { LSA_TRUST_TYPE_UPLEVEL
, "LSA_TRUST_TYPE_UPLEVEL" },
1027 { LSA_TRUST_TYPE_MIT
, "LSA_TRUST_TYPE_MIT" },
1028 { LSA_TRUST_TYPE_DCE
, "LSA_TRUST_TYPE_DCE" },
1031 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE_tfs
= {
1032 "LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE is SET",
1033 "LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE is NOT SET",
1035 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY_tfs
= {
1036 "LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY is SET",
1037 "LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY is NOT SET",
1039 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN_tfs
= {
1040 "LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN is SET",
1041 "LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN is NOT SET",
1043 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE_tfs
= {
1044 "LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE is SET",
1045 "LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE is NOT SET",
1047 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_tfs
= {
1048 "LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION is SET",
1049 "LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION is NOT SET",
1051 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_WITHIN_FOREST_tfs
= {
1052 "LSA_TRUST_ATTRIBUTE_WITHIN_FOREST is SET",
1053 "LSA_TRUST_ATTRIBUTE_WITHIN_FOREST is NOT SET",
1055 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL_tfs
= {
1056 "LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL is SET",
1057 "LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL is NOT SET",
1059 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION_tfs
= {
1060 "LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION is SET",
1061 "LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION is NOT SET",
1063 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION_tfs
= {
1064 "LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION is SET",
1065 "LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION is NOT SET",
1067 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_PIM_TRUST_tfs
= {
1068 "LSA_TRUST_ATTRIBUTE_PIM_TRUST is SET",
1069 "LSA_TRUST_ATTRIBUTE_PIM_TRUST is NOT SET",
1071 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION_tfs
= {
1072 "LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION is SET",
1073 "LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION is NOT SET",
1075 static int lsarpc_dissect_element_lsa_TrustDomainInfoName_netbios_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1076 static int lsarpc_dissect_element_lsa_TrustDomainInfoControllers_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1077 static int lsarpc_dissect_element_lsa_TrustDomainInfoControllers_netbios_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1078 static int lsarpc_dissect_element_lsa_TrustDomainInfoControllers_netbios_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1079 static int lsarpc_dissect_element_lsa_TrustDomainInfoControllers_netbios_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1080 static int lsarpc_dissect_element_lsa_TrustDomainInfoPosixOffset_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1081 static int lsarpc_dissect_element_lsa_TrustDomainInfoPassword_password(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1082 static int lsarpc_dissect_element_lsa_TrustDomainInfoPassword_password_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1083 static int lsarpc_dissect_element_lsa_TrustDomainInfoPassword_old_password(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1084 static int lsarpc_dissect_element_lsa_TrustDomainInfoPassword_old_password_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1085 static int lsarpc_dissect_element_lsa_TrustDomainInfoBasic_netbios_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1086 static int lsarpc_dissect_element_lsa_TrustDomainInfoBasic_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1087 static int lsarpc_dissect_element_lsa_TrustDomainInfoBasic_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1088 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1089 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_netbios_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1090 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1091 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1092 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_trust_direction(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1093 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_trust_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1094 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_trust_attributes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1095 const value_string lsarpc_lsa_TrustAuthType_vals
[] = {
1096 { TRUST_AUTH_TYPE_NONE
, "TRUST_AUTH_TYPE_NONE" },
1097 { TRUST_AUTH_TYPE_NT4OWF
, "TRUST_AUTH_TYPE_NT4OWF" },
1098 { TRUST_AUTH_TYPE_CLEAR
, "TRUST_AUTH_TYPE_CLEAR" },
1099 { TRUST_AUTH_TYPE_VERSION
, "TRUST_AUTH_TYPE_VERSION" },
1102 static int lsarpc_dissect_element_lsa_TrustDomainInfoBuffer_last_update_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1103 static int lsarpc_dissect_element_lsa_TrustDomainInfoBuffer_AuthType(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1104 static int lsarpc_dissect_element_lsa_TrustDomainInfoBuffer_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1105 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1106 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1107 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1108 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1109 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1110 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1111 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1112 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1113 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1114 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1115 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1116 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1117 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1118 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternal_auth_blob(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1119 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternal_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1120 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternal_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1121 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternal_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1122 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_auth_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1123 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_auth_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1124 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_salt(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1125 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_salt_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1126 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_cipher(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1127 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternalAES_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1128 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternalAES_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1129 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternalAES_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1130 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1131 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1132 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1133 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1134 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1135 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo2Internal_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1136 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo2Internal_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1137 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo2Internal_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1138 static int lsarpc_dissect_element_lsa_TrustDomainInfoSupportedEncTypes_enc_types(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1139 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1140 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_controllers(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1141 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1142 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_password(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1143 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_info_basic(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1144 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1145 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1146 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1147 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_auth_info_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1148 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1149 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_info_ex2_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1150 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info2_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1151 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_enc_types(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1152 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_auth_info_internal_aes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1153 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info_internal_aes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1154 static int lsarpc_dissect_element_lsa_DATA_BUF_PTR_buf(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1155 static int lsarpc_dissect_element_lsa_DATA_BUF_PTR_buf_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1156 static int lsarpc_dissect_element_lsa_RightAttribute_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1157 static int lsarpc_dissect_element_lsa_RightAttribute_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1158 static int lsarpc_dissect_element_lsa_RightSet_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1159 static int lsarpc_dissect_element_lsa_RightSet_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1160 static int lsarpc_dissect_element_lsa_RightSet_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1161 static int lsarpc_dissect_element_lsa_RightSet_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1162 static int lsarpc_dissect_element_lsa_DomainListEx_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1163 static int lsarpc_dissect_element_lsa_DomainListEx_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1164 static int lsarpc_dissect_element_lsa_DomainListEx_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1165 static int lsarpc_dissect_element_lsa_DomainListEx_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1166 static int lsarpc_dissect_element_lsa_DomainInfoQoS_quality_of_service(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1167 static const true_false_string lsa_krbAuthenticationOptions_LSA_POLICY_KERBEROS_VALIDATE_CLIENT_tfs
= {
1168 "LSA_POLICY_KERBEROS_VALIDATE_CLIENT is SET",
1169 "LSA_POLICY_KERBEROS_VALIDATE_CLIENT is NOT SET",
1171 static int lsarpc_dissect_element_lsa_DomainInfoKerberos_authentication_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1172 static int lsarpc_dissect_element_lsa_DomainInfoKerberos_service_tkt_lifetime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1173 static int lsarpc_dissect_element_lsa_DomainInfoKerberos_user_tkt_lifetime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1174 static int lsarpc_dissect_element_lsa_DomainInfoKerberos_user_tkt_renewaltime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1175 static int lsarpc_dissect_element_lsa_DomainInfoKerberos_clock_skew(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1176 static int lsarpc_dissect_element_lsa_DomainInfoKerberos_reserved(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1177 static int lsarpc_dissect_element_lsa_DomainInfoEfs_blob_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1178 static int lsarpc_dissect_element_lsa_DomainInfoEfs_efs_blob(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1179 static int lsarpc_dissect_element_lsa_DomainInfoEfs_efs_blob_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1180 const value_string lsarpc_lsa_DomainInfoEnum_vals
[] = {
1181 { LSA_DOMAIN_INFO_POLICY_QOS
, "LSA_DOMAIN_INFO_POLICY_QOS" },
1182 { LSA_DOMAIN_INFO_POLICY_EFS
, "LSA_DOMAIN_INFO_POLICY_EFS" },
1183 { LSA_DOMAIN_INFO_POLICY_KERBEROS
, "LSA_DOMAIN_INFO_POLICY_KERBEROS" },
1186 static int lsarpc_dissect_element_lsa_DomainInformationPolicy_qos_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1187 static int lsarpc_dissect_element_lsa_DomainInformationPolicy_efs_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1188 static int lsarpc_dissect_element_lsa_DomainInformationPolicy_kerberos_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1189 static int lsarpc_dissect_element_lsa_TranslatedName2_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1190 static int lsarpc_dissect_element_lsa_TranslatedName2_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1191 static int lsarpc_dissect_element_lsa_TranslatedName2_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1192 static int lsarpc_dissect_element_lsa_TranslatedName2_unknown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1193 static int lsarpc_dissect_element_lsa_TransNameArray2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1194 static int lsarpc_dissect_element_lsa_TransNameArray2_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1195 static int lsarpc_dissect_element_lsa_TransNameArray2_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1196 static int lsarpc_dissect_element_lsa_TransNameArray2_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1197 const value_string lsarpc_lsa_LookupOptions_vals
[] = {
1198 { LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES
, "LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES" },
1199 { LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES_LOCAL
, "LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES_LOCAL" },
1202 const value_string lsarpc_lsa_ClientRevision_vals
[] = {
1203 { LSA_CLIENT_REVISION_1
, "LSA_CLIENT_REVISION_1" },
1204 { LSA_CLIENT_REVISION_2
, "LSA_CLIENT_REVISION_2" },
1207 static int lsarpc_dissect_element_lsa_TranslatedSid2_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1208 static int lsarpc_dissect_element_lsa_TranslatedSid2_rid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1209 static int lsarpc_dissect_element_lsa_TranslatedSid2_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1210 static int lsarpc_dissect_element_lsa_TranslatedSid2_unknown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1211 static int lsarpc_dissect_element_lsa_TransSidArray2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1212 static int lsarpc_dissect_element_lsa_TransSidArray2_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1213 static int lsarpc_dissect_element_lsa_TransSidArray2_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1214 static int lsarpc_dissect_element_lsa_TransSidArray2_sids__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1215 static int lsarpc_dissect_element_lsa_TranslatedSid3_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1216 static int lsarpc_dissect_element_lsa_TranslatedSid3_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1217 static int lsarpc_dissect_element_lsa_TranslatedSid3_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1218 static int lsarpc_dissect_element_lsa_TranslatedSid3_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1219 static int lsarpc_dissect_element_lsa_TranslatedSid3_flags(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1220 static int lsarpc_dissect_element_lsa_TransSidArray3_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1221 static int lsarpc_dissect_element_lsa_TransSidArray3_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1222 static int lsarpc_dissect_element_lsa_TransSidArray3_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1223 static int lsarpc_dissect_element_lsa_TransSidArray3_sids__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1224 static const true_false_string lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_NEW_tfs
= {
1225 "LSA_TLN_DISABLED_NEW is SET",
1226 "LSA_TLN_DISABLED_NEW is NOT SET",
1228 static const true_false_string lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_ADMIN_tfs
= {
1229 "LSA_TLN_DISABLED_ADMIN is SET",
1230 "LSA_TLN_DISABLED_ADMIN is NOT SET",
1232 static const true_false_string lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_CONFLICT_tfs
= {
1233 "LSA_TLN_DISABLED_CONFLICT is SET",
1234 "LSA_TLN_DISABLED_CONFLICT is NOT SET",
1236 static const true_false_string lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_ADMIN_tfs
= {
1237 "LSA_SID_DISABLED_ADMIN is SET",
1238 "LSA_SID_DISABLED_ADMIN is NOT SET",
1240 static const true_false_string lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_CONFLICT_tfs
= {
1241 "LSA_SID_DISABLED_CONFLICT is SET",
1242 "LSA_SID_DISABLED_CONFLICT is NOT SET",
1244 static const true_false_string lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_ADMIN_tfs
= {
1245 "LSA_NB_DISABLED_ADMIN is SET",
1246 "LSA_NB_DISABLED_ADMIN is NOT SET",
1248 static const true_false_string lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_CONFLICT_tfs
= {
1249 "LSA_NB_DISABLED_CONFLICT is SET",
1250 "LSA_NB_DISABLED_CONFLICT is NOT SET",
1252 const value_string lsarpc_lsa_ForestTrustRecordType_vals
[] = {
1253 { LSA_FOREST_TRUST_TOP_LEVEL_NAME
, "LSA_FOREST_TRUST_TOP_LEVEL_NAME" },
1254 { LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX
, "LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX" },
1255 { LSA_FOREST_TRUST_DOMAIN_INFO
, "LSA_FOREST_TRUST_DOMAIN_INFO" },
1256 { LSA_FOREST_TRUST_BINARY_DATA
, "LSA_FOREST_TRUST_BINARY_DATA" },
1257 { LSA_FOREST_TRUST_SCANNER_INFO
, "LSA_FOREST_TRUST_SCANNER_INFO" },
1260 static int lsarpc_dissect_element_lsa_ForestTrustBinaryData_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1261 static int lsarpc_dissect_element_lsa_ForestTrustBinaryData_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1262 static int lsarpc_dissect_element_lsa_ForestTrustBinaryData_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1263 static int lsarpc_dissect_element_lsa_ForestTrustBinaryData_data__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1264 static int lsarpc_dissect_element_lsa_ForestTrustDomainInfo_domain_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1265 static int lsarpc_dissect_element_lsa_ForestTrustDomainInfo_domain_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1266 static int lsarpc_dissect_element_lsa_ForestTrustDomainInfo_dns_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1267 static int lsarpc_dissect_element_lsa_ForestTrustDomainInfo_netbios_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1268 static int lsarpc_dissect_element_lsa_ForestTrustData_top_level_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1269 static int lsarpc_dissect_element_lsa_ForestTrustData_top_level_name_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1270 static int lsarpc_dissect_element_lsa_ForestTrustData_domain_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1271 static int lsarpc_dissect_element_lsa_ForestTrustData_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1272 static int lsarpc_dissect_element_lsa_ForestTrustRecord_flags(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1273 static int lsarpc_dissect_element_lsa_ForestTrustRecord_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, uint32_t *type
);
1274 static int lsarpc_dissect_element_lsa_ForestTrustRecord_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1275 static int lsarpc_dissect_element_lsa_ForestTrustRecord_forest_trust_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, uint32_t type
);
1276 static int lsarpc_dissect_element_lsa_ForestTrustInformation_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1277 static int lsarpc_dissect_element_lsa_ForestTrustInformation_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1278 static int lsarpc_dissect_element_lsa_ForestTrustInformation_entries_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1279 static int lsarpc_dissect_element_lsa_ForestTrustInformation_entries__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1280 static int lsarpc_dissect_element_lsa_ForestTrustInformation_entries___(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1281 const value_string lsarpc_lsa_ForestTrustCollisionRecordType_vals
[] = {
1282 { LSA_FOREST_TRUST_COLLISION_TDO
, "LSA_FOREST_TRUST_COLLISION_TDO" },
1283 { LSA_FOREST_TRUST_COLLISION_XREF
, "LSA_FOREST_TRUST_COLLISION_XREF" },
1284 { LSA_FOREST_TRUST_COLLISION_OTHER
, "LSA_FOREST_TRUST_COLLISION_OTHER" },
1287 static int lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1288 static int lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1289 static int lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_flags(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1290 static int lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1291 static int lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1292 static int lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1293 static int lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1294 static int lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1295 static int lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries___(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1296 static const true_false_string lsa_RevisionSupportedFeature_LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER_tfs
= {
1297 "LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER is SET",
1298 "LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER is NOT SET",
1300 static int lsarpc_dissect_element_lsa_revision_info1_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1301 static int lsarpc_dissect_element_lsa_revision_info1_supported_features(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1302 static int lsarpc_dissect_element_lsa_revision_info_info1(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1303 static int lsarpc_dissect_element_lsa_ForestTrustData2_top_level_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1304 static int lsarpc_dissect_element_lsa_ForestTrustData2_top_level_name_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1305 static int lsarpc_dissect_element_lsa_ForestTrustData2_domain_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1306 static int lsarpc_dissect_element_lsa_ForestTrustData2_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1307 static int lsarpc_dissect_element_lsa_ForestTrustData2_scanner_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1308 static int lsarpc_dissect_element_lsa_ForestTrustRecord2_flags(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1309 static int lsarpc_dissect_element_lsa_ForestTrustRecord2_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, uint32_t *type
);
1310 static int lsarpc_dissect_element_lsa_ForestTrustRecord2_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1311 static int lsarpc_dissect_element_lsa_ForestTrustRecord2_forest_trust_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, uint32_t type
);
1312 static int lsarpc_dissect_element_lsa_ForestTrustInformation2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1313 static int lsarpc_dissect_element_lsa_ForestTrustInformation2_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1314 static int lsarpc_dissect_element_lsa_ForestTrustInformation2_entries_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1315 static int lsarpc_dissect_element_lsa_ForestTrustInformation2_entries__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1316 static int lsarpc_dissect_element_lsa_ForestTrustInformation2_entries___(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1317 static int lsarpc_dissect_element_lsa_Close_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1318 static int lsarpc_dissect_element_lsa_Close_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1319 static int lsarpc_dissect_element_lsa_Delete_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1320 static int lsarpc_dissect_element_lsa_Delete_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1321 static int lsarpc_dissect_element_lsa_EnumPrivs_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1322 static int lsarpc_dissect_element_lsa_EnumPrivs_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1323 static int lsarpc_dissect_element_lsa_EnumPrivs_resume_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1324 static int lsarpc_dissect_element_lsa_EnumPrivs_resume_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1325 static int lsarpc_dissect_element_lsa_EnumPrivs_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1326 static int lsarpc_dissect_element_lsa_EnumPrivs_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1327 static int lsarpc_dissect_element_lsa_EnumPrivs_max_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1328 static int lsarpc_dissect_element_lsa_QuerySecurity_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1329 static int lsarpc_dissect_element_lsa_QuerySecurity_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1330 static int lsarpc_dissect_element_lsa_QuerySecurity_sec_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1331 static int lsarpc_dissect_element_lsa_QuerySecurity_sdbuf(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1332 static int lsarpc_dissect_element_lsa_QuerySecurity_sdbuf_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1333 static int lsarpc_dissect_element_lsa_QuerySecurity_sdbuf__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1334 static int lsarpc_dissect_element_lsa_SetSecObj_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1335 static int lsarpc_dissect_element_lsa_SetSecObj_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1336 static int lsarpc_dissect_element_lsa_SetSecObj_sec_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1337 static int lsarpc_dissect_element_lsa_SetSecObj_sdbuf(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1338 static int lsarpc_dissect_element_lsa_SetSecObj_sdbuf_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1339 static int lsarpc_dissect_element_lsa_OpenPolicy_system_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1340 static int lsarpc_dissect_element_lsa_OpenPolicy_system_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1341 static int lsarpc_dissect_element_lsa_OpenPolicy_attr(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1342 static int lsarpc_dissect_element_lsa_OpenPolicy_attr_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1343 static int lsarpc_dissect_element_lsa_OpenPolicy_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1344 static int lsarpc_dissect_element_lsa_OpenPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1345 static int lsarpc_dissect_element_lsa_OpenPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1346 static int lsarpc_dissect_element_lsa_QueryInfoPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1347 static int lsarpc_dissect_element_lsa_QueryInfoPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1348 static int lsarpc_dissect_element_lsa_QueryInfoPolicy_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1349 static int lsarpc_dissect_element_lsa_QueryInfoPolicy_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1350 static int lsarpc_dissect_element_lsa_QueryInfoPolicy_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1351 static int lsarpc_dissect_element_lsa_QueryInfoPolicy_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1352 static int lsarpc_dissect_element_lsa_SetInfoPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1353 static int lsarpc_dissect_element_lsa_SetInfoPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1354 static int lsarpc_dissect_element_lsa_SetInfoPolicy_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1355 static int lsarpc_dissect_element_lsa_SetInfoPolicy_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1356 static int lsarpc_dissect_element_lsa_SetInfoPolicy_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1357 static int lsarpc_dissect_element_lsa_CreateAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1358 static int lsarpc_dissect_element_lsa_CreateAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1359 static int lsarpc_dissect_element_lsa_CreateAccount_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1360 static int lsarpc_dissect_element_lsa_CreateAccount_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1361 static int lsarpc_dissect_element_lsa_CreateAccount_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1362 static int lsarpc_dissect_element_lsa_CreateAccount_acct_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1363 static int lsarpc_dissect_element_lsa_CreateAccount_acct_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1364 static int lsarpc_dissect_element_lsa_EnumAccounts_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1365 static int lsarpc_dissect_element_lsa_EnumAccounts_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1366 static int lsarpc_dissect_element_lsa_EnumAccounts_resume_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1367 static int lsarpc_dissect_element_lsa_EnumAccounts_resume_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1368 static int lsarpc_dissect_element_lsa_EnumAccounts_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1369 static int lsarpc_dissect_element_lsa_EnumAccounts_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1370 static int lsarpc_dissect_element_lsa_EnumAccounts_num_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1371 static int lsarpc_dissect_element_lsa_CreateTrustedDomain_policy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1372 static int lsarpc_dissect_element_lsa_CreateTrustedDomain_policy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1373 static int lsarpc_dissect_element_lsa_CreateTrustedDomain_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1374 static int lsarpc_dissect_element_lsa_CreateTrustedDomain_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1375 static int lsarpc_dissect_element_lsa_CreateTrustedDomain_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1376 static int lsarpc_dissect_element_lsa_CreateTrustedDomain_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1377 static int lsarpc_dissect_element_lsa_CreateTrustedDomain_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1378 static int lsarpc_dissect_element_lsa_EnumTrustDom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1379 static int lsarpc_dissect_element_lsa_EnumTrustDom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1380 static int lsarpc_dissect_element_lsa_EnumTrustDom_resume_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1381 static int lsarpc_dissect_element_lsa_EnumTrustDom_resume_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1382 static int lsarpc_dissect_element_lsa_EnumTrustDom_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1383 static int lsarpc_dissect_element_lsa_EnumTrustDom_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1384 static int lsarpc_dissect_element_lsa_EnumTrustDom_max_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1385 static int lsarpc_dissect_element_lsa_LookupNames_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1386 static int lsarpc_dissect_element_lsa_LookupNames_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1387 static int lsarpc_dissect_element_lsa_LookupNames_num_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1388 static int lsarpc_dissect_element_lsa_LookupNames_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1389 static int lsarpc_dissect_element_lsa_LookupNames_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1390 static int lsarpc_dissect_element_lsa_LookupNames_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1391 static int lsarpc_dissect_element_lsa_LookupNames_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1392 static int lsarpc_dissect_element_lsa_LookupNames_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1393 static int lsarpc_dissect_element_lsa_LookupNames_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1394 static int lsarpc_dissect_element_lsa_LookupNames_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1395 static int lsarpc_dissect_element_lsa_LookupNames_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1396 static int lsarpc_dissect_element_lsa_LookupNames_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1397 static int lsarpc_dissect_element_lsa_LookupSids_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1398 static int lsarpc_dissect_element_lsa_LookupSids_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1399 static int lsarpc_dissect_element_lsa_LookupSids_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1400 static int lsarpc_dissect_element_lsa_LookupSids_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1401 static int lsarpc_dissect_element_lsa_LookupSids_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1402 static int lsarpc_dissect_element_lsa_LookupSids_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1403 static int lsarpc_dissect_element_lsa_LookupSids_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1404 static int lsarpc_dissect_element_lsa_LookupSids_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1405 static int lsarpc_dissect_element_lsa_LookupSids_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1406 static int lsarpc_dissect_element_lsa_LookupSids_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1407 static int lsarpc_dissect_element_lsa_LookupSids_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1408 static int lsarpc_dissect_element_lsa_LookupSids_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1409 static int lsarpc_dissect_element_lsa_CreateSecret_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1410 static int lsarpc_dissect_element_lsa_CreateSecret_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1411 static int lsarpc_dissect_element_lsa_CreateSecret_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1412 static int lsarpc_dissect_element_lsa_CreateSecret_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1413 static int lsarpc_dissect_element_lsa_CreateSecret_sec_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1414 static int lsarpc_dissect_element_lsa_CreateSecret_sec_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1415 static int lsarpc_dissect_element_lsa_OpenAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1416 static int lsarpc_dissect_element_lsa_OpenAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1417 static int lsarpc_dissect_element_lsa_OpenAccount_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1418 static int lsarpc_dissect_element_lsa_OpenAccount_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1419 static int lsarpc_dissect_element_lsa_OpenAccount_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1420 static int lsarpc_dissect_element_lsa_OpenAccount_acct_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1421 static int lsarpc_dissect_element_lsa_OpenAccount_acct_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1422 static int lsarpc_dissect_element_lsa_EnumPrivsAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1423 static int lsarpc_dissect_element_lsa_EnumPrivsAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1424 static int lsarpc_dissect_element_lsa_EnumPrivsAccount_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1425 static int lsarpc_dissect_element_lsa_EnumPrivsAccount_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1426 static int lsarpc_dissect_element_lsa_EnumPrivsAccount_privs__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1427 static int lsarpc_dissect_element_lsa_AddPrivilegesToAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1428 static int lsarpc_dissect_element_lsa_AddPrivilegesToAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1429 static int lsarpc_dissect_element_lsa_AddPrivilegesToAccount_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1430 static int lsarpc_dissect_element_lsa_AddPrivilegesToAccount_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1431 static int lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1432 static int lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1433 static int lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_remove_all(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1434 static int lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1435 static int lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1436 static int lsarpc_dissect_element_lsa_GetSystemAccessAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1437 static int lsarpc_dissect_element_lsa_GetSystemAccessAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1438 static int lsarpc_dissect_element_lsa_GetSystemAccessAccount_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1439 static int lsarpc_dissect_element_lsa_GetSystemAccessAccount_access_mask_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1440 static int lsarpc_dissect_element_lsa_SetSystemAccessAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1441 static int lsarpc_dissect_element_lsa_SetSystemAccessAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1442 static int lsarpc_dissect_element_lsa_SetSystemAccessAccount_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1443 static int lsarpc_dissect_element_lsa_OpenTrustedDomain_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1444 static int lsarpc_dissect_element_lsa_OpenTrustedDomain_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1445 static int lsarpc_dissect_element_lsa_OpenTrustedDomain_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1446 static int lsarpc_dissect_element_lsa_OpenTrustedDomain_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1447 static int lsarpc_dissect_element_lsa_OpenTrustedDomain_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1448 static int lsarpc_dissect_element_lsa_OpenTrustedDomain_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1449 static int lsarpc_dissect_element_lsa_OpenTrustedDomain_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1450 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1451 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1452 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1453 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1454 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1455 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1456 static int lsarpc_dissect_element_lsa_SetInformationTrustedDomain_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1457 static int lsarpc_dissect_element_lsa_SetInformationTrustedDomain_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1458 static int lsarpc_dissect_element_lsa_SetInformationTrustedDomain_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1459 static int lsarpc_dissect_element_lsa_SetInformationTrustedDomain_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1460 static int lsarpc_dissect_element_lsa_SetInformationTrustedDomain_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1461 static int lsarpc_dissect_element_lsa_OpenSecret_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1462 static int lsarpc_dissect_element_lsa_OpenSecret_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1463 static int lsarpc_dissect_element_lsa_OpenSecret_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1464 static int lsarpc_dissect_element_lsa_OpenSecret_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1465 static int lsarpc_dissect_element_lsa_OpenSecret_sec_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1466 static int lsarpc_dissect_element_lsa_OpenSecret_sec_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1467 static int lsarpc_dissect_element_lsa_SetSecret_sec_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1468 static int lsarpc_dissect_element_lsa_SetSecret_sec_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1469 static int lsarpc_dissect_element_lsa_SetSecret_new_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1470 static int lsarpc_dissect_element_lsa_SetSecret_new_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1471 static int lsarpc_dissect_element_lsa_SetSecret_old_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1472 static int lsarpc_dissect_element_lsa_SetSecret_old_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1473 static int lsarpc_dissect_element_lsa_QuerySecret_sec_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1474 static int lsarpc_dissect_element_lsa_QuerySecret_sec_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1475 static int lsarpc_dissect_element_lsa_QuerySecret_new_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1476 static int lsarpc_dissect_element_lsa_QuerySecret_new_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1477 static int lsarpc_dissect_element_lsa_QuerySecret_new_mtime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1478 static int lsarpc_dissect_element_lsa_QuerySecret_new_mtime_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1479 static int lsarpc_dissect_element_lsa_QuerySecret_old_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1480 static int lsarpc_dissect_element_lsa_QuerySecret_old_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1481 static int lsarpc_dissect_element_lsa_QuerySecret_old_mtime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1482 static int lsarpc_dissect_element_lsa_QuerySecret_old_mtime_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1483 static int lsarpc_dissect_element_lsa_LookupPrivValue_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1484 static int lsarpc_dissect_element_lsa_LookupPrivValue_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1485 static int lsarpc_dissect_element_lsa_LookupPrivValue_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1486 static int lsarpc_dissect_element_lsa_LookupPrivValue_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1487 static int lsarpc_dissect_element_lsa_LookupPrivValue_luid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1488 static int lsarpc_dissect_element_lsa_LookupPrivValue_luid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1489 static int lsarpc_dissect_element_lsa_LookupPrivName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1490 static int lsarpc_dissect_element_lsa_LookupPrivName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1491 static int lsarpc_dissect_element_lsa_LookupPrivName_luid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1492 static int lsarpc_dissect_element_lsa_LookupPrivName_luid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1493 static int lsarpc_dissect_element_lsa_LookupPrivName_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1494 static int lsarpc_dissect_element_lsa_LookupPrivName_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1495 static int lsarpc_dissect_element_lsa_LookupPrivName_name__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1496 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1497 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1498 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1499 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1500 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_language_id(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1501 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_language_id_sys(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1502 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_disp_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1503 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_disp_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1504 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_disp_name__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1505 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_returned_language_id(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1506 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_returned_language_id_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1507 static int lsarpc_dissect_element_lsa_DeleteObject_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1508 static int lsarpc_dissect_element_lsa_DeleteObject_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1509 static int lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1510 static int lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1511 static int lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1512 static int lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1513 static int lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1514 static int lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1515 static int lsarpc_dissect_element_lsa_EnumAccountRights_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1516 static int lsarpc_dissect_element_lsa_EnumAccountRights_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1517 static int lsarpc_dissect_element_lsa_EnumAccountRights_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1518 static int lsarpc_dissect_element_lsa_EnumAccountRights_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1519 static int lsarpc_dissect_element_lsa_EnumAccountRights_rights(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1520 static int lsarpc_dissect_element_lsa_EnumAccountRights_rights_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1521 static int lsarpc_dissect_element_lsa_AddAccountRights_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1522 static int lsarpc_dissect_element_lsa_AddAccountRights_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1523 static int lsarpc_dissect_element_lsa_AddAccountRights_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1524 static int lsarpc_dissect_element_lsa_AddAccountRights_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1525 static int lsarpc_dissect_element_lsa_AddAccountRights_rights(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1526 static int lsarpc_dissect_element_lsa_AddAccountRights_rights_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1527 static int lsarpc_dissect_element_lsa_RemoveAccountRights_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1528 static int lsarpc_dissect_element_lsa_RemoveAccountRights_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1529 static int lsarpc_dissect_element_lsa_RemoveAccountRights_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1530 static int lsarpc_dissect_element_lsa_RemoveAccountRights_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1531 static int lsarpc_dissect_element_lsa_RemoveAccountRights_remove_all(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1532 static int lsarpc_dissect_element_lsa_RemoveAccountRights_rights(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1533 static int lsarpc_dissect_element_lsa_RemoveAccountRights_rights_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1534 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1535 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1536 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_dom_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1537 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_dom_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1538 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1539 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1540 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1541 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1542 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfo_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1543 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfo_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1544 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfo_dom_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1545 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfo_dom_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1546 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfo_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1547 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfo_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1548 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfo_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1549 static int lsarpc_dissect_element_lsa_DeleteTrustedDomain_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1550 static int lsarpc_dissect_element_lsa_DeleteTrustedDomain_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1551 static int lsarpc_dissect_element_lsa_DeleteTrustedDomain_dom_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1552 static int lsarpc_dissect_element_lsa_DeleteTrustedDomain_dom_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1553 static int lsarpc_dissect_element_lsa_StorePrivateData_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1554 static int lsarpc_dissect_element_lsa_StorePrivateData_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1555 static int lsarpc_dissect_element_lsa_StorePrivateData_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1556 static int lsarpc_dissect_element_lsa_StorePrivateData_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1557 static int lsarpc_dissect_element_lsa_StorePrivateData_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1558 static int lsarpc_dissect_element_lsa_StorePrivateData_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1559 static int lsarpc_dissect_element_lsa_RetrievePrivateData_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1560 static int lsarpc_dissect_element_lsa_RetrievePrivateData_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1561 static int lsarpc_dissect_element_lsa_RetrievePrivateData_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1562 static int lsarpc_dissect_element_lsa_RetrievePrivateData_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1563 static int lsarpc_dissect_element_lsa_RetrievePrivateData_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1564 static int lsarpc_dissect_element_lsa_RetrievePrivateData_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1565 static int lsarpc_dissect_element_lsa_RetrievePrivateData_val__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1566 static int lsarpc_dissect_element_lsa_OpenPolicy2_system_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1567 static int lsarpc_dissect_element_lsa_OpenPolicy2_system_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1568 static int lsarpc_dissect_element_lsa_OpenPolicy2_attr(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1569 static int lsarpc_dissect_element_lsa_OpenPolicy2_attr_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1570 static int lsarpc_dissect_element_lsa_OpenPolicy2_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1571 static int lsarpc_dissect_element_lsa_OpenPolicy2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1572 static int lsarpc_dissect_element_lsa_OpenPolicy2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1573 static int lsarpc_dissect_element_lsa_GetUserName_system_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1574 static int lsarpc_dissect_element_lsa_GetUserName_system_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1575 static int lsarpc_dissect_element_lsa_GetUserName_account_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1576 static int lsarpc_dissect_element_lsa_GetUserName_account_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1577 static int lsarpc_dissect_element_lsa_GetUserName_account_name__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1578 static int lsarpc_dissect_element_lsa_GetUserName_authority_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1579 static int lsarpc_dissect_element_lsa_GetUserName_authority_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1580 static int lsarpc_dissect_element_lsa_GetUserName_authority_name__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1581 static int lsarpc_dissect_element_lsa_QueryInfoPolicy2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1582 static int lsarpc_dissect_element_lsa_QueryInfoPolicy2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1583 static int lsarpc_dissect_element_lsa_QueryInfoPolicy2_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1584 static int lsarpc_dissect_element_lsa_QueryInfoPolicy2_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1585 static int lsarpc_dissect_element_lsa_QueryInfoPolicy2_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1586 static int lsarpc_dissect_element_lsa_QueryInfoPolicy2_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1587 static int lsarpc_dissect_element_lsa_SetInfoPolicy2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1588 static int lsarpc_dissect_element_lsa_SetInfoPolicy2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1589 static int lsarpc_dissect_element_lsa_SetInfoPolicy2_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1590 static int lsarpc_dissect_element_lsa_SetInfoPolicy2_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1591 static int lsarpc_dissect_element_lsa_SetInfoPolicy2_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1592 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1593 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1594 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_trusted_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1595 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_trusted_domain_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1596 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1597 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1598 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1599 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1600 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1601 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1602 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_trusted_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1603 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_trusted_domain_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1604 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1605 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1606 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1607 static int lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1608 static int lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1609 static int lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_resume_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1610 static int lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_resume_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1611 static int lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1612 static int lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1613 static int lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_max_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1614 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx_policy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1615 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx_policy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1616 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1617 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1618 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1619 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1620 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1621 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1622 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1623 static int lsarpc_dissect_element_lsa_CloseTrustedDomainEx_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1624 static int lsarpc_dissect_element_lsa_CloseTrustedDomainEx_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1625 static int lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1626 static int lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1627 static int lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1628 static int lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1629 static int lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1630 static int lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1631 static int lsarpc_dissect_element_lsa_SetDomainInformationPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1632 static int lsarpc_dissect_element_lsa_SetDomainInformationPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1633 static int lsarpc_dissect_element_lsa_SetDomainInformationPolicy_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1634 static int lsarpc_dissect_element_lsa_SetDomainInformationPolicy_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1635 static int lsarpc_dissect_element_lsa_SetDomainInformationPolicy_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1636 static int lsarpc_dissect_element_lsa_OpenTrustedDomainByName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1637 static int lsarpc_dissect_element_lsa_OpenTrustedDomainByName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1638 static int lsarpc_dissect_element_lsa_OpenTrustedDomainByName_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1639 static int lsarpc_dissect_element_lsa_OpenTrustedDomainByName_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1640 static int lsarpc_dissect_element_lsa_OpenTrustedDomainByName_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1641 static int lsarpc_dissect_element_lsa_OpenTrustedDomainByName_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1642 static int lsarpc_dissect_element_lsa_LookupSids2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1643 static int lsarpc_dissect_element_lsa_LookupSids2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1644 static int lsarpc_dissect_element_lsa_LookupSids2_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1645 static int lsarpc_dissect_element_lsa_LookupSids2_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1646 static int lsarpc_dissect_element_lsa_LookupSids2_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1647 static int lsarpc_dissect_element_lsa_LookupSids2_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1648 static int lsarpc_dissect_element_lsa_LookupSids2_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1649 static int lsarpc_dissect_element_lsa_LookupSids2_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1650 static int lsarpc_dissect_element_lsa_LookupSids2_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1651 static int lsarpc_dissect_element_lsa_LookupSids2_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1652 static int lsarpc_dissect_element_lsa_LookupSids2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1653 static int lsarpc_dissect_element_lsa_LookupSids2_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1654 static int lsarpc_dissect_element_lsa_LookupSids2_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1655 static int lsarpc_dissect_element_lsa_LookupSids2_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1656 static int lsarpc_dissect_element_lsa_LookupNames2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1657 static int lsarpc_dissect_element_lsa_LookupNames2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1658 static int lsarpc_dissect_element_lsa_LookupNames2_num_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1659 static int lsarpc_dissect_element_lsa_LookupNames2_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1660 static int lsarpc_dissect_element_lsa_LookupNames2_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1661 static int lsarpc_dissect_element_lsa_LookupNames2_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1662 static int lsarpc_dissect_element_lsa_LookupNames2_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1663 static int lsarpc_dissect_element_lsa_LookupNames2_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1664 static int lsarpc_dissect_element_lsa_LookupNames2_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1665 static int lsarpc_dissect_element_lsa_LookupNames2_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1666 static int lsarpc_dissect_element_lsa_LookupNames2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1667 static int lsarpc_dissect_element_lsa_LookupNames2_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1668 static int lsarpc_dissect_element_lsa_LookupNames2_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1669 static int lsarpc_dissect_element_lsa_LookupNames2_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1670 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_policy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1671 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_policy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1672 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1673 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1674 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_auth_info_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1675 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_auth_info_internal_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1676 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1677 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1678 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1679 static int lsarpc_dissect_element_lsa_LookupNames3_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1680 static int lsarpc_dissect_element_lsa_LookupNames3_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1681 static int lsarpc_dissect_element_lsa_LookupNames3_num_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1682 static int lsarpc_dissect_element_lsa_LookupNames3_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1683 static int lsarpc_dissect_element_lsa_LookupNames3_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1684 static int lsarpc_dissect_element_lsa_LookupNames3_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1685 static int lsarpc_dissect_element_lsa_LookupNames3_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1686 static int lsarpc_dissect_element_lsa_LookupNames3_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1687 static int lsarpc_dissect_element_lsa_LookupNames3_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1688 static int lsarpc_dissect_element_lsa_LookupNames3_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1689 static int lsarpc_dissect_element_lsa_LookupNames3_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1690 static int lsarpc_dissect_element_lsa_LookupNames3_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1691 static int lsarpc_dissect_element_lsa_LookupNames3_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1692 static int lsarpc_dissect_element_lsa_LookupNames3_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1693 static int lsarpc_dissect_element_lsa_LookupNames3_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1694 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1695 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1696 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_trusted_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1697 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_trusted_domain_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1698 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_highest_record_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1699 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_forest_trust_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1700 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_forest_trust_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1701 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_forest_trust_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1702 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1703 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1704 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_trusted_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1705 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_trusted_domain_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1706 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_highest_record_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1707 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_forest_trust_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1708 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_forest_trust_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1709 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_check_only(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1710 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_collision_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1711 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_collision_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1712 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_collision_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1713 static int lsarpc_dissect_element_lsa_LookupSids3_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1714 static int lsarpc_dissect_element_lsa_LookupSids3_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1715 static int lsarpc_dissect_element_lsa_LookupSids3_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1716 static int lsarpc_dissect_element_lsa_LookupSids3_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1717 static int lsarpc_dissect_element_lsa_LookupSids3_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1718 static int lsarpc_dissect_element_lsa_LookupSids3_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1719 static int lsarpc_dissect_element_lsa_LookupSids3_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1720 static int lsarpc_dissect_element_lsa_LookupSids3_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1721 static int lsarpc_dissect_element_lsa_LookupSids3_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1722 static int lsarpc_dissect_element_lsa_LookupSids3_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1723 static int lsarpc_dissect_element_lsa_LookupSids3_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1724 static int lsarpc_dissect_element_lsa_LookupSids3_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1725 static int lsarpc_dissect_element_lsa_LookupNames4_num_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1726 static int lsarpc_dissect_element_lsa_LookupNames4_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1727 static int lsarpc_dissect_element_lsa_LookupNames4_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1728 static int lsarpc_dissect_element_lsa_LookupNames4_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1729 static int lsarpc_dissect_element_lsa_LookupNames4_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1730 static int lsarpc_dissect_element_lsa_LookupNames4_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1731 static int lsarpc_dissect_element_lsa_LookupNames4_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1732 static int lsarpc_dissect_element_lsa_LookupNames4_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1733 static int lsarpc_dissect_element_lsa_LookupNames4_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1734 static int lsarpc_dissect_element_lsa_LookupNames4_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1735 static int lsarpc_dissect_element_lsa_LookupNames4_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1736 static int lsarpc_dissect_element_lsa_LookupNames4_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1737 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_policy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1738 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_policy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1739 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1740 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1741 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_auth_info_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1742 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_auth_info_internal_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1743 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1744 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1745 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1746 static int lsarpc_dissect_element_lsa_OpenPolicy3_system_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1747 static int lsarpc_dissect_element_lsa_OpenPolicy3_system_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1748 static int lsarpc_dissect_element_lsa_OpenPolicy3_attr(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1749 static int lsarpc_dissect_element_lsa_OpenPolicy3_attr_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1750 static int lsarpc_dissect_element_lsa_OpenPolicy3_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1751 static int lsarpc_dissect_element_lsa_OpenPolicy3_in_version(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1752 static int lsarpc_dissect_element_lsa_OpenPolicy3_in_revision_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1753 static int lsarpc_dissect_element_lsa_OpenPolicy3_in_revision_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1754 static int lsarpc_dissect_element_lsa_OpenPolicy3_out_version(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1755 static int lsarpc_dissect_element_lsa_OpenPolicy3_out_version_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1756 static int lsarpc_dissect_element_lsa_OpenPolicy3_out_revision_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1757 static int lsarpc_dissect_element_lsa_OpenPolicy3_out_revision_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1758 static int lsarpc_dissect_element_lsa_OpenPolicy3_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1759 static int lsarpc_dissect_element_lsa_OpenPolicy3_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1760 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1761 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1762 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1763 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1764 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_highest_record_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1765 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_forest_trust_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1766 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_forest_trust_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1767 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_forest_trust_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1768 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1769 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1770 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_trusted_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1771 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_trusted_domain_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1772 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_highest_record_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1773 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_forest_trust_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1774 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_forest_trust_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1775 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_check_only(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1776 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_collision_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1777 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_collision_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1778 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_collision_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1780 lsarpc_policy_specific_rights(tvbuff_t
*tvb
, int offset
, proto_tree
*tree
, uint32_t access
)
1782 static int* const access_flags
[] = {
1783 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_NOTIFICATION
,
1784 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_LOOKUP_NAMES
,
1785 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_SERVER_ADMIN
,
1786 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_AUDIT_LOG_ADMIN
,
1787 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_SET_AUDIT_REQUIREMENTS
,
1788 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS
,
1789 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_CREATE_PRIVILEGE
,
1790 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_CREATE_SECRET
,
1791 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_CREATE_ACCOUNT
,
1792 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_TRUST_ADMIN
,
1793 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_GET_PRIVATE_INFORMATION
,
1794 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_VIEW_AUDIT_INFORMATION
,
1795 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_VIEW_LOCAL_INFORMATION
,
1798 proto_tree_add_bitmask_list_value(tree
, tvb
, offset
, 4, access_flags
, access
);
1801 lsarpc_account_specific_rights(tvbuff_t
*tvb
, int offset
, proto_tree
*tree
, uint32_t access
)
1803 static int* const access_flags
[] = {
1804 &hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS
,
1805 &hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_QUOTAS
,
1806 &hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_PRIVILEGES
,
1807 &hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_VIEW
,
1810 proto_tree_add_bitmask_list_value(tree
, tvb
, offset
, 4, access_flags
, access
);
1813 lsarpc_secret_specific_rights(tvbuff_t
*tvb
, int offset
, proto_tree
*tree
, uint32_t access
)
1815 static int* const access_flags
[] = {
1816 &hf_lsarpc_lsa_SecretAccessMask_LSA_SECRET_QUERY_VALUE
,
1817 &hf_lsarpc_lsa_SecretAccessMask_LSA_SECRET_SET_VALUE
,
1820 proto_tree_add_bitmask_list_value(tree
, tvb
, offset
, 4, access_flags
, access
);
1823 lsarpc_domain_specific_rights(tvbuff_t
*tvb
, int offset
, proto_tree
*tree
, uint32_t access
)
1825 static int* const access_flags
[] = {
1826 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_AUTH
,
1827 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_AUTH
,
1828 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_POSIX
,
1829 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_POSIX
,
1830 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_CONTROLLERS
,
1831 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_CONTROLLERS
,
1832 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_DOMAIN_NAME
,
1835 proto_tree_add_bitmask_list_value(tree
, tvb
, offset
, 4, access_flags
, access
);
1837 static struct access_mask_info lsarpc_policy_access_mask_info
= {
1838 "LSA Policy", /* Name of specific rights */
1839 lsarpc_policy_specific_rights
, /* Dissection function */
1840 NULL
, /* Generic mapping table */
1841 NULL
/* Standard mapping table */
1843 static struct access_mask_info lsarpc_account_access_mask_info
= {
1844 "LSA Account", /* Name of specific rights */
1845 lsarpc_account_specific_rights
, /* Dissection function */
1846 NULL
, /* Generic mapping table */
1847 NULL
/* Standard mapping table */
1849 static struct access_mask_info lsarpc_secret_access_mask_info
= {
1850 "LSA Secret", /* Name of specific rights */
1851 lsarpc_secret_specific_rights
, /* Dissection function */
1852 NULL
, /* Generic mapping table */
1853 NULL
/* Standard mapping table */
1855 static struct access_mask_info lsarpc_domain_access_mask_info
= {
1856 "LSA Domain", /* Name of specific rights */
1857 lsarpc_domain_specific_rights
, /* Dissection function */
1858 NULL
, /* Generic mapping table */
1859 NULL
/* Standard mapping table */
1862 lsarpc_dissect_bitmap_lsa_PolicyAccessMask(tvbuff_t
*tvb
, int offset
, packet_info
*pinfo
, proto_tree
*tree
, dcerpc_info
* di
, uint8_t *drep
, int hf_index _U_
, uint32_t param _U_
)
1864 offset
= dissect_nt_access_mask(
1865 tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_policy_access_mask
,
1866 &lsarpc_policy_access_mask_info
, NULL
);
1870 lsarpc_dissect_bitmap_lsa_AccountAccessMask(tvbuff_t
*tvb
, int offset
, packet_info
*pinfo
, proto_tree
*tree
, dcerpc_info
* di
, uint8_t *drep
, int hf_index _U_
, uint32_t param _U_
)
1872 offset
= dissect_nt_access_mask(
1873 tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_account_access_mask
,
1874 &lsarpc_account_access_mask_info
, NULL
);
1878 lsarpc_dissect_bitmap_lsa_SecretAccessMask(tvbuff_t
*tvb
, int offset
, packet_info
*pinfo
, proto_tree
*tree
, dcerpc_info
* di
, uint8_t *drep
, int hf_index _U_
, uint32_t param _U_
)
1880 offset
= dissect_nt_access_mask(
1881 tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_secret_access_mask
,
1882 &lsarpc_secret_access_mask_info
, NULL
);
1885 /* TODO: not called... Delete? */
1887 lsarpc_dissect_bitmap_lsa_DomainAccessMask(tvbuff_t
*tvb
, int offset
, packet_info
*pinfo
, proto_tree
*tree
, dcerpc_info
* di
, uint8_t *drep
, int hf_index _U_
, uint32_t param _U_
)
1889 offset
= dissect_nt_access_mask(
1890 tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_domain_access_mask
,
1891 &lsarpc_domain_access_mask_info
, NULL
);
1895 cnf_dissect_sec_desc_buf_(tvbuff_t
*tvb
, int offset
, packet_info
*pinfo
, proto_tree
*tree
, dcerpc_info
* di
, uint8_t *drep
)
1898 e_ctx_hnd
*polhnd
= NULL
;
1899 dcerpc_call_value
*dcv
= NULL
;
1901 struct access_mask_info
*ami
=NULL
;
1902 if(di
->conformant_run
){
1903 /*just a run to handle conformant arrays, nothing to dissect */
1906 offset
= dissect_ndr_uint32 (tvb
, offset
, pinfo
, tree
, di
, drep
,
1907 hf_lsarpc_sec_desc_buf_len
, &len
);
1908 dcv
= (dcerpc_call_value
*)di
->call_data
;
1913 dcerpc_fetch_polhnd_data(polhnd
, NULL
, &type
, NULL
, NULL
,
1917 case PIDL_POLHND_TYPE_LSA_POLICY
:
1918 ami
=&lsarpc_policy_access_mask_info
;
1920 case PIDL_POLHND_TYPE_LSA_ACCOUNT
:
1921 ami
=&lsarpc_account_access_mask_info
;
1923 case PIDL_POLHND_TYPE_LSA_SECRET
:
1924 ami
=&lsarpc_secret_access_mask_info
;
1926 case PIDL_POLHND_TYPE_LSA_DOMAIN
:
1927 ami
=&lsarpc_domain_access_mask_info
;
1930 dissect_nt_sec_desc(tvb
, offset
, pinfo
, tree
, drep
, true, len
, ami
);
1935 cnf_dissect_sec_desc_buf(tvbuff_t
*tvb
, int offset
, packet_info
*pinfo
, proto_tree
*tree
, dcerpc_info
* di
, uint8_t *drep
)
1938 if(di
->conformant_run
){
1939 /*just a run to handle conformant arrays, nothing to dissect */
1942 offset
= dissect_ndr_uint32 (tvb
, offset
, pinfo
, tree
, di
, drep
,
1943 hf_lsarpc_sec_desc_buf_len
, &len
);
1944 offset
= dissect_ndr_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
,
1945 cnf_dissect_sec_desc_buf_
, NDR_POINTER_UNIQUE
,
1946 "LSA SECURITY DESCRIPTOR data:", -1);
1950 lsarpc_dissect_sec_desc_buf(tvbuff_t
*tvb
, int offset
, packet_info
*pinfo
, proto_tree
*tree
, dcerpc_info
* di
, uint8_t *drep
){
1951 return cnf_dissect_sec_desc_buf(tvb
, offset
, pinfo
, tree
, di
, drep
);
1954 lsarpc_dissect_struct_security_descriptor(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
, int unused1 _U_
, int unused2 _U_
){
1955 return cnf_dissect_sec_desc_buf(tvb
, offset
, pinfo
, tree
, di
, drep
);
1958 lsarpc_dissect_struct_dom_sid2(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
, int unused1 _U_
, int unused2 _U_
) {
1960 return dissect_ndr_nt_SID(tvb
, offset
, pinfo
, tree
, di
, drep
);
1963 cnf_dissect_hyper(tvbuff_t
*tvb
, int offset
, packet_info
*pinfo
, proto_tree
*tree
, dcerpc_info
* di
, uint8_t *drep
, uint32_t param _U_
, int hfindex
)
1965 offset
= dissect_ndr_uint64(tvb
, offset
, pinfo
, tree
, di
, drep
, hfindex
, NULL
);
1969 lsarpc_dissect_element_lsa_LookupNames3_names_X(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
)
1971 proto_item
*item
= NULL
;
1972 proto_tree
*tree
= NULL
;
1973 int old_offset
= offset
;
1975 item
= proto_tree_add_item(parent_tree
, hf_lsarpc_names
, tvb
, offset
, -1, ENC_NA
);
1976 tree
= proto_item_add_subtree(item
, ett_lsarpc_names
);
1978 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_names_
);
1979 proto_item_set_len(item
, offset
-old_offset
);
1983 lsarpc_dissect_element_lsa_LookupNames_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
)
1985 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_names_X
, NDR_POINTER_REF
, "Pointer to Names", hf_lsarpc_names
);
1989 lsarpc_dissect_element_lsa_LookupNames2_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
)
1991 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_names_X
, NDR_POINTER_REF
, "Pointer to Names", hf_lsarpc_names
);
1995 lsarpc_dissect_element_lsa_LookupNames3_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
)
1997 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_names_X
, NDR_POINTER_REF
, "Pointer to Names", hf_lsarpc_names
);
2001 lsarpc_dissect_element_lsa_LookupNames4_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
)
2003 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_names_X
, NDR_POINTER_REF
, "Pointer to Names", hf_lsarpc_names
);
2007 lsarpc_dissect_element_lsa_String_string_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
)
2010 offset
= dissect_ndr_cvstring(tvb
, offset
, pinfo
, tree
, di
, drep
, sizeof(uint16_t), hf_lsarpc_String_name
, false, &data
);
2011 proto_item_append_text(tree
, ": %s", data
);
2015 lsarpc_dissect_element_lsa_StringLarge_string_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
)
2018 offset
= dissect_ndr_cvstring(tvb
, offset
, pinfo
, tree
, di
, drep
, sizeof(uint16_t), hf_lsarpc_String_name
, false, &data
);
2019 proto_item_append_text(tree
, ": %s", data
);
2023 lsarpc_dissect_element_lsa_DomainInfoEfs_efs_blob_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
)
2026 int len
, reported_len
;
2027 dissector_handle_t efsblob_handle
;
2028 if(di
->conformant_run
){
2029 /*just a run to handle conformant arrays, nothing to dissect */
2032 offset
= dissect_ndr_uint32 (tvb
, offset
, pinfo
, tree
, di
, drep
,
2033 hf_lsarpc_efs_blob_len
, &reported_len
);
2035 if (len
> tvb_captured_length_remaining(tvb
, offset
)) {
2036 len
= tvb_captured_length_remaining(tvb
, offset
);
2038 next_tvb
= tvb_new_subset_length_caplen(tvb
, offset
, len
, reported_len
);
2039 efsblob_handle
= find_dissector("efsblob");
2040 if (efsblob_handle
) {
2041 call_dissector(efsblob_handle
, next_tvb
, pinfo
, tree
);
2043 offset
+= reported_len
;
2052 lsarpc_dissect_bitmap_security_secinfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2057 proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, 4, DREP_ENC_INTEGER(drep
));
2059 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, parent_tree
, di
, drep
, -1, &flags
);
2069 lsarpc_dissect_bitmap_kerb_EncTypes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2074 proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, 4, DREP_ENC_INTEGER(drep
));
2076 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, parent_tree
, di
, drep
, -1, &flags
);
2083 /* IDL: [value(2*strlen_m(string))] uint16 length; */
2084 /* IDL: [value(2*strlen_m(string))] uint16 size; */
2085 /* IDL: [charset(UTF16)] [length_is(length/2)] [size_is(size/2)] [unique(1)] uint16 *string; */
2089 lsarpc_dissect_element_lsa_String_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2091 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_String_length
, 0);
2097 lsarpc_dissect_element_lsa_String_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2099 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_String_size
, 0);
2105 lsarpc_dissect_element_lsa_String_string(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2107 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_String_string_
, NDR_POINTER_UNIQUE
, "Pointer to String (uint16)",hf_lsarpc_lsa_String_string
);
2113 lsarpc_dissect_struct_lsa_String(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2115 proto_item
*item
= NULL
;
2116 proto_tree
*tree
= NULL
;
2121 old_offset
= offset
;
2124 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2125 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_String
);
2128 offset
= lsarpc_dissect_element_lsa_String_length(tvb
, offset
, pinfo
, tree
, di
, drep
);
2130 offset
= lsarpc_dissect_element_lsa_String_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
2132 offset
= lsarpc_dissect_element_lsa_String_string(tvb
, offset
, pinfo
, tree
, di
, drep
);
2135 proto_item_set_len(item
, offset
-old_offset
);
2138 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2147 /* IDL: [value(2*strlen_m(string))] uint16 length; */
2148 /* IDL: [value(2*strlen_m_term(string))] uint16 size; */
2149 /* IDL: [charset(UTF16)] [length_is(length/2)] [size_is(size/2)] [unique(1)] uint16 *string; */
2153 lsarpc_dissect_element_lsa_StringLarge_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2155 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_StringLarge_length
, 0);
2161 lsarpc_dissect_element_lsa_StringLarge_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2163 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_StringLarge_size
, 0);
2169 lsarpc_dissect_element_lsa_StringLarge_string(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2171 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_StringLarge_string_
, NDR_POINTER_UNIQUE
, "Pointer to String (uint16)",hf_lsarpc_lsa_StringLarge_string
);
2177 lsarpc_dissect_struct_lsa_StringLarge(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2179 proto_item
*item
= NULL
;
2180 proto_tree
*tree
= NULL
;
2185 old_offset
= offset
;
2188 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2189 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_StringLarge
);
2192 offset
= lsarpc_dissect_element_lsa_StringLarge_length(tvb
, offset
, pinfo
, tree
, di
, drep
);
2194 offset
= lsarpc_dissect_element_lsa_StringLarge_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
2196 offset
= lsarpc_dissect_element_lsa_StringLarge_string(tvb
, offset
, pinfo
, tree
, di
, drep
);
2199 proto_item_set_len(item
, offset
-old_offset
);
2202 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2211 /* IDL: uint32 count; */
2212 /* IDL: [size_is(count)] [unique(1)] lsa_String *names; */
2216 lsarpc_dissect_element_lsa_Strings_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2218 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_Strings_count
, 0);
2224 lsarpc_dissect_element_lsa_Strings_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2226 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_Strings_names_
, NDR_POINTER_UNIQUE
, "Pointer to Names (lsa_String)",hf_lsarpc_lsa_Strings_names
);
2232 lsarpc_dissect_element_lsa_Strings_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2234 struct ndr_generic_array nga
= { .is_conformant
= false, };
2236 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
2238 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_Strings_names__
);
2244 lsarpc_dissect_element_lsa_Strings_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2246 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_Strings_names
,0);
2252 lsarpc_dissect_struct_lsa_Strings(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2254 proto_item
*item
= NULL
;
2255 proto_tree
*tree
= NULL
;
2260 old_offset
= offset
;
2263 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2264 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_Strings
);
2267 offset
= lsarpc_dissect_element_lsa_Strings_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
2269 offset
= lsarpc_dissect_element_lsa_Strings_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
2272 proto_item_set_len(item
, offset
-old_offset
);
2275 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2284 /* IDL: [value(strlen_m(string))] uint16 length; */
2285 /* IDL: [value(strlen_m(string))] uint16 size; */
2286 /* IDL: [charset(DOS)] [length_is(length)] [size_is(size)] [unique(1)] uint8 *string; */
2290 lsarpc_dissect_element_lsa_AsciiString_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2292 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AsciiString_length
, 0);
2298 lsarpc_dissect_element_lsa_AsciiString_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2300 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AsciiString_size
, 0);
2306 lsarpc_dissect_element_lsa_AsciiString_string(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2308 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AsciiString_string_
, NDR_POINTER_UNIQUE
, "Pointer to String (uint8)",hf_lsarpc_lsa_AsciiString_string
);
2314 lsarpc_dissect_element_lsa_AsciiString_string_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2316 struct ndr_generic_array nga
= { .is_conformant
= false, };
2318 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
2320 offset
= dissect_ndr_varying_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
2322 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_AsciiString_string__
);
2328 lsarpc_dissect_element_lsa_AsciiString_string__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2330 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AsciiString_string
, 0);
2336 lsarpc_dissect_struct_lsa_AsciiString(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2338 proto_item
*item
= NULL
;
2339 proto_tree
*tree
= NULL
;
2344 old_offset
= offset
;
2347 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2348 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_AsciiString
);
2351 offset
= lsarpc_dissect_element_lsa_AsciiString_length(tvb
, offset
, pinfo
, tree
, di
, drep
);
2353 offset
= lsarpc_dissect_element_lsa_AsciiString_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
2355 offset
= lsarpc_dissect_element_lsa_AsciiString_string(tvb
, offset
, pinfo
, tree
, di
, drep
);
2358 proto_item_set_len(item
, offset
-old_offset
);
2361 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2370 /* IDL: [value(strlen_m(string))] uint16 length; */
2371 /* IDL: [value(strlen_m_term(string))] uint16 size; */
2372 /* IDL: [charset(DOS)] [length_is(length)] [size_is(size)] [unique(1)] uint8 *string; */
2376 lsarpc_dissect_element_lsa_AsciiStringLarge_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2378 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AsciiStringLarge_length
, 0);
2384 lsarpc_dissect_element_lsa_AsciiStringLarge_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2386 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AsciiStringLarge_size
, 0);
2392 lsarpc_dissect_element_lsa_AsciiStringLarge_string(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2394 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AsciiStringLarge_string_
, NDR_POINTER_UNIQUE
, "Pointer to String (uint8)",hf_lsarpc_lsa_AsciiStringLarge_string
);
2400 lsarpc_dissect_element_lsa_AsciiStringLarge_string_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2402 struct ndr_generic_array nga
= { .is_conformant
= false, };
2404 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
2406 offset
= dissect_ndr_varying_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
2408 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_AsciiStringLarge_string__
);
2414 lsarpc_dissect_element_lsa_AsciiStringLarge_string__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2416 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AsciiStringLarge_string
, 0);
2422 lsarpc_dissect_struct_lsa_AsciiStringLarge(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2424 proto_item
*item
= NULL
;
2425 proto_tree
*tree
= NULL
;
2430 old_offset
= offset
;
2433 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2434 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_AsciiStringLarge
);
2437 offset
= lsarpc_dissect_element_lsa_AsciiStringLarge_length(tvb
, offset
, pinfo
, tree
, di
, drep
);
2439 offset
= lsarpc_dissect_element_lsa_AsciiStringLarge_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
2441 offset
= lsarpc_dissect_element_lsa_AsciiStringLarge_string(tvb
, offset
, pinfo
, tree
, di
, drep
);
2444 proto_item_set_len(item
, offset
-old_offset
);
2447 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2456 /* IDL: uint16 length; */
2457 /* IDL: uint16 size; */
2458 /* IDL: [length_is(length/2)] [size_is(size/2)] [unique(1)] uint16 *array; */
2462 lsarpc_dissect_element_lsa_BinaryString_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2464 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_BinaryString_length
, 0);
2470 lsarpc_dissect_element_lsa_BinaryString_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2472 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_BinaryString_size
, 0);
2478 lsarpc_dissect_element_lsa_BinaryString_array(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2480 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_BinaryString_array_
, NDR_POINTER_UNIQUE
, "Pointer to Array (uint16)",hf_lsarpc_lsa_BinaryString_array
);
2486 lsarpc_dissect_element_lsa_BinaryString_array_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2488 struct ndr_generic_array nga
= { .is_conformant
= false, };
2490 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
2492 offset
= dissect_ndr_varying_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
2494 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_BinaryString_array__
);
2500 lsarpc_dissect_element_lsa_BinaryString_array__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2502 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_BinaryString_array
, 0);
2508 lsarpc_dissect_struct_lsa_BinaryString(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2510 proto_item
*item
= NULL
;
2511 proto_tree
*tree
= NULL
;
2516 old_offset
= offset
;
2519 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2520 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_BinaryString
);
2523 offset
= lsarpc_dissect_element_lsa_BinaryString_length(tvb
, offset
, pinfo
, tree
, di
, drep
);
2525 offset
= lsarpc_dissect_element_lsa_BinaryString_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
2527 offset
= lsarpc_dissect_element_lsa_BinaryString_array(tvb
, offset
, pinfo
, tree
, di
, drep
);
2530 proto_item_set_len(item
, offset
-old_offset
);
2533 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2542 /* IDL: uint32 low; */
2543 /* IDL: uint32 high; */
2547 lsarpc_dissect_element_lsa_LUID_low(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2549 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LUID_low
, 0);
2555 lsarpc_dissect_element_lsa_LUID_high(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2557 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LUID_high
, 0);
2563 lsarpc_dissect_struct_lsa_LUID(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2565 proto_item
*item
= NULL
;
2566 proto_tree
*tree
= NULL
;
2571 old_offset
= offset
;
2574 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2575 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_LUID
);
2578 offset
= lsarpc_dissect_element_lsa_LUID_low(tvb
, offset
, pinfo
, tree
, di
, drep
);
2580 offset
= lsarpc_dissect_element_lsa_LUID_high(tvb
, offset
, pinfo
, tree
, di
, drep
);
2583 proto_item_set_len(item
, offset
-old_offset
);
2586 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2595 /* IDL: lsa_StringLarge name; */
2596 /* IDL: lsa_LUID luid; */
2600 lsarpc_dissect_element_lsa_PrivEntry_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2602 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PrivEntry_name
,0);
2608 lsarpc_dissect_element_lsa_PrivEntry_luid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2610 offset
= lsarpc_dissect_struct_lsa_LUID(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PrivEntry_luid
,0);
2616 lsarpc_dissect_struct_lsa_PrivEntry(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2618 proto_item
*item
= NULL
;
2619 proto_tree
*tree
= NULL
;
2624 old_offset
= offset
;
2627 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2628 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_PrivEntry
);
2631 offset
= lsarpc_dissect_element_lsa_PrivEntry_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
2633 offset
= lsarpc_dissect_element_lsa_PrivEntry_luid(tvb
, offset
, pinfo
, tree
, di
, drep
);
2636 proto_item_set_len(item
, offset
-old_offset
);
2639 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2648 /* IDL: uint32 count; */
2649 /* IDL: [size_is(count)] [unique(1)] lsa_PrivEntry *privs; */
2653 lsarpc_dissect_element_lsa_PrivArray_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2655 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_PrivArray_count
, 0);
2661 lsarpc_dissect_element_lsa_PrivArray_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2663 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_PrivArray_privs_
, NDR_POINTER_UNIQUE
, "Pointer to Privs (lsa_PrivEntry)",hf_lsarpc_lsa_PrivArray_privs
);
2669 lsarpc_dissect_element_lsa_PrivArray_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2671 struct ndr_generic_array nga
= { .is_conformant
= false, };
2673 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
2675 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_PrivArray_privs__
);
2681 lsarpc_dissect_element_lsa_PrivArray_privs__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2683 offset
= lsarpc_dissect_struct_lsa_PrivEntry(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PrivArray_privs
,0);
2689 lsarpc_dissect_struct_lsa_PrivArray(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2691 proto_item
*item
= NULL
;
2692 proto_tree
*tree
= NULL
;
2697 old_offset
= offset
;
2700 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2701 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_PrivArray
);
2704 offset
= lsarpc_dissect_element_lsa_PrivArray_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
2706 offset
= lsarpc_dissect_element_lsa_PrivArray_privs(tvb
, offset
, pinfo
, tree
, di
, drep
);
2709 proto_item_set_len(item
, offset
-old_offset
);
2712 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2721 /* IDL: LSA_SECURITY_ANONYMOUS=0, */
2722 /* IDL: LSA_SECURITY_IDENTIFICATION=1, */
2723 /* IDL: LSA_SECURITY_IMPERSONATION=2, */
2724 /* IDL: LSA_SECURITY_DELEGATION=3, */
2728 lsarpc_dissect_enum_lsa_SecurityImpersonationLevel(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
2730 uint32_t parameter
=0;
2734 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
2743 /* IDL: uint3264 len; */
2744 /* IDL: lsa_SecurityImpersonationLevel impersonation_level; */
2745 /* IDL: uint8 context_mode; */
2746 /* IDL: uint8 effective_only; */
2750 lsarpc_dissect_element_lsa_QosInfo_len(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2752 offset
= dissect_ndr_uint3264(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QosInfo_len
, NULL
);
2758 lsarpc_dissect_element_lsa_QosInfo_impersonation_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2760 offset
= lsarpc_dissect_enum_lsa_SecurityImpersonationLevel(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QosInfo_impersonation_level
, 0);
2766 lsarpc_dissect_element_lsa_QosInfo_context_mode(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2768 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QosInfo_context_mode
, 0);
2774 lsarpc_dissect_element_lsa_QosInfo_effective_only(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2776 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QosInfo_effective_only
, 0);
2782 lsarpc_dissect_struct_lsa_QosInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2784 proto_item
*item
= NULL
;
2785 proto_tree
*tree
= NULL
;
2790 old_offset
= offset
;
2793 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2794 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_QosInfo
);
2797 offset
= lsarpc_dissect_element_lsa_QosInfo_len(tvb
, offset
, pinfo
, tree
, di
, drep
);
2799 offset
= lsarpc_dissect_element_lsa_QosInfo_impersonation_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
2801 offset
= lsarpc_dissect_element_lsa_QosInfo_context_mode(tvb
, offset
, pinfo
, tree
, di
, drep
);
2803 offset
= lsarpc_dissect_element_lsa_QosInfo_effective_only(tvb
, offset
, pinfo
, tree
, di
, drep
);
2806 proto_item_set_len(item
, offset
-old_offset
);
2809 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2818 /* IDL: uint3264 len; */
2819 /* IDL: [unique(1)] uint8 *root_dir; */
2820 /* IDL: [charset(UTF16)] [unique(1)] uint16 *object_name; */
2821 /* IDL: uint32 attributes; */
2822 /* IDL: [unique(1)] security_descriptor *sec_desc; */
2823 /* IDL: [unique(1)] lsa_QosInfo *sec_qos; */
2827 lsarpc_dissect_element_lsa_ObjectAttribute_len(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2829 offset
= dissect_ndr_uint3264(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ObjectAttribute_len
, NULL
);
2835 lsarpc_dissect_element_lsa_ObjectAttribute_root_dir(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2837 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ObjectAttribute_root_dir_
, NDR_POINTER_UNIQUE
, "Pointer to Root Dir (uint8)",hf_lsarpc_lsa_ObjectAttribute_root_dir
);
2843 lsarpc_dissect_element_lsa_ObjectAttribute_root_dir_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2845 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ObjectAttribute_root_dir
, 0);
2851 lsarpc_dissect_element_lsa_ObjectAttribute_object_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2853 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ObjectAttribute_object_name_
, NDR_POINTER_UNIQUE
, "Pointer to Object Name (uint16)",hf_lsarpc_lsa_ObjectAttribute_object_name
);
2859 lsarpc_dissect_element_lsa_ObjectAttribute_object_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2862 struct ndr_generic_array nga
= { .is_conformant
= false, };
2864 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
2866 offset
= dissect_ndr_varying_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
2867 offset
= dissect_ndr_generic_array_string(tvb
, offset
, pinfo
, tree
, di
, drep
, sizeof(uint16_t), hf_lsarpc_lsa_ObjectAttribute_object_name
, false, &nga
, &data
);
2868 proto_item_append_text(tree
, ": %s", data
);
2874 lsarpc_dissect_element_lsa_ObjectAttribute_attributes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2876 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ObjectAttribute_attributes
, 0);
2882 lsarpc_dissect_element_lsa_ObjectAttribute_sec_desc(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2884 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ObjectAttribute_sec_desc_
, NDR_POINTER_UNIQUE
, "Pointer to Sec Desc (security_descriptor)",hf_lsarpc_lsa_ObjectAttribute_sec_desc
);
2890 lsarpc_dissect_element_lsa_ObjectAttribute_sec_desc_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2892 offset
= lsarpc_dissect_struct_security_descriptor(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ObjectAttribute_sec_desc
,0);
2898 lsarpc_dissect_element_lsa_ObjectAttribute_sec_qos(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2900 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ObjectAttribute_sec_qos_
, NDR_POINTER_UNIQUE
, "Pointer to Sec Qos (lsa_QosInfo)",hf_lsarpc_lsa_ObjectAttribute_sec_qos
);
2906 lsarpc_dissect_element_lsa_ObjectAttribute_sec_qos_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2908 offset
= lsarpc_dissect_struct_lsa_QosInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ObjectAttribute_sec_qos
,0);
2914 lsarpc_dissect_struct_lsa_ObjectAttribute(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2916 proto_item
*item
= NULL
;
2917 proto_tree
*tree
= NULL
;
2922 old_offset
= offset
;
2925 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2926 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ObjectAttribute
);
2929 offset
= lsarpc_dissect_element_lsa_ObjectAttribute_len(tvb
, offset
, pinfo
, tree
, di
, drep
);
2931 offset
= lsarpc_dissect_element_lsa_ObjectAttribute_root_dir(tvb
, offset
, pinfo
, tree
, di
, drep
);
2933 offset
= lsarpc_dissect_element_lsa_ObjectAttribute_object_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
2935 offset
= lsarpc_dissect_element_lsa_ObjectAttribute_attributes(tvb
, offset
, pinfo
, tree
, di
, drep
);
2937 offset
= lsarpc_dissect_element_lsa_ObjectAttribute_sec_desc(tvb
, offset
, pinfo
, tree
, di
, drep
);
2939 offset
= lsarpc_dissect_element_lsa_ObjectAttribute_sec_qos(tvb
, offset
, pinfo
, tree
, di
, drep
);
2942 proto_item_set_len(item
, offset
-old_offset
);
2945 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2954 /* IDL: LSA_POLICY_VIEW_LOCAL_INFORMATION = 0x00000001 , */
2955 /* IDL: LSA_POLICY_VIEW_AUDIT_INFORMATION = 0x00000002 , */
2956 /* IDL: LSA_POLICY_GET_PRIVATE_INFORMATION = 0x00000004 , */
2957 /* IDL: LSA_POLICY_TRUST_ADMIN = 0x00000008 , */
2958 /* IDL: LSA_POLICY_CREATE_ACCOUNT = 0x00000010 , */
2959 /* IDL: LSA_POLICY_CREATE_SECRET = 0x00000020 , */
2960 /* IDL: LSA_POLICY_CREATE_PRIVILEGE = 0x00000040 , */
2961 /* IDL: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS = 0x00000080 , */
2962 /* IDL: LSA_POLICY_SET_AUDIT_REQUIREMENTS = 0x00000100 , */
2963 /* IDL: LSA_POLICY_AUDIT_LOG_ADMIN = 0x00000200 , */
2964 /* IDL: LSA_POLICY_SERVER_ADMIN = 0x00000400 , */
2965 /* IDL: LSA_POLICY_LOOKUP_NAMES = 0x00000800 , */
2966 /* IDL: LSA_POLICY_NOTIFICATION = 0x00001000 , */
2971 /* IDL: LSA_ACCOUNT_VIEW = 0x00000001 , */
2972 /* IDL: LSA_ACCOUNT_ADJUST_PRIVILEGES = 0x00000002 , */
2973 /* IDL: LSA_ACCOUNT_ADJUST_QUOTAS = 0x00000004 , */
2974 /* IDL: LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS = 0x00000008 , */
2979 /* IDL: LSA_SECRET_SET_VALUE = 0x00000001 , */
2980 /* IDL: LSA_SECRET_QUERY_VALUE = 0x00000002 , */
2985 /* IDL: LSA_TRUSTED_QUERY_DOMAIN_NAME = 0x00000001 , */
2986 /* IDL: LSA_TRUSTED_QUERY_CONTROLLERS = 0x00000002 , */
2987 /* IDL: LSA_TRUSTED_SET_CONTROLLERS = 0x00000004 , */
2988 /* IDL: LSA_TRUSTED_QUERY_POSIX = 0x00000008 , */
2989 /* IDL: LSA_TRUSTED_SET_POSIX = 0x00000010 , */
2990 /* IDL: LSA_TRUSTED_SET_AUTH = 0x00000020 , */
2991 /* IDL: LSA_TRUSTED_QUERY_AUTH = 0x00000040 , */
2995 lsarpc_dissect_bitmap_lsa_TrustedAccessMask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2998 static int * const lsarpc_lsa_TrustedAccessMask_fields
[] = {
2999 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_DOMAIN_NAME
,
3000 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_CONTROLLERS
,
3001 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_CONTROLLERS
,
3002 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_POSIX
,
3003 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_POSIX
,
3004 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_AUTH
,
3005 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_AUTH
,
3011 item
= proto_tree_add_bitmask_with_flags(parent_tree
, tvb
, offset
, hf_index
,
3012 ett_lsarpc_lsa_TrustedAccessMask
, lsarpc_lsa_TrustedAccessMask_fields
, DREP_ENC_INTEGER(drep
), BMT_NO_FALSE
);
3014 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, parent_tree
, di
, drep
, -1, &flags
);
3017 proto_item_append_text(item
, ": (No values set)");
3019 if (flags
& (~0x0000007f)) {
3020 flags
&= (~0x0000007f);
3021 proto_item_append_text(item
, "Unknown bitmap value 0x%x", flags
);
3029 /* IDL: uint32 percent_full; */
3030 /* IDL: uint32 maximum_log_size; */
3031 /* IDL: hyper retention_time; */
3032 /* IDL: uint8 shutdown_in_progress; */
3033 /* IDL: hyper time_to_shutdown; */
3034 /* IDL: uint32 next_audit_record; */
3038 lsarpc_dissect_element_lsa_AuditLogInfo_percent_full(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3040 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditLogInfo_percent_full
, 0);
3046 lsarpc_dissect_element_lsa_AuditLogInfo_maximum_log_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3048 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditLogInfo_maximum_log_size
, 0);
3054 lsarpc_dissect_element_lsa_AuditLogInfo_retention_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3056 offset
=cnf_dissect_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, 0, hf_lsarpc_lsa_AuditLogInfo_retention_time
);
3062 lsarpc_dissect_element_lsa_AuditLogInfo_shutdown_in_progress(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3064 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditLogInfo_shutdown_in_progress
, 0);
3070 lsarpc_dissect_element_lsa_AuditLogInfo_time_to_shutdown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3072 offset
=cnf_dissect_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, 0, hf_lsarpc_lsa_AuditLogInfo_time_to_shutdown
);
3078 lsarpc_dissect_element_lsa_AuditLogInfo_next_audit_record(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3080 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditLogInfo_next_audit_record
, 0);
3086 lsarpc_dissect_struct_lsa_AuditLogInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3088 proto_item
*item
= NULL
;
3089 proto_tree
*tree
= NULL
;
3094 old_offset
= offset
;
3097 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3098 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_AuditLogInfo
);
3101 offset
= lsarpc_dissect_element_lsa_AuditLogInfo_percent_full(tvb
, offset
, pinfo
, tree
, di
, drep
);
3103 offset
= lsarpc_dissect_element_lsa_AuditLogInfo_maximum_log_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
3105 offset
= lsarpc_dissect_element_lsa_AuditLogInfo_retention_time(tvb
, offset
, pinfo
, tree
, di
, drep
);
3107 offset
= lsarpc_dissect_element_lsa_AuditLogInfo_shutdown_in_progress(tvb
, offset
, pinfo
, tree
, di
, drep
);
3109 offset
= lsarpc_dissect_element_lsa_AuditLogInfo_time_to_shutdown(tvb
, offset
, pinfo
, tree
, di
, drep
);
3111 offset
= lsarpc_dissect_element_lsa_AuditLogInfo_next_audit_record(tvb
, offset
, pinfo
, tree
, di
, drep
);
3114 proto_item_set_len(item
, offset
-old_offset
);
3117 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
3126 /* IDL: LSA_AUDIT_POLICY_NONE=0, */
3127 /* IDL: LSA_AUDIT_POLICY_SUCCESS=1, */
3128 /* IDL: LSA_AUDIT_POLICY_FAILURE=2, */
3129 /* IDL: LSA_AUDIT_POLICY_ALL=(LSA_AUDIT_POLICY_SUCCESS|LSA_AUDIT_POLICY_FAILURE), */
3130 /* IDL: LSA_AUDIT_POLICY_CLEAR=4, */
3134 lsarpc_dissect_enum_lsa_PolicyAuditPolicy(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
3136 uint32_t parameter
=0;
3140 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
3149 /* IDL: LSA_AUDIT_CATEGORY_SYSTEM=0, */
3150 /* IDL: LSA_AUDIT_CATEGORY_LOGON=1, */
3151 /* IDL: LSA_AUDIT_CATEGORY_FILE_AND_OBJECT_ACCESS=2, */
3152 /* IDL: LSA_AUDIT_CATEGORY_USE_OF_USER_RIGHTS=3, */
3153 /* IDL: LSA_AUDIT_CATEGORY_PROCESS_TRACKING=4, */
3154 /* IDL: LSA_AUDIT_CATEGORY_SECURITY_POLICY_CHANGES=5, */
3155 /* IDL: LSA_AUDIT_CATEGORY_ACCOUNT_MANAGEMENT=6, */
3156 /* IDL: LSA_AUDIT_CATEGORY_DIRECTORY_SERVICE_ACCESS=7, */
3157 /* IDL: LSA_AUDIT_CATEGORY_ACCOUNT_LOGON=8, */
3161 lsarpc_dissect_enum_lsa_PolicyAuditEventType(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
3163 uint32_t parameter
=0;
3167 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
3176 /* IDL: uint32 auditing_mode; */
3177 /* IDL: [size_is(count)] [unique(1)] lsa_PolicyAuditPolicy *settings; */
3178 /* IDL: uint32 count; */
3182 lsarpc_dissect_element_lsa_AuditEventsInfo_auditing_mode(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3184 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditEventsInfo_auditing_mode
, 0);
3190 lsarpc_dissect_element_lsa_AuditEventsInfo_settings(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3192 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AuditEventsInfo_settings_
, NDR_POINTER_UNIQUE
, "Pointer to Settings (lsa_PolicyAuditPolicy)",hf_lsarpc_lsa_AuditEventsInfo_settings
);
3198 lsarpc_dissect_element_lsa_AuditEventsInfo_settings_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3200 struct ndr_generic_array nga
= { .is_conformant
= false, };
3202 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
3204 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_AuditEventsInfo_settings__
);
3210 lsarpc_dissect_element_lsa_AuditEventsInfo_settings__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3212 offset
= lsarpc_dissect_enum_lsa_PolicyAuditPolicy(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditEventsInfo_settings
, 0);
3218 lsarpc_dissect_element_lsa_AuditEventsInfo_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3220 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditEventsInfo_count
, 0);
3226 lsarpc_dissect_struct_lsa_AuditEventsInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3228 proto_item
*item
= NULL
;
3229 proto_tree
*tree
= NULL
;
3234 old_offset
= offset
;
3237 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3238 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_AuditEventsInfo
);
3241 offset
= lsarpc_dissect_element_lsa_AuditEventsInfo_auditing_mode(tvb
, offset
, pinfo
, tree
, di
, drep
);
3243 offset
= lsarpc_dissect_element_lsa_AuditEventsInfo_settings(tvb
, offset
, pinfo
, tree
, di
, drep
);
3245 offset
= lsarpc_dissect_element_lsa_AuditEventsInfo_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
3248 proto_item_set_len(item
, offset
-old_offset
);
3251 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
3260 /* IDL: lsa_StringLarge name; */
3261 /* IDL: [unique(1)] dom_sid2 *sid; */
3265 lsarpc_dissect_element_lsa_DomainInfo_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3267 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DomainInfo_name
,0);
3273 lsarpc_dissect_element_lsa_DomainInfo_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3275 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DomainInfo_sid_
, NDR_POINTER_UNIQUE
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_DomainInfo_sid
);
3281 lsarpc_dissect_element_lsa_DomainInfo_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3283 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DomainInfo_sid
,0);
3289 lsarpc_dissect_struct_lsa_DomainInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3291 proto_item
*item
= NULL
;
3292 proto_tree
*tree
= NULL
;
3297 old_offset
= offset
;
3300 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3301 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DomainInfo
);
3304 offset
= lsarpc_dissect_element_lsa_DomainInfo_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
3306 offset
= lsarpc_dissect_element_lsa_DomainInfo_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
3309 proto_item_set_len(item
, offset
-old_offset
);
3312 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
3321 /* IDL: lsa_String name; */
3325 lsarpc_dissect_element_lsa_PDAccountInfo_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3327 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PDAccountInfo_name
,0);
3333 lsarpc_dissect_struct_lsa_PDAccountInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3335 proto_item
*item
= NULL
;
3336 proto_tree
*tree
= NULL
;
3341 old_offset
= offset
;
3344 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3345 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_PDAccountInfo
);
3348 offset
= lsarpc_dissect_element_lsa_PDAccountInfo_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
3351 proto_item_set_len(item
, offset
-old_offset
);
3354 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
3363 /* IDL: LSA_ROLE_BACKUP=2, */
3364 /* IDL: LSA_ROLE_PRIMARY=3, */
3368 lsarpc_dissect_enum_lsa_Role(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
3370 uint32_t parameter
=0;
3374 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
3383 /* IDL: lsa_Role role; */
3387 lsarpc_dissect_element_lsa_ServerRole_role(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3389 offset
= lsarpc_dissect_enum_lsa_Role(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ServerRole_role
, 0);
3395 lsarpc_dissect_struct_lsa_ServerRole(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3397 proto_item
*item
= NULL
;
3398 proto_tree
*tree
= NULL
;
3403 old_offset
= offset
;
3406 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3407 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ServerRole
);
3410 offset
= lsarpc_dissect_element_lsa_ServerRole_role(tvb
, offset
, pinfo
, tree
, di
, drep
);
3413 proto_item_set_len(item
, offset
-old_offset
);
3416 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
3425 /* IDL: lsa_String source; */
3426 /* IDL: lsa_String account; */
3430 lsarpc_dissect_element_lsa_ReplicaSourceInfo_source(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3432 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ReplicaSourceInfo_source
,0);
3438 lsarpc_dissect_element_lsa_ReplicaSourceInfo_account(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3440 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ReplicaSourceInfo_account
,0);
3446 lsarpc_dissect_struct_lsa_ReplicaSourceInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3448 proto_item
*item
= NULL
;
3449 proto_tree
*tree
= NULL
;
3454 old_offset
= offset
;
3457 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3458 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ReplicaSourceInfo
);
3461 offset
= lsarpc_dissect_element_lsa_ReplicaSourceInfo_source(tvb
, offset
, pinfo
, tree
, di
, drep
);
3463 offset
= lsarpc_dissect_element_lsa_ReplicaSourceInfo_account(tvb
, offset
, pinfo
, tree
, di
, drep
);
3466 proto_item_set_len(item
, offset
-old_offset
);
3469 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
3478 /* IDL: uint32 paged_pool; */
3479 /* IDL: uint32 non_paged_pool; */
3480 /* IDL: uint32 min_wss; */
3481 /* IDL: uint32 max_wss; */
3482 /* IDL: uint32 pagefile; */
3483 /* IDL: hyper unknown; */
3487 lsarpc_dissect_element_lsa_DefaultQuotaInfo_paged_pool(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3489 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DefaultQuotaInfo_paged_pool
, 0);
3495 lsarpc_dissect_element_lsa_DefaultQuotaInfo_non_paged_pool(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3497 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DefaultQuotaInfo_non_paged_pool
, 0);
3503 lsarpc_dissect_element_lsa_DefaultQuotaInfo_min_wss(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3505 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DefaultQuotaInfo_min_wss
, 0);
3511 lsarpc_dissect_element_lsa_DefaultQuotaInfo_max_wss(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3513 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DefaultQuotaInfo_max_wss
, 0);
3519 lsarpc_dissect_element_lsa_DefaultQuotaInfo_pagefile(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3521 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DefaultQuotaInfo_pagefile
, 0);
3527 lsarpc_dissect_element_lsa_DefaultQuotaInfo_unknown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3529 offset
=cnf_dissect_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, 0, hf_lsarpc_lsa_DefaultQuotaInfo_unknown
);
3535 lsarpc_dissect_struct_lsa_DefaultQuotaInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3537 proto_item
*item
= NULL
;
3538 proto_tree
*tree
= NULL
;
3543 old_offset
= offset
;
3546 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3547 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DefaultQuotaInfo
);
3550 offset
= lsarpc_dissect_element_lsa_DefaultQuotaInfo_paged_pool(tvb
, offset
, pinfo
, tree
, di
, drep
);
3552 offset
= lsarpc_dissect_element_lsa_DefaultQuotaInfo_non_paged_pool(tvb
, offset
, pinfo
, tree
, di
, drep
);
3554 offset
= lsarpc_dissect_element_lsa_DefaultQuotaInfo_min_wss(tvb
, offset
, pinfo
, tree
, di
, drep
);
3556 offset
= lsarpc_dissect_element_lsa_DefaultQuotaInfo_max_wss(tvb
, offset
, pinfo
, tree
, di
, drep
);
3558 offset
= lsarpc_dissect_element_lsa_DefaultQuotaInfo_pagefile(tvb
, offset
, pinfo
, tree
, di
, drep
);
3560 offset
= lsarpc_dissect_element_lsa_DefaultQuotaInfo_unknown(tvb
, offset
, pinfo
, tree
, di
, drep
);
3563 proto_item_set_len(item
, offset
-old_offset
);
3566 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
3575 /* IDL: hyper modified_id; */
3576 /* IDL: NTTIME_hyper db_create_time; */
3580 lsarpc_dissect_element_lsa_ModificationInfo_modified_id(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3582 offset
=cnf_dissect_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, 0, hf_lsarpc_lsa_ModificationInfo_modified_id
);
3588 lsarpc_dissect_element_lsa_ModificationInfo_db_create_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3590 offset
= dissect_ndr_nt_NTTIME_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ModificationInfo_db_create_time
);
3596 lsarpc_dissect_struct_lsa_ModificationInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3598 proto_item
*item
= NULL
;
3599 proto_tree
*tree
= NULL
;
3604 old_offset
= offset
;
3607 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3608 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ModificationInfo
);
3611 offset
= lsarpc_dissect_element_lsa_ModificationInfo_modified_id(tvb
, offset
, pinfo
, tree
, di
, drep
);
3613 offset
= lsarpc_dissect_element_lsa_ModificationInfo_db_create_time(tvb
, offset
, pinfo
, tree
, di
, drep
);
3616 proto_item_set_len(item
, offset
-old_offset
);
3619 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
3628 /* IDL: uint8 shutdown_on_full; */
3632 lsarpc_dissect_element_lsa_AuditFullSetInfo_shutdown_on_full(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3634 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditFullSetInfo_shutdown_on_full
, 0);
3640 lsarpc_dissect_struct_lsa_AuditFullSetInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3642 proto_item
*item
= NULL
;
3643 proto_tree
*tree
= NULL
;
3646 old_offset
= offset
;
3649 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3650 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_AuditFullSetInfo
);
3653 offset
= lsarpc_dissect_element_lsa_AuditFullSetInfo_shutdown_on_full(tvb
, offset
, pinfo
, tree
, di
, drep
);
3656 proto_item_set_len(item
, offset
-old_offset
);
3664 /* IDL: uint8 shutdown_on_full; */
3665 /* IDL: uint8 log_is_full; */
3669 lsarpc_dissect_element_lsa_AuditFullQueryInfo_shutdown_on_full(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3671 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditFullQueryInfo_shutdown_on_full
, 0);
3677 lsarpc_dissect_element_lsa_AuditFullQueryInfo_log_is_full(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3679 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditFullQueryInfo_log_is_full
, 0);
3685 lsarpc_dissect_struct_lsa_AuditFullQueryInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3687 proto_item
*item
= NULL
;
3688 proto_tree
*tree
= NULL
;
3691 old_offset
= offset
;
3694 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3695 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_AuditFullQueryInfo
);
3698 offset
= lsarpc_dissect_element_lsa_AuditFullQueryInfo_shutdown_on_full(tvb
, offset
, pinfo
, tree
, di
, drep
);
3700 offset
= lsarpc_dissect_element_lsa_AuditFullQueryInfo_log_is_full(tvb
, offset
, pinfo
, tree
, di
, drep
);
3703 proto_item_set_len(item
, offset
-old_offset
);
3711 /* IDL: lsa_StringLarge name; */
3712 /* IDL: lsa_StringLarge dns_domain; */
3713 /* IDL: lsa_StringLarge dns_forest; */
3714 /* IDL: GUID domain_guid; */
3715 /* IDL: [unique(1)] dom_sid2 *sid; */
3719 lsarpc_dissect_element_lsa_DnsDomainInfo_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3721 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DnsDomainInfo_name
,0);
3727 lsarpc_dissect_element_lsa_DnsDomainInfo_dns_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3729 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DnsDomainInfo_dns_domain
,0);
3735 lsarpc_dissect_element_lsa_DnsDomainInfo_dns_forest(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3737 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DnsDomainInfo_dns_forest
,0);
3743 lsarpc_dissect_element_lsa_DnsDomainInfo_domain_guid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3745 offset
= dissect_ndr_uuid_t(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DnsDomainInfo_domain_guid
, NULL
);
3751 lsarpc_dissect_element_lsa_DnsDomainInfo_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3753 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DnsDomainInfo_sid_
, NDR_POINTER_UNIQUE
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_DnsDomainInfo_sid
);
3759 lsarpc_dissect_element_lsa_DnsDomainInfo_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3761 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DnsDomainInfo_sid
,0);
3767 lsarpc_dissect_struct_lsa_DnsDomainInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3769 proto_item
*item
= NULL
;
3770 proto_tree
*tree
= NULL
;
3775 old_offset
= offset
;
3778 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3779 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DnsDomainInfo
);
3782 offset
= lsarpc_dissect_element_lsa_DnsDomainInfo_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
3784 offset
= lsarpc_dissect_element_lsa_DnsDomainInfo_dns_domain(tvb
, offset
, pinfo
, tree
, di
, drep
);
3786 offset
= lsarpc_dissect_element_lsa_DnsDomainInfo_dns_forest(tvb
, offset
, pinfo
, tree
, di
, drep
);
3788 offset
= lsarpc_dissect_element_lsa_DnsDomainInfo_domain_guid(tvb
, offset
, pinfo
, tree
, di
, drep
);
3790 offset
= lsarpc_dissect_element_lsa_DnsDomainInfo_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
3793 proto_item_set_len(item
, offset
-old_offset
);
3796 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
3805 /* IDL: LSA_POLICY_INFO_AUDIT_LOG=1, */
3806 /* IDL: LSA_POLICY_INFO_AUDIT_EVENTS=2, */
3807 /* IDL: LSA_POLICY_INFO_DOMAIN=3, */
3808 /* IDL: LSA_POLICY_INFO_PD=4, */
3809 /* IDL: LSA_POLICY_INFO_ACCOUNT_DOMAIN=5, */
3810 /* IDL: LSA_POLICY_INFO_ROLE=6, */
3811 /* IDL: LSA_POLICY_INFO_REPLICA=7, */
3812 /* IDL: LSA_POLICY_INFO_QUOTA=8, */
3813 /* IDL: LSA_POLICY_INFO_MOD=9, */
3814 /* IDL: LSA_POLICY_INFO_AUDIT_FULL_SET=10, */
3815 /* IDL: LSA_POLICY_INFO_AUDIT_FULL_QUERY=11, */
3816 /* IDL: LSA_POLICY_INFO_DNS=12, */
3817 /* IDL: LSA_POLICY_INFO_DNS_INT=13, */
3818 /* IDL: LSA_POLICY_INFO_L_ACCOUNT_DOMAIN=14, */
3822 lsarpc_dissect_enum_lsa_PolicyInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
3824 uint32_t parameter
=0;
3828 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
3836 /* IDL: [switch_type(uint16)] union { */
3837 /* IDL: [case(LSA_POLICY_INFO_AUDIT_LOG)] [case(LSA_POLICY_INFO_AUDIT_LOG)] lsa_AuditLogInfo audit_log; */
3838 /* IDL: [case(LSA_POLICY_INFO_AUDIT_EVENTS)] [case(LSA_POLICY_INFO_AUDIT_EVENTS)] lsa_AuditEventsInfo audit_events; */
3839 /* IDL: [case(LSA_POLICY_INFO_DOMAIN)] [case(LSA_POLICY_INFO_DOMAIN)] lsa_DomainInfo domain; */
3840 /* IDL: [case(LSA_POLICY_INFO_PD)] [case(LSA_POLICY_INFO_PD)] lsa_PDAccountInfo pd; */
3841 /* IDL: [case(LSA_POLICY_INFO_ACCOUNT_DOMAIN)] [case(LSA_POLICY_INFO_ACCOUNT_DOMAIN)] lsa_DomainInfo account_domain; */
3842 /* IDL: [case(LSA_POLICY_INFO_ROLE)] [case(LSA_POLICY_INFO_ROLE)] lsa_ServerRole role; */
3843 /* IDL: [case(LSA_POLICY_INFO_REPLICA)] [case(LSA_POLICY_INFO_REPLICA)] lsa_ReplicaSourceInfo replica; */
3844 /* IDL: [case(LSA_POLICY_INFO_QUOTA)] [case(LSA_POLICY_INFO_QUOTA)] lsa_DefaultQuotaInfo quota; */
3845 /* IDL: [case(LSA_POLICY_INFO_MOD)] [case(LSA_POLICY_INFO_MOD)] lsa_ModificationInfo mod; */
3846 /* IDL: [case(LSA_POLICY_INFO_AUDIT_FULL_SET)] [case(LSA_POLICY_INFO_AUDIT_FULL_SET)] lsa_AuditFullSetInfo auditfullset; */
3847 /* IDL: [case(LSA_POLICY_INFO_AUDIT_FULL_QUERY)] [case(LSA_POLICY_INFO_AUDIT_FULL_QUERY)] lsa_AuditFullQueryInfo auditfullquery; */
3848 /* IDL: [case(LSA_POLICY_INFO_DNS)] [case(LSA_POLICY_INFO_DNS)] lsa_DnsDomainInfo dns; */
3849 /* IDL: [case(LSA_POLICY_INFO_DNS_INT)] [case(LSA_POLICY_INFO_DNS_INT)] lsa_DnsDomainInfo dns_int; */
3850 /* IDL: [case(LSA_POLICY_INFO_L_ACCOUNT_DOMAIN)] [case(LSA_POLICY_INFO_L_ACCOUNT_DOMAIN)] lsa_DomainInfo l_account_domain; */
3854 lsarpc_dissect_element_lsa_PolicyInformation_audit_log(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3856 offset
= lsarpc_dissect_struct_lsa_AuditLogInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_audit_log
,0);
3862 lsarpc_dissect_element_lsa_PolicyInformation_audit_events(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3864 offset
= lsarpc_dissect_struct_lsa_AuditEventsInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_audit_events
,0);
3870 lsarpc_dissect_element_lsa_PolicyInformation_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3872 offset
= lsarpc_dissect_struct_lsa_DomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_domain
,0);
3878 lsarpc_dissect_element_lsa_PolicyInformation_pd(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3880 offset
= lsarpc_dissect_struct_lsa_PDAccountInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_pd
,0);
3886 lsarpc_dissect_element_lsa_PolicyInformation_account_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3888 offset
= lsarpc_dissect_struct_lsa_DomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_account_domain
,0);
3894 lsarpc_dissect_element_lsa_PolicyInformation_role(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3896 offset
= lsarpc_dissect_struct_lsa_ServerRole(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_role
,0);
3902 lsarpc_dissect_element_lsa_PolicyInformation_replica(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3904 offset
= lsarpc_dissect_struct_lsa_ReplicaSourceInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_replica
,0);
3910 lsarpc_dissect_element_lsa_PolicyInformation_quota(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3912 offset
= lsarpc_dissect_struct_lsa_DefaultQuotaInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_quota
,0);
3918 lsarpc_dissect_element_lsa_PolicyInformation_mod(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3920 offset
= lsarpc_dissect_struct_lsa_ModificationInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_mod
,0);
3926 lsarpc_dissect_element_lsa_PolicyInformation_auditfullset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3928 offset
= lsarpc_dissect_struct_lsa_AuditFullSetInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_auditfullset
,0);
3934 lsarpc_dissect_element_lsa_PolicyInformation_auditfullquery(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3936 offset
= lsarpc_dissect_struct_lsa_AuditFullQueryInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_auditfullquery
,0);
3942 lsarpc_dissect_element_lsa_PolicyInformation_dns(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3944 offset
= lsarpc_dissect_struct_lsa_DnsDomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_dns
,0);
3950 lsarpc_dissect_element_lsa_PolicyInformation_dns_int(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3952 offset
= lsarpc_dissect_struct_lsa_DnsDomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_dns_int
,0);
3958 lsarpc_dissect_element_lsa_PolicyInformation_l_account_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3960 offset
= lsarpc_dissect_struct_lsa_DomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_l_account_domain
,0);
3966 lsarpc_dissect_lsa_PolicyInformation(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3968 proto_item
*item
= NULL
;
3969 proto_tree
*tree
= NULL
;
3973 old_offset
= offset
;
3975 tree
= proto_tree_add_subtree(parent_tree
, tvb
, offset
, -1, ett_lsarpc_lsa_PolicyInformation
, &item
, "lsa_PolicyInformation");
3978 UNION_ALIGN_TO_8_BYTES
;
3979 offset
= dissect_ndr_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, &level
);
3980 UNION_ALIGN_TO_8_BYTES
;
3983 case LSA_POLICY_INFO_AUDIT_LOG
:
3984 offset
= lsarpc_dissect_element_lsa_PolicyInformation_audit_log(tvb
, offset
, pinfo
, tree
, di
, drep
);
3987 case LSA_POLICY_INFO_AUDIT_EVENTS
:
3988 offset
= lsarpc_dissect_element_lsa_PolicyInformation_audit_events(tvb
, offset
, pinfo
, tree
, di
, drep
);
3991 case LSA_POLICY_INFO_DOMAIN
:
3992 offset
= lsarpc_dissect_element_lsa_PolicyInformation_domain(tvb
, offset
, pinfo
, tree
, di
, drep
);
3995 case LSA_POLICY_INFO_PD
:
3996 offset
= lsarpc_dissect_element_lsa_PolicyInformation_pd(tvb
, offset
, pinfo
, tree
, di
, drep
);
3999 case LSA_POLICY_INFO_ACCOUNT_DOMAIN
:
4000 offset
= lsarpc_dissect_element_lsa_PolicyInformation_account_domain(tvb
, offset
, pinfo
, tree
, di
, drep
);
4003 case LSA_POLICY_INFO_ROLE
:
4004 offset
= lsarpc_dissect_element_lsa_PolicyInformation_role(tvb
, offset
, pinfo
, tree
, di
, drep
);
4007 case LSA_POLICY_INFO_REPLICA
:
4008 offset
= lsarpc_dissect_element_lsa_PolicyInformation_replica(tvb
, offset
, pinfo
, tree
, di
, drep
);
4011 case LSA_POLICY_INFO_QUOTA
:
4012 offset
= lsarpc_dissect_element_lsa_PolicyInformation_quota(tvb
, offset
, pinfo
, tree
, di
, drep
);
4015 case LSA_POLICY_INFO_MOD
:
4016 offset
= lsarpc_dissect_element_lsa_PolicyInformation_mod(tvb
, offset
, pinfo
, tree
, di
, drep
);
4019 case LSA_POLICY_INFO_AUDIT_FULL_SET
:
4020 offset
= lsarpc_dissect_element_lsa_PolicyInformation_auditfullset(tvb
, offset
, pinfo
, tree
, di
, drep
);
4023 case LSA_POLICY_INFO_AUDIT_FULL_QUERY
:
4024 offset
= lsarpc_dissect_element_lsa_PolicyInformation_auditfullquery(tvb
, offset
, pinfo
, tree
, di
, drep
);
4027 case LSA_POLICY_INFO_DNS
:
4028 offset
= lsarpc_dissect_element_lsa_PolicyInformation_dns(tvb
, offset
, pinfo
, tree
, di
, drep
);
4031 case LSA_POLICY_INFO_DNS_INT
:
4032 offset
= lsarpc_dissect_element_lsa_PolicyInformation_dns_int(tvb
, offset
, pinfo
, tree
, di
, drep
);
4035 case LSA_POLICY_INFO_L_ACCOUNT_DOMAIN
:
4036 offset
= lsarpc_dissect_element_lsa_PolicyInformation_l_account_domain(tvb
, offset
, pinfo
, tree
, di
, drep
);
4039 proto_item_set_len(item
, offset
-old_offset
);
4046 /* IDL: [unique(1)] dom_sid2 *sid; */
4050 lsarpc_dissect_element_lsa_SidPtr_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4052 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SidPtr_sid_
, NDR_POINTER_UNIQUE
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_SidPtr_sid
);
4058 lsarpc_dissect_element_lsa_SidPtr_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4060 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_SidPtr_sid
,0);
4066 lsarpc_dissect_struct_lsa_SidPtr(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4068 proto_item
*item
= NULL
;
4069 proto_tree
*tree
= NULL
;
4074 old_offset
= offset
;
4077 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4078 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_SidPtr
);
4081 offset
= lsarpc_dissect_element_lsa_SidPtr_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
4084 proto_item_set_len(item
, offset
-old_offset
);
4087 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4096 /* IDL: [range(0,20480)] uint32 num_sids; */
4097 /* IDL: [size_is(num_sids)] [unique(1)] lsa_SidPtr *sids; */
4101 lsarpc_dissect_element_lsa_SidArray_num_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4103 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SidArray_num_sids
, 0);
4109 lsarpc_dissect_element_lsa_SidArray_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4111 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SidArray_sids_
, NDR_POINTER_UNIQUE
, "Pointer to Sids (lsa_SidPtr)",hf_lsarpc_lsa_SidArray_sids
);
4117 lsarpc_dissect_element_lsa_SidArray_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4119 struct ndr_generic_array nga
= { .is_conformant
= false, };
4121 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
4123 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_SidArray_sids__
);
4129 lsarpc_dissect_element_lsa_SidArray_sids__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4131 offset
= lsarpc_dissect_struct_lsa_SidPtr(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_SidArray_sids
,0);
4137 lsarpc_dissect_struct_lsa_SidArray(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4139 proto_item
*item
= NULL
;
4140 proto_tree
*tree
= NULL
;
4145 old_offset
= offset
;
4148 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4149 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_SidArray
);
4152 offset
= lsarpc_dissect_element_lsa_SidArray_num_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
4154 offset
= lsarpc_dissect_element_lsa_SidArray_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
4157 proto_item_set_len(item
, offset
-old_offset
);
4160 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4169 /* IDL: uint32 count; */
4170 /* IDL: [size_is(count)] [unique(1)] lsa_DomainInfo *domains; */
4174 lsarpc_dissect_element_lsa_DomainList_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4176 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DomainList_count
, 0);
4182 lsarpc_dissect_element_lsa_DomainList_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4184 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DomainList_domains_
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_DomainInfo)",hf_lsarpc_lsa_DomainList_domains
);
4190 lsarpc_dissect_element_lsa_DomainList_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4192 struct ndr_generic_array nga
= { .is_conformant
= false, };
4194 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
4196 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_DomainList_domains__
);
4202 lsarpc_dissect_element_lsa_DomainList_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4204 offset
= lsarpc_dissect_struct_lsa_DomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DomainList_domains
,0);
4210 lsarpc_dissect_struct_lsa_DomainList(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4212 proto_item
*item
= NULL
;
4213 proto_tree
*tree
= NULL
;
4218 old_offset
= offset
;
4221 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4222 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DomainList
);
4225 offset
= lsarpc_dissect_element_lsa_DomainList_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
4227 offset
= lsarpc_dissect_element_lsa_DomainList_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
4230 proto_item_set_len(item
, offset
-old_offset
);
4233 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4242 /* IDL: SID_NAME_USE_NONE=0, */
4243 /* IDL: SID_NAME_USER=1, */
4244 /* IDL: SID_NAME_DOM_GRP=2, */
4245 /* IDL: SID_NAME_DOMAIN=3, */
4246 /* IDL: SID_NAME_ALIAS=4, */
4247 /* IDL: SID_NAME_WKN_GRP=5, */
4248 /* IDL: SID_NAME_DELETED=6, */
4249 /* IDL: SID_NAME_INVALID=7, */
4250 /* IDL: SID_NAME_UNKNOWN=8, */
4251 /* IDL: SID_NAME_COMPUTER=9, */
4252 /* IDL: SID_NAME_LABEL=10, */
4256 lsarpc_dissect_enum_lsa_SidType(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
4258 uint32_t parameter
=0;
4262 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
4271 /* IDL: lsa_SidType sid_type; */
4272 /* IDL: uint32 rid; */
4273 /* IDL: uint32 sid_index; */
4277 lsarpc_dissect_element_lsa_TranslatedSid_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4279 offset
= lsarpc_dissect_enum_lsa_SidType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid_sid_type
, 0);
4285 lsarpc_dissect_element_lsa_TranslatedSid_rid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4287 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid_rid
, 0);
4293 lsarpc_dissect_element_lsa_TranslatedSid_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4295 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid_sid_index
, 0);
4301 lsarpc_dissect_struct_lsa_TranslatedSid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4303 proto_item
*item
= NULL
;
4304 proto_tree
*tree
= NULL
;
4309 old_offset
= offset
;
4312 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4313 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TranslatedSid
);
4316 offset
= lsarpc_dissect_element_lsa_TranslatedSid_sid_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
4318 offset
= lsarpc_dissect_element_lsa_TranslatedSid_rid(tvb
, offset
, pinfo
, tree
, di
, drep
);
4320 offset
= lsarpc_dissect_element_lsa_TranslatedSid_sid_index(tvb
, offset
, pinfo
, tree
, di
, drep
);
4323 proto_item_set_len(item
, offset
-old_offset
);
4326 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4335 /* IDL: [range(0,1000)] uint32 count; */
4336 /* IDL: [size_is(count)] [unique(1)] lsa_TranslatedSid *sids; */
4340 lsarpc_dissect_element_lsa_TransSidArray_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4342 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TransSidArray_count
, 0);
4348 lsarpc_dissect_element_lsa_TransSidArray_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4350 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TransSidArray_sids_
, NDR_POINTER_UNIQUE
, "Pointer to Sids (lsa_TranslatedSid)",hf_lsarpc_lsa_TransSidArray_sids
);
4356 lsarpc_dissect_element_lsa_TransSidArray_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4358 struct ndr_generic_array nga
= { .is_conformant
= false, };
4360 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
4362 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_TransSidArray_sids__
);
4368 lsarpc_dissect_element_lsa_TransSidArray_sids__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4370 offset
= lsarpc_dissect_struct_lsa_TranslatedSid(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TransSidArray_sids
,0);
4376 lsarpc_dissect_struct_lsa_TransSidArray(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4378 proto_item
*item
= NULL
;
4379 proto_tree
*tree
= NULL
;
4384 old_offset
= offset
;
4387 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4388 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TransSidArray
);
4391 offset
= lsarpc_dissect_element_lsa_TransSidArray_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
4393 offset
= lsarpc_dissect_element_lsa_TransSidArray_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
4396 proto_item_set_len(item
, offset
-old_offset
);
4399 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4408 /* IDL: [range(0,1000)] uint32 count; */
4409 /* IDL: [size_is(count)] [unique(1)] lsa_DomainInfo *domains; */
4410 /* IDL: uint32 max_size; */
4414 lsarpc_dissect_element_lsa_RefDomainList_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4416 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_RefDomainList_count
, 0);
4422 lsarpc_dissect_element_lsa_RefDomainList_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4424 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RefDomainList_domains_
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_DomainInfo)",hf_lsarpc_lsa_RefDomainList_domains
);
4430 lsarpc_dissect_element_lsa_RefDomainList_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4432 struct ndr_generic_array nga
= { .is_conformant
= false, };
4434 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
4436 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_RefDomainList_domains__
);
4442 lsarpc_dissect_element_lsa_RefDomainList_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4444 offset
= lsarpc_dissect_struct_lsa_DomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_RefDomainList_domains
,0);
4450 lsarpc_dissect_element_lsa_RefDomainList_max_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4452 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_RefDomainList_max_size
, 0);
4458 lsarpc_dissect_struct_lsa_RefDomainList(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4460 proto_item
*item
= NULL
;
4461 proto_tree
*tree
= NULL
;
4466 old_offset
= offset
;
4469 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4470 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_RefDomainList
);
4473 offset
= lsarpc_dissect_element_lsa_RefDomainList_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
4475 offset
= lsarpc_dissect_element_lsa_RefDomainList_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
4477 offset
= lsarpc_dissect_element_lsa_RefDomainList_max_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
4480 proto_item_set_len(item
, offset
-old_offset
);
4483 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4492 /* IDL: LSA_LOOKUP_NAMES_ALL=1, */
4493 /* IDL: LSA_LOOKUP_NAMES_DOMAINS_ONLY=2, */
4494 /* IDL: LSA_LOOKUP_NAMES_PRIMARY_DOMAIN_ONLY=3, */
4495 /* IDL: LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY=4, */
4496 /* IDL: LSA_LOOKUP_NAMES_FOREST_TRUSTS_ONLY=5, */
4497 /* IDL: LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY2=6, */
4498 /* IDL: LSA_LOOKUP_NAMES_RODC_REFERRAL_TO_FULL_DC=7, */
4502 lsarpc_dissect_enum_lsa_LookupNamesLevel(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
4504 uint32_t parameter
=0;
4508 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
4517 /* IDL: lsa_SidType sid_type; */
4518 /* IDL: lsa_String name; */
4519 /* IDL: uint32 sid_index; */
4523 lsarpc_dissect_element_lsa_TranslatedName_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4525 offset
= lsarpc_dissect_enum_lsa_SidType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedName_sid_type
, 0);
4531 lsarpc_dissect_element_lsa_TranslatedName_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4533 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TranslatedName_name
,0);
4539 lsarpc_dissect_element_lsa_TranslatedName_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4541 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedName_sid_index
, 0);
4547 lsarpc_dissect_struct_lsa_TranslatedName(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4549 proto_item
*item
= NULL
;
4550 proto_tree
*tree
= NULL
;
4555 old_offset
= offset
;
4558 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4559 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TranslatedName
);
4562 offset
= lsarpc_dissect_element_lsa_TranslatedName_sid_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
4564 offset
= lsarpc_dissect_element_lsa_TranslatedName_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
4566 offset
= lsarpc_dissect_element_lsa_TranslatedName_sid_index(tvb
, offset
, pinfo
, tree
, di
, drep
);
4569 proto_item_set_len(item
, offset
-old_offset
);
4572 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4581 /* IDL: [range(0,20480)] uint32 count; */
4582 /* IDL: [size_is(count)] [unique(1)] lsa_TranslatedName *names; */
4586 lsarpc_dissect_element_lsa_TransNameArray_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4588 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TransNameArray_count
, 0);
4594 lsarpc_dissect_element_lsa_TransNameArray_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4596 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TransNameArray_names_
, NDR_POINTER_UNIQUE
, "Pointer to Names (lsa_TranslatedName)",hf_lsarpc_lsa_TransNameArray_names
);
4602 lsarpc_dissect_element_lsa_TransNameArray_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4604 struct ndr_generic_array nga
= { .is_conformant
= false, };
4606 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
4608 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_TransNameArray_names__
);
4614 lsarpc_dissect_element_lsa_TransNameArray_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4616 offset
= lsarpc_dissect_struct_lsa_TranslatedName(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TransNameArray_names
,0);
4622 lsarpc_dissect_struct_lsa_TransNameArray(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4624 proto_item
*item
= NULL
;
4625 proto_tree
*tree
= NULL
;
4630 old_offset
= offset
;
4633 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4634 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TransNameArray
);
4637 offset
= lsarpc_dissect_element_lsa_TransNameArray_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
4639 offset
= lsarpc_dissect_element_lsa_TransNameArray_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
4642 proto_item_set_len(item
, offset
-old_offset
);
4645 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4654 /* IDL: lsa_LUID luid; */
4655 /* IDL: uint32 attribute; */
4659 lsarpc_dissect_element_lsa_LUIDAttribute_luid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4661 offset
= lsarpc_dissect_struct_lsa_LUID(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LUIDAttribute_luid
,0);
4667 lsarpc_dissect_element_lsa_LUIDAttribute_attribute(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4669 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LUIDAttribute_attribute
, 0);
4675 lsarpc_dissect_struct_lsa_LUIDAttribute(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4677 proto_item
*item
= NULL
;
4678 proto_tree
*tree
= NULL
;
4683 old_offset
= offset
;
4686 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4687 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_LUIDAttribute
);
4690 offset
= lsarpc_dissect_element_lsa_LUIDAttribute_luid(tvb
, offset
, pinfo
, tree
, di
, drep
);
4692 offset
= lsarpc_dissect_element_lsa_LUIDAttribute_attribute(tvb
, offset
, pinfo
, tree
, di
, drep
);
4695 proto_item_set_len(item
, offset
-old_offset
);
4698 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4707 /* IDL: [range(0,1000)] uint32 count; */
4708 /* IDL: uint32 unknown; */
4709 /* IDL: [size_is(count)] lsa_LUIDAttribute set[*]; */
4713 lsarpc_dissect_element_lsa_PrivilegeSet_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4715 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_PrivilegeSet_count
, 0);
4721 lsarpc_dissect_element_lsa_PrivilegeSet_unknown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4723 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_PrivilegeSet_unknown
, 0);
4729 lsarpc_dissect_element_lsa_PrivilegeSet_set(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, struct ndr_generic_array
*nga
)
4732 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, nga
, lsarpc_dissect_element_lsa_PrivilegeSet_set_
);
4738 lsarpc_dissect_element_lsa_PrivilegeSet_set_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4740 offset
= lsarpc_dissect_struct_lsa_LUIDAttribute(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PrivilegeSet_set
,0);
4746 lsarpc_dissect_conformant_lsa_PrivilegeSet_set(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, struct ndr_generic_array
*nga
)
4748 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, nga
);
4754 lsarpc_dissect_struct_lsa_PrivilegeSet(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4756 struct ndr_generic_array nga_set
= { .is_conformant
= false, };
4757 proto_item
*item
= NULL
;
4758 proto_tree
*tree
= NULL
;
4761 offset
= lsarpc_dissect_conformant_lsa_PrivilegeSet_set(tvb
, offset
, pinfo
, parent_tree
, di
, drep
, &nga_set
);
4765 old_offset
= offset
;
4768 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4769 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_PrivilegeSet
);
4772 offset
= lsarpc_dissect_element_lsa_PrivilegeSet_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
4774 offset
= lsarpc_dissect_element_lsa_PrivilegeSet_unknown(tvb
, offset
, pinfo
, tree
, di
, drep
);
4776 offset
= lsarpc_dissect_element_lsa_PrivilegeSet_set(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga_set
);
4779 proto_item_set_len(item
, offset
-old_offset
);
4787 /* IDL: uint3264 length; */
4788 /* IDL: uint3264 size; */
4789 /* IDL: [length_is(length)] [size_is(size)] [unique(1)] uint8 *data; */
4793 lsarpc_dissect_element_lsa_DATA_BUF_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4795 offset
= dissect_ndr_uint3264(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DATA_BUF_length
, NULL
);
4801 lsarpc_dissect_element_lsa_DATA_BUF_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4803 offset
= dissect_ndr_uint3264(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DATA_BUF_size
, NULL
);
4809 lsarpc_dissect_element_lsa_DATA_BUF_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4811 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DATA_BUF_data_
, NDR_POINTER_UNIQUE
, "Pointer to Data (uint8)",hf_lsarpc_lsa_DATA_BUF_data
);
4817 lsarpc_dissect_element_lsa_DATA_BUF_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4819 struct ndr_generic_array nga
= { .is_conformant
= false, };
4821 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
4823 offset
= dissect_ndr_varying_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
4825 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_DATA_BUF_data__
);
4831 lsarpc_dissect_element_lsa_DATA_BUF_data__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4833 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DATA_BUF_data
, 0);
4839 lsarpc_dissect_struct_lsa_DATA_BUF(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4841 proto_item
*item
= NULL
;
4842 proto_tree
*tree
= NULL
;
4847 old_offset
= offset
;
4850 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4851 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DATA_BUF
);
4854 offset
= lsarpc_dissect_element_lsa_DATA_BUF_length(tvb
, offset
, pinfo
, tree
, di
, drep
);
4856 offset
= lsarpc_dissect_element_lsa_DATA_BUF_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
4858 offset
= lsarpc_dissect_element_lsa_DATA_BUF_data(tvb
, offset
, pinfo
, tree
, di
, drep
);
4861 proto_item_set_len(item
, offset
-old_offset
);
4864 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4873 /* IDL: [range(0,65536)] uint32 size; */
4874 /* IDL: [size_is(size)] [unique(1)] uint8 *data; */
4878 lsarpc_dissect_element_lsa_DATA_BUF2_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4880 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DATA_BUF2_size
, 0);
4886 lsarpc_dissect_element_lsa_DATA_BUF2_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4888 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DATA_BUF2_data_
, NDR_POINTER_UNIQUE
, "Pointer to Data (uint8)",hf_lsarpc_lsa_DATA_BUF2_data
);
4894 lsarpc_dissect_element_lsa_DATA_BUF2_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4896 struct ndr_generic_array nga
= { .is_conformant
= false, };
4898 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
4900 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_DATA_BUF2_data__
);
4906 lsarpc_dissect_element_lsa_DATA_BUF2_data__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4908 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DATA_BUF2_data
, 0);
4914 lsarpc_dissect_struct_lsa_DATA_BUF2(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4916 proto_item
*item
= NULL
;
4917 proto_tree
*tree
= NULL
;
4922 old_offset
= offset
;
4925 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4926 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DATA_BUF2
);
4929 offset
= lsarpc_dissect_element_lsa_DATA_BUF2_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
4931 offset
= lsarpc_dissect_element_lsa_DATA_BUF2_data(tvb
, offset
, pinfo
, tree
, di
, drep
);
4934 proto_item_set_len(item
, offset
-old_offset
);
4937 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4946 /* IDL: LSA_TRUSTED_DOMAIN_INFO_NAME=1, */
4947 /* IDL: LSA_TRUSTED_DOMAIN_INFO_CONTROLLERS=2, */
4948 /* IDL: LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET=3, */
4949 /* IDL: LSA_TRUSTED_DOMAIN_INFO_PASSWORD=4, */
4950 /* IDL: LSA_TRUSTED_DOMAIN_INFO_BASIC=5, */
4951 /* IDL: LSA_TRUSTED_DOMAIN_INFO_INFO_EX=6, */
4952 /* IDL: LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO=7, */
4953 /* IDL: LSA_TRUSTED_DOMAIN_INFO_FULL_INFO=8, */
4954 /* IDL: LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL=9, */
4955 /* IDL: LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL=10, */
4956 /* IDL: LSA_TRUSTED_DOMAIN_INFO_INFO_EX2_INTERNAL=11, */
4957 /* IDL: LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_2_INTERNAL=12, */
4958 /* IDL: LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES=13, */
4959 /* IDL: LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL_AES=14, */
4960 /* IDL: LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL_AES=15, */
4964 lsarpc_dissect_enum_lsa_TrustDomInfoEnum(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
4966 uint32_t parameter
=0;
4970 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
4979 /* IDL: LSA_TRUST_DIRECTION_INBOUND = 0x00000001 , */
4980 /* IDL: LSA_TRUST_DIRECTION_OUTBOUND = 0x00000002 , */
4984 lsarpc_dissect_bitmap_lsa_TrustDirection(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4987 static int * const lsarpc_lsa_TrustDirection_fields
[] = {
4988 &hf_lsarpc_lsa_TrustDirection_LSA_TRUST_DIRECTION_INBOUND
,
4989 &hf_lsarpc_lsa_TrustDirection_LSA_TRUST_DIRECTION_OUTBOUND
,
4995 item
= proto_tree_add_bitmask_with_flags(parent_tree
, tvb
, offset
, hf_index
,
4996 ett_lsarpc_lsa_TrustDirection
, lsarpc_lsa_TrustDirection_fields
, DREP_ENC_INTEGER(drep
), BMT_NO_FALSE
);
4998 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, parent_tree
, di
, drep
, -1, &flags
);
5001 proto_item_append_text(item
, ": (No values set)");
5003 if (flags
& (~0x00000003)) {
5004 flags
&= (~0x00000003);
5005 proto_item_append_text(item
, "Unknown bitmap value 0x%x", flags
);
5013 /* IDL: LSA_TRUST_TYPE_DOWNLEVEL=0x00000001, */
5014 /* IDL: LSA_TRUST_TYPE_UPLEVEL=0x00000002, */
5015 /* IDL: LSA_TRUST_TYPE_MIT=0x00000003, */
5016 /* IDL: LSA_TRUST_TYPE_DCE=0x00000004, */
5020 lsarpc_dissect_enum_lsa_TrustType(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
5022 uint32_t parameter
=0;
5026 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
5035 /* IDL: LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE = 0x00000001 , */
5036 /* IDL: LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY = 0x00000002 , */
5037 /* IDL: LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN = 0x00000004 , */
5038 /* IDL: LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE = 0x00000008 , */
5039 /* IDL: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION = 0x00000010 , */
5040 /* IDL: LSA_TRUST_ATTRIBUTE_WITHIN_FOREST = 0x00000020 , */
5041 /* IDL: LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL = 0x00000040 , */
5042 /* IDL: LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION = 0x00000080 , */
5043 /* IDL: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION = 0x00000200 , */
5044 /* IDL: LSA_TRUST_ATTRIBUTE_PIM_TRUST = 0x00000400 , */
5045 /* IDL: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION = 0x00000800 , */
5049 lsarpc_dissect_bitmap_lsa_TrustAttributes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5052 static int * const lsarpc_lsa_TrustAttributes_fields
[] = {
5053 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE
,
5054 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY
,
5055 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN
,
5056 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE
,
5057 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION
,
5058 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_WITHIN_FOREST
,
5059 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL
,
5060 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION
,
5061 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION
,
5062 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_PIM_TRUST
,
5063 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION
,
5069 item
= proto_tree_add_bitmask_with_flags(parent_tree
, tvb
, offset
, hf_index
,
5070 ett_lsarpc_lsa_TrustAttributes
, lsarpc_lsa_TrustAttributes_fields
, DREP_ENC_INTEGER(drep
), BMT_NO_FALSE
);
5072 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, parent_tree
, di
, drep
, -1, &flags
);
5075 proto_item_append_text(item
, ": (No values set)");
5077 if (flags
& (~0x00000eff)) {
5078 flags
&= (~0x00000eff);
5079 proto_item_append_text(item
, "Unknown bitmap value 0x%x", flags
);
5087 /* IDL: lsa_StringLarge netbios_name; */
5091 lsarpc_dissect_element_lsa_TrustDomainInfoName_netbios_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5093 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoName_netbios_name
,0);
5099 lsarpc_dissect_struct_lsa_TrustDomainInfoName(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5101 proto_item
*item
= NULL
;
5102 proto_tree
*tree
= NULL
;
5107 old_offset
= offset
;
5110 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5111 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoName
);
5114 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoName_netbios_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
5117 proto_item_set_len(item
, offset
-old_offset
);
5120 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5129 /* IDL: uint32 entries; */
5130 /* IDL: [size_is(entries)] [unique(1)] lsa_StringLarge *netbios_names; */
5134 lsarpc_dissect_element_lsa_TrustDomainInfoControllers_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5136 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoControllers_entries
, 0);
5142 lsarpc_dissect_element_lsa_TrustDomainInfoControllers_netbios_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5144 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoControllers_netbios_names_
, NDR_POINTER_UNIQUE
, "Pointer to Netbios Names (lsa_StringLarge)",hf_lsarpc_lsa_TrustDomainInfoControllers_netbios_names
);
5150 lsarpc_dissect_element_lsa_TrustDomainInfoControllers_netbios_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5152 struct ndr_generic_array nga
= { .is_conformant
= false, };
5154 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
5156 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_TrustDomainInfoControllers_netbios_names__
);
5162 lsarpc_dissect_element_lsa_TrustDomainInfoControllers_netbios_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5164 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoControllers_netbios_names
,0);
5170 lsarpc_dissect_struct_lsa_TrustDomainInfoControllers(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5172 proto_item
*item
= NULL
;
5173 proto_tree
*tree
= NULL
;
5178 old_offset
= offset
;
5181 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5182 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoControllers
);
5185 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoControllers_entries(tvb
, offset
, pinfo
, tree
, di
, drep
);
5187 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoControllers_netbios_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
5190 proto_item_set_len(item
, offset
-old_offset
);
5193 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5202 /* IDL: uint32 posix_offset; */
5206 lsarpc_dissect_element_lsa_TrustDomainInfoPosixOffset_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5208 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoPosixOffset_posix_offset
, 0);
5214 lsarpc_dissect_struct_lsa_TrustDomainInfoPosixOffset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5216 proto_item
*item
= NULL
;
5217 proto_tree
*tree
= NULL
;
5222 old_offset
= offset
;
5225 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5226 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoPosixOffset
);
5229 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoPosixOffset_posix_offset(tvb
, offset
, pinfo
, tree
, di
, drep
);
5232 proto_item_set_len(item
, offset
-old_offset
);
5235 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5244 /* IDL: [unique(1)] lsa_DATA_BUF *password; */
5245 /* IDL: [unique(1)] lsa_DATA_BUF *old_password; */
5249 lsarpc_dissect_element_lsa_TrustDomainInfoPassword_password(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5251 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoPassword_password_
, NDR_POINTER_UNIQUE
, "Pointer to Password (lsa_DATA_BUF)",hf_lsarpc_lsa_TrustDomainInfoPassword_password
);
5257 lsarpc_dissect_element_lsa_TrustDomainInfoPassword_password_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5259 offset
= lsarpc_dissect_struct_lsa_DATA_BUF(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoPassword_password
,0);
5265 lsarpc_dissect_element_lsa_TrustDomainInfoPassword_old_password(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5267 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoPassword_old_password_
, NDR_POINTER_UNIQUE
, "Pointer to Old Password (lsa_DATA_BUF)",hf_lsarpc_lsa_TrustDomainInfoPassword_old_password
);
5273 lsarpc_dissect_element_lsa_TrustDomainInfoPassword_old_password_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5275 offset
= lsarpc_dissect_struct_lsa_DATA_BUF(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoPassword_old_password
,0);
5281 lsarpc_dissect_struct_lsa_TrustDomainInfoPassword(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5283 proto_item
*item
= NULL
;
5284 proto_tree
*tree
= NULL
;
5289 old_offset
= offset
;
5292 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5293 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoPassword
);
5296 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoPassword_password(tvb
, offset
, pinfo
, tree
, di
, drep
);
5298 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoPassword_old_password(tvb
, offset
, pinfo
, tree
, di
, drep
);
5301 proto_item_set_len(item
, offset
-old_offset
);
5304 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5313 /* IDL: lsa_String netbios_name; */
5314 /* IDL: [unique(1)] dom_sid2 *sid; */
5318 lsarpc_dissect_element_lsa_TrustDomainInfoBasic_netbios_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5320 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoBasic_netbios_name
,0);
5326 lsarpc_dissect_element_lsa_TrustDomainInfoBasic_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5328 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoBasic_sid_
, NDR_POINTER_UNIQUE
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_TrustDomainInfoBasic_sid
);
5334 lsarpc_dissect_element_lsa_TrustDomainInfoBasic_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5336 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoBasic_sid
,0);
5342 lsarpc_dissect_struct_lsa_TrustDomainInfoBasic(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5344 proto_item
*item
= NULL
;
5345 proto_tree
*tree
= NULL
;
5350 old_offset
= offset
;
5353 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5354 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoBasic
);
5357 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoBasic_netbios_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
5359 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoBasic_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
5362 proto_item_set_len(item
, offset
-old_offset
);
5365 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5374 /* IDL: lsa_StringLarge domain_name; */
5375 /* IDL: lsa_StringLarge netbios_name; */
5376 /* IDL: [unique(1)] dom_sid2 *sid; */
5377 /* IDL: lsa_TrustDirection trust_direction; */
5378 /* IDL: lsa_TrustType trust_type; */
5379 /* IDL: lsa_TrustAttributes trust_attributes; */
5383 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5385 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoInfoEx_domain_name
,0);
5391 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_netbios_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5393 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoInfoEx_netbios_name
,0);
5399 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5401 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_sid_
, NDR_POINTER_UNIQUE
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_TrustDomainInfoInfoEx_sid
);
5407 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5409 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoInfoEx_sid
,0);
5415 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_trust_direction(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5417 offset
= lsarpc_dissect_bitmap_lsa_TrustDirection(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoInfoEx_trust_direction
, 0);
5423 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_trust_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5425 offset
= lsarpc_dissect_enum_lsa_TrustType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoInfoEx_trust_type
, 0);
5431 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_trust_attributes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5433 offset
= lsarpc_dissect_bitmap_lsa_TrustAttributes(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoInfoEx_trust_attributes
, 0);
5439 lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5441 proto_item
*item
= NULL
;
5442 proto_tree
*tree
= NULL
;
5447 old_offset
= offset
;
5450 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5451 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoInfoEx
);
5454 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_domain_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
5456 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_netbios_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
5458 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
5460 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_trust_direction(tvb
, offset
, pinfo
, tree
, di
, drep
);
5462 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_trust_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
5464 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_trust_attributes(tvb
, offset
, pinfo
, tree
, di
, drep
);
5467 proto_item_set_len(item
, offset
-old_offset
);
5470 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5479 /* IDL: TRUST_AUTH_TYPE_NONE=0, */
5480 /* IDL: TRUST_AUTH_TYPE_NT4OWF=1, */
5481 /* IDL: TRUST_AUTH_TYPE_CLEAR=2, */
5482 /* IDL: TRUST_AUTH_TYPE_VERSION=3, */
5486 lsarpc_dissect_enum_lsa_TrustAuthType(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
5488 uint32_t parameter
=0;
5492 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
5501 /* IDL: NTTIME_hyper last_update_time; */
5502 /* IDL: lsa_TrustAuthType AuthType; */
5503 /* IDL: lsa_DATA_BUF2 data; */
5507 lsarpc_dissect_element_lsa_TrustDomainInfoBuffer_last_update_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5509 offset
= dissect_ndr_nt_NTTIME_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoBuffer_last_update_time
);
5515 lsarpc_dissect_element_lsa_TrustDomainInfoBuffer_AuthType(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5517 offset
= lsarpc_dissect_enum_lsa_TrustAuthType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoBuffer_AuthType
, 0);
5523 lsarpc_dissect_element_lsa_TrustDomainInfoBuffer_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5525 offset
= lsarpc_dissect_struct_lsa_DATA_BUF2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoBuffer_data
,0);
5531 lsarpc_dissect_struct_lsa_TrustDomainInfoBuffer(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5533 proto_item
*item
= NULL
;
5534 proto_tree
*tree
= NULL
;
5539 old_offset
= offset
;
5542 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5543 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoBuffer
);
5546 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoBuffer_last_update_time(tvb
, offset
, pinfo
, tree
, di
, drep
);
5548 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoBuffer_AuthType(tvb
, offset
, pinfo
, tree
, di
, drep
);
5550 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoBuffer_data(tvb
, offset
, pinfo
, tree
, di
, drep
);
5553 proto_item_set_len(item
, offset
-old_offset
);
5556 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5565 /* IDL: uint32 incoming_count; */
5566 /* IDL: [unique(1)] lsa_TrustDomainInfoBuffer *incoming_current_auth_info; */
5567 /* IDL: [unique(1)] lsa_TrustDomainInfoBuffer *incoming_previous_auth_info; */
5568 /* IDL: uint32 outgoing_count; */
5569 /* IDL: [unique(1)] lsa_TrustDomainInfoBuffer *outgoing_current_auth_info; */
5570 /* IDL: [unique(1)] lsa_TrustDomainInfoBuffer *outgoing_previous_auth_info; */
5574 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5576 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_count
, 0);
5582 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5584 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info_
, NDR_POINTER_UNIQUE
, "Pointer to Incoming Current Auth Info (lsa_TrustDomainInfoBuffer)",hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info
);
5590 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5592 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoBuffer(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info
,0);
5598 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5600 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info_
, NDR_POINTER_UNIQUE
, "Pointer to Incoming Previous Auth Info (lsa_TrustDomainInfoBuffer)",hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info
);
5606 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5608 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoBuffer(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info
,0);
5614 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5616 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_count
, 0);
5622 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5624 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info_
, NDR_POINTER_UNIQUE
, "Pointer to Outgoing Current Auth Info (lsa_TrustDomainInfoBuffer)",hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info
);
5630 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5632 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoBuffer(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info
,0);
5638 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5640 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info_
, NDR_POINTER_UNIQUE
, "Pointer to Outgoing Previous Auth Info (lsa_TrustDomainInfoBuffer)",hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info
);
5646 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5648 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoBuffer(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info
,0);
5654 lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5656 proto_item
*item
= NULL
;
5657 proto_tree
*tree
= NULL
;
5662 old_offset
= offset
;
5665 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5666 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoAuthInfo
);
5669 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
5671 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
5673 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
5675 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
5677 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
5679 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
5682 proto_item_set_len(item
, offset
-old_offset
);
5685 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5694 /* IDL: lsa_TrustDomainInfoInfoEx info_ex; */
5695 /* IDL: lsa_TrustDomainInfoPosixOffset posix_offset; */
5696 /* IDL: lsa_TrustDomainInfoAuthInfo auth_info; */
5700 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5702 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfo_info_ex
,0);
5708 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5710 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoPosixOffset(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfo_posix_offset
,0);
5716 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5718 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfo_auth_info
,0);
5724 lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5726 proto_item
*item
= NULL
;
5727 proto_tree
*tree
= NULL
;
5732 old_offset
= offset
;
5735 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5736 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoFullInfo
);
5739 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo_info_ex(tvb
, offset
, pinfo
, tree
, di
, drep
);
5741 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo_posix_offset(tvb
, offset
, pinfo
, tree
, di
, drep
);
5743 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
5746 proto_item_set_len(item
, offset
-old_offset
);
5749 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5758 /* IDL: lsa_DATA_BUF2 auth_blob; */
5762 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternal_auth_blob(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5764 offset
= lsarpc_dissect_struct_lsa_DATA_BUF2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternal_auth_blob
,0);
5770 lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5772 proto_item
*item
= NULL
;
5773 proto_tree
*tree
= NULL
;
5778 old_offset
= offset
;
5781 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5782 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoAuthInfoInternal
);
5785 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternal_auth_blob(tvb
, offset
, pinfo
, tree
, di
, drep
);
5788 proto_item_set_len(item
, offset
-old_offset
);
5791 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5800 /* IDL: lsa_TrustDomainInfoInfoEx info_ex; */
5801 /* IDL: lsa_TrustDomainInfoPosixOffset posix_offset; */
5802 /* IDL: lsa_TrustDomainInfoAuthInfoInternal auth_info; */
5806 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternal_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5808 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfoInternal_info_ex
,0);
5814 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternal_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5816 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoPosixOffset(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfoInternal_posix_offset
,0);
5822 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternal_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5824 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternal(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfoInternal_auth_info
,0);
5830 lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfoInternal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5832 proto_item
*item
= NULL
;
5833 proto_tree
*tree
= NULL
;
5838 old_offset
= offset
;
5841 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5842 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoFullInfoInternal
);
5845 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternal_info_ex(tvb
, offset
, pinfo
, tree
, di
, drep
);
5847 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternal_posix_offset(tvb
, offset
, pinfo
, tree
, di
, drep
);
5849 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternal_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
5852 proto_item_set_len(item
, offset
-old_offset
);
5855 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5864 /* IDL: uint8 auth_data[64]; */
5865 /* IDL: uint8 salt[16]; */
5866 /* IDL: lsa_DATA_BUF2 cipher; */
5870 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_auth_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5873 for (i
= 0; i
< 64; i
++)
5874 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_auth_data_(tvb
, offset
, pinfo
, tree
, di
, drep
);
5880 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_auth_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5882 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES_auth_data
, 0);
5888 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_salt(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5891 for (i
= 0; i
< 16; i
++)
5892 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_salt_(tvb
, offset
, pinfo
, tree
, di
, drep
);
5898 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_salt_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5900 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES_salt
, 0);
5906 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_cipher(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5908 offset
= lsarpc_dissect_struct_lsa_DATA_BUF2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES_cipher
,0);
5914 lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternalAES(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5916 proto_item
*item
= NULL
;
5917 proto_tree
*tree
= NULL
;
5922 old_offset
= offset
;
5925 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5926 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES
);
5929 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_auth_data(tvb
, offset
, pinfo
, tree
, di
, drep
);
5931 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_salt(tvb
, offset
, pinfo
, tree
, di
, drep
);
5933 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_cipher(tvb
, offset
, pinfo
, tree
, di
, drep
);
5936 proto_item_set_len(item
, offset
-old_offset
);
5939 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5948 /* IDL: lsa_TrustDomainInfoInfoEx info_ex; */
5949 /* IDL: lsa_TrustDomainInfoPosixOffset posix_offset; */
5950 /* IDL: lsa_TrustDomainInfoAuthInfoInternalAES auth_info; */
5954 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternalAES_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5956 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES_info_ex
,0);
5962 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternalAES_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5964 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoPosixOffset(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES_posix_offset
,0);
5970 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternalAES_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5972 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternalAES(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES_auth_info
,0);
5978 lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfoInternalAES(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5980 proto_item
*item
= NULL
;
5981 proto_tree
*tree
= NULL
;
5986 old_offset
= offset
;
5989 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5990 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES
);
5993 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternalAES_info_ex(tvb
, offset
, pinfo
, tree
, di
, drep
);
5995 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternalAES_posix_offset(tvb
, offset
, pinfo
, tree
, di
, drep
);
5997 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternalAES_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
6000 proto_item_set_len(item
, offset
-old_offset
);
6003 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6012 /* IDL: lsa_TrustDomainInfoInfoEx info_ex; */
6013 /* IDL: uint32 forest_trust_length; */
6014 /* IDL: [size_is(forest_trust_length)] [unique(1)] uint8 *forest_trust_data; */
6018 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6020 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_info_ex
,0);
6026 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6028 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_length
, 0);
6034 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6036 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data_
, NDR_POINTER_UNIQUE
, "Pointer to Forest Trust Data (uint8)",hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data
);
6042 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6044 struct ndr_generic_array nga
= { .is_conformant
= false, };
6046 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
6048 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data__
);
6054 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6056 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data
, 0);
6062 lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx2Internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6064 proto_item
*item
= NULL
;
6065 proto_tree
*tree
= NULL
;
6070 old_offset
= offset
;
6073 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6074 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoInfoEx2Internal
);
6077 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_info_ex(tvb
, offset
, pinfo
, tree
, di
, drep
);
6079 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_length(tvb
, offset
, pinfo
, tree
, di
, drep
);
6081 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data(tvb
, offset
, pinfo
, tree
, di
, drep
);
6084 proto_item_set_len(item
, offset
-old_offset
);
6087 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6096 /* IDL: lsa_TrustDomainInfoInfoEx2Internal info; */
6097 /* IDL: lsa_TrustDomainInfoPosixOffset posix_offset; */
6098 /* IDL: lsa_TrustDomainInfoAuthInfo auth_info; */
6102 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo2Internal_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6104 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx2Internal(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfo2Internal_info
,0);
6110 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo2Internal_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6112 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoPosixOffset(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfo2Internal_posix_offset
,0);
6118 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo2Internal_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6120 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfo2Internal_auth_info
,0);
6126 lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfo2Internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6128 proto_item
*item
= NULL
;
6129 proto_tree
*tree
= NULL
;
6134 old_offset
= offset
;
6137 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6138 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoFullInfo2Internal
);
6141 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo2Internal_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
6143 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo2Internal_posix_offset(tvb
, offset
, pinfo
, tree
, di
, drep
);
6145 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo2Internal_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
6148 proto_item_set_len(item
, offset
-old_offset
);
6151 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6160 /* IDL: kerb_EncTypes enc_types; */
6164 lsarpc_dissect_element_lsa_TrustDomainInfoSupportedEncTypes_enc_types(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6166 offset
= lsarpc_dissect_bitmap_kerb_EncTypes(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoSupportedEncTypes_enc_types
, 0);
6172 lsarpc_dissect_struct_lsa_TrustDomainInfoSupportedEncTypes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6174 proto_item
*item
= NULL
;
6175 proto_tree
*tree
= NULL
;
6180 old_offset
= offset
;
6183 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6184 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoSupportedEncTypes
);
6187 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoSupportedEncTypes_enc_types(tvb
, offset
, pinfo
, tree
, di
, drep
);
6190 proto_item_set_len(item
, offset
-old_offset
);
6193 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6201 /* IDL: [switch_type(lsa_TrustDomInfoEnum)] union { */
6202 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_NAME)] [case(LSA_TRUSTED_DOMAIN_INFO_NAME)] lsa_TrustDomainInfoName name; */
6203 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_CONTROLLERS)] [case(LSA_TRUSTED_DOMAIN_INFO_CONTROLLERS)] lsa_TrustDomainInfoControllers controllers; */
6204 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET)] [case(LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET)] lsa_TrustDomainInfoPosixOffset posix_offset; */
6205 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_PASSWORD)] [case(LSA_TRUSTED_DOMAIN_INFO_PASSWORD)] lsa_TrustDomainInfoPassword password; */
6206 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_BASIC)] [case(LSA_TRUSTED_DOMAIN_INFO_BASIC)] lsa_TrustDomainInfoBasic info_basic; */
6207 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_INFO_EX)] [case(LSA_TRUSTED_DOMAIN_INFO_INFO_EX)] lsa_TrustDomainInfoInfoEx info_ex; */
6208 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO)] [case(LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO)] lsa_TrustDomainInfoAuthInfo auth_info; */
6209 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO)] [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO)] lsa_TrustDomainInfoFullInfo full_info; */
6210 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL)] [case(LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL)] lsa_TrustDomainInfoAuthInfoInternal auth_info_internal; */
6211 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL)] [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL)] lsa_TrustDomainInfoFullInfoInternal full_info_internal; */
6212 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_INFO_EX2_INTERNAL)] [case(LSA_TRUSTED_DOMAIN_INFO_INFO_EX2_INTERNAL)] lsa_TrustDomainInfoInfoEx2Internal info_ex2_internal; */
6213 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_2_INTERNAL)] [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_2_INTERNAL)] lsa_TrustDomainInfoFullInfo2Internal full_info2_internal; */
6214 /* IDL: [case(LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES)] [case(LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES)] lsa_TrustDomainInfoSupportedEncTypes enc_types; */
6215 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL_AES)] [case(LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL_AES)] lsa_TrustDomainInfoAuthInfoInternalAES auth_info_internal_aes; */
6216 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL_AES)] [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL_AES)] lsa_TrustDomainInfoFullInfoInternalAES full_info_internal_aes; */
6220 lsarpc_dissect_element_lsa_TrustedDomainInfo_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6222 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoName(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_name
,0);
6228 lsarpc_dissect_element_lsa_TrustedDomainInfo_controllers(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6230 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoControllers(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_controllers
,0);
6236 lsarpc_dissect_element_lsa_TrustedDomainInfo_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6238 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoPosixOffset(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_posix_offset
,0);
6244 lsarpc_dissect_element_lsa_TrustedDomainInfo_password(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6246 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoPassword(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_password
,0);
6252 lsarpc_dissect_element_lsa_TrustedDomainInfo_info_basic(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6254 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoBasic(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_info_basic
,0);
6260 lsarpc_dissect_element_lsa_TrustedDomainInfo_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6262 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_info_ex
,0);
6268 lsarpc_dissect_element_lsa_TrustedDomainInfo_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6270 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_auth_info
,0);
6276 lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6278 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_full_info
,0);
6284 lsarpc_dissect_element_lsa_TrustedDomainInfo_auth_info_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6286 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternal(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_auth_info_internal
,0);
6292 lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6294 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfoInternal(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_full_info_internal
,0);
6300 lsarpc_dissect_element_lsa_TrustedDomainInfo_info_ex2_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6302 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx2Internal(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_info_ex2_internal
,0);
6308 lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info2_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6310 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfo2Internal(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_full_info2_internal
,0);
6316 lsarpc_dissect_element_lsa_TrustedDomainInfo_enc_types(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6318 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoSupportedEncTypes(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_enc_types
,0);
6324 lsarpc_dissect_element_lsa_TrustedDomainInfo_auth_info_internal_aes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6326 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternalAES(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_auth_info_internal_aes
,0);
6332 lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info_internal_aes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6334 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfoInternalAES(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_full_info_internal_aes
,0);
6340 lsarpc_dissect_lsa_TrustedDomainInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6342 proto_item
*item
= NULL
;
6343 proto_tree
*tree
= NULL
;
6347 old_offset
= offset
;
6349 tree
= proto_tree_add_subtree(parent_tree
, tvb
, offset
, -1, ett_lsarpc_lsa_TrustedDomainInfo
, &item
, "lsa_TrustedDomainInfo");
6352 UNION_ALIGN_TO_5_BYTES
;
6353 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, &level
);
6354 UNION_ALIGN_TO_5_BYTES
;
6357 case LSA_TRUSTED_DOMAIN_INFO_NAME
:
6358 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
6361 case LSA_TRUSTED_DOMAIN_INFO_CONTROLLERS
:
6362 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_controllers(tvb
, offset
, pinfo
, tree
, di
, drep
);
6365 case LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET
:
6366 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_posix_offset(tvb
, offset
, pinfo
, tree
, di
, drep
);
6369 case LSA_TRUSTED_DOMAIN_INFO_PASSWORD
:
6370 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_password(tvb
, offset
, pinfo
, tree
, di
, drep
);
6373 case LSA_TRUSTED_DOMAIN_INFO_BASIC
:
6374 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_info_basic(tvb
, offset
, pinfo
, tree
, di
, drep
);
6377 case LSA_TRUSTED_DOMAIN_INFO_INFO_EX
:
6378 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_info_ex(tvb
, offset
, pinfo
, tree
, di
, drep
);
6381 case LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO
:
6382 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
6385 case LSA_TRUSTED_DOMAIN_INFO_FULL_INFO
:
6386 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
6389 case LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL
:
6390 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_auth_info_internal(tvb
, offset
, pinfo
, tree
, di
, drep
);
6393 case LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL
:
6394 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info_internal(tvb
, offset
, pinfo
, tree
, di
, drep
);
6397 case LSA_TRUSTED_DOMAIN_INFO_INFO_EX2_INTERNAL
:
6398 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_info_ex2_internal(tvb
, offset
, pinfo
, tree
, di
, drep
);
6401 case LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_2_INTERNAL
:
6402 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info2_internal(tvb
, offset
, pinfo
, tree
, di
, drep
);
6405 case LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES
:
6406 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_enc_types(tvb
, offset
, pinfo
, tree
, di
, drep
);
6409 case LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL_AES
:
6410 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_auth_info_internal_aes(tvb
, offset
, pinfo
, tree
, di
, drep
);
6413 case LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL_AES
:
6414 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info_internal_aes(tvb
, offset
, pinfo
, tree
, di
, drep
);
6417 proto_item_set_len(item
, offset
-old_offset
);
6424 /* IDL: [unique(1)] lsa_DATA_BUF *buf; */
6428 lsarpc_dissect_element_lsa_DATA_BUF_PTR_buf(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6430 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DATA_BUF_PTR_buf_
, NDR_POINTER_UNIQUE
, "Pointer to Buf (lsa_DATA_BUF)",hf_lsarpc_lsa_DATA_BUF_PTR_buf
);
6436 lsarpc_dissect_element_lsa_DATA_BUF_PTR_buf_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6438 offset
= lsarpc_dissect_struct_lsa_DATA_BUF(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DATA_BUF_PTR_buf
,0);
6444 lsarpc_dissect_struct_lsa_DATA_BUF_PTR(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6446 proto_item
*item
= NULL
;
6447 proto_tree
*tree
= NULL
;
6452 old_offset
= offset
;
6455 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6456 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DATA_BUF_PTR
);
6459 offset
= lsarpc_dissect_element_lsa_DATA_BUF_PTR_buf(tvb
, offset
, pinfo
, tree
, di
, drep
);
6462 proto_item_set_len(item
, offset
-old_offset
);
6465 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6474 /* IDL: [charset(UTF16)] [unique(1)] uint16 *name; */
6478 lsarpc_dissect_element_lsa_RightAttribute_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6480 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RightAttribute_name_
, NDR_POINTER_UNIQUE
, "Pointer to Name (uint16)",hf_lsarpc_lsa_RightAttribute_name
);
6486 lsarpc_dissect_element_lsa_RightAttribute_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6489 struct ndr_generic_array nga
= { .is_conformant
= false, };
6491 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
6493 offset
= dissect_ndr_varying_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
6494 offset
= dissect_ndr_generic_array_string(tvb
, offset
, pinfo
, tree
, di
, drep
, sizeof(uint16_t), hf_lsarpc_lsa_RightAttribute_name
, false, &nga
, &data
);
6495 proto_item_append_text(tree
, ": %s", data
);
6501 lsarpc_dissect_struct_lsa_RightAttribute(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6503 proto_item
*item
= NULL
;
6504 proto_tree
*tree
= NULL
;
6509 old_offset
= offset
;
6512 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6513 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_RightAttribute
);
6516 offset
= lsarpc_dissect_element_lsa_RightAttribute_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
6519 proto_item_set_len(item
, offset
-old_offset
);
6522 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6531 /* IDL: [range(0,256)] uint32 count; */
6532 /* IDL: [size_is(count)] [unique(1)] lsa_StringLarge *names; */
6536 lsarpc_dissect_element_lsa_RightSet_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6538 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_RightSet_count
, 0);
6544 lsarpc_dissect_element_lsa_RightSet_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6546 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RightSet_names_
, NDR_POINTER_UNIQUE
, "Pointer to Names (lsa_StringLarge)",hf_lsarpc_lsa_RightSet_names
);
6552 lsarpc_dissect_element_lsa_RightSet_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6554 struct ndr_generic_array nga
= { .is_conformant
= false, };
6556 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
6558 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_RightSet_names__
);
6564 lsarpc_dissect_element_lsa_RightSet_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6566 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_RightSet_names
,0);
6572 lsarpc_dissect_struct_lsa_RightSet(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6574 proto_item
*item
= NULL
;
6575 proto_tree
*tree
= NULL
;
6580 old_offset
= offset
;
6583 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6584 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_RightSet
);
6587 offset
= lsarpc_dissect_element_lsa_RightSet_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
6589 offset
= lsarpc_dissect_element_lsa_RightSet_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
6592 proto_item_set_len(item
, offset
-old_offset
);
6595 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6604 /* IDL: uint32 count; */
6605 /* IDL: [size_is(count)] [unique(1)] lsa_TrustDomainInfoInfoEx *domains; */
6609 lsarpc_dissect_element_lsa_DomainListEx_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6611 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DomainListEx_count
, 0);
6617 lsarpc_dissect_element_lsa_DomainListEx_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6619 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DomainListEx_domains_
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_TrustDomainInfoInfoEx)",hf_lsarpc_lsa_DomainListEx_domains
);
6625 lsarpc_dissect_element_lsa_DomainListEx_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6627 struct ndr_generic_array nga
= { .is_conformant
= false, };
6629 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
6631 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_DomainListEx_domains__
);
6637 lsarpc_dissect_element_lsa_DomainListEx_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6639 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DomainListEx_domains
,0);
6645 lsarpc_dissect_struct_lsa_DomainListEx(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6647 proto_item
*item
= NULL
;
6648 proto_tree
*tree
= NULL
;
6653 old_offset
= offset
;
6656 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6657 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DomainListEx
);
6660 offset
= lsarpc_dissect_element_lsa_DomainListEx_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
6662 offset
= lsarpc_dissect_element_lsa_DomainListEx_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
6665 proto_item_set_len(item
, offset
-old_offset
);
6668 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6677 /* IDL: uint32 quality_of_service; */
6681 lsarpc_dissect_element_lsa_DomainInfoQoS_quality_of_service(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6683 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DomainInfoQoS_quality_of_service
, 0);
6689 lsarpc_dissect_struct_lsa_DomainInfoQoS(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6691 proto_item
*item
= NULL
;
6692 proto_tree
*tree
= NULL
;
6697 old_offset
= offset
;
6700 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6701 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DomainInfoQoS
);
6704 offset
= lsarpc_dissect_element_lsa_DomainInfoQoS_quality_of_service(tvb
, offset
, pinfo
, tree
, di
, drep
);
6707 proto_item_set_len(item
, offset
-old_offset
);
6710 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6719 /* IDL: LSA_POLICY_KERBEROS_VALIDATE_CLIENT = 0x00000080 , */
6723 lsarpc_dissect_bitmap_lsa_krbAuthenticationOptions(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6726 static int * const lsarpc_lsa_krbAuthenticationOptions_fields
[] = {
6727 &hf_lsarpc_lsa_krbAuthenticationOptions_LSA_POLICY_KERBEROS_VALIDATE_CLIENT
,
6733 item
= proto_tree_add_bitmask_with_flags(parent_tree
, tvb
, offset
, hf_index
,
6734 ett_lsarpc_lsa_krbAuthenticationOptions
, lsarpc_lsa_krbAuthenticationOptions_fields
, DREP_ENC_INTEGER(drep
), BMT_NO_FALSE
);
6736 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, parent_tree
, di
, drep
, -1, &flags
);
6739 proto_item_append_text(item
, ": (No values set)");
6741 if (flags
& (~0x00000080)) {
6742 flags
&= (~0x00000080);
6743 proto_item_append_text(item
, "Unknown bitmap value 0x%x", flags
);
6751 /* IDL: lsa_krbAuthenticationOptions authentication_options; */
6752 /* IDL: hyper service_tkt_lifetime; */
6753 /* IDL: hyper user_tkt_lifetime; */
6754 /* IDL: hyper user_tkt_renewaltime; */
6755 /* IDL: hyper clock_skew; */
6756 /* IDL: hyper reserved; */
6760 lsarpc_dissect_element_lsa_DomainInfoKerberos_authentication_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6762 offset
= lsarpc_dissect_bitmap_lsa_krbAuthenticationOptions(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DomainInfoKerberos_authentication_options
, 0);
6768 lsarpc_dissect_element_lsa_DomainInfoKerberos_service_tkt_lifetime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6770 offset
=cnf_dissect_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, 0, hf_lsarpc_lsa_DomainInfoKerberos_service_tkt_lifetime
);
6776 lsarpc_dissect_element_lsa_DomainInfoKerberos_user_tkt_lifetime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6778 offset
=cnf_dissect_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, 0, hf_lsarpc_lsa_DomainInfoKerberos_user_tkt_lifetime
);
6784 lsarpc_dissect_element_lsa_DomainInfoKerberos_user_tkt_renewaltime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6786 offset
=cnf_dissect_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, 0, hf_lsarpc_lsa_DomainInfoKerberos_user_tkt_renewaltime
);
6792 lsarpc_dissect_element_lsa_DomainInfoKerberos_clock_skew(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6794 offset
=cnf_dissect_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, 0, hf_lsarpc_lsa_DomainInfoKerberos_clock_skew
);
6800 lsarpc_dissect_element_lsa_DomainInfoKerberos_reserved(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6802 offset
=cnf_dissect_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, 0, hf_lsarpc_lsa_DomainInfoKerberos_reserved
);
6808 lsarpc_dissect_struct_lsa_DomainInfoKerberos(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6810 proto_item
*item
= NULL
;
6811 proto_tree
*tree
= NULL
;
6816 old_offset
= offset
;
6819 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6820 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DomainInfoKerberos
);
6823 offset
= lsarpc_dissect_element_lsa_DomainInfoKerberos_authentication_options(tvb
, offset
, pinfo
, tree
, di
, drep
);
6825 offset
= lsarpc_dissect_element_lsa_DomainInfoKerberos_service_tkt_lifetime(tvb
, offset
, pinfo
, tree
, di
, drep
);
6827 offset
= lsarpc_dissect_element_lsa_DomainInfoKerberos_user_tkt_lifetime(tvb
, offset
, pinfo
, tree
, di
, drep
);
6829 offset
= lsarpc_dissect_element_lsa_DomainInfoKerberos_user_tkt_renewaltime(tvb
, offset
, pinfo
, tree
, di
, drep
);
6831 offset
= lsarpc_dissect_element_lsa_DomainInfoKerberos_clock_skew(tvb
, offset
, pinfo
, tree
, di
, drep
);
6833 offset
= lsarpc_dissect_element_lsa_DomainInfoKerberos_reserved(tvb
, offset
, pinfo
, tree
, di
, drep
);
6836 proto_item_set_len(item
, offset
-old_offset
);
6839 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6848 /* IDL: uint32 blob_size; */
6849 /* IDL: [size_is(blob_size)] [unique(1)] uint8 *efs_blob; */
6853 lsarpc_dissect_element_lsa_DomainInfoEfs_blob_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6855 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DomainInfoEfs_blob_size
, 0);
6861 lsarpc_dissect_element_lsa_DomainInfoEfs_efs_blob(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6863 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DomainInfoEfs_efs_blob_
, NDR_POINTER_UNIQUE
, "Pointer to Efs Blob (uint8)",hf_lsarpc_lsa_DomainInfoEfs_efs_blob
);
6869 lsarpc_dissect_struct_lsa_DomainInfoEfs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6871 proto_item
*item
= NULL
;
6872 proto_tree
*tree
= NULL
;
6877 old_offset
= offset
;
6880 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6881 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DomainInfoEfs
);
6884 offset
= lsarpc_dissect_element_lsa_DomainInfoEfs_blob_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
6886 offset
= lsarpc_dissect_element_lsa_DomainInfoEfs_efs_blob(tvb
, offset
, pinfo
, tree
, di
, drep
);
6889 proto_item_set_len(item
, offset
-old_offset
);
6892 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6901 /* IDL: LSA_DOMAIN_INFO_POLICY_QOS=1, */
6902 /* IDL: LSA_DOMAIN_INFO_POLICY_EFS=2, */
6903 /* IDL: LSA_DOMAIN_INFO_POLICY_KERBEROS=3, */
6907 lsarpc_dissect_enum_lsa_DomainInfoEnum(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
6909 uint32_t parameter
=0;
6913 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
6921 /* IDL: [switch_type(lsa_DomainInfoEnum)] union { */
6922 /* IDL: [case(LSA_DOMAIN_INFO_POLICY_QOS)] [case(LSA_DOMAIN_INFO_POLICY_QOS)] lsa_DomainInfoQoS qos_info; */
6923 /* IDL: [case(LSA_DOMAIN_INFO_POLICY_EFS)] [case(LSA_DOMAIN_INFO_POLICY_EFS)] lsa_DomainInfoEfs efs_info; */
6924 /* IDL: [case(LSA_DOMAIN_INFO_POLICY_KERBEROS)] [case(LSA_DOMAIN_INFO_POLICY_KERBEROS)] lsa_DomainInfoKerberos kerberos_info; */
6928 lsarpc_dissect_element_lsa_DomainInformationPolicy_qos_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6930 offset
= lsarpc_dissect_struct_lsa_DomainInfoQoS(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DomainInformationPolicy_qos_info
,0);
6936 lsarpc_dissect_element_lsa_DomainInformationPolicy_efs_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6938 offset
= lsarpc_dissect_struct_lsa_DomainInfoEfs(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DomainInformationPolicy_efs_info
,0);
6944 lsarpc_dissect_element_lsa_DomainInformationPolicy_kerberos_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6946 offset
= lsarpc_dissect_struct_lsa_DomainInfoKerberos(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DomainInformationPolicy_kerberos_info
,0);
6952 lsarpc_dissect_lsa_DomainInformationPolicy(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6954 proto_item
*item
= NULL
;
6955 proto_tree
*tree
= NULL
;
6959 old_offset
= offset
;
6961 tree
= proto_tree_add_subtree(parent_tree
, tvb
, offset
, -1, ett_lsarpc_lsa_DomainInformationPolicy
, &item
, "lsa_DomainInformationPolicy");
6964 UNION_ALIGN_TO_8_BYTES
;
6965 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, &level
);
6966 UNION_ALIGN_TO_8_BYTES
;
6969 case LSA_DOMAIN_INFO_POLICY_QOS
:
6970 offset
= lsarpc_dissect_element_lsa_DomainInformationPolicy_qos_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
6973 case LSA_DOMAIN_INFO_POLICY_EFS
:
6974 offset
= lsarpc_dissect_element_lsa_DomainInformationPolicy_efs_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
6977 case LSA_DOMAIN_INFO_POLICY_KERBEROS
:
6978 offset
= lsarpc_dissect_element_lsa_DomainInformationPolicy_kerberos_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
6981 proto_item_set_len(item
, offset
-old_offset
);
6988 /* IDL: lsa_SidType sid_type; */
6989 /* IDL: lsa_String name; */
6990 /* IDL: uint32 sid_index; */
6991 /* IDL: uint32 unknown; */
6995 lsarpc_dissect_element_lsa_TranslatedName2_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6997 offset
= lsarpc_dissect_enum_lsa_SidType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedName2_sid_type
, 0);
7003 lsarpc_dissect_element_lsa_TranslatedName2_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7005 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TranslatedName2_name
,0);
7011 lsarpc_dissect_element_lsa_TranslatedName2_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7013 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedName2_sid_index
, 0);
7019 lsarpc_dissect_element_lsa_TranslatedName2_unknown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7021 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedName2_unknown
, 0);
7027 lsarpc_dissect_struct_lsa_TranslatedName2(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7029 proto_item
*item
= NULL
;
7030 proto_tree
*tree
= NULL
;
7035 old_offset
= offset
;
7038 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7039 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TranslatedName2
);
7042 offset
= lsarpc_dissect_element_lsa_TranslatedName2_sid_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
7044 offset
= lsarpc_dissect_element_lsa_TranslatedName2_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
7046 offset
= lsarpc_dissect_element_lsa_TranslatedName2_sid_index(tvb
, offset
, pinfo
, tree
, di
, drep
);
7048 offset
= lsarpc_dissect_element_lsa_TranslatedName2_unknown(tvb
, offset
, pinfo
, tree
, di
, drep
);
7051 proto_item_set_len(item
, offset
-old_offset
);
7054 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7063 /* IDL: [range(0,1000)] uint32 count; */
7064 /* IDL: [size_is(count)] [unique(1)] lsa_TranslatedName2 *names; */
7068 lsarpc_dissect_element_lsa_TransNameArray2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7070 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TransNameArray2_count
, 0);
7076 lsarpc_dissect_element_lsa_TransNameArray2_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7078 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TransNameArray2_names_
, NDR_POINTER_UNIQUE
, "Pointer to Names (lsa_TranslatedName2)",hf_lsarpc_lsa_TransNameArray2_names
);
7084 lsarpc_dissect_element_lsa_TransNameArray2_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7086 struct ndr_generic_array nga
= { .is_conformant
= false, };
7088 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
7090 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_TransNameArray2_names__
);
7096 lsarpc_dissect_element_lsa_TransNameArray2_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7098 offset
= lsarpc_dissect_struct_lsa_TranslatedName2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TransNameArray2_names
,0);
7104 lsarpc_dissect_struct_lsa_TransNameArray2(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7106 proto_item
*item
= NULL
;
7107 proto_tree
*tree
= NULL
;
7112 old_offset
= offset
;
7115 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7116 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TransNameArray2
);
7119 offset
= lsarpc_dissect_element_lsa_TransNameArray2_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
7121 offset
= lsarpc_dissect_element_lsa_TransNameArray2_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
7124 proto_item_set_len(item
, offset
-old_offset
);
7127 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7136 /* IDL: LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES=0x00000000, */
7137 /* IDL: LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES_LOCAL=0x80000000, */
7141 lsarpc_dissect_enum_lsa_LookupOptions(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
7143 uint32_t parameter
=0;
7147 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
7156 /* IDL: LSA_CLIENT_REVISION_1=0x00000001, */
7157 /* IDL: LSA_CLIENT_REVISION_2=0x00000002, */
7161 lsarpc_dissect_enum_lsa_ClientRevision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
7163 uint32_t parameter
=0;
7167 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
7176 /* IDL: lsa_SidType sid_type; */
7177 /* IDL: uint32 rid; */
7178 /* IDL: uint32 sid_index; */
7179 /* IDL: uint32 unknown; */
7183 lsarpc_dissect_element_lsa_TranslatedSid2_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7185 offset
= lsarpc_dissect_enum_lsa_SidType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid2_sid_type
, 0);
7191 lsarpc_dissect_element_lsa_TranslatedSid2_rid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7193 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid2_rid
, 0);
7199 lsarpc_dissect_element_lsa_TranslatedSid2_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7201 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid2_sid_index
, 0);
7207 lsarpc_dissect_element_lsa_TranslatedSid2_unknown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7209 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid2_unknown
, 0);
7215 lsarpc_dissect_struct_lsa_TranslatedSid2(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7217 proto_item
*item
= NULL
;
7218 proto_tree
*tree
= NULL
;
7223 old_offset
= offset
;
7226 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7227 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TranslatedSid2
);
7230 offset
= lsarpc_dissect_element_lsa_TranslatedSid2_sid_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
7232 offset
= lsarpc_dissect_element_lsa_TranslatedSid2_rid(tvb
, offset
, pinfo
, tree
, di
, drep
);
7234 offset
= lsarpc_dissect_element_lsa_TranslatedSid2_sid_index(tvb
, offset
, pinfo
, tree
, di
, drep
);
7236 offset
= lsarpc_dissect_element_lsa_TranslatedSid2_unknown(tvb
, offset
, pinfo
, tree
, di
, drep
);
7239 proto_item_set_len(item
, offset
-old_offset
);
7242 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7251 /* IDL: [range(0,1000)] uint32 count; */
7252 /* IDL: [size_is(count)] [unique(1)] lsa_TranslatedSid2 *sids; */
7256 lsarpc_dissect_element_lsa_TransSidArray2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7258 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TransSidArray2_count
, 0);
7264 lsarpc_dissect_element_lsa_TransSidArray2_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7266 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TransSidArray2_sids_
, NDR_POINTER_UNIQUE
, "Pointer to Sids (lsa_TranslatedSid2)",hf_lsarpc_lsa_TransSidArray2_sids
);
7272 lsarpc_dissect_element_lsa_TransSidArray2_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7274 struct ndr_generic_array nga
= { .is_conformant
= false, };
7276 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
7278 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_TransSidArray2_sids__
);
7284 lsarpc_dissect_element_lsa_TransSidArray2_sids__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7286 offset
= lsarpc_dissect_struct_lsa_TranslatedSid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TransSidArray2_sids
,0);
7292 lsarpc_dissect_struct_lsa_TransSidArray2(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7294 proto_item
*item
= NULL
;
7295 proto_tree
*tree
= NULL
;
7300 old_offset
= offset
;
7303 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7304 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TransSidArray2
);
7307 offset
= lsarpc_dissect_element_lsa_TransSidArray2_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
7309 offset
= lsarpc_dissect_element_lsa_TransSidArray2_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
7312 proto_item_set_len(item
, offset
-old_offset
);
7315 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7324 /* IDL: lsa_SidType sid_type; */
7325 /* IDL: [unique(1)] dom_sid2 *sid; */
7326 /* IDL: uint32 sid_index; */
7327 /* IDL: uint32 flags; */
7331 lsarpc_dissect_element_lsa_TranslatedSid3_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7333 offset
= lsarpc_dissect_enum_lsa_SidType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid3_sid_type
, 0);
7339 lsarpc_dissect_element_lsa_TranslatedSid3_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7341 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TranslatedSid3_sid_
, NDR_POINTER_UNIQUE
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_TranslatedSid3_sid
);
7347 lsarpc_dissect_element_lsa_TranslatedSid3_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7349 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TranslatedSid3_sid
,0);
7355 lsarpc_dissect_element_lsa_TranslatedSid3_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7357 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid3_sid_index
, 0);
7363 lsarpc_dissect_element_lsa_TranslatedSid3_flags(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7365 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid3_flags
, 0);
7371 lsarpc_dissect_struct_lsa_TranslatedSid3(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7373 proto_item
*item
= NULL
;
7374 proto_tree
*tree
= NULL
;
7379 old_offset
= offset
;
7382 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7383 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TranslatedSid3
);
7386 offset
= lsarpc_dissect_element_lsa_TranslatedSid3_sid_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
7388 offset
= lsarpc_dissect_element_lsa_TranslatedSid3_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
7390 offset
= lsarpc_dissect_element_lsa_TranslatedSid3_sid_index(tvb
, offset
, pinfo
, tree
, di
, drep
);
7392 offset
= lsarpc_dissect_element_lsa_TranslatedSid3_flags(tvb
, offset
, pinfo
, tree
, di
, drep
);
7395 proto_item_set_len(item
, offset
-old_offset
);
7398 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7407 /* IDL: [range(0,1000)] uint32 count; */
7408 /* IDL: [size_is(count)] [unique(1)] lsa_TranslatedSid3 *sids; */
7412 lsarpc_dissect_element_lsa_TransSidArray3_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7414 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TransSidArray3_count
, 0);
7420 lsarpc_dissect_element_lsa_TransSidArray3_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7422 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TransSidArray3_sids_
, NDR_POINTER_UNIQUE
, "Pointer to Sids (lsa_TranslatedSid3)",hf_lsarpc_lsa_TransSidArray3_sids
);
7428 lsarpc_dissect_element_lsa_TransSidArray3_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7430 struct ndr_generic_array nga
= { .is_conformant
= false, };
7432 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
7434 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_TransSidArray3_sids__
);
7440 lsarpc_dissect_element_lsa_TransSidArray3_sids__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7442 offset
= lsarpc_dissect_struct_lsa_TranslatedSid3(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TransSidArray3_sids
,0);
7448 lsarpc_dissect_struct_lsa_TransSidArray3(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7450 proto_item
*item
= NULL
;
7451 proto_tree
*tree
= NULL
;
7456 old_offset
= offset
;
7459 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7460 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TransSidArray3
);
7463 offset
= lsarpc_dissect_element_lsa_TransSidArray3_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
7465 offset
= lsarpc_dissect_element_lsa_TransSidArray3_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
7468 proto_item_set_len(item
, offset
-old_offset
);
7471 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7480 /* IDL: LSA_TLN_DISABLED_NEW = 0x00000001 , */
7481 /* IDL: LSA_TLN_DISABLED_ADMIN = 0x00000002 , */
7482 /* IDL: LSA_TLN_DISABLED_CONFLICT = 0x00000004 , */
7483 /* IDL: LSA_SID_DISABLED_ADMIN = 0x00000001 , */
7484 /* IDL: LSA_SID_DISABLED_CONFLICT = 0x00000002 , */
7485 /* IDL: LSA_NB_DISABLED_ADMIN = 0x00000004 , */
7486 /* IDL: LSA_NB_DISABLED_CONFLICT = 0x00000008 , */
7490 lsarpc_dissect_bitmap_lsa_ForestTrustRecordFlags(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7493 static int * const lsarpc_lsa_ForestTrustRecordFlags_fields
[] = {
7494 &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_NEW
,
7495 &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_ADMIN
,
7496 &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_CONFLICT
,
7497 &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_ADMIN
,
7498 &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_CONFLICT
,
7499 &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_ADMIN
,
7500 &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_CONFLICT
,
7506 item
= proto_tree_add_bitmask_with_flags(parent_tree
, tvb
, offset
, hf_index
,
7507 ett_lsarpc_lsa_ForestTrustRecordFlags
, lsarpc_lsa_ForestTrustRecordFlags_fields
, DREP_ENC_INTEGER(drep
), BMT_NO_FALSE
);
7509 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, parent_tree
, di
, drep
, -1, &flags
);
7512 proto_item_append_text(item
, ": (No values set)");
7514 if (flags
& (~0x00000016)) {
7515 flags
&= (~0x00000016);
7516 proto_item_append_text(item
, "Unknown bitmap value 0x%x", flags
);
7524 /* IDL: LSA_FOREST_TRUST_TOP_LEVEL_NAME=0, */
7525 /* IDL: LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX=1, */
7526 /* IDL: LSA_FOREST_TRUST_DOMAIN_INFO=2, */
7527 /* IDL: LSA_FOREST_TRUST_BINARY_DATA=3, */
7528 /* IDL: LSA_FOREST_TRUST_SCANNER_INFO=4, */
7532 lsarpc_dissect_enum_lsa_ForestTrustRecordType(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
7534 uint32_t parameter
=0;
7538 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
7547 /* IDL: [range(0,131072)] uint3264 length; */
7548 /* IDL: [size_is(length)] [unique(1)] uint8 *data; */
7552 lsarpc_dissect_element_lsa_ForestTrustBinaryData_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7554 offset
= dissect_ndr_uint3264(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustBinaryData_length
, NULL
);
7560 lsarpc_dissect_element_lsa_ForestTrustBinaryData_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7562 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustBinaryData_data_
, NDR_POINTER_UNIQUE
, "Pointer to Data (uint8)",hf_lsarpc_lsa_ForestTrustBinaryData_data
);
7568 lsarpc_dissect_element_lsa_ForestTrustBinaryData_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7570 struct ndr_generic_array nga
= { .is_conformant
= false, };
7572 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
7574 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_ForestTrustBinaryData_data__
);
7580 lsarpc_dissect_element_lsa_ForestTrustBinaryData_data__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7582 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustBinaryData_data
, 0);
7588 lsarpc_dissect_struct_lsa_ForestTrustBinaryData(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7590 proto_item
*item
= NULL
;
7591 proto_tree
*tree
= NULL
;
7596 old_offset
= offset
;
7599 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7600 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ForestTrustBinaryData
);
7603 offset
= lsarpc_dissect_element_lsa_ForestTrustBinaryData_length(tvb
, offset
, pinfo
, tree
, di
, drep
);
7605 offset
= lsarpc_dissect_element_lsa_ForestTrustBinaryData_data(tvb
, offset
, pinfo
, tree
, di
, drep
);
7608 proto_item_set_len(item
, offset
-old_offset
);
7611 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7620 /* IDL: [unique(1)] dom_sid2 *domain_sid; */
7621 /* IDL: lsa_StringLarge dns_domain_name; */
7622 /* IDL: lsa_StringLarge netbios_domain_name; */
7626 lsarpc_dissect_element_lsa_ForestTrustDomainInfo_domain_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7628 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustDomainInfo_domain_sid_
, NDR_POINTER_UNIQUE
, "Pointer to Domain Sid (dom_sid2)",hf_lsarpc_lsa_ForestTrustDomainInfo_domain_sid
);
7634 lsarpc_dissect_element_lsa_ForestTrustDomainInfo_domain_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7636 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustDomainInfo_domain_sid
,0);
7642 lsarpc_dissect_element_lsa_ForestTrustDomainInfo_dns_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7644 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustDomainInfo_dns_domain_name
,0);
7650 lsarpc_dissect_element_lsa_ForestTrustDomainInfo_netbios_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7652 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustDomainInfo_netbios_domain_name
,0);
7658 lsarpc_dissect_struct_lsa_ForestTrustDomainInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7660 proto_item
*item
= NULL
;
7661 proto_tree
*tree
= NULL
;
7666 old_offset
= offset
;
7669 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7670 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ForestTrustDomainInfo
);
7673 offset
= lsarpc_dissect_element_lsa_ForestTrustDomainInfo_domain_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
7675 offset
= lsarpc_dissect_element_lsa_ForestTrustDomainInfo_dns_domain_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
7677 offset
= lsarpc_dissect_element_lsa_ForestTrustDomainInfo_netbios_domain_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
7680 proto_item_set_len(item
, offset
-old_offset
);
7683 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7691 /* IDL: [switch_type(lsa_ForestTrustRecordType)] union { */
7692 /* IDL: [case(LSA_FOREST_TRUST_TOP_LEVEL_NAME)] [case(LSA_FOREST_TRUST_TOP_LEVEL_NAME)] lsa_StringLarge top_level_name; */
7693 /* IDL: [case(LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX)] [case(LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX)] lsa_StringLarge top_level_name_ex; */
7694 /* IDL: [case(LSA_FOREST_TRUST_DOMAIN_INFO)] [case(LSA_FOREST_TRUST_DOMAIN_INFO)] lsa_ForestTrustDomainInfo domain_info; */
7695 /* IDL: [default] ; */
7699 lsarpc_dissect_element_lsa_ForestTrustData_top_level_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7701 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustData_top_level_name
,0);
7707 lsarpc_dissect_element_lsa_ForestTrustData_top_level_name_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7709 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustData_top_level_name_ex
,0);
7715 lsarpc_dissect_element_lsa_ForestTrustData_domain_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7717 offset
= lsarpc_dissect_struct_lsa_ForestTrustDomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustData_domain_info
,0);
7723 lsarpc_dissect_element_lsa_ForestTrustData_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7725 offset
= lsarpc_dissect_struct_lsa_ForestTrustBinaryData(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustData_data
,0);
7731 lsarpc_dissect_lsa_ForestTrustData(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7733 proto_item
*item
= NULL
;
7734 proto_tree
*tree
= NULL
;
7738 old_offset
= offset
;
7740 tree
= proto_tree_add_subtree(parent_tree
, tvb
, offset
, -1, ett_lsarpc_lsa_ForestTrustData
, &item
, "lsa_ForestTrustData");
7743 UNION_ALIGN_TO_5_BYTES
;
7744 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, &level
);
7745 UNION_ALIGN_TO_5_BYTES
;
7748 case LSA_FOREST_TRUST_TOP_LEVEL_NAME
:
7749 offset
= lsarpc_dissect_element_lsa_ForestTrustData_top_level_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
7752 case LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX
:
7753 offset
= lsarpc_dissect_element_lsa_ForestTrustData_top_level_name_ex(tvb
, offset
, pinfo
, tree
, di
, drep
);
7756 case LSA_FOREST_TRUST_DOMAIN_INFO
:
7757 offset
= lsarpc_dissect_element_lsa_ForestTrustData_domain_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
7761 offset
= lsarpc_dissect_element_lsa_ForestTrustData_data(tvb
, offset
, pinfo
, tree
, di
, drep
);
7764 proto_item_set_len(item
, offset
-old_offset
);
7771 /* IDL: lsa_ForestTrustRecordFlags flags; */
7772 /* IDL: lsa_ForestTrustRecordType type; */
7773 /* IDL: NTTIME_hyper time; */
7774 /* IDL: [switch_is(type)] lsa_ForestTrustData forest_trust_data; */
7778 lsarpc_dissect_element_lsa_ForestTrustRecord_flags(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7780 offset
= lsarpc_dissect_bitmap_lsa_ForestTrustRecordFlags(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustRecord_flags
, 0);
7786 lsarpc_dissect_element_lsa_ForestTrustRecord_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, uint32_t *type
)
7788 offset
= lsarpc_dissect_enum_lsa_ForestTrustRecordType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustRecord_type
, type
);
7794 lsarpc_dissect_element_lsa_ForestTrustRecord_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7796 offset
= dissect_ndr_nt_NTTIME_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustRecord_time
);
7802 lsarpc_dissect_element_lsa_ForestTrustRecord_forest_trust_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, uint32_t type
)
7804 offset
= lsarpc_dissect_lsa_ForestTrustData(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustRecord_forest_trust_data
, type
);
7810 lsarpc_dissect_struct_lsa_ForestTrustRecord(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7813 proto_item
*item
= NULL
;
7814 proto_tree
*tree
= NULL
;
7819 old_offset
= offset
;
7822 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7823 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ForestTrustRecord
);
7826 offset
= lsarpc_dissect_element_lsa_ForestTrustRecord_flags(tvb
, offset
, pinfo
, tree
, di
, drep
);
7828 offset
= lsarpc_dissect_element_lsa_ForestTrustRecord_type(tvb
, offset
, pinfo
, tree
, di
, drep
, &type
);
7830 offset
= lsarpc_dissect_element_lsa_ForestTrustRecord_time(tvb
, offset
, pinfo
, tree
, di
, drep
);
7832 offset
= lsarpc_dissect_element_lsa_ForestTrustRecord_forest_trust_data(tvb
, offset
, pinfo
, tree
, di
, drep
, type
);
7835 proto_item_set_len(item
, offset
-old_offset
);
7838 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7847 /* IDL: [range(0,4000)] uint32 count; */
7848 /* IDL: [size_is(count)] [unique(1)] lsa_ForestTrustRecord **entries; */
7852 lsarpc_dissect_element_lsa_ForestTrustInformation_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7854 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustInformation_count
, 0);
7860 lsarpc_dissect_element_lsa_ForestTrustInformation_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7862 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustInformation_entries_
, NDR_POINTER_UNIQUE
, "Pointer to Entries (lsa_ForestTrustRecord)",hf_lsarpc_lsa_ForestTrustInformation_entries
);
7868 lsarpc_dissect_element_lsa_ForestTrustInformation_entries_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7870 struct ndr_generic_array nga
= { .is_conformant
= false, };
7872 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
7874 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_ForestTrustInformation_entries__
);
7880 lsarpc_dissect_element_lsa_ForestTrustInformation_entries__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7882 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustInformation_entries___
, NDR_POINTER_UNIQUE
, "Pointer to Entries (lsa_ForestTrustRecord)",hf_lsarpc_lsa_ForestTrustInformation_entries
);
7888 lsarpc_dissect_element_lsa_ForestTrustInformation_entries___(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7890 offset
= lsarpc_dissect_struct_lsa_ForestTrustRecord(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustInformation_entries
,0);
7896 lsarpc_dissect_struct_lsa_ForestTrustInformation(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7898 proto_item
*item
= NULL
;
7899 proto_tree
*tree
= NULL
;
7904 old_offset
= offset
;
7907 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7908 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ForestTrustInformation
);
7911 offset
= lsarpc_dissect_element_lsa_ForestTrustInformation_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
7913 offset
= lsarpc_dissect_element_lsa_ForestTrustInformation_entries(tvb
, offset
, pinfo
, tree
, di
, drep
);
7916 proto_item_set_len(item
, offset
-old_offset
);
7919 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7928 /* IDL: LSA_FOREST_TRUST_COLLISION_TDO=0, */
7929 /* IDL: LSA_FOREST_TRUST_COLLISION_XREF=1, */
7930 /* IDL: LSA_FOREST_TRUST_COLLISION_OTHER=2, */
7934 lsarpc_dissect_enum_lsa_ForestTrustCollisionRecordType(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
7936 uint32_t parameter
=0;
7940 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
7949 /* IDL: uint32 index; */
7950 /* IDL: lsa_ForestTrustCollisionRecordType type; */
7951 /* IDL: lsa_ForestTrustRecordFlags flags; */
7952 /* IDL: lsa_String name; */
7956 lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7958 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustCollisionRecord_index
, 0);
7964 lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7966 offset
= lsarpc_dissect_enum_lsa_ForestTrustCollisionRecordType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustCollisionRecord_type
, 0);
7972 lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_flags(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7974 offset
= lsarpc_dissect_bitmap_lsa_ForestTrustRecordFlags(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustCollisionRecord_flags
, 0);
7980 lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7982 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustCollisionRecord_name
,0);
7988 lsarpc_dissect_struct_lsa_ForestTrustCollisionRecord(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7990 proto_item
*item
= NULL
;
7991 proto_tree
*tree
= NULL
;
7996 old_offset
= offset
;
7999 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
8000 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ForestTrustCollisionRecord
);
8003 offset
= lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_index(tvb
, offset
, pinfo
, tree
, di
, drep
);
8005 offset
= lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
8007 offset
= lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_flags(tvb
, offset
, pinfo
, tree
, di
, drep
);
8009 offset
= lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
8012 proto_item_set_len(item
, offset
-old_offset
);
8015 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
8024 /* IDL: uint32 count; */
8025 /* IDL: [size_is(count)] [unique(1)] lsa_ForestTrustCollisionRecord **entries; */
8029 lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8031 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustCollisionInfo_count
, 0);
8037 lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8039 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries_
, NDR_POINTER_UNIQUE
, "Pointer to Entries (lsa_ForestTrustCollisionRecord)",hf_lsarpc_lsa_ForestTrustCollisionInfo_entries
);
8045 lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8047 struct ndr_generic_array nga
= { .is_conformant
= false, };
8049 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
8051 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries__
);
8057 lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8059 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries___
, NDR_POINTER_UNIQUE
, "Pointer to Entries (lsa_ForestTrustCollisionRecord)",hf_lsarpc_lsa_ForestTrustCollisionInfo_entries
);
8065 lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries___(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8067 offset
= lsarpc_dissect_struct_lsa_ForestTrustCollisionRecord(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustCollisionInfo_entries
,0);
8073 lsarpc_dissect_struct_lsa_ForestTrustCollisionInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
8075 proto_item
*item
= NULL
;
8076 proto_tree
*tree
= NULL
;
8081 old_offset
= offset
;
8084 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
8085 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ForestTrustCollisionInfo
);
8088 offset
= lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
8090 offset
= lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries(tvb
, offset
, pinfo
, tree
, di
, drep
);
8093 proto_item_set_len(item
, offset
-old_offset
);
8096 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
8105 /* IDL: LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER = 0x00000001 , */
8109 lsarpc_dissect_bitmap_lsa_RevisionSupportedFeature(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
8112 static int * const lsarpc_lsa_RevisionSupportedFeature_fields
[] = {
8113 &hf_lsarpc_lsa_RevisionSupportedFeature_LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER
,
8119 item
= proto_tree_add_bitmask_with_flags(parent_tree
, tvb
, offset
, hf_index
,
8120 ett_lsarpc_lsa_RevisionSupportedFeature
, lsarpc_lsa_RevisionSupportedFeature_fields
, DREP_ENC_INTEGER(drep
), BMT_NO_FALSE
);
8122 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, parent_tree
, di
, drep
, -1, &flags
);
8125 proto_item_append_text(item
, ": (No values set)");
8127 if (flags
& (~0x00000001)) {
8128 flags
&= (~0x00000001);
8129 proto_item_append_text(item
, "Unknown bitmap value 0x%x", flags
);
8137 /* IDL: uint32 revision; */
8138 /* IDL: lsa_RevisionSupportedFeature supported_features; */
8142 lsarpc_dissect_element_lsa_revision_info1_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8144 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_revision_info1_revision
, 0);
8150 lsarpc_dissect_element_lsa_revision_info1_supported_features(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8152 offset
= lsarpc_dissect_bitmap_lsa_RevisionSupportedFeature(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_revision_info1_supported_features
, 0);
8158 lsarpc_dissect_struct_lsa_revision_info1(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
8160 proto_item
*item
= NULL
;
8161 proto_tree
*tree
= NULL
;
8166 old_offset
= offset
;
8169 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
8170 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_revision_info1
);
8173 offset
= lsarpc_dissect_element_lsa_revision_info1_revision(tvb
, offset
, pinfo
, tree
, di
, drep
);
8175 offset
= lsarpc_dissect_element_lsa_revision_info1_supported_features(tvb
, offset
, pinfo
, tree
, di
, drep
);
8178 proto_item_set_len(item
, offset
-old_offset
);
8181 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
8189 /* IDL: [switch_type(uint32)] union { */
8190 /* IDL: [case(1)] [case(1)] lsa_revision_info1 info1; */
8194 lsarpc_dissect_element_lsa_revision_info_info1(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8196 offset
= lsarpc_dissect_struct_lsa_revision_info1(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_revision_info_info1
,0);
8202 lsarpc_dissect_lsa_revision_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
8204 proto_item
*item
= NULL
;
8205 proto_tree
*tree
= NULL
;
8209 old_offset
= offset
;
8211 tree
= proto_tree_add_subtree(parent_tree
, tvb
, offset
, -1, ett_lsarpc_lsa_revision_info
, &item
, "lsa_revision_info");
8214 UNION_ALIGN_TO_4_BYTES
;
8215 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, &level
);
8216 UNION_ALIGN_TO_4_BYTES
;
8220 offset
= lsarpc_dissect_element_lsa_revision_info_info1(tvb
, offset
, pinfo
, tree
, di
, drep
);
8223 proto_item_set_len(item
, offset
-old_offset
);
8229 /* IDL: [switch_type(lsa_ForestTrustRecordType)] union { */
8230 /* IDL: [case(LSA_FOREST_TRUST_TOP_LEVEL_NAME)] [case(LSA_FOREST_TRUST_TOP_LEVEL_NAME)] lsa_StringLarge top_level_name; */
8231 /* IDL: [case(LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX)] [case(LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX)] lsa_StringLarge top_level_name_ex; */
8232 /* IDL: [case(LSA_FOREST_TRUST_DOMAIN_INFO)] [case(LSA_FOREST_TRUST_DOMAIN_INFO)] lsa_ForestTrustDomainInfo domain_info; */
8233 /* IDL: [case(LSA_FOREST_TRUST_BINARY_DATA)] [case(LSA_FOREST_TRUST_BINARY_DATA)] lsa_ForestTrustBinaryData data; */
8234 /* IDL: [case(LSA_FOREST_TRUST_SCANNER_INFO)] [case(LSA_FOREST_TRUST_SCANNER_INFO)] lsa_ForestTrustDomainInfo scanner_info; */
8238 lsarpc_dissect_element_lsa_ForestTrustData2_top_level_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8240 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustData2_top_level_name
,0);
8246 lsarpc_dissect_element_lsa_ForestTrustData2_top_level_name_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8248 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustData2_top_level_name_ex
,0);
8254 lsarpc_dissect_element_lsa_ForestTrustData2_domain_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8256 offset
= lsarpc_dissect_struct_lsa_ForestTrustDomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustData2_domain_info
,0);
8262 lsarpc_dissect_element_lsa_ForestTrustData2_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8264 offset
= lsarpc_dissect_struct_lsa_ForestTrustBinaryData(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustData2_data
,0);
8270 lsarpc_dissect_element_lsa_ForestTrustData2_scanner_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8272 offset
= lsarpc_dissect_struct_lsa_ForestTrustDomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustData2_scanner_info
,0);
8278 lsarpc_dissect_lsa_ForestTrustData2(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
8280 proto_item
*item
= NULL
;
8281 proto_tree
*tree
= NULL
;
8285 old_offset
= offset
;
8287 tree
= proto_tree_add_subtree(parent_tree
, tvb
, offset
, -1, ett_lsarpc_lsa_ForestTrustData2
, &item
, "lsa_ForestTrustData2");
8290 UNION_ALIGN_TO_5_BYTES
;
8291 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, &level
);
8292 UNION_ALIGN_TO_5_BYTES
;
8295 case LSA_FOREST_TRUST_TOP_LEVEL_NAME
:
8296 offset
= lsarpc_dissect_element_lsa_ForestTrustData2_top_level_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
8299 case LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX
:
8300 offset
= lsarpc_dissect_element_lsa_ForestTrustData2_top_level_name_ex(tvb
, offset
, pinfo
, tree
, di
, drep
);
8303 case LSA_FOREST_TRUST_DOMAIN_INFO
:
8304 offset
= lsarpc_dissect_element_lsa_ForestTrustData2_domain_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
8307 case LSA_FOREST_TRUST_BINARY_DATA
:
8308 offset
= lsarpc_dissect_element_lsa_ForestTrustData2_data(tvb
, offset
, pinfo
, tree
, di
, drep
);
8311 case LSA_FOREST_TRUST_SCANNER_INFO
:
8312 offset
= lsarpc_dissect_element_lsa_ForestTrustData2_scanner_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
8315 proto_item_set_len(item
, offset
-old_offset
);
8322 /* IDL: lsa_ForestTrustRecordFlags flags; */
8323 /* IDL: lsa_ForestTrustRecordType type; */
8324 /* IDL: NTTIME_hyper time; */
8325 /* IDL: [switch_is(type)] lsa_ForestTrustData2 forest_trust_data; */
8329 lsarpc_dissect_element_lsa_ForestTrustRecord2_flags(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8331 offset
= lsarpc_dissect_bitmap_lsa_ForestTrustRecordFlags(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustRecord2_flags
, 0);
8337 lsarpc_dissect_element_lsa_ForestTrustRecord2_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, uint32_t *type
)
8339 offset
= lsarpc_dissect_enum_lsa_ForestTrustRecordType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustRecord2_type
, type
);
8345 lsarpc_dissect_element_lsa_ForestTrustRecord2_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8347 offset
= dissect_ndr_nt_NTTIME_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustRecord2_time
);
8353 lsarpc_dissect_element_lsa_ForestTrustRecord2_forest_trust_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, uint32_t type
)
8355 offset
= lsarpc_dissect_lsa_ForestTrustData2(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustRecord2_forest_trust_data
, type
);
8361 lsarpc_dissect_struct_lsa_ForestTrustRecord2(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
8364 proto_item
*item
= NULL
;
8365 proto_tree
*tree
= NULL
;
8370 old_offset
= offset
;
8373 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
8374 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ForestTrustRecord2
);
8377 offset
= lsarpc_dissect_element_lsa_ForestTrustRecord2_flags(tvb
, offset
, pinfo
, tree
, di
, drep
);
8379 offset
= lsarpc_dissect_element_lsa_ForestTrustRecord2_type(tvb
, offset
, pinfo
, tree
, di
, drep
, &type
);
8381 offset
= lsarpc_dissect_element_lsa_ForestTrustRecord2_time(tvb
, offset
, pinfo
, tree
, di
, drep
);
8383 offset
= lsarpc_dissect_element_lsa_ForestTrustRecord2_forest_trust_data(tvb
, offset
, pinfo
, tree
, di
, drep
, type
);
8386 proto_item_set_len(item
, offset
-old_offset
);
8389 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
8398 /* IDL: [range(0,4000)] uint32 count; */
8399 /* IDL: [size_is(count)] [unique(1)] lsa_ForestTrustRecord2 **entries; */
8403 lsarpc_dissect_element_lsa_ForestTrustInformation2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8405 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustInformation2_count
, 0);
8411 lsarpc_dissect_element_lsa_ForestTrustInformation2_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8413 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustInformation2_entries_
, NDR_POINTER_UNIQUE
, "Pointer to Entries (lsa_ForestTrustRecord2)",hf_lsarpc_lsa_ForestTrustInformation2_entries
);
8419 lsarpc_dissect_element_lsa_ForestTrustInformation2_entries_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8421 struct ndr_generic_array nga
= { .is_conformant
= false, };
8423 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
8425 offset
= dissect_ndr_generic_array_bytes(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
, lsarpc_dissect_element_lsa_ForestTrustInformation2_entries__
);
8431 lsarpc_dissect_element_lsa_ForestTrustInformation2_entries__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8433 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustInformation2_entries___
, NDR_POINTER_UNIQUE
, "Pointer to Entries (lsa_ForestTrustRecord2)",hf_lsarpc_lsa_ForestTrustInformation2_entries
);
8439 lsarpc_dissect_element_lsa_ForestTrustInformation2_entries___(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8441 offset
= lsarpc_dissect_struct_lsa_ForestTrustRecord2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustInformation2_entries
,0);
8447 lsarpc_dissect_struct_lsa_ForestTrustInformation2(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
8449 proto_item
*item
= NULL
;
8450 proto_tree
*tree
= NULL
;
8455 old_offset
= offset
;
8458 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
8459 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ForestTrustInformation2
);
8462 offset
= lsarpc_dissect_element_lsa_ForestTrustInformation2_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
8464 offset
= lsarpc_dissect_element_lsa_ForestTrustInformation2_entries(tvb
, offset
, pinfo
, tree
, di
, drep
);
8467 proto_item_set_len(item
, offset
-old_offset
);
8470 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
8478 lsarpc_dissect_element_lsa_Close_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8480 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_Close_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_Close_handle
);
8486 lsarpc_dissect_element_lsa_Close_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8488 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_Close_handle
, PIDL_POLHND_CLOSE
);
8493 /* IDL: NTSTATUS lsa_Close( */
8494 /* IDL: [in] [out] [ref] policy_handle *handle */
8498 lsarpc_dissect_lsa_Close_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8502 di
->dcerpc_procedure_name
="lsa_Close";
8503 offset
= lsarpc_dissect_element_lsa_Close_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8504 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8506 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
8509 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
8515 lsarpc_dissect_lsa_Close_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8517 di
->dcerpc_procedure_name
="lsa_Close";
8518 offset
= lsarpc_dissect_element_lsa_Close_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8519 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8524 lsarpc_dissect_element_lsa_Delete_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8526 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_Delete_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_Delete_handle
);
8532 lsarpc_dissect_element_lsa_Delete_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8534 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_Delete_handle
, PIDL_POLHND_CLOSE
);
8539 /* IDL: NTSTATUS lsa_Delete( */
8540 /* IDL: [in] [ref] policy_handle *handle */
8544 lsarpc_dissect_lsa_Delete_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8548 di
->dcerpc_procedure_name
="lsa_Delete";
8549 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
8552 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
8558 lsarpc_dissect_lsa_Delete_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8560 di
->dcerpc_procedure_name
="lsa_Delete";
8561 offset
= lsarpc_dissect_element_lsa_Delete_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8562 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8567 lsarpc_dissect_element_lsa_EnumPrivs_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8569 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumPrivs_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_EnumPrivs_handle
);
8575 lsarpc_dissect_element_lsa_EnumPrivs_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8577 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumPrivs_handle
, 0);
8583 lsarpc_dissect_element_lsa_EnumPrivs_resume_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8585 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumPrivs_resume_handle_
, NDR_POINTER_REF
, "Pointer to Resume Handle (uint32)",hf_lsarpc_lsa_EnumPrivs_resume_handle
);
8591 lsarpc_dissect_element_lsa_EnumPrivs_resume_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8593 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumPrivs_resume_handle
, 0);
8599 lsarpc_dissect_element_lsa_EnumPrivs_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8601 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumPrivs_privs_
, NDR_POINTER_REF
, "Pointer to Privs (lsa_PrivArray)",hf_lsarpc_lsa_EnumPrivs_privs
);
8607 lsarpc_dissect_element_lsa_EnumPrivs_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8609 offset
= lsarpc_dissect_struct_lsa_PrivArray(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_EnumPrivs_privs
,0);
8615 lsarpc_dissect_element_lsa_EnumPrivs_max_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8617 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumPrivs_max_count
, 0);
8622 /* IDL: NTSTATUS lsa_EnumPrivs( */
8623 /* IDL: [in] [ref] policy_handle *handle, */
8624 /* IDL: [in] [out] [ref] uint32 *resume_handle, */
8625 /* IDL: [out] [ref] lsa_PrivArray *privs, */
8626 /* IDL: [in] uint32 max_count */
8630 lsarpc_dissect_lsa_EnumPrivs_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8634 di
->dcerpc_procedure_name
="lsa_EnumPrivs";
8635 offset
= lsarpc_dissect_element_lsa_EnumPrivs_resume_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8636 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8638 offset
= lsarpc_dissect_element_lsa_EnumPrivs_privs(tvb
, offset
, pinfo
, tree
, di
, drep
);
8639 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8641 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
8644 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
8650 lsarpc_dissect_lsa_EnumPrivs_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8652 di
->dcerpc_procedure_name
="lsa_EnumPrivs";
8653 offset
= lsarpc_dissect_element_lsa_EnumPrivs_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8654 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8655 offset
= lsarpc_dissect_element_lsa_EnumPrivs_resume_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8656 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8657 offset
= lsarpc_dissect_element_lsa_EnumPrivs_max_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
8658 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8663 lsarpc_dissect_element_lsa_QuerySecurity_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8665 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QuerySecurity_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_QuerySecurity_handle
);
8671 lsarpc_dissect_element_lsa_QuerySecurity_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8673 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QuerySecurity_handle
, 0);
8679 lsarpc_dissect_element_lsa_QuerySecurity_sec_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8681 offset
= lsarpc_dissect_bitmap_security_secinfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QuerySecurity_sec_info
, 0);
8687 lsarpc_dissect_element_lsa_QuerySecurity_sdbuf(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8689 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QuerySecurity_sdbuf_
, NDR_POINTER_REF
, "Pointer to Sdbuf (sec_desc_buf)",hf_lsarpc_lsa_QuerySecurity_sdbuf
);
8695 lsarpc_dissect_element_lsa_QuerySecurity_sdbuf_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8697 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QuerySecurity_sdbuf__
, NDR_POINTER_UNIQUE
, "Pointer to Sdbuf (sec_desc_buf)",hf_lsarpc_lsa_QuerySecurity_sdbuf
);
8703 lsarpc_dissect_element_lsa_QuerySecurity_sdbuf__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8705 offset
=cnf_dissect_sec_desc_buf(tvb
, offset
, pinfo
, tree
, di
, drep
);
8710 /* IDL: NTSTATUS lsa_QuerySecurity( */
8711 /* IDL: [in] [ref] policy_handle *handle, */
8712 /* IDL: [in] security_secinfo sec_info, */
8713 /* IDL: [out] [ref] sec_desc_buf **sdbuf */
8717 lsarpc_dissect_lsa_QuerySecurity_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8721 di
->dcerpc_procedure_name
="lsa_QuerySecurity";
8722 offset
= lsarpc_dissect_element_lsa_QuerySecurity_sdbuf(tvb
, offset
, pinfo
, tree
, di
, drep
);
8723 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8725 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
8728 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
8734 lsarpc_dissect_lsa_QuerySecurity_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8736 di
->dcerpc_procedure_name
="lsa_QuerySecurity";
8737 offset
= lsarpc_dissect_element_lsa_QuerySecurity_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8738 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8739 offset
= lsarpc_dissect_element_lsa_QuerySecurity_sec_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
8740 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8745 lsarpc_dissect_element_lsa_SetSecObj_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8747 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetSecObj_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_SetSecObj_handle
);
8753 lsarpc_dissect_element_lsa_SetSecObj_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8755 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetSecObj_handle
, 0);
8761 lsarpc_dissect_element_lsa_SetSecObj_sec_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8763 offset
= lsarpc_dissect_bitmap_security_secinfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetSecObj_sec_info
, 0);
8769 lsarpc_dissect_element_lsa_SetSecObj_sdbuf(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8771 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetSecObj_sdbuf_
, NDR_POINTER_REF
, "Pointer to Sdbuf (sec_desc_buf)",hf_lsarpc_lsa_SetSecObj_sdbuf
);
8777 lsarpc_dissect_element_lsa_SetSecObj_sdbuf_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8779 offset
=cnf_dissect_sec_desc_buf(tvb
, offset
, pinfo
, tree
, di
, drep
);
8784 /* IDL: NTSTATUS lsa_SetSecObj( */
8785 /* IDL: [in] [ref] policy_handle *handle, */
8786 /* IDL: [in] security_secinfo sec_info, */
8787 /* IDL: [in] [ref] sec_desc_buf *sdbuf */
8791 lsarpc_dissect_lsa_SetSecObj_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8795 di
->dcerpc_procedure_name
="lsa_SetSecObj";
8796 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
8799 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
8805 lsarpc_dissect_lsa_SetSecObj_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8807 di
->dcerpc_procedure_name
="lsa_SetSecObj";
8808 offset
= lsarpc_dissect_element_lsa_SetSecObj_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8809 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8810 offset
= lsarpc_dissect_element_lsa_SetSecObj_sec_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
8811 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8812 offset
= lsarpc_dissect_element_lsa_SetSecObj_sdbuf(tvb
, offset
, pinfo
, tree
, di
, drep
);
8813 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8817 /* IDL: NTSTATUS lsa_ChangePassword( */
8822 lsarpc_dissect_lsa_ChangePassword_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8826 di
->dcerpc_procedure_name
="lsa_ChangePassword";
8827 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
8830 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
8836 lsarpc_dissect_lsa_ChangePassword_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8838 di
->dcerpc_procedure_name
="lsa_ChangePassword";
8843 lsarpc_dissect_element_lsa_OpenPolicy_system_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8845 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy_system_name_
, NDR_POINTER_UNIQUE
, "Pointer to System Name (uint16)",hf_lsarpc_lsa_OpenPolicy_system_name
);
8851 lsarpc_dissect_element_lsa_OpenPolicy_system_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8853 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy_system_name
, 0);
8859 lsarpc_dissect_element_lsa_OpenPolicy_attr(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8861 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy_attr_
, NDR_POINTER_REF
, "Pointer to Attr (lsa_ObjectAttribute)",hf_lsarpc_lsa_OpenPolicy_attr
);
8867 lsarpc_dissect_element_lsa_OpenPolicy_attr_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8869 offset
= lsarpc_dissect_struct_lsa_ObjectAttribute(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_OpenPolicy_attr
,0);
8875 lsarpc_dissect_element_lsa_OpenPolicy_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8877 offset
= lsarpc_dissect_bitmap_lsa_PolicyAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy_access_mask
, 0);
8883 lsarpc_dissect_element_lsa_OpenPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8885 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_OpenPolicy_handle
);
8891 lsarpc_dissect_element_lsa_OpenPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8893 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy_handle
, PIDL_POLHND_OPEN
|PIDL_POLHND_TYPE_LSA_POLICY
);
8898 /* IDL: NTSTATUS lsa_OpenPolicy( */
8899 /* IDL: [in] [unique(1)] uint16 *system_name, */
8900 /* IDL: [in] [ref] lsa_ObjectAttribute *attr, */
8901 /* IDL: [in] lsa_PolicyAccessMask access_mask, */
8902 /* IDL: [out] [ref] policy_handle *handle */
8906 lsarpc_dissect_lsa_OpenPolicy_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8910 di
->dcerpc_procedure_name
="lsa_OpenPolicy";
8911 offset
= lsarpc_dissect_element_lsa_OpenPolicy_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8912 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8914 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
8917 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
8923 lsarpc_dissect_lsa_OpenPolicy_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8925 di
->dcerpc_procedure_name
="lsa_OpenPolicy";
8926 offset
= lsarpc_dissect_element_lsa_OpenPolicy_system_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
8927 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8928 offset
= lsarpc_dissect_element_lsa_OpenPolicy_attr(tvb
, offset
, pinfo
, tree
, di
, drep
);
8929 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8930 offset
= lsarpc_dissect_element_lsa_OpenPolicy_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
8931 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8936 lsarpc_dissect_element_lsa_QueryInfoPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8938 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryInfoPolicy_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_QueryInfoPolicy_handle
);
8944 lsarpc_dissect_element_lsa_QueryInfoPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8946 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryInfoPolicy_handle
, 0);
8952 lsarpc_dissect_element_lsa_QueryInfoPolicy_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8954 offset
= lsarpc_dissect_enum_lsa_PolicyInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryInfoPolicy_level
, 0);
8960 lsarpc_dissect_element_lsa_QueryInfoPolicy_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8962 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryInfoPolicy_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_PolicyInformation)",hf_lsarpc_lsa_QueryInfoPolicy_info
);
8968 lsarpc_dissect_element_lsa_QueryInfoPolicy_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8970 uint64_t saved_switch_level
= di
->switch_level
;
8972 di
->switch_level
= 0;
8974 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryInfoPolicy_info__
, NDR_POINTER_UNIQUE
, "Pointer to Info (lsa_PolicyInformation)",hf_lsarpc_lsa_QueryInfoPolicy_info
);
8976 di
->switch_level
= saved_switch_level
;
8982 lsarpc_dissect_element_lsa_QueryInfoPolicy_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8984 offset
= lsarpc_dissect_lsa_PolicyInformation(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryInfoPolicy_info
, 0);
8989 /* IDL: NTSTATUS lsa_QueryInfoPolicy( */
8990 /* IDL: [in] [ref] policy_handle *handle, */
8991 /* IDL: [in] lsa_PolicyInfo level, */
8992 /* IDL: [out] [ref] [switch_is(level)] lsa_PolicyInformation **info */
8996 lsarpc_dissect_lsa_QueryInfoPolicy_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9000 di
->dcerpc_procedure_name
="lsa_QueryInfoPolicy";
9001 offset
= lsarpc_dissect_element_lsa_QueryInfoPolicy_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
9002 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9004 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9007 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9013 lsarpc_dissect_lsa_QueryInfoPolicy_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9015 di
->dcerpc_procedure_name
="lsa_QueryInfoPolicy";
9016 offset
= lsarpc_dissect_element_lsa_QueryInfoPolicy_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9017 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9018 offset
= lsarpc_dissect_element_lsa_QueryInfoPolicy_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
9019 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9024 lsarpc_dissect_element_lsa_SetInfoPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9026 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetInfoPolicy_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_SetInfoPolicy_handle
);
9032 lsarpc_dissect_element_lsa_SetInfoPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9034 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetInfoPolicy_handle
, 0);
9040 lsarpc_dissect_element_lsa_SetInfoPolicy_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9042 offset
= lsarpc_dissect_enum_lsa_PolicyInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetInfoPolicy_level
, 0);
9048 lsarpc_dissect_element_lsa_SetInfoPolicy_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9050 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetInfoPolicy_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_PolicyInformation)",hf_lsarpc_lsa_SetInfoPolicy_info
);
9056 lsarpc_dissect_element_lsa_SetInfoPolicy_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9058 offset
= lsarpc_dissect_lsa_PolicyInformation(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetInfoPolicy_info
, 0);
9063 /* IDL: NTSTATUS lsa_SetInfoPolicy( */
9064 /* IDL: [in] [ref] policy_handle *handle, */
9065 /* IDL: [in] lsa_PolicyInfo level, */
9066 /* IDL: [in] [ref] [switch_is(level)] lsa_PolicyInformation *info */
9070 lsarpc_dissect_lsa_SetInfoPolicy_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9074 di
->dcerpc_procedure_name
="lsa_SetInfoPolicy";
9075 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9078 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9084 lsarpc_dissect_lsa_SetInfoPolicy_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9086 di
->dcerpc_procedure_name
="lsa_SetInfoPolicy";
9087 offset
= lsarpc_dissect_element_lsa_SetInfoPolicy_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9088 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9089 offset
= lsarpc_dissect_element_lsa_SetInfoPolicy_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
9090 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9091 offset
= lsarpc_dissect_element_lsa_SetInfoPolicy_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
9092 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9096 /* IDL: NTSTATUS lsa_ClearAuditLog( */
9101 lsarpc_dissect_lsa_ClearAuditLog_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9105 di
->dcerpc_procedure_name
="lsa_ClearAuditLog";
9106 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9109 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9115 lsarpc_dissect_lsa_ClearAuditLog_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9117 di
->dcerpc_procedure_name
="lsa_ClearAuditLog";
9122 lsarpc_dissect_element_lsa_CreateAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9124 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateAccount_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_CreateAccount_handle
);
9130 lsarpc_dissect_element_lsa_CreateAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9132 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateAccount_handle
, 0);
9138 lsarpc_dissect_element_lsa_CreateAccount_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9140 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateAccount_sid_
, NDR_POINTER_REF
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_CreateAccount_sid
);
9146 lsarpc_dissect_element_lsa_CreateAccount_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9148 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_CreateAccount_sid
,0);
9154 lsarpc_dissect_element_lsa_CreateAccount_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9156 offset
= lsarpc_dissect_bitmap_lsa_AccountAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateAccount_access_mask
, 0);
9162 lsarpc_dissect_element_lsa_CreateAccount_acct_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9164 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateAccount_acct_handle_
, NDR_POINTER_REF
, "Pointer to Acct Handle (policy_handle)",hf_lsarpc_lsa_CreateAccount_acct_handle
);
9170 lsarpc_dissect_element_lsa_CreateAccount_acct_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9172 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateAccount_acct_handle
, PIDL_POLHND_OPEN
|PIDL_POLHND_TYPE_LSA_ACCOUNT
);
9177 /* IDL: NTSTATUS lsa_CreateAccount( */
9178 /* IDL: [in] [ref] policy_handle *handle, */
9179 /* IDL: [in] [ref] dom_sid2 *sid, */
9180 /* IDL: [in] lsa_AccountAccessMask access_mask, */
9181 /* IDL: [out] [ref] policy_handle *acct_handle */
9185 lsarpc_dissect_lsa_CreateAccount_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9189 di
->dcerpc_procedure_name
="lsa_CreateAccount";
9190 offset
= lsarpc_dissect_element_lsa_CreateAccount_acct_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9191 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9193 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9196 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9202 lsarpc_dissect_lsa_CreateAccount_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9204 di
->dcerpc_procedure_name
="lsa_CreateAccount";
9205 offset
= lsarpc_dissect_element_lsa_CreateAccount_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9206 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9207 offset
= lsarpc_dissect_element_lsa_CreateAccount_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
9208 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9209 offset
= lsarpc_dissect_element_lsa_CreateAccount_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
9210 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9215 lsarpc_dissect_element_lsa_EnumAccounts_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9217 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumAccounts_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_EnumAccounts_handle
);
9223 lsarpc_dissect_element_lsa_EnumAccounts_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9225 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumAccounts_handle
, 0);
9231 lsarpc_dissect_element_lsa_EnumAccounts_resume_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9233 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumAccounts_resume_handle_
, NDR_POINTER_REF
, "Pointer to Resume Handle (uint32)",hf_lsarpc_lsa_EnumAccounts_resume_handle
);
9239 lsarpc_dissect_element_lsa_EnumAccounts_resume_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9241 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumAccounts_resume_handle
, 0);
9247 lsarpc_dissect_element_lsa_EnumAccounts_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9249 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumAccounts_sids_
, NDR_POINTER_REF
, "Pointer to Sids (lsa_SidArray)",hf_lsarpc_lsa_EnumAccounts_sids
);
9255 lsarpc_dissect_element_lsa_EnumAccounts_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9257 offset
= lsarpc_dissect_struct_lsa_SidArray(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_EnumAccounts_sids
,0);
9263 lsarpc_dissect_element_lsa_EnumAccounts_num_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9265 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumAccounts_num_entries
, 0);
9270 /* IDL: NTSTATUS lsa_EnumAccounts( */
9271 /* IDL: [in] [ref] policy_handle *handle, */
9272 /* IDL: [in] [out] [ref] uint32 *resume_handle, */
9273 /* IDL: [out] [ref] lsa_SidArray *sids, */
9274 /* IDL: [in] [range(0,8192)] uint32 num_entries */
9278 lsarpc_dissect_lsa_EnumAccounts_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9282 di
->dcerpc_procedure_name
="lsa_EnumAccounts";
9283 offset
= lsarpc_dissect_element_lsa_EnumAccounts_resume_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9284 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9286 offset
= lsarpc_dissect_element_lsa_EnumAccounts_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
9287 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9289 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9292 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9298 lsarpc_dissect_lsa_EnumAccounts_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9300 di
->dcerpc_procedure_name
="lsa_EnumAccounts";
9301 offset
= lsarpc_dissect_element_lsa_EnumAccounts_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9302 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9303 offset
= lsarpc_dissect_element_lsa_EnumAccounts_resume_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9304 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9305 offset
= lsarpc_dissect_element_lsa_EnumAccounts_num_entries(tvb
, offset
, pinfo
, tree
, di
, drep
);
9306 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9311 lsarpc_dissect_element_lsa_CreateTrustedDomain_policy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9313 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomain_policy_handle_
, NDR_POINTER_REF
, "Pointer to Policy Handle (policy_handle)",hf_lsarpc_lsa_CreateTrustedDomain_policy_handle
);
9319 lsarpc_dissect_element_lsa_CreateTrustedDomain_policy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9321 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomain_policy_handle
, 0);
9327 lsarpc_dissect_element_lsa_CreateTrustedDomain_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9329 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomain_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_DomainInfo)",hf_lsarpc_lsa_CreateTrustedDomain_info
);
9335 lsarpc_dissect_element_lsa_CreateTrustedDomain_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9337 offset
= lsarpc_dissect_struct_lsa_DomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_CreateTrustedDomain_info
,0);
9343 lsarpc_dissect_element_lsa_CreateTrustedDomain_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9345 offset
= lsarpc_dissect_bitmap_lsa_TrustedAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomain_access_mask
, 0);
9351 lsarpc_dissect_element_lsa_CreateTrustedDomain_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9353 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomain_trustdom_handle_
, NDR_POINTER_REF
, "Pointer to Trustdom Handle (policy_handle)",hf_lsarpc_lsa_CreateTrustedDomain_trustdom_handle
);
9359 lsarpc_dissect_element_lsa_CreateTrustedDomain_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9361 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomain_trustdom_handle
, PIDL_POLHND_OPEN
|PIDL_POLHND_TYPE_LSA_DOMAIN
);
9366 /* IDL: NTSTATUS lsa_CreateTrustedDomain( */
9367 /* IDL: [in] [ref] policy_handle *policy_handle, */
9368 /* IDL: [in] [ref] lsa_DomainInfo *info, */
9369 /* IDL: [in] lsa_TrustedAccessMask access_mask, */
9370 /* IDL: [out] [ref] policy_handle *trustdom_handle */
9374 lsarpc_dissect_lsa_CreateTrustedDomain_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9378 di
->dcerpc_procedure_name
="lsa_CreateTrustedDomain";
9379 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomain_trustdom_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9380 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9382 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9385 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9391 lsarpc_dissect_lsa_CreateTrustedDomain_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9393 di
->dcerpc_procedure_name
="lsa_CreateTrustedDomain";
9394 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomain_policy_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9395 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9396 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomain_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
9397 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9398 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomain_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
9399 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9404 lsarpc_dissect_element_lsa_EnumTrustDom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9406 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumTrustDom_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_EnumTrustDom_handle
);
9412 lsarpc_dissect_element_lsa_EnumTrustDom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9414 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumTrustDom_handle
, 0);
9420 lsarpc_dissect_element_lsa_EnumTrustDom_resume_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9422 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumTrustDom_resume_handle_
, NDR_POINTER_REF
, "Pointer to Resume Handle (uint32)",hf_lsarpc_lsa_EnumTrustDom_resume_handle
);
9428 lsarpc_dissect_element_lsa_EnumTrustDom_resume_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9430 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumTrustDom_resume_handle
, 0);
9436 lsarpc_dissect_element_lsa_EnumTrustDom_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9438 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumTrustDom_domains_
, NDR_POINTER_REF
, "Pointer to Domains (lsa_DomainList)",hf_lsarpc_lsa_EnumTrustDom_domains
);
9444 lsarpc_dissect_element_lsa_EnumTrustDom_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9446 offset
= lsarpc_dissect_struct_lsa_DomainList(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_EnumTrustDom_domains
,0);
9452 lsarpc_dissect_element_lsa_EnumTrustDom_max_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9454 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumTrustDom_max_size
, 0);
9459 /* IDL: NTSTATUS lsa_EnumTrustDom( */
9460 /* IDL: [in] [ref] policy_handle *handle, */
9461 /* IDL: [in] [out] [ref] uint32 *resume_handle, */
9462 /* IDL: [out] [ref] lsa_DomainList *domains, */
9463 /* IDL: [in] uint32 max_size */
9467 lsarpc_dissect_lsa_EnumTrustDom_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9471 di
->dcerpc_procedure_name
="lsa_EnumTrustDom";
9472 offset
= lsarpc_dissect_element_lsa_EnumTrustDom_resume_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9473 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9475 offset
= lsarpc_dissect_element_lsa_EnumTrustDom_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
9476 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9478 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9481 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9487 lsarpc_dissect_lsa_EnumTrustDom_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9489 di
->dcerpc_procedure_name
="lsa_EnumTrustDom";
9490 offset
= lsarpc_dissect_element_lsa_EnumTrustDom_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9491 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9492 offset
= lsarpc_dissect_element_lsa_EnumTrustDom_resume_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9493 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9494 offset
= lsarpc_dissect_element_lsa_EnumTrustDom_max_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
9495 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9500 lsarpc_dissect_element_lsa_LookupNames_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9502 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_LookupNames_handle
);
9508 lsarpc_dissect_element_lsa_LookupNames_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9510 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames_handle
, 0);
9516 lsarpc_dissect_element_lsa_LookupNames_num_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9518 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames_num_names
, 0);
9524 lsarpc_dissect_element_lsa_LookupNames_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9526 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames_domains_
, NDR_POINTER_REF
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupNames_domains
);
9532 lsarpc_dissect_element_lsa_LookupNames_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9534 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames_domains__
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupNames_domains
);
9540 lsarpc_dissect_element_lsa_LookupNames_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9542 offset
= lsarpc_dissect_struct_lsa_RefDomainList(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupNames_domains
,0);
9548 lsarpc_dissect_element_lsa_LookupNames_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9550 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames_sids_
, NDR_POINTER_REF
, "Pointer to Sids (lsa_TransSidArray)",hf_lsarpc_lsa_LookupNames_sids
);
9556 lsarpc_dissect_element_lsa_LookupNames_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9558 offset
= lsarpc_dissect_struct_lsa_TransSidArray(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupNames_sids
,0);
9564 lsarpc_dissect_element_lsa_LookupNames_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9566 offset
= lsarpc_dissect_enum_lsa_LookupNamesLevel(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames_level
, 0);
9572 lsarpc_dissect_element_lsa_LookupNames_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9574 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames_count_
, NDR_POINTER_REF
, "Pointer to Count (uint32)",hf_lsarpc_lsa_LookupNames_count
);
9580 lsarpc_dissect_element_lsa_LookupNames_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9582 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames_count
, 0);
9587 /* IDL: NTSTATUS lsa_LookupNames( */
9588 /* IDL: [in] [ref] policy_handle *handle, */
9589 /* IDL: [in] [range(0,1000)] uint32 num_names, */
9590 /* IDL: [in] [size_is(num_names)] lsa_String names[*], */
9591 /* IDL: [out] [ref] lsa_RefDomainList **domains, */
9592 /* IDL: [in] [out] [ref] lsa_TransSidArray *sids, */
9593 /* IDL: [in] lsa_LookupNamesLevel level, */
9594 /* IDL: [in] [out] [ref] uint32 *count */
9598 lsarpc_dissect_lsa_LookupNames_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9602 di
->dcerpc_procedure_name
="lsa_LookupNames";
9603 offset
= lsarpc_dissect_element_lsa_LookupNames_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
9604 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9606 offset
= lsarpc_dissect_element_lsa_LookupNames_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
9607 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9609 offset
= lsarpc_dissect_element_lsa_LookupNames_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
9610 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9612 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9615 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9621 lsarpc_dissect_lsa_LookupNames_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9623 di
->dcerpc_procedure_name
="lsa_LookupNames";
9624 offset
= lsarpc_dissect_element_lsa_LookupNames_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9625 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9626 offset
= lsarpc_dissect_element_lsa_LookupNames_num_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
9627 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9628 offset
= lsarpc_dissect_element_lsa_LookupNames_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
9629 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9630 offset
= lsarpc_dissect_element_lsa_LookupNames_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
9631 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9632 offset
= lsarpc_dissect_element_lsa_LookupNames_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
9633 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9634 offset
= lsarpc_dissect_element_lsa_LookupNames_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
9635 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9640 lsarpc_dissect_element_lsa_LookupSids_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9642 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_LookupSids_handle
);
9648 lsarpc_dissect_element_lsa_LookupSids_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9650 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids_handle
, 0);
9656 lsarpc_dissect_element_lsa_LookupSids_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9658 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids_sids_
, NDR_POINTER_REF
, "Pointer to Sids (lsa_SidArray)",hf_lsarpc_lsa_LookupSids_sids
);
9664 lsarpc_dissect_element_lsa_LookupSids_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9666 offset
= lsarpc_dissect_struct_lsa_SidArray(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupSids_sids
,0);
9672 lsarpc_dissect_element_lsa_LookupSids_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9674 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids_domains_
, NDR_POINTER_REF
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupSids_domains
);
9680 lsarpc_dissect_element_lsa_LookupSids_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9682 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids_domains__
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupSids_domains
);
9688 lsarpc_dissect_element_lsa_LookupSids_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9690 offset
= lsarpc_dissect_struct_lsa_RefDomainList(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupSids_domains
,0);
9696 lsarpc_dissect_element_lsa_LookupSids_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9698 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids_names_
, NDR_POINTER_REF
, "Pointer to Names (lsa_TransNameArray)",hf_lsarpc_lsa_LookupSids_names
);
9704 lsarpc_dissect_element_lsa_LookupSids_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9706 offset
= lsarpc_dissect_struct_lsa_TransNameArray(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupSids_names
,0);
9712 lsarpc_dissect_element_lsa_LookupSids_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9714 offset
= lsarpc_dissect_enum_lsa_LookupNamesLevel(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids_level
, 0);
9720 lsarpc_dissect_element_lsa_LookupSids_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9722 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids_count_
, NDR_POINTER_REF
, "Pointer to Count (uint32)",hf_lsarpc_lsa_LookupSids_count
);
9728 lsarpc_dissect_element_lsa_LookupSids_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9730 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids_count
, 0);
9735 /* IDL: NTSTATUS lsa_LookupSids( */
9736 /* IDL: [in] [ref] policy_handle *handle, */
9737 /* IDL: [in] [ref] lsa_SidArray *sids, */
9738 /* IDL: [out] [ref] lsa_RefDomainList **domains, */
9739 /* IDL: [in] [out] [ref] lsa_TransNameArray *names, */
9740 /* IDL: [in] lsa_LookupNamesLevel level, */
9741 /* IDL: [in] [out] [ref] uint32 *count */
9745 lsarpc_dissect_lsa_LookupSids_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9749 di
->dcerpc_procedure_name
="lsa_LookupSids";
9750 offset
= lsarpc_dissect_element_lsa_LookupSids_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
9751 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9753 offset
= lsarpc_dissect_element_lsa_LookupSids_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
9754 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9756 offset
= lsarpc_dissect_element_lsa_LookupSids_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
9757 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9759 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9762 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9768 lsarpc_dissect_lsa_LookupSids_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9770 di
->dcerpc_procedure_name
="lsa_LookupSids";
9771 offset
= lsarpc_dissect_element_lsa_LookupSids_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9772 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9773 offset
= lsarpc_dissect_element_lsa_LookupSids_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
9774 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9775 offset
= lsarpc_dissect_element_lsa_LookupSids_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
9776 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9777 offset
= lsarpc_dissect_element_lsa_LookupSids_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
9778 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9779 offset
= lsarpc_dissect_element_lsa_LookupSids_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
9780 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9785 lsarpc_dissect_element_lsa_CreateSecret_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9787 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateSecret_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_CreateSecret_handle
);
9793 lsarpc_dissect_element_lsa_CreateSecret_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9795 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateSecret_handle
, 0);
9801 lsarpc_dissect_element_lsa_CreateSecret_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9803 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_CreateSecret_name
,0);
9809 lsarpc_dissect_element_lsa_CreateSecret_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9811 offset
= lsarpc_dissect_bitmap_lsa_SecretAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateSecret_access_mask
, 0);
9817 lsarpc_dissect_element_lsa_CreateSecret_sec_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9819 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateSecret_sec_handle_
, NDR_POINTER_REF
, "Pointer to Sec Handle (policy_handle)",hf_lsarpc_lsa_CreateSecret_sec_handle
);
9825 lsarpc_dissect_element_lsa_CreateSecret_sec_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9827 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateSecret_sec_handle
, PIDL_POLHND_OPEN
|PIDL_POLHND_TYPE_LSA_SECRET
);
9832 /* IDL: NTSTATUS lsa_CreateSecret( */
9833 /* IDL: [in] [ref] policy_handle *handle, */
9834 /* IDL: [in] lsa_String name, */
9835 /* IDL: [in] lsa_SecretAccessMask access_mask, */
9836 /* IDL: [out] [ref] policy_handle *sec_handle */
9840 lsarpc_dissect_lsa_CreateSecret_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9844 di
->dcerpc_procedure_name
="lsa_CreateSecret";
9845 offset
= lsarpc_dissect_element_lsa_CreateSecret_sec_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9846 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9848 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9851 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9857 lsarpc_dissect_lsa_CreateSecret_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9859 di
->dcerpc_procedure_name
="lsa_CreateSecret";
9860 offset
= lsarpc_dissect_element_lsa_CreateSecret_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9861 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9862 offset
= lsarpc_dissect_element_lsa_CreateSecret_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
9863 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9864 offset
= lsarpc_dissect_element_lsa_CreateSecret_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
9865 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9870 lsarpc_dissect_element_lsa_OpenAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9872 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenAccount_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_OpenAccount_handle
);
9878 lsarpc_dissect_element_lsa_OpenAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9880 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenAccount_handle
, 0);
9886 lsarpc_dissect_element_lsa_OpenAccount_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9888 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenAccount_sid_
, NDR_POINTER_REF
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_OpenAccount_sid
);
9894 lsarpc_dissect_element_lsa_OpenAccount_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9896 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_OpenAccount_sid
,0);
9902 lsarpc_dissect_element_lsa_OpenAccount_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9904 offset
= lsarpc_dissect_bitmap_lsa_AccountAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenAccount_access_mask
, 0);
9910 lsarpc_dissect_element_lsa_OpenAccount_acct_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9912 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenAccount_acct_handle_
, NDR_POINTER_REF
, "Pointer to Acct Handle (policy_handle)",hf_lsarpc_lsa_OpenAccount_acct_handle
);
9918 lsarpc_dissect_element_lsa_OpenAccount_acct_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9920 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenAccount_acct_handle
, PIDL_POLHND_OPEN
|PIDL_POLHND_TYPE_LSA_ACCOUNT
);
9925 /* IDL: NTSTATUS lsa_OpenAccount( */
9926 /* IDL: [in] [ref] policy_handle *handle, */
9927 /* IDL: [in] [ref] dom_sid2 *sid, */
9928 /* IDL: [in] lsa_AccountAccessMask access_mask, */
9929 /* IDL: [out] [ref] policy_handle *acct_handle */
9933 lsarpc_dissect_lsa_OpenAccount_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9937 di
->dcerpc_procedure_name
="lsa_OpenAccount";
9938 offset
= lsarpc_dissect_element_lsa_OpenAccount_acct_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9939 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9941 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9944 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9950 lsarpc_dissect_lsa_OpenAccount_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9952 di
->dcerpc_procedure_name
="lsa_OpenAccount";
9953 offset
= lsarpc_dissect_element_lsa_OpenAccount_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9954 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9955 offset
= lsarpc_dissect_element_lsa_OpenAccount_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
9956 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9957 offset
= lsarpc_dissect_element_lsa_OpenAccount_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
9958 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9963 lsarpc_dissect_element_lsa_EnumPrivsAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9965 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumPrivsAccount_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_EnumPrivsAccount_handle
);
9971 lsarpc_dissect_element_lsa_EnumPrivsAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9973 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumPrivsAccount_handle
, 0);
9979 lsarpc_dissect_element_lsa_EnumPrivsAccount_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9981 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumPrivsAccount_privs_
, NDR_POINTER_REF
, "Pointer to Privs (lsa_PrivilegeSet)",hf_lsarpc_lsa_EnumPrivsAccount_privs
);
9987 lsarpc_dissect_element_lsa_EnumPrivsAccount_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9989 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumPrivsAccount_privs__
, NDR_POINTER_UNIQUE
, "Pointer to Privs (lsa_PrivilegeSet)",hf_lsarpc_lsa_EnumPrivsAccount_privs
);
9995 lsarpc_dissect_element_lsa_EnumPrivsAccount_privs__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9997 offset
= lsarpc_dissect_struct_lsa_PrivilegeSet(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_EnumPrivsAccount_privs
,0);
10002 /* IDL: NTSTATUS lsa_EnumPrivsAccount( */
10003 /* IDL: [in] [ref] policy_handle *handle, */
10004 /* IDL: [out] [ref] lsa_PrivilegeSet **privs */
10008 lsarpc_dissect_lsa_EnumPrivsAccount_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10012 di
->dcerpc_procedure_name
="lsa_EnumPrivsAccount";
10013 offset
= lsarpc_dissect_element_lsa_EnumPrivsAccount_privs(tvb
, offset
, pinfo
, tree
, di
, drep
);
10014 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10016 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10019 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10025 lsarpc_dissect_lsa_EnumPrivsAccount_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10027 di
->dcerpc_procedure_name
="lsa_EnumPrivsAccount";
10028 offset
= lsarpc_dissect_element_lsa_EnumPrivsAccount_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10029 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10034 lsarpc_dissect_element_lsa_AddPrivilegesToAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10036 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AddPrivilegesToAccount_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_AddPrivilegesToAccount_handle
);
10042 lsarpc_dissect_element_lsa_AddPrivilegesToAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10044 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AddPrivilegesToAccount_handle
, 0);
10050 lsarpc_dissect_element_lsa_AddPrivilegesToAccount_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10052 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AddPrivilegesToAccount_privs_
, NDR_POINTER_REF
, "Pointer to Privs (lsa_PrivilegeSet)",hf_lsarpc_lsa_AddPrivilegesToAccount_privs
);
10058 lsarpc_dissect_element_lsa_AddPrivilegesToAccount_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10060 offset
= lsarpc_dissect_struct_lsa_PrivilegeSet(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_AddPrivilegesToAccount_privs
,0);
10065 /* IDL: NTSTATUS lsa_AddPrivilegesToAccount( */
10066 /* IDL: [in] [ref] policy_handle *handle, */
10067 /* IDL: [in] [ref] lsa_PrivilegeSet *privs */
10071 lsarpc_dissect_lsa_AddPrivilegesToAccount_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10075 di
->dcerpc_procedure_name
="lsa_AddPrivilegesToAccount";
10076 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10079 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10085 lsarpc_dissect_lsa_AddPrivilegesToAccount_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10087 di
->dcerpc_procedure_name
="lsa_AddPrivilegesToAccount";
10088 offset
= lsarpc_dissect_element_lsa_AddPrivilegesToAccount_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10089 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10090 offset
= lsarpc_dissect_element_lsa_AddPrivilegesToAccount_privs(tvb
, offset
, pinfo
, tree
, di
, drep
);
10091 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10096 lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10098 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_RemovePrivilegesFromAccount_handle
);
10104 lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10106 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_RemovePrivilegesFromAccount_handle
, 0);
10112 lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_remove_all(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10114 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_RemovePrivilegesFromAccount_remove_all
, 0);
10120 lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10122 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_privs_
, NDR_POINTER_UNIQUE
, "Pointer to Privs (lsa_PrivilegeSet)",hf_lsarpc_lsa_RemovePrivilegesFromAccount_privs
);
10128 lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10130 offset
= lsarpc_dissect_struct_lsa_PrivilegeSet(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_RemovePrivilegesFromAccount_privs
,0);
10135 /* IDL: NTSTATUS lsa_RemovePrivilegesFromAccount( */
10136 /* IDL: [in] [ref] policy_handle *handle, */
10137 /* IDL: [in] uint8 remove_all, */
10138 /* IDL: [in] [unique(1)] lsa_PrivilegeSet *privs */
10142 lsarpc_dissect_lsa_RemovePrivilegesFromAccount_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10146 di
->dcerpc_procedure_name
="lsa_RemovePrivilegesFromAccount";
10147 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10150 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10156 lsarpc_dissect_lsa_RemovePrivilegesFromAccount_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10158 di
->dcerpc_procedure_name
="lsa_RemovePrivilegesFromAccount";
10159 offset
= lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10160 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10161 offset
= lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_remove_all(tvb
, offset
, pinfo
, tree
, di
, drep
);
10162 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10163 offset
= lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_privs(tvb
, offset
, pinfo
, tree
, di
, drep
);
10164 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10168 /* IDL: NTSTATUS lsa_GetQuotasForAccount( */
10173 lsarpc_dissect_lsa_GetQuotasForAccount_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10177 di
->dcerpc_procedure_name
="lsa_GetQuotasForAccount";
10178 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10181 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10187 lsarpc_dissect_lsa_GetQuotasForAccount_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10189 di
->dcerpc_procedure_name
="lsa_GetQuotasForAccount";
10193 /* IDL: NTSTATUS lsa_SetQuotasForAccount( */
10198 lsarpc_dissect_lsa_SetQuotasForAccount_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10202 di
->dcerpc_procedure_name
="lsa_SetQuotasForAccount";
10203 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10206 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10212 lsarpc_dissect_lsa_SetQuotasForAccount_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10214 di
->dcerpc_procedure_name
="lsa_SetQuotasForAccount";
10219 lsarpc_dissect_element_lsa_GetSystemAccessAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10221 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_GetSystemAccessAccount_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_GetSystemAccessAccount_handle
);
10227 lsarpc_dissect_element_lsa_GetSystemAccessAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10229 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_GetSystemAccessAccount_handle
, 0);
10235 lsarpc_dissect_element_lsa_GetSystemAccessAccount_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10237 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_GetSystemAccessAccount_access_mask_
, NDR_POINTER_REF
, "Pointer to Access Mask (lsa_AccountAccessMask)",hf_lsarpc_lsa_GetSystemAccessAccount_access_mask
);
10243 lsarpc_dissect_element_lsa_GetSystemAccessAccount_access_mask_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10245 offset
= lsarpc_dissect_bitmap_lsa_AccountAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_GetSystemAccessAccount_access_mask
, 0);
10250 /* IDL: NTSTATUS lsa_GetSystemAccessAccount( */
10251 /* IDL: [in] [ref] policy_handle *handle, */
10252 /* IDL: [out] [ref] lsa_AccountAccessMask *access_mask */
10256 lsarpc_dissect_lsa_GetSystemAccessAccount_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10260 di
->dcerpc_procedure_name
="lsa_GetSystemAccessAccount";
10261 offset
= lsarpc_dissect_element_lsa_GetSystemAccessAccount_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
10262 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10264 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10267 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10273 lsarpc_dissect_lsa_GetSystemAccessAccount_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10275 di
->dcerpc_procedure_name
="lsa_GetSystemAccessAccount";
10276 offset
= lsarpc_dissect_element_lsa_GetSystemAccessAccount_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10277 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10282 lsarpc_dissect_element_lsa_SetSystemAccessAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10284 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetSystemAccessAccount_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_SetSystemAccessAccount_handle
);
10290 lsarpc_dissect_element_lsa_SetSystemAccessAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10292 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetSystemAccessAccount_handle
, 0);
10298 lsarpc_dissect_element_lsa_SetSystemAccessAccount_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10300 offset
= lsarpc_dissect_bitmap_lsa_AccountAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetSystemAccessAccount_access_mask
, 0);
10305 /* IDL: NTSTATUS lsa_SetSystemAccessAccount( */
10306 /* IDL: [in] [ref] policy_handle *handle, */
10307 /* IDL: [in] lsa_AccountAccessMask access_mask */
10311 lsarpc_dissect_lsa_SetSystemAccessAccount_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10315 di
->dcerpc_procedure_name
="lsa_SetSystemAccessAccount";
10316 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10319 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10325 lsarpc_dissect_lsa_SetSystemAccessAccount_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10327 di
->dcerpc_procedure_name
="lsa_SetSystemAccessAccount";
10328 offset
= lsarpc_dissect_element_lsa_SetSystemAccessAccount_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10329 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10330 offset
= lsarpc_dissect_element_lsa_SetSystemAccessAccount_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
10331 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10336 lsarpc_dissect_element_lsa_OpenTrustedDomain_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10338 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenTrustedDomain_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_OpenTrustedDomain_handle
);
10344 lsarpc_dissect_element_lsa_OpenTrustedDomain_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10346 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenTrustedDomain_handle
, 0);
10352 lsarpc_dissect_element_lsa_OpenTrustedDomain_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10354 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenTrustedDomain_sid_
, NDR_POINTER_REF
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_OpenTrustedDomain_sid
);
10360 lsarpc_dissect_element_lsa_OpenTrustedDomain_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10362 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_OpenTrustedDomain_sid
,0);
10368 lsarpc_dissect_element_lsa_OpenTrustedDomain_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10370 offset
= lsarpc_dissect_bitmap_lsa_TrustedAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenTrustedDomain_access_mask
, 0);
10376 lsarpc_dissect_element_lsa_OpenTrustedDomain_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10378 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenTrustedDomain_trustdom_handle_
, NDR_POINTER_REF
, "Pointer to Trustdom Handle (policy_handle)",hf_lsarpc_lsa_OpenTrustedDomain_trustdom_handle
);
10384 lsarpc_dissect_element_lsa_OpenTrustedDomain_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10386 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenTrustedDomain_trustdom_handle
, PIDL_POLHND_OPEN
|PIDL_POLHND_TYPE_LSA_DOMAIN
);
10391 /* IDL: NTSTATUS lsa_OpenTrustedDomain( */
10392 /* IDL: [in] [ref] policy_handle *handle, */
10393 /* IDL: [in] [ref] dom_sid2 *sid, */
10394 /* IDL: [in] lsa_TrustedAccessMask access_mask, */
10395 /* IDL: [out] [ref] policy_handle *trustdom_handle */
10399 lsarpc_dissect_lsa_OpenTrustedDomain_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10403 di
->dcerpc_procedure_name
="lsa_OpenTrustedDomain";
10404 offset
= lsarpc_dissect_element_lsa_OpenTrustedDomain_trustdom_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10405 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10407 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10410 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10416 lsarpc_dissect_lsa_OpenTrustedDomain_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10418 di
->dcerpc_procedure_name
="lsa_OpenTrustedDomain";
10419 offset
= lsarpc_dissect_element_lsa_OpenTrustedDomain_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10420 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10421 offset
= lsarpc_dissect_element_lsa_OpenTrustedDomain_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
10422 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10423 offset
= lsarpc_dissect_element_lsa_OpenTrustedDomain_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
10424 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10429 lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10431 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_trustdom_handle_
, NDR_POINTER_REF
, "Pointer to Trustdom Handle (policy_handle)",hf_lsarpc_lsa_QueryTrustedDomainInfo_trustdom_handle
);
10437 lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10439 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryTrustedDomainInfo_trustdom_handle
, 0);
10445 lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10447 offset
= lsarpc_dissect_enum_lsa_TrustDomInfoEnum(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryTrustedDomainInfo_level
, 0);
10453 lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10455 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_TrustedDomainInfo)",hf_lsarpc_lsa_QueryTrustedDomainInfo_info
);
10461 lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10463 uint64_t saved_switch_level
= di
->switch_level
;
10465 di
->switch_level
= 0;
10467 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_info__
, NDR_POINTER_UNIQUE
, "Pointer to Info (lsa_TrustedDomainInfo)",hf_lsarpc_lsa_QueryTrustedDomainInfo_info
);
10469 di
->switch_level
= saved_switch_level
;
10475 lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10477 offset
= lsarpc_dissect_lsa_TrustedDomainInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryTrustedDomainInfo_info
, 0);
10482 /* IDL: NTSTATUS lsa_QueryTrustedDomainInfo( */
10483 /* IDL: [in] [ref] policy_handle *trustdom_handle, */
10484 /* IDL: [in] lsa_TrustDomInfoEnum level, */
10485 /* IDL: [out] [ref] [switch_is(level)] lsa_TrustedDomainInfo **info */
10489 lsarpc_dissect_lsa_QueryTrustedDomainInfo_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10493 di
->dcerpc_procedure_name
="lsa_QueryTrustedDomainInfo";
10494 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
10495 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10497 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10500 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10506 lsarpc_dissect_lsa_QueryTrustedDomainInfo_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10508 di
->dcerpc_procedure_name
="lsa_QueryTrustedDomainInfo";
10509 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_trustdom_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10510 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10511 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
10512 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10517 lsarpc_dissect_element_lsa_SetInformationTrustedDomain_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10519 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetInformationTrustedDomain_trustdom_handle_
, NDR_POINTER_REF
, "Pointer to Trustdom Handle (policy_handle)",hf_lsarpc_lsa_SetInformationTrustedDomain_trustdom_handle
);
10525 lsarpc_dissect_element_lsa_SetInformationTrustedDomain_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10527 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetInformationTrustedDomain_trustdom_handle
, 0);
10533 lsarpc_dissect_element_lsa_SetInformationTrustedDomain_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10535 offset
= lsarpc_dissect_enum_lsa_TrustDomInfoEnum(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetInformationTrustedDomain_level
, 0);
10541 lsarpc_dissect_element_lsa_SetInformationTrustedDomain_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10543 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetInformationTrustedDomain_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_TrustedDomainInfo)",hf_lsarpc_lsa_SetInformationTrustedDomain_info
);
10549 lsarpc_dissect_element_lsa_SetInformationTrustedDomain_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10551 offset
= lsarpc_dissect_lsa_TrustedDomainInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetInformationTrustedDomain_info
, 0);
10556 /* IDL: NTSTATUS lsa_SetInformationTrustedDomain( */
10557 /* IDL: [in] [ref] policy_handle *trustdom_handle, */
10558 /* IDL: [in] lsa_TrustDomInfoEnum level, */
10559 /* IDL: [in] [ref] [switch_is(level)] lsa_TrustedDomainInfo *info */
10563 lsarpc_dissect_lsa_SetInformationTrustedDomain_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10567 di
->dcerpc_procedure_name
="lsa_SetInformationTrustedDomain";
10568 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10571 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10577 lsarpc_dissect_lsa_SetInformationTrustedDomain_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10579 di
->dcerpc_procedure_name
="lsa_SetInformationTrustedDomain";
10580 offset
= lsarpc_dissect_element_lsa_SetInformationTrustedDomain_trustdom_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10581 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10582 offset
= lsarpc_dissect_element_lsa_SetInformationTrustedDomain_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
10583 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10584 offset
= lsarpc_dissect_element_lsa_SetInformationTrustedDomain_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
10585 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10590 lsarpc_dissect_element_lsa_OpenSecret_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10592 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenSecret_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_OpenSecret_handle
);
10598 lsarpc_dissect_element_lsa_OpenSecret_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10600 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenSecret_handle
, 0);
10606 lsarpc_dissect_element_lsa_OpenSecret_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10608 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_OpenSecret_name
,0);
10614 lsarpc_dissect_element_lsa_OpenSecret_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10616 offset
= lsarpc_dissect_bitmap_lsa_SecretAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenSecret_access_mask
, 0);
10622 lsarpc_dissect_element_lsa_OpenSecret_sec_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10624 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenSecret_sec_handle_
, NDR_POINTER_REF
, "Pointer to Sec Handle (policy_handle)",hf_lsarpc_lsa_OpenSecret_sec_handle
);
10630 lsarpc_dissect_element_lsa_OpenSecret_sec_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10632 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenSecret_sec_handle
, PIDL_POLHND_OPEN
|PIDL_POLHND_TYPE_LSA_SECRET
);
10637 /* IDL: NTSTATUS lsa_OpenSecret( */
10638 /* IDL: [in] [ref] policy_handle *handle, */
10639 /* IDL: [in] lsa_String name, */
10640 /* IDL: [in] lsa_SecretAccessMask access_mask, */
10641 /* IDL: [out] [ref] policy_handle *sec_handle */
10645 lsarpc_dissect_lsa_OpenSecret_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10649 di
->dcerpc_procedure_name
="lsa_OpenSecret";
10650 offset
= lsarpc_dissect_element_lsa_OpenSecret_sec_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10651 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10653 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10656 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10662 lsarpc_dissect_lsa_OpenSecret_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10664 di
->dcerpc_procedure_name
="lsa_OpenSecret";
10665 offset
= lsarpc_dissect_element_lsa_OpenSecret_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10666 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10667 offset
= lsarpc_dissect_element_lsa_OpenSecret_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
10668 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10669 offset
= lsarpc_dissect_element_lsa_OpenSecret_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
10670 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10675 lsarpc_dissect_element_lsa_SetSecret_sec_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10677 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetSecret_sec_handle_
, NDR_POINTER_REF
, "Pointer to Sec Handle (policy_handle)",hf_lsarpc_lsa_SetSecret_sec_handle
);
10683 lsarpc_dissect_element_lsa_SetSecret_sec_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10685 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetSecret_sec_handle
, 0);
10691 lsarpc_dissect_element_lsa_SetSecret_new_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10693 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetSecret_new_val_
, NDR_POINTER_UNIQUE
, "Pointer to New Val (lsa_DATA_BUF)",hf_lsarpc_lsa_SetSecret_new_val
);
10699 lsarpc_dissect_element_lsa_SetSecret_new_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10701 offset
= lsarpc_dissect_struct_lsa_DATA_BUF(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_SetSecret_new_val
,0);
10707 lsarpc_dissect_element_lsa_SetSecret_old_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10709 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetSecret_old_val_
, NDR_POINTER_UNIQUE
, "Pointer to Old Val (lsa_DATA_BUF)",hf_lsarpc_lsa_SetSecret_old_val
);
10715 lsarpc_dissect_element_lsa_SetSecret_old_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10717 offset
= lsarpc_dissect_struct_lsa_DATA_BUF(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_SetSecret_old_val
,0);
10722 /* IDL: NTSTATUS lsa_SetSecret( */
10723 /* IDL: [in] [ref] policy_handle *sec_handle, */
10724 /* IDL: [in] [unique(1)] lsa_DATA_BUF *new_val, */
10725 /* IDL: [in] [unique(1)] lsa_DATA_BUF *old_val */
10729 lsarpc_dissect_lsa_SetSecret_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10733 di
->dcerpc_procedure_name
="lsa_SetSecret";
10734 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10737 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10743 lsarpc_dissect_lsa_SetSecret_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10745 di
->dcerpc_procedure_name
="lsa_SetSecret";
10746 offset
= lsarpc_dissect_element_lsa_SetSecret_sec_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10747 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10748 offset
= lsarpc_dissect_element_lsa_SetSecret_new_val(tvb
, offset
, pinfo
, tree
, di
, drep
);
10749 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10750 offset
= lsarpc_dissect_element_lsa_SetSecret_old_val(tvb
, offset
, pinfo
, tree
, di
, drep
);
10751 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10756 lsarpc_dissect_element_lsa_QuerySecret_sec_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10758 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QuerySecret_sec_handle_
, NDR_POINTER_REF
, "Pointer to Sec Handle (policy_handle)",hf_lsarpc_lsa_QuerySecret_sec_handle
);
10764 lsarpc_dissect_element_lsa_QuerySecret_sec_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10766 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QuerySecret_sec_handle
, 0);
10772 lsarpc_dissect_element_lsa_QuerySecret_new_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10774 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QuerySecret_new_val_
, NDR_POINTER_UNIQUE
, "Pointer to New Val (lsa_DATA_BUF_PTR)",hf_lsarpc_lsa_QuerySecret_new_val
);
10780 lsarpc_dissect_element_lsa_QuerySecret_new_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10782 offset
= lsarpc_dissect_struct_lsa_DATA_BUF_PTR(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_QuerySecret_new_val
,0);
10788 lsarpc_dissect_element_lsa_QuerySecret_new_mtime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10790 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QuerySecret_new_mtime_
, NDR_POINTER_UNIQUE
, "Pointer to New Mtime (NTTIME_hyper)",hf_lsarpc_lsa_QuerySecret_new_mtime
);
10796 lsarpc_dissect_element_lsa_QuerySecret_new_mtime_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10798 offset
= dissect_ndr_nt_NTTIME_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QuerySecret_new_mtime
);
10804 lsarpc_dissect_element_lsa_QuerySecret_old_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10806 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QuerySecret_old_val_
, NDR_POINTER_UNIQUE
, "Pointer to Old Val (lsa_DATA_BUF_PTR)",hf_lsarpc_lsa_QuerySecret_old_val
);
10812 lsarpc_dissect_element_lsa_QuerySecret_old_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10814 offset
= lsarpc_dissect_struct_lsa_DATA_BUF_PTR(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_QuerySecret_old_val
,0);
10820 lsarpc_dissect_element_lsa_QuerySecret_old_mtime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10822 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QuerySecret_old_mtime_
, NDR_POINTER_UNIQUE
, "Pointer to Old Mtime (NTTIME_hyper)",hf_lsarpc_lsa_QuerySecret_old_mtime
);
10828 lsarpc_dissect_element_lsa_QuerySecret_old_mtime_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10830 offset
= dissect_ndr_nt_NTTIME_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QuerySecret_old_mtime
);
10835 /* IDL: NTSTATUS lsa_QuerySecret( */
10836 /* IDL: [in] [ref] policy_handle *sec_handle, */
10837 /* IDL: [in] [out] [unique(1)] lsa_DATA_BUF_PTR *new_val, */
10838 /* IDL: [in] [out] [unique(1)] NTTIME_hyper *new_mtime, */
10839 /* IDL: [in] [out] [unique(1)] lsa_DATA_BUF_PTR *old_val, */
10840 /* IDL: [in] [out] [unique(1)] NTTIME_hyper *old_mtime */
10844 lsarpc_dissect_lsa_QuerySecret_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10848 di
->dcerpc_procedure_name
="lsa_QuerySecret";
10849 offset
= lsarpc_dissect_element_lsa_QuerySecret_new_val(tvb
, offset
, pinfo
, tree
, di
, drep
);
10850 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10852 offset
= lsarpc_dissect_element_lsa_QuerySecret_new_mtime(tvb
, offset
, pinfo
, tree
, di
, drep
);
10853 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10855 offset
= lsarpc_dissect_element_lsa_QuerySecret_old_val(tvb
, offset
, pinfo
, tree
, di
, drep
);
10856 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10858 offset
= lsarpc_dissect_element_lsa_QuerySecret_old_mtime(tvb
, offset
, pinfo
, tree
, di
, drep
);
10859 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10861 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10864 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10870 lsarpc_dissect_lsa_QuerySecret_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10872 di
->dcerpc_procedure_name
="lsa_QuerySecret";
10873 offset
= lsarpc_dissect_element_lsa_QuerySecret_sec_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10874 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10875 offset
= lsarpc_dissect_element_lsa_QuerySecret_new_val(tvb
, offset
, pinfo
, tree
, di
, drep
);
10876 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10877 offset
= lsarpc_dissect_element_lsa_QuerySecret_new_mtime(tvb
, offset
, pinfo
, tree
, di
, drep
);
10878 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10879 offset
= lsarpc_dissect_element_lsa_QuerySecret_old_val(tvb
, offset
, pinfo
, tree
, di
, drep
);
10880 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10881 offset
= lsarpc_dissect_element_lsa_QuerySecret_old_mtime(tvb
, offset
, pinfo
, tree
, di
, drep
);
10882 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10887 lsarpc_dissect_element_lsa_LookupPrivValue_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10889 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivValue_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_LookupPrivValue_handle
);
10895 lsarpc_dissect_element_lsa_LookupPrivValue_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10897 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupPrivValue_handle
, 0);
10903 lsarpc_dissect_element_lsa_LookupPrivValue_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10905 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivValue_name_
, NDR_POINTER_REF
, "Pointer to Name (lsa_String)",hf_lsarpc_lsa_LookupPrivValue_name
);
10911 lsarpc_dissect_element_lsa_LookupPrivValue_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10913 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupPrivValue_name
,0);
10919 lsarpc_dissect_element_lsa_LookupPrivValue_luid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10921 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivValue_luid_
, NDR_POINTER_REF
, "Pointer to Luid (lsa_LUID)",hf_lsarpc_lsa_LookupPrivValue_luid
);
10927 lsarpc_dissect_element_lsa_LookupPrivValue_luid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10929 offset
= lsarpc_dissect_struct_lsa_LUID(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupPrivValue_luid
,0);
10934 /* IDL: NTSTATUS lsa_LookupPrivValue( */
10935 /* IDL: [in] [ref] policy_handle *handle, */
10936 /* IDL: [in] [ref] lsa_String *name, */
10937 /* IDL: [out] [ref] lsa_LUID *luid */
10941 lsarpc_dissect_lsa_LookupPrivValue_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10945 di
->dcerpc_procedure_name
="lsa_LookupPrivValue";
10946 offset
= lsarpc_dissect_element_lsa_LookupPrivValue_luid(tvb
, offset
, pinfo
, tree
, di
, drep
);
10947 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10949 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10952 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10958 lsarpc_dissect_lsa_LookupPrivValue_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10960 di
->dcerpc_procedure_name
="lsa_LookupPrivValue";
10961 offset
= lsarpc_dissect_element_lsa_LookupPrivValue_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10962 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10963 offset
= lsarpc_dissect_element_lsa_LookupPrivValue_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
10964 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10969 lsarpc_dissect_element_lsa_LookupPrivName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10971 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivName_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_LookupPrivName_handle
);
10977 lsarpc_dissect_element_lsa_LookupPrivName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10979 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupPrivName_handle
, 0);
10985 lsarpc_dissect_element_lsa_LookupPrivName_luid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10987 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivName_luid_
, NDR_POINTER_REF
, "Pointer to Luid (lsa_LUID)",hf_lsarpc_lsa_LookupPrivName_luid
);
10993 lsarpc_dissect_element_lsa_LookupPrivName_luid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10995 offset
= lsarpc_dissect_struct_lsa_LUID(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupPrivName_luid
,0);
11001 lsarpc_dissect_element_lsa_LookupPrivName_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11003 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivName_name_
, NDR_POINTER_REF
, "Pointer to Name (lsa_StringLarge)",hf_lsarpc_lsa_LookupPrivName_name
);
11009 lsarpc_dissect_element_lsa_LookupPrivName_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11011 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivName_name__
, NDR_POINTER_UNIQUE
, "Pointer to Name (lsa_StringLarge)",hf_lsarpc_lsa_LookupPrivName_name
);
11017 lsarpc_dissect_element_lsa_LookupPrivName_name__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11019 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupPrivName_name
,0);
11024 /* IDL: NTSTATUS lsa_LookupPrivName( */
11025 /* IDL: [in] [ref] policy_handle *handle, */
11026 /* IDL: [in] [ref] lsa_LUID *luid, */
11027 /* IDL: [out] [ref] lsa_StringLarge **name */
11031 lsarpc_dissect_lsa_LookupPrivName_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11035 di
->dcerpc_procedure_name
="lsa_LookupPrivName";
11036 offset
= lsarpc_dissect_element_lsa_LookupPrivName_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
11037 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11039 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11042 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11048 lsarpc_dissect_lsa_LookupPrivName_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11050 di
->dcerpc_procedure_name
="lsa_LookupPrivName";
11051 offset
= lsarpc_dissect_element_lsa_LookupPrivName_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11052 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11053 offset
= lsarpc_dissect_element_lsa_LookupPrivName_luid(tvb
, offset
, pinfo
, tree
, di
, drep
);
11054 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11059 lsarpc_dissect_element_lsa_LookupPrivDisplayName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11061 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivDisplayName_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_LookupPrivDisplayName_handle
);
11067 lsarpc_dissect_element_lsa_LookupPrivDisplayName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11069 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupPrivDisplayName_handle
, 0);
11075 lsarpc_dissect_element_lsa_LookupPrivDisplayName_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11077 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivDisplayName_name_
, NDR_POINTER_REF
, "Pointer to Name (lsa_String)",hf_lsarpc_lsa_LookupPrivDisplayName_name
);
11083 lsarpc_dissect_element_lsa_LookupPrivDisplayName_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11085 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupPrivDisplayName_name
,0);
11091 lsarpc_dissect_element_lsa_LookupPrivDisplayName_language_id(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11093 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupPrivDisplayName_language_id
, 0);
11099 lsarpc_dissect_element_lsa_LookupPrivDisplayName_language_id_sys(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11101 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupPrivDisplayName_language_id_sys
, 0);
11107 lsarpc_dissect_element_lsa_LookupPrivDisplayName_disp_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11109 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivDisplayName_disp_name_
, NDR_POINTER_REF
, "Pointer to Disp Name (lsa_StringLarge)",hf_lsarpc_lsa_LookupPrivDisplayName_disp_name
);
11115 lsarpc_dissect_element_lsa_LookupPrivDisplayName_disp_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11117 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivDisplayName_disp_name__
, NDR_POINTER_UNIQUE
, "Pointer to Disp Name (lsa_StringLarge)",hf_lsarpc_lsa_LookupPrivDisplayName_disp_name
);
11123 lsarpc_dissect_element_lsa_LookupPrivDisplayName_disp_name__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11125 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupPrivDisplayName_disp_name
,0);
11131 lsarpc_dissect_element_lsa_LookupPrivDisplayName_returned_language_id(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11133 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivDisplayName_returned_language_id_
, NDR_POINTER_REF
, "Pointer to Returned Language Id (uint16)",hf_lsarpc_lsa_LookupPrivDisplayName_returned_language_id
);
11139 lsarpc_dissect_element_lsa_LookupPrivDisplayName_returned_language_id_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11141 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupPrivDisplayName_returned_language_id
, 0);
11146 /* IDL: NTSTATUS lsa_LookupPrivDisplayName( */
11147 /* IDL: [in] [ref] policy_handle *handle, */
11148 /* IDL: [in] [ref] lsa_String *name, */
11149 /* IDL: [in] uint16 language_id, */
11150 /* IDL: [in] uint16 language_id_sys, */
11151 /* IDL: [out] [ref] lsa_StringLarge **disp_name, */
11152 /* IDL: [out] [ref] uint16 *returned_language_id */
11156 lsarpc_dissect_lsa_LookupPrivDisplayName_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11160 di
->dcerpc_procedure_name
="lsa_LookupPrivDisplayName";
11161 offset
= lsarpc_dissect_element_lsa_LookupPrivDisplayName_disp_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
11162 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11164 offset
= lsarpc_dissect_element_lsa_LookupPrivDisplayName_returned_language_id(tvb
, offset
, pinfo
, tree
, di
, drep
);
11165 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11167 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11170 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11176 lsarpc_dissect_lsa_LookupPrivDisplayName_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11178 di
->dcerpc_procedure_name
="lsa_LookupPrivDisplayName";
11179 offset
= lsarpc_dissect_element_lsa_LookupPrivDisplayName_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11180 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11181 offset
= lsarpc_dissect_element_lsa_LookupPrivDisplayName_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
11182 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11183 offset
= lsarpc_dissect_element_lsa_LookupPrivDisplayName_language_id(tvb
, offset
, pinfo
, tree
, di
, drep
);
11184 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11185 offset
= lsarpc_dissect_element_lsa_LookupPrivDisplayName_language_id_sys(tvb
, offset
, pinfo
, tree
, di
, drep
);
11186 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11191 lsarpc_dissect_element_lsa_DeleteObject_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11193 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DeleteObject_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_DeleteObject_handle
);
11199 lsarpc_dissect_element_lsa_DeleteObject_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11201 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DeleteObject_handle
, 0);
11206 /* IDL: NTSTATUS lsa_DeleteObject( */
11207 /* IDL: [in] [out] [ref] policy_handle *handle */
11211 lsarpc_dissect_lsa_DeleteObject_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11215 di
->dcerpc_procedure_name
="lsa_DeleteObject";
11216 offset
= lsarpc_dissect_element_lsa_DeleteObject_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11217 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11219 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11222 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11228 lsarpc_dissect_lsa_DeleteObject_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11230 di
->dcerpc_procedure_name
="lsa_DeleteObject";
11231 offset
= lsarpc_dissect_element_lsa_DeleteObject_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11232 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11237 lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11239 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_EnumAccountsWithUserRight_handle
);
11245 lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11247 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumAccountsWithUserRight_handle
, 0);
11253 lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11255 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_name_
, NDR_POINTER_UNIQUE
, "Pointer to Name (lsa_String)",hf_lsarpc_lsa_EnumAccountsWithUserRight_name
);
11261 lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11263 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_EnumAccountsWithUserRight_name
,0);
11269 lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11271 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_sids_
, NDR_POINTER_REF
, "Pointer to Sids (lsa_SidArray)",hf_lsarpc_lsa_EnumAccountsWithUserRight_sids
);
11277 lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11279 offset
= lsarpc_dissect_struct_lsa_SidArray(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_EnumAccountsWithUserRight_sids
,0);
11284 /* IDL: NTSTATUS lsa_EnumAccountsWithUserRight( */
11285 /* IDL: [in] [ref] policy_handle *handle, */
11286 /* IDL: [in] [unique(1)] lsa_String *name, */
11287 /* IDL: [out] [ref] lsa_SidArray *sids */
11291 lsarpc_dissect_lsa_EnumAccountsWithUserRight_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11295 di
->dcerpc_procedure_name
="lsa_EnumAccountsWithUserRight";
11296 offset
= lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
11297 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11299 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11302 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11308 lsarpc_dissect_lsa_EnumAccountsWithUserRight_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11310 di
->dcerpc_procedure_name
="lsa_EnumAccountsWithUserRight";
11311 offset
= lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11312 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11313 offset
= lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
11314 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11319 lsarpc_dissect_element_lsa_EnumAccountRights_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11321 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumAccountRights_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_EnumAccountRights_handle
);
11327 lsarpc_dissect_element_lsa_EnumAccountRights_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11329 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumAccountRights_handle
, 0);
11335 lsarpc_dissect_element_lsa_EnumAccountRights_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11337 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumAccountRights_sid_
, NDR_POINTER_REF
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_EnumAccountRights_sid
);
11343 lsarpc_dissect_element_lsa_EnumAccountRights_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11345 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_EnumAccountRights_sid
,0);
11351 lsarpc_dissect_element_lsa_EnumAccountRights_rights(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11353 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumAccountRights_rights_
, NDR_POINTER_REF
, "Pointer to Rights (lsa_RightSet)",hf_lsarpc_lsa_EnumAccountRights_rights
);
11359 lsarpc_dissect_element_lsa_EnumAccountRights_rights_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11361 offset
= lsarpc_dissect_struct_lsa_RightSet(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_EnumAccountRights_rights
,0);
11366 /* IDL: NTSTATUS lsa_EnumAccountRights( */
11367 /* IDL: [in] [ref] policy_handle *handle, */
11368 /* IDL: [in] [ref] dom_sid2 *sid, */
11369 /* IDL: [out] [ref] lsa_RightSet *rights */
11373 lsarpc_dissect_lsa_EnumAccountRights_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11377 di
->dcerpc_procedure_name
="lsa_EnumAccountRights";
11378 offset
= lsarpc_dissect_element_lsa_EnumAccountRights_rights(tvb
, offset
, pinfo
, tree
, di
, drep
);
11379 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11381 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11384 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11390 lsarpc_dissect_lsa_EnumAccountRights_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11392 di
->dcerpc_procedure_name
="lsa_EnumAccountRights";
11393 offset
= lsarpc_dissect_element_lsa_EnumAccountRights_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11394 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11395 offset
= lsarpc_dissect_element_lsa_EnumAccountRights_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
11396 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11401 lsarpc_dissect_element_lsa_AddAccountRights_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11403 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AddAccountRights_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_AddAccountRights_handle
);
11409 lsarpc_dissect_element_lsa_AddAccountRights_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11411 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AddAccountRights_handle
, 0);
11417 lsarpc_dissect_element_lsa_AddAccountRights_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11419 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AddAccountRights_sid_
, NDR_POINTER_REF
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_AddAccountRights_sid
);
11425 lsarpc_dissect_element_lsa_AddAccountRights_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11427 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_AddAccountRights_sid
,0);
11433 lsarpc_dissect_element_lsa_AddAccountRights_rights(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11435 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AddAccountRights_rights_
, NDR_POINTER_REF
, "Pointer to Rights (lsa_RightSet)",hf_lsarpc_lsa_AddAccountRights_rights
);
11441 lsarpc_dissect_element_lsa_AddAccountRights_rights_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11443 offset
= lsarpc_dissect_struct_lsa_RightSet(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_AddAccountRights_rights
,0);
11448 /* IDL: NTSTATUS lsa_AddAccountRights( */
11449 /* IDL: [in] [ref] policy_handle *handle, */
11450 /* IDL: [in] [ref] dom_sid2 *sid, */
11451 /* IDL: [in] [ref] lsa_RightSet *rights */
11455 lsarpc_dissect_lsa_AddAccountRights_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11459 di
->dcerpc_procedure_name
="lsa_AddAccountRights";
11460 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11463 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11469 lsarpc_dissect_lsa_AddAccountRights_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11471 di
->dcerpc_procedure_name
="lsa_AddAccountRights";
11472 offset
= lsarpc_dissect_element_lsa_AddAccountRights_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11473 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11474 offset
= lsarpc_dissect_element_lsa_AddAccountRights_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
11475 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11476 offset
= lsarpc_dissect_element_lsa_AddAccountRights_rights(tvb
, offset
, pinfo
, tree
, di
, drep
);
11477 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11482 lsarpc_dissect_element_lsa_RemoveAccountRights_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11484 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RemoveAccountRights_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_RemoveAccountRights_handle
);
11490 lsarpc_dissect_element_lsa_RemoveAccountRights_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11492 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_RemoveAccountRights_handle
, 0);
11498 lsarpc_dissect_element_lsa_RemoveAccountRights_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11500 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RemoveAccountRights_sid_
, NDR_POINTER_REF
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_RemoveAccountRights_sid
);
11506 lsarpc_dissect_element_lsa_RemoveAccountRights_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11508 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_RemoveAccountRights_sid
,0);
11514 lsarpc_dissect_element_lsa_RemoveAccountRights_remove_all(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11516 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_RemoveAccountRights_remove_all
, 0);
11522 lsarpc_dissect_element_lsa_RemoveAccountRights_rights(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11524 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RemoveAccountRights_rights_
, NDR_POINTER_REF
, "Pointer to Rights (lsa_RightSet)",hf_lsarpc_lsa_RemoveAccountRights_rights
);
11530 lsarpc_dissect_element_lsa_RemoveAccountRights_rights_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11532 offset
= lsarpc_dissect_struct_lsa_RightSet(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_RemoveAccountRights_rights
,0);
11537 /* IDL: NTSTATUS lsa_RemoveAccountRights( */
11538 /* IDL: [in] [ref] policy_handle *handle, */
11539 /* IDL: [in] [ref] dom_sid2 *sid, */
11540 /* IDL: [in] uint8 remove_all, */
11541 /* IDL: [in] [ref] lsa_RightSet *rights */
11545 lsarpc_dissect_lsa_RemoveAccountRights_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11549 di
->dcerpc_procedure_name
="lsa_RemoveAccountRights";
11550 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11553 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11559 lsarpc_dissect_lsa_RemoveAccountRights_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11561 di
->dcerpc_procedure_name
="lsa_RemoveAccountRights";
11562 offset
= lsarpc_dissect_element_lsa_RemoveAccountRights_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11563 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11564 offset
= lsarpc_dissect_element_lsa_RemoveAccountRights_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
11565 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11566 offset
= lsarpc_dissect_element_lsa_RemoveAccountRights_remove_all(tvb
, offset
, pinfo
, tree
, di
, drep
);
11567 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11568 offset
= lsarpc_dissect_element_lsa_RemoveAccountRights_rights(tvb
, offset
, pinfo
, tree
, di
, drep
);
11569 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11574 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11576 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_handle
);
11582 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11584 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_handle
, 0);
11590 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_dom_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11592 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_dom_sid_
, NDR_POINTER_REF
, "Pointer to Dom Sid (dom_sid2)",hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_dom_sid
);
11598 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_dom_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11600 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_dom_sid
,0);
11606 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11608 offset
= lsarpc_dissect_enum_lsa_TrustDomInfoEnum(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_level
, 0);
11614 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11616 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_TrustedDomainInfo)",hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_info
);
11622 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11624 uint64_t saved_switch_level
= di
->switch_level
;
11626 di
->switch_level
= 0;
11628 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_info__
, NDR_POINTER_UNIQUE
, "Pointer to Info (lsa_TrustedDomainInfo)",hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_info
);
11630 di
->switch_level
= saved_switch_level
;
11636 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11638 offset
= lsarpc_dissect_lsa_TrustedDomainInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_info
, 0);
11643 /* IDL: NTSTATUS lsa_QueryTrustedDomainInfoBySid( */
11644 /* IDL: [in] [ref] policy_handle *handle, */
11645 /* IDL: [in] [ref] dom_sid2 *dom_sid, */
11646 /* IDL: [in] lsa_TrustDomInfoEnum level, */
11647 /* IDL: [out] [ref] [switch_is(level)] lsa_TrustedDomainInfo **info */
11651 lsarpc_dissect_lsa_QueryTrustedDomainInfoBySid_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11655 di
->dcerpc_procedure_name
="lsa_QueryTrustedDomainInfoBySid";
11656 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
11657 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11659 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11662 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11668 lsarpc_dissect_lsa_QueryTrustedDomainInfoBySid_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11670 di
->dcerpc_procedure_name
="lsa_QueryTrustedDomainInfoBySid";
11671 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11672 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11673 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_dom_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
11674 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11675 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
11676 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11681 lsarpc_dissect_element_lsa_SetTrustedDomainInfo_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11683 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetTrustedDomainInfo_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_SetTrustedDomainInfo_handle
);
11689 lsarpc_dissect_element_lsa_SetTrustedDomainInfo_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11691 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetTrustedDomainInfo_handle
, 0);
11697 lsarpc_dissect_element_lsa_SetTrustedDomainInfo_dom_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11699 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetTrustedDomainInfo_dom_sid_
, NDR_POINTER_REF
, "Pointer to Dom Sid (dom_sid2)",hf_lsarpc_lsa_SetTrustedDomainInfo_dom_sid
);
11705 lsarpc_dissect_element_lsa_SetTrustedDomainInfo_dom_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11707 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_SetTrustedDomainInfo_dom_sid
,0);
11713 lsarpc_dissect_element_lsa_SetTrustedDomainInfo_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11715 offset
= lsarpc_dissect_enum_lsa_TrustDomInfoEnum(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetTrustedDomainInfo_level
, 0);
11721 lsarpc_dissect_element_lsa_SetTrustedDomainInfo_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11723 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetTrustedDomainInfo_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_TrustedDomainInfo)",hf_lsarpc_lsa_SetTrustedDomainInfo_info
);
11729 lsarpc_dissect_element_lsa_SetTrustedDomainInfo_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11731 offset
= lsarpc_dissect_lsa_TrustedDomainInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetTrustedDomainInfo_info
, 0);
11736 /* IDL: NTSTATUS lsa_SetTrustedDomainInfo( */
11737 /* IDL: [in] [ref] policy_handle *handle, */
11738 /* IDL: [in] [ref] dom_sid2 *dom_sid, */
11739 /* IDL: [in] lsa_TrustDomInfoEnum level, */
11740 /* IDL: [in] [ref] [switch_is(level)] lsa_TrustedDomainInfo *info */
11744 lsarpc_dissect_lsa_SetTrustedDomainInfo_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11748 di
->dcerpc_procedure_name
="lsa_SetTrustedDomainInfo";
11749 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11752 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11758 lsarpc_dissect_lsa_SetTrustedDomainInfo_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11760 di
->dcerpc_procedure_name
="lsa_SetTrustedDomainInfo";
11761 offset
= lsarpc_dissect_element_lsa_SetTrustedDomainInfo_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11762 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11763 offset
= lsarpc_dissect_element_lsa_SetTrustedDomainInfo_dom_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
11764 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11765 offset
= lsarpc_dissect_element_lsa_SetTrustedDomainInfo_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
11766 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11767 offset
= lsarpc_dissect_element_lsa_SetTrustedDomainInfo_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
11768 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11773 lsarpc_dissect_element_lsa_DeleteTrustedDomain_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11775 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DeleteTrustedDomain_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_DeleteTrustedDomain_handle
);
11781 lsarpc_dissect_element_lsa_DeleteTrustedDomain_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11783 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DeleteTrustedDomain_handle
, 0);
11789 lsarpc_dissect_element_lsa_DeleteTrustedDomain_dom_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11791 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DeleteTrustedDomain_dom_sid_
, NDR_POINTER_REF
, "Pointer to Dom Sid (dom_sid2)",hf_lsarpc_lsa_DeleteTrustedDomain_dom_sid
);
11797 lsarpc_dissect_element_lsa_DeleteTrustedDomain_dom_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11799 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DeleteTrustedDomain_dom_sid
,0);
11804 /* IDL: NTSTATUS lsa_DeleteTrustedDomain( */
11805 /* IDL: [in] [ref] policy_handle *handle, */
11806 /* IDL: [in] [ref] dom_sid2 *dom_sid */
11810 lsarpc_dissect_lsa_DeleteTrustedDomain_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11814 di
->dcerpc_procedure_name
="lsa_DeleteTrustedDomain";
11815 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11818 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11824 lsarpc_dissect_lsa_DeleteTrustedDomain_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11826 di
->dcerpc_procedure_name
="lsa_DeleteTrustedDomain";
11827 offset
= lsarpc_dissect_element_lsa_DeleteTrustedDomain_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11828 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11829 offset
= lsarpc_dissect_element_lsa_DeleteTrustedDomain_dom_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
11830 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11835 lsarpc_dissect_element_lsa_StorePrivateData_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11837 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_StorePrivateData_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_StorePrivateData_handle
);
11843 lsarpc_dissect_element_lsa_StorePrivateData_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11845 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_StorePrivateData_handle
, 0);
11851 lsarpc_dissect_element_lsa_StorePrivateData_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11853 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_StorePrivateData_name_
, NDR_POINTER_REF
, "Pointer to Name (lsa_String)",hf_lsarpc_lsa_StorePrivateData_name
);
11859 lsarpc_dissect_element_lsa_StorePrivateData_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11861 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_StorePrivateData_name
,0);
11867 lsarpc_dissect_element_lsa_StorePrivateData_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11869 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_StorePrivateData_val_
, NDR_POINTER_UNIQUE
, "Pointer to Val (lsa_DATA_BUF)",hf_lsarpc_lsa_StorePrivateData_val
);
11875 lsarpc_dissect_element_lsa_StorePrivateData_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11877 offset
= lsarpc_dissect_struct_lsa_DATA_BUF(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_StorePrivateData_val
,0);
11882 /* IDL: NTSTATUS lsa_StorePrivateData( */
11883 /* IDL: [in] [ref] policy_handle *handle, */
11884 /* IDL: [in] [ref] lsa_String *name, */
11885 /* IDL: [in] [unique(1)] lsa_DATA_BUF *val */
11889 lsarpc_dissect_lsa_StorePrivateData_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11893 di
->dcerpc_procedure_name
="lsa_StorePrivateData";
11894 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11897 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11903 lsarpc_dissect_lsa_StorePrivateData_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11905 di
->dcerpc_procedure_name
="lsa_StorePrivateData";
11906 offset
= lsarpc_dissect_element_lsa_StorePrivateData_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11907 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11908 offset
= lsarpc_dissect_element_lsa_StorePrivateData_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
11909 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11910 offset
= lsarpc_dissect_element_lsa_StorePrivateData_val(tvb
, offset
, pinfo
, tree
, di
, drep
);
11911 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11916 lsarpc_dissect_element_lsa_RetrievePrivateData_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11918 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RetrievePrivateData_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_RetrievePrivateData_handle
);
11924 lsarpc_dissect_element_lsa_RetrievePrivateData_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11926 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_RetrievePrivateData_handle
, 0);
11932 lsarpc_dissect_element_lsa_RetrievePrivateData_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11934 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RetrievePrivateData_name_
, NDR_POINTER_REF
, "Pointer to Name (lsa_String)",hf_lsarpc_lsa_RetrievePrivateData_name
);
11940 lsarpc_dissect_element_lsa_RetrievePrivateData_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11942 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_RetrievePrivateData_name
,0);
11948 lsarpc_dissect_element_lsa_RetrievePrivateData_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11950 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RetrievePrivateData_val_
, NDR_POINTER_REF
, "Pointer to Val (lsa_DATA_BUF)",hf_lsarpc_lsa_RetrievePrivateData_val
);
11956 lsarpc_dissect_element_lsa_RetrievePrivateData_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11958 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RetrievePrivateData_val__
, NDR_POINTER_UNIQUE
, "Pointer to Val (lsa_DATA_BUF)",hf_lsarpc_lsa_RetrievePrivateData_val
);
11964 lsarpc_dissect_element_lsa_RetrievePrivateData_val__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11966 offset
= lsarpc_dissect_struct_lsa_DATA_BUF(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_RetrievePrivateData_val
,0);
11971 /* IDL: NTSTATUS lsa_RetrievePrivateData( */
11972 /* IDL: [in] [ref] policy_handle *handle, */
11973 /* IDL: [in] [ref] lsa_String *name, */
11974 /* IDL: [in] [out] [ref] lsa_DATA_BUF **val */
11978 lsarpc_dissect_lsa_RetrievePrivateData_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11982 di
->dcerpc_procedure_name
="lsa_RetrievePrivateData";
11983 offset
= lsarpc_dissect_element_lsa_RetrievePrivateData_val(tvb
, offset
, pinfo
, tree
, di
, drep
);
11984 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11986 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11989 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11995 lsarpc_dissect_lsa_RetrievePrivateData_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11997 di
->dcerpc_procedure_name
="lsa_RetrievePrivateData";
11998 offset
= lsarpc_dissect_element_lsa_RetrievePrivateData_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11999 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12000 offset
= lsarpc_dissect_element_lsa_RetrievePrivateData_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
12001 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12002 offset
= lsarpc_dissect_element_lsa_RetrievePrivateData_val(tvb
, offset
, pinfo
, tree
, di
, drep
);
12003 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12008 lsarpc_dissect_element_lsa_OpenPolicy2_system_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12010 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy2_system_name_
, NDR_POINTER_UNIQUE
, "Pointer to System Name (uint16)",hf_lsarpc_lsa_OpenPolicy2_system_name
);
12016 lsarpc_dissect_element_lsa_OpenPolicy2_system_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12019 struct ndr_generic_array nga
= { .is_conformant
= false, };
12021 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
12023 offset
= dissect_ndr_varying_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
12024 offset
= dissect_ndr_generic_array_string(tvb
, offset
, pinfo
, tree
, di
, drep
, sizeof(uint16_t), hf_lsarpc_lsa_OpenPolicy2_system_name
, false, &nga
, &data
);
12025 proto_item_append_text(tree
, ": %s", data
);
12031 lsarpc_dissect_element_lsa_OpenPolicy2_attr(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12033 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy2_attr_
, NDR_POINTER_REF
, "Pointer to Attr (lsa_ObjectAttribute)",hf_lsarpc_lsa_OpenPolicy2_attr
);
12039 lsarpc_dissect_element_lsa_OpenPolicy2_attr_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12041 offset
= lsarpc_dissect_struct_lsa_ObjectAttribute(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_OpenPolicy2_attr
,0);
12047 lsarpc_dissect_element_lsa_OpenPolicy2_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12049 offset
= lsarpc_dissect_bitmap_lsa_PolicyAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy2_access_mask
, 0);
12055 lsarpc_dissect_element_lsa_OpenPolicy2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12057 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy2_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_OpenPolicy2_handle
);
12063 lsarpc_dissect_element_lsa_OpenPolicy2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12065 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy2_handle
, PIDL_POLHND_OPEN
|PIDL_POLHND_TYPE_LSA_POLICY
);
12070 /* IDL: NTSTATUS lsa_OpenPolicy2( */
12071 /* IDL: [charset(UTF16)] [in] [unique(1)] uint16 *system_name, */
12072 /* IDL: [in] [ref] lsa_ObjectAttribute *attr, */
12073 /* IDL: [in] lsa_PolicyAccessMask access_mask, */
12074 /* IDL: [out] [ref] policy_handle *handle */
12078 lsarpc_dissect_lsa_OpenPolicy2_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12082 di
->dcerpc_procedure_name
="lsa_OpenPolicy2";
12083 offset
= lsarpc_dissect_element_lsa_OpenPolicy2_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12084 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12086 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12089 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12095 lsarpc_dissect_lsa_OpenPolicy2_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12097 di
->dcerpc_procedure_name
="lsa_OpenPolicy2";
12098 offset
= lsarpc_dissect_element_lsa_OpenPolicy2_system_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
12099 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12100 offset
= lsarpc_dissect_element_lsa_OpenPolicy2_attr(tvb
, offset
, pinfo
, tree
, di
, drep
);
12101 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12102 offset
= lsarpc_dissect_element_lsa_OpenPolicy2_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
12103 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12108 lsarpc_dissect_element_lsa_GetUserName_system_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12110 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_GetUserName_system_name_
, NDR_POINTER_UNIQUE
, "Pointer to System Name (uint16)",hf_lsarpc_lsa_GetUserName_system_name
);
12116 lsarpc_dissect_element_lsa_GetUserName_system_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12119 struct ndr_generic_array nga
= { .is_conformant
= false, };
12121 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
12123 offset
= dissect_ndr_varying_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
12124 offset
= dissect_ndr_generic_array_string(tvb
, offset
, pinfo
, tree
, di
, drep
, sizeof(uint16_t), hf_lsarpc_lsa_GetUserName_system_name
, false, &nga
, &data
);
12125 proto_item_append_text(tree
, ": %s", data
);
12131 lsarpc_dissect_element_lsa_GetUserName_account_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12133 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_GetUserName_account_name_
, NDR_POINTER_REF
, "Pointer to Account Name (lsa_String)",hf_lsarpc_lsa_GetUserName_account_name
);
12139 lsarpc_dissect_element_lsa_GetUserName_account_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12141 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_GetUserName_account_name__
, NDR_POINTER_UNIQUE
, "Pointer to Account Name (lsa_String)",hf_lsarpc_lsa_GetUserName_account_name
);
12147 lsarpc_dissect_element_lsa_GetUserName_account_name__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12149 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_GetUserName_account_name
,0);
12155 lsarpc_dissect_element_lsa_GetUserName_authority_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12157 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_GetUserName_authority_name_
, NDR_POINTER_UNIQUE
, "Pointer to Authority Name (lsa_String)",hf_lsarpc_lsa_GetUserName_authority_name
);
12163 lsarpc_dissect_element_lsa_GetUserName_authority_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12165 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_GetUserName_authority_name__
, NDR_POINTER_UNIQUE
, "Pointer to Authority Name (lsa_String)",hf_lsarpc_lsa_GetUserName_authority_name
);
12171 lsarpc_dissect_element_lsa_GetUserName_authority_name__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12173 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_GetUserName_authority_name
,0);
12178 /* IDL: NTSTATUS lsa_GetUserName( */
12179 /* IDL: [charset(UTF16)] [in] [unique(1)] uint16 *system_name, */
12180 /* IDL: [in] [out] [ref] lsa_String **account_name, */
12181 /* IDL: [in] [out] [unique(1)] lsa_String **authority_name */
12185 lsarpc_dissect_lsa_GetUserName_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12189 di
->dcerpc_procedure_name
="lsa_GetUserName";
12190 offset
= lsarpc_dissect_element_lsa_GetUserName_account_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
12191 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12193 offset
= lsarpc_dissect_element_lsa_GetUserName_authority_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
12194 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12196 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12199 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12205 lsarpc_dissect_lsa_GetUserName_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12207 di
->dcerpc_procedure_name
="lsa_GetUserName";
12208 offset
= lsarpc_dissect_element_lsa_GetUserName_system_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
12209 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12210 offset
= lsarpc_dissect_element_lsa_GetUserName_account_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
12211 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12212 offset
= lsarpc_dissect_element_lsa_GetUserName_authority_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
12213 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12218 lsarpc_dissect_element_lsa_QueryInfoPolicy2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12220 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryInfoPolicy2_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_QueryInfoPolicy2_handle
);
12226 lsarpc_dissect_element_lsa_QueryInfoPolicy2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12228 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryInfoPolicy2_handle
, 0);
12234 lsarpc_dissect_element_lsa_QueryInfoPolicy2_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12236 offset
= lsarpc_dissect_enum_lsa_PolicyInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryInfoPolicy2_level
, 0);
12242 lsarpc_dissect_element_lsa_QueryInfoPolicy2_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12244 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryInfoPolicy2_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_PolicyInformation)",hf_lsarpc_lsa_QueryInfoPolicy2_info
);
12250 lsarpc_dissect_element_lsa_QueryInfoPolicy2_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12252 uint64_t saved_switch_level
= di
->switch_level
;
12254 di
->switch_level
= 0;
12256 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryInfoPolicy2_info__
, NDR_POINTER_UNIQUE
, "Pointer to Info (lsa_PolicyInformation)",hf_lsarpc_lsa_QueryInfoPolicy2_info
);
12258 di
->switch_level
= saved_switch_level
;
12264 lsarpc_dissect_element_lsa_QueryInfoPolicy2_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12266 offset
= lsarpc_dissect_lsa_PolicyInformation(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryInfoPolicy2_info
, 0);
12271 /* IDL: NTSTATUS lsa_QueryInfoPolicy2( */
12272 /* IDL: [in] [ref] policy_handle *handle, */
12273 /* IDL: [in] lsa_PolicyInfo level, */
12274 /* IDL: [out] [ref] [switch_is(level)] lsa_PolicyInformation **info */
12278 lsarpc_dissect_lsa_QueryInfoPolicy2_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12282 di
->dcerpc_procedure_name
="lsa_QueryInfoPolicy2";
12283 offset
= lsarpc_dissect_element_lsa_QueryInfoPolicy2_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
12284 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12286 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12289 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12295 lsarpc_dissect_lsa_QueryInfoPolicy2_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12297 di
->dcerpc_procedure_name
="lsa_QueryInfoPolicy2";
12298 offset
= lsarpc_dissect_element_lsa_QueryInfoPolicy2_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12299 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12300 offset
= lsarpc_dissect_element_lsa_QueryInfoPolicy2_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
12301 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12306 lsarpc_dissect_element_lsa_SetInfoPolicy2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12308 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetInfoPolicy2_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_SetInfoPolicy2_handle
);
12314 lsarpc_dissect_element_lsa_SetInfoPolicy2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12316 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetInfoPolicy2_handle
, 0);
12322 lsarpc_dissect_element_lsa_SetInfoPolicy2_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12324 offset
= lsarpc_dissect_enum_lsa_PolicyInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetInfoPolicy2_level
, 0);
12330 lsarpc_dissect_element_lsa_SetInfoPolicy2_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12332 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetInfoPolicy2_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_PolicyInformation)",hf_lsarpc_lsa_SetInfoPolicy2_info
);
12338 lsarpc_dissect_element_lsa_SetInfoPolicy2_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12340 offset
= lsarpc_dissect_lsa_PolicyInformation(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetInfoPolicy2_info
, 0);
12345 /* IDL: NTSTATUS lsa_SetInfoPolicy2( */
12346 /* IDL: [in] [ref] policy_handle *handle, */
12347 /* IDL: [in] lsa_PolicyInfo level, */
12348 /* IDL: [in] [ref] [switch_is(level)] lsa_PolicyInformation *info */
12352 lsarpc_dissect_lsa_SetInfoPolicy2_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12356 di
->dcerpc_procedure_name
="lsa_SetInfoPolicy2";
12357 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12360 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12366 lsarpc_dissect_lsa_SetInfoPolicy2_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12368 di
->dcerpc_procedure_name
="lsa_SetInfoPolicy2";
12369 offset
= lsarpc_dissect_element_lsa_SetInfoPolicy2_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12370 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12371 offset
= lsarpc_dissect_element_lsa_SetInfoPolicy2_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
12372 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12373 offset
= lsarpc_dissect_element_lsa_SetInfoPolicy2_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
12374 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12379 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12381 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_QueryTrustedDomainInfoByName_handle
);
12387 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12389 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryTrustedDomainInfoByName_handle
, 0);
12395 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_trusted_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12397 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_trusted_domain_
, NDR_POINTER_REF
, "Pointer to Trusted Domain (lsa_String)",hf_lsarpc_lsa_QueryTrustedDomainInfoByName_trusted_domain
);
12403 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_trusted_domain_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12405 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_QueryTrustedDomainInfoByName_trusted_domain
,0);
12411 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12413 offset
= lsarpc_dissect_enum_lsa_TrustDomInfoEnum(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryTrustedDomainInfoByName_level
, 0);
12419 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12421 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_TrustedDomainInfo)",hf_lsarpc_lsa_QueryTrustedDomainInfoByName_info
);
12427 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12429 uint64_t saved_switch_level
= di
->switch_level
;
12431 di
->switch_level
= 0;
12433 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_info__
, NDR_POINTER_UNIQUE
, "Pointer to Info (lsa_TrustedDomainInfo)",hf_lsarpc_lsa_QueryTrustedDomainInfoByName_info
);
12435 di
->switch_level
= saved_switch_level
;
12441 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12443 offset
= lsarpc_dissect_lsa_TrustedDomainInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryTrustedDomainInfoByName_info
, 0);
12448 /* IDL: NTSTATUS lsa_QueryTrustedDomainInfoByName( */
12449 /* IDL: [in] [ref] policy_handle *handle, */
12450 /* IDL: [in] [ref] lsa_String *trusted_domain, */
12451 /* IDL: [in] lsa_TrustDomInfoEnum level, */
12452 /* IDL: [out] [ref] [switch_is(level)] lsa_TrustedDomainInfo **info */
12456 lsarpc_dissect_lsa_QueryTrustedDomainInfoByName_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12460 di
->dcerpc_procedure_name
="lsa_QueryTrustedDomainInfoByName";
12461 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
12462 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12464 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12467 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12473 lsarpc_dissect_lsa_QueryTrustedDomainInfoByName_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12475 di
->dcerpc_procedure_name
="lsa_QueryTrustedDomainInfoByName";
12476 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12477 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12478 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_trusted_domain(tvb
, offset
, pinfo
, tree
, di
, drep
);
12479 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12480 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
12481 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12486 lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12488 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_SetTrustedDomainInfoByName_handle
);
12494 lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12496 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetTrustedDomainInfoByName_handle
, 0);
12502 lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_trusted_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12504 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_trusted_domain_
, NDR_POINTER_REF
, "Pointer to Trusted Domain (lsa_String)",hf_lsarpc_lsa_SetTrustedDomainInfoByName_trusted_domain
);
12510 lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_trusted_domain_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12512 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_SetTrustedDomainInfoByName_trusted_domain
,0);
12518 lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12520 offset
= lsarpc_dissect_enum_lsa_TrustDomInfoEnum(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetTrustedDomainInfoByName_level
, 0);
12526 lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12528 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_TrustedDomainInfo)",hf_lsarpc_lsa_SetTrustedDomainInfoByName_info
);
12534 lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12536 offset
= lsarpc_dissect_lsa_TrustedDomainInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetTrustedDomainInfoByName_info
, 0);
12541 /* IDL: NTSTATUS lsa_SetTrustedDomainInfoByName( */
12542 /* IDL: [in] [ref] policy_handle *handle, */
12543 /* IDL: [in] [ref] lsa_String *trusted_domain, */
12544 /* IDL: [in] lsa_TrustDomInfoEnum level, */
12545 /* IDL: [in] [ref] [switch_is(level)] lsa_TrustedDomainInfo *info */
12549 lsarpc_dissect_lsa_SetTrustedDomainInfoByName_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12553 di
->dcerpc_procedure_name
="lsa_SetTrustedDomainInfoByName";
12554 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12557 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12563 lsarpc_dissect_lsa_SetTrustedDomainInfoByName_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12565 di
->dcerpc_procedure_name
="lsa_SetTrustedDomainInfoByName";
12566 offset
= lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12567 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12568 offset
= lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_trusted_domain(tvb
, offset
, pinfo
, tree
, di
, drep
);
12569 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12570 offset
= lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
12571 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12572 offset
= lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
12573 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12578 lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12580 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_EnumTrustedDomainsEx_handle
);
12586 lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12588 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumTrustedDomainsEx_handle
, 0);
12594 lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_resume_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12596 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_resume_handle_
, NDR_POINTER_REF
, "Pointer to Resume Handle (uint32)",hf_lsarpc_lsa_EnumTrustedDomainsEx_resume_handle
);
12602 lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_resume_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12604 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumTrustedDomainsEx_resume_handle
, 0);
12610 lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12612 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_domains_
, NDR_POINTER_REF
, "Pointer to Domains (lsa_DomainListEx)",hf_lsarpc_lsa_EnumTrustedDomainsEx_domains
);
12618 lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12620 offset
= lsarpc_dissect_struct_lsa_DomainListEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_EnumTrustedDomainsEx_domains
,0);
12626 lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_max_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12628 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumTrustedDomainsEx_max_size
, 0);
12633 /* IDL: NTSTATUS lsa_EnumTrustedDomainsEx( */
12634 /* IDL: [in] [ref] policy_handle *handle, */
12635 /* IDL: [in] [out] [ref] uint32 *resume_handle, */
12636 /* IDL: [out] [ref] lsa_DomainListEx *domains, */
12637 /* IDL: [in] uint32 max_size */
12641 lsarpc_dissect_lsa_EnumTrustedDomainsEx_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12645 di
->dcerpc_procedure_name
="lsa_EnumTrustedDomainsEx";
12646 offset
= lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_resume_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12647 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12649 offset
= lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
12650 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12652 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12655 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12661 lsarpc_dissect_lsa_EnumTrustedDomainsEx_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12663 di
->dcerpc_procedure_name
="lsa_EnumTrustedDomainsEx";
12664 offset
= lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12665 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12666 offset
= lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_resume_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12667 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12668 offset
= lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_max_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
12669 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12674 lsarpc_dissect_element_lsa_CreateTrustedDomainEx_policy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12676 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx_policy_handle_
, NDR_POINTER_REF
, "Pointer to Policy Handle (policy_handle)",hf_lsarpc_lsa_CreateTrustedDomainEx_policy_handle
);
12682 lsarpc_dissect_element_lsa_CreateTrustedDomainEx_policy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12684 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomainEx_policy_handle
, 0);
12690 lsarpc_dissect_element_lsa_CreateTrustedDomainEx_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12692 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_TrustDomainInfoInfoEx)",hf_lsarpc_lsa_CreateTrustedDomainEx_info
);
12698 lsarpc_dissect_element_lsa_CreateTrustedDomainEx_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12700 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_CreateTrustedDomainEx_info
,0);
12706 lsarpc_dissect_element_lsa_CreateTrustedDomainEx_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12708 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx_auth_info_
, NDR_POINTER_REF
, "Pointer to Auth Info (lsa_TrustDomainInfoAuthInfo)",hf_lsarpc_lsa_CreateTrustedDomainEx_auth_info
);
12714 lsarpc_dissect_element_lsa_CreateTrustedDomainEx_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12716 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_CreateTrustedDomainEx_auth_info
,0);
12722 lsarpc_dissect_element_lsa_CreateTrustedDomainEx_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12724 offset
= lsarpc_dissect_bitmap_lsa_TrustedAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomainEx_access_mask
, 0);
12730 lsarpc_dissect_element_lsa_CreateTrustedDomainEx_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12732 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx_trustdom_handle_
, NDR_POINTER_REF
, "Pointer to Trustdom Handle (policy_handle)",hf_lsarpc_lsa_CreateTrustedDomainEx_trustdom_handle
);
12738 lsarpc_dissect_element_lsa_CreateTrustedDomainEx_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12740 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomainEx_trustdom_handle
, 0);
12745 /* IDL: NTSTATUS lsa_CreateTrustedDomainEx( */
12746 /* IDL: [in] [ref] policy_handle *policy_handle, */
12747 /* IDL: [in] [ref] lsa_TrustDomainInfoInfoEx *info, */
12748 /* IDL: [in] [ref] lsa_TrustDomainInfoAuthInfo *auth_info, */
12749 /* IDL: [in] lsa_TrustedAccessMask access_mask, */
12750 /* IDL: [out] [ref] policy_handle *trustdom_handle */
12754 lsarpc_dissect_lsa_CreateTrustedDomainEx_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12758 di
->dcerpc_procedure_name
="lsa_CreateTrustedDomainEx";
12759 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx_trustdom_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12760 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12762 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12765 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12771 lsarpc_dissect_lsa_CreateTrustedDomainEx_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12773 di
->dcerpc_procedure_name
="lsa_CreateTrustedDomainEx";
12774 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx_policy_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12775 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12776 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
12777 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12778 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
12779 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12780 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
12781 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12786 lsarpc_dissect_element_lsa_CloseTrustedDomainEx_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12788 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CloseTrustedDomainEx_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_CloseTrustedDomainEx_handle
);
12794 lsarpc_dissect_element_lsa_CloseTrustedDomainEx_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12796 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CloseTrustedDomainEx_handle
, PIDL_POLHND_CLOSE
);
12801 /* IDL: NTSTATUS lsa_CloseTrustedDomainEx( */
12802 /* IDL: [in] [out] [ref] policy_handle *handle */
12806 lsarpc_dissect_lsa_CloseTrustedDomainEx_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12810 di
->dcerpc_procedure_name
="lsa_CloseTrustedDomainEx";
12811 offset
= lsarpc_dissect_element_lsa_CloseTrustedDomainEx_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12812 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12814 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12817 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12823 lsarpc_dissect_lsa_CloseTrustedDomainEx_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12825 di
->dcerpc_procedure_name
="lsa_CloseTrustedDomainEx";
12826 offset
= lsarpc_dissect_element_lsa_CloseTrustedDomainEx_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12827 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12832 lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12834 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_QueryDomainInformationPolicy_handle
);
12840 lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12842 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryDomainInformationPolicy_handle
, 0);
12848 lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12850 offset
= lsarpc_dissect_enum_lsa_DomainInfoEnum(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryDomainInformationPolicy_level
, 0);
12856 lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12858 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_DomainInformationPolicy)",hf_lsarpc_lsa_QueryDomainInformationPolicy_info
);
12864 lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12866 uint64_t saved_switch_level
= di
->switch_level
;
12868 di
->switch_level
= 0;
12870 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_info__
, NDR_POINTER_UNIQUE
, "Pointer to Info (lsa_DomainInformationPolicy)",hf_lsarpc_lsa_QueryDomainInformationPolicy_info
);
12872 di
->switch_level
= saved_switch_level
;
12878 lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12880 offset
= lsarpc_dissect_lsa_DomainInformationPolicy(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryDomainInformationPolicy_info
, 0);
12885 /* IDL: NTSTATUS lsa_QueryDomainInformationPolicy( */
12886 /* IDL: [in] [ref] policy_handle *handle, */
12887 /* IDL: [in] lsa_DomainInfoEnum level, */
12888 /* IDL: [out] [ref] [switch_is(level)] lsa_DomainInformationPolicy **info */
12892 lsarpc_dissect_lsa_QueryDomainInformationPolicy_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12896 di
->dcerpc_procedure_name
="lsa_QueryDomainInformationPolicy";
12897 offset
= lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
12898 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12900 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12903 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12909 lsarpc_dissect_lsa_QueryDomainInformationPolicy_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12911 di
->dcerpc_procedure_name
="lsa_QueryDomainInformationPolicy";
12912 offset
= lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12913 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12914 offset
= lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
12915 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12920 lsarpc_dissect_element_lsa_SetDomainInformationPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12922 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetDomainInformationPolicy_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_SetDomainInformationPolicy_handle
);
12928 lsarpc_dissect_element_lsa_SetDomainInformationPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12930 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetDomainInformationPolicy_handle
, 0);
12936 lsarpc_dissect_element_lsa_SetDomainInformationPolicy_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12938 offset
= lsarpc_dissect_enum_lsa_DomainInfoEnum(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetDomainInformationPolicy_level
, 0);
12944 lsarpc_dissect_element_lsa_SetDomainInformationPolicy_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12946 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetDomainInformationPolicy_info_
, NDR_POINTER_UNIQUE
, "Pointer to Info (lsa_DomainInformationPolicy)",hf_lsarpc_lsa_SetDomainInformationPolicy_info
);
12952 lsarpc_dissect_element_lsa_SetDomainInformationPolicy_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12954 offset
= lsarpc_dissect_lsa_DomainInformationPolicy(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetDomainInformationPolicy_info
, 0);
12959 /* IDL: NTSTATUS lsa_SetDomainInformationPolicy( */
12960 /* IDL: [in] [ref] policy_handle *handle, */
12961 /* IDL: [in] lsa_DomainInfoEnum level, */
12962 /* IDL: [in] [switch_is(level)] [unique(1)] lsa_DomainInformationPolicy *info */
12966 lsarpc_dissect_lsa_SetDomainInformationPolicy_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12970 di
->dcerpc_procedure_name
="lsa_SetDomainInformationPolicy";
12971 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12974 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12980 lsarpc_dissect_lsa_SetDomainInformationPolicy_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12982 di
->dcerpc_procedure_name
="lsa_SetDomainInformationPolicy";
12983 offset
= lsarpc_dissect_element_lsa_SetDomainInformationPolicy_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12984 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12985 offset
= lsarpc_dissect_element_lsa_SetDomainInformationPolicy_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
12986 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12987 offset
= lsarpc_dissect_element_lsa_SetDomainInformationPolicy_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
12988 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12993 lsarpc_dissect_element_lsa_OpenTrustedDomainByName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12995 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenTrustedDomainByName_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_OpenTrustedDomainByName_handle
);
13001 lsarpc_dissect_element_lsa_OpenTrustedDomainByName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13003 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenTrustedDomainByName_handle
, 0);
13009 lsarpc_dissect_element_lsa_OpenTrustedDomainByName_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13011 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_OpenTrustedDomainByName_name
,0);
13017 lsarpc_dissect_element_lsa_OpenTrustedDomainByName_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13019 offset
= lsarpc_dissect_bitmap_lsa_TrustedAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenTrustedDomainByName_access_mask
, 0);
13025 lsarpc_dissect_element_lsa_OpenTrustedDomainByName_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13027 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenTrustedDomainByName_trustdom_handle_
, NDR_POINTER_REF
, "Pointer to Trustdom Handle (policy_handle)",hf_lsarpc_lsa_OpenTrustedDomainByName_trustdom_handle
);
13033 lsarpc_dissect_element_lsa_OpenTrustedDomainByName_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13035 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenTrustedDomainByName_trustdom_handle
, PIDL_POLHND_OPEN
|PIDL_POLHND_TYPE_LSA_DOMAIN
);
13040 /* IDL: NTSTATUS lsa_OpenTrustedDomainByName( */
13041 /* IDL: [in] [ref] policy_handle *handle, */
13042 /* IDL: [in] lsa_String name, */
13043 /* IDL: [in] lsa_TrustedAccessMask access_mask, */
13044 /* IDL: [out] [ref] policy_handle *trustdom_handle */
13048 lsarpc_dissect_lsa_OpenTrustedDomainByName_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13052 di
->dcerpc_procedure_name
="lsa_OpenTrustedDomainByName";
13053 offset
= lsarpc_dissect_element_lsa_OpenTrustedDomainByName_trustdom_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
13054 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13056 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13059 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13065 lsarpc_dissect_lsa_OpenTrustedDomainByName_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13067 di
->dcerpc_procedure_name
="lsa_OpenTrustedDomainByName";
13068 offset
= lsarpc_dissect_element_lsa_OpenTrustedDomainByName_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
13069 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13070 offset
= lsarpc_dissect_element_lsa_OpenTrustedDomainByName_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
13071 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13072 offset
= lsarpc_dissect_element_lsa_OpenTrustedDomainByName_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
13073 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13077 /* IDL: NTSTATUS lsa_TestCall( */
13082 lsarpc_dissect_lsa_TestCall_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13086 di
->dcerpc_procedure_name
="lsa_TestCall";
13087 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13090 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13096 lsarpc_dissect_lsa_TestCall_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13098 di
->dcerpc_procedure_name
="lsa_TestCall";
13103 lsarpc_dissect_element_lsa_LookupSids2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13105 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids2_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_LookupSids2_handle
);
13111 lsarpc_dissect_element_lsa_LookupSids2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13113 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids2_handle
, 0);
13119 lsarpc_dissect_element_lsa_LookupSids2_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13121 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids2_sids_
, NDR_POINTER_REF
, "Pointer to Sids (lsa_SidArray)",hf_lsarpc_lsa_LookupSids2_sids
);
13127 lsarpc_dissect_element_lsa_LookupSids2_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13129 offset
= lsarpc_dissect_struct_lsa_SidArray(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupSids2_sids
,0);
13135 lsarpc_dissect_element_lsa_LookupSids2_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13137 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids2_domains_
, NDR_POINTER_REF
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupSids2_domains
);
13143 lsarpc_dissect_element_lsa_LookupSids2_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13145 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids2_domains__
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupSids2_domains
);
13151 lsarpc_dissect_element_lsa_LookupSids2_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13153 offset
= lsarpc_dissect_struct_lsa_RefDomainList(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupSids2_domains
,0);
13159 lsarpc_dissect_element_lsa_LookupSids2_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13161 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids2_names_
, NDR_POINTER_REF
, "Pointer to Names (lsa_TransNameArray2)",hf_lsarpc_lsa_LookupSids2_names
);
13167 lsarpc_dissect_element_lsa_LookupSids2_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13169 offset
= lsarpc_dissect_struct_lsa_TransNameArray2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupSids2_names
,0);
13175 lsarpc_dissect_element_lsa_LookupSids2_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13177 offset
= lsarpc_dissect_enum_lsa_LookupNamesLevel(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids2_level
, 0);
13183 lsarpc_dissect_element_lsa_LookupSids2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13185 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids2_count_
, NDR_POINTER_REF
, "Pointer to Count (uint32)",hf_lsarpc_lsa_LookupSids2_count
);
13191 lsarpc_dissect_element_lsa_LookupSids2_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13193 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids2_count
, 0);
13199 lsarpc_dissect_element_lsa_LookupSids2_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13201 offset
= lsarpc_dissect_enum_lsa_LookupOptions(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids2_lookup_options
, 0);
13207 lsarpc_dissect_element_lsa_LookupSids2_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13209 offset
= lsarpc_dissect_enum_lsa_ClientRevision(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids2_client_revision
, 0);
13214 /* IDL: NTSTATUS lsa_LookupSids2( */
13215 /* IDL: [in] [ref] policy_handle *handle, */
13216 /* IDL: [in] [ref] lsa_SidArray *sids, */
13217 /* IDL: [out] [ref] lsa_RefDomainList **domains, */
13218 /* IDL: [in] [out] [ref] lsa_TransNameArray2 *names, */
13219 /* IDL: [in] lsa_LookupNamesLevel level, */
13220 /* IDL: [in] [out] [ref] uint32 *count, */
13221 /* IDL: [in] lsa_LookupOptions lookup_options, */
13222 /* IDL: [in] lsa_ClientRevision client_revision */
13226 lsarpc_dissect_lsa_LookupSids2_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13230 di
->dcerpc_procedure_name
="lsa_LookupSids2";
13231 offset
= lsarpc_dissect_element_lsa_LookupSids2_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
13232 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13234 offset
= lsarpc_dissect_element_lsa_LookupSids2_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
13235 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13237 offset
= lsarpc_dissect_element_lsa_LookupSids2_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
13238 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13240 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13243 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13249 lsarpc_dissect_lsa_LookupSids2_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13251 di
->dcerpc_procedure_name
="lsa_LookupSids2";
13252 offset
= lsarpc_dissect_element_lsa_LookupSids2_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
13253 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13254 offset
= lsarpc_dissect_element_lsa_LookupSids2_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
13255 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13256 offset
= lsarpc_dissect_element_lsa_LookupSids2_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
13257 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13258 offset
= lsarpc_dissect_element_lsa_LookupSids2_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
13259 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13260 offset
= lsarpc_dissect_element_lsa_LookupSids2_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
13261 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13262 offset
= lsarpc_dissect_element_lsa_LookupSids2_lookup_options(tvb
, offset
, pinfo
, tree
, di
, drep
);
13263 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13264 offset
= lsarpc_dissect_element_lsa_LookupSids2_client_revision(tvb
, offset
, pinfo
, tree
, di
, drep
);
13265 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13270 lsarpc_dissect_element_lsa_LookupNames2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13272 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames2_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_LookupNames2_handle
);
13278 lsarpc_dissect_element_lsa_LookupNames2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13280 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames2_handle
, 0);
13286 lsarpc_dissect_element_lsa_LookupNames2_num_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13288 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames2_num_names
, 0);
13294 lsarpc_dissect_element_lsa_LookupNames2_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13296 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames2_domains_
, NDR_POINTER_REF
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupNames2_domains
);
13302 lsarpc_dissect_element_lsa_LookupNames2_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13304 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames2_domains__
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupNames2_domains
);
13310 lsarpc_dissect_element_lsa_LookupNames2_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13312 offset
= lsarpc_dissect_struct_lsa_RefDomainList(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupNames2_domains
,0);
13318 lsarpc_dissect_element_lsa_LookupNames2_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13320 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames2_sids_
, NDR_POINTER_REF
, "Pointer to Sids (lsa_TransSidArray2)",hf_lsarpc_lsa_LookupNames2_sids
);
13326 lsarpc_dissect_element_lsa_LookupNames2_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13328 offset
= lsarpc_dissect_struct_lsa_TransSidArray2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupNames2_sids
,0);
13334 lsarpc_dissect_element_lsa_LookupNames2_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13336 offset
= lsarpc_dissect_enum_lsa_LookupNamesLevel(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames2_level
, 0);
13342 lsarpc_dissect_element_lsa_LookupNames2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13344 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames2_count_
, NDR_POINTER_REF
, "Pointer to Count (uint32)",hf_lsarpc_lsa_LookupNames2_count
);
13350 lsarpc_dissect_element_lsa_LookupNames2_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13352 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames2_count
, 0);
13358 lsarpc_dissect_element_lsa_LookupNames2_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13360 offset
= lsarpc_dissect_enum_lsa_LookupOptions(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames2_lookup_options
, 0);
13366 lsarpc_dissect_element_lsa_LookupNames2_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13368 offset
= lsarpc_dissect_enum_lsa_ClientRevision(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames2_client_revision
, 0);
13373 /* IDL: NTSTATUS lsa_LookupNames2( */
13374 /* IDL: [in] [ref] policy_handle *handle, */
13375 /* IDL: [in] [range(0,1000)] uint32 num_names, */
13376 /* IDL: [in] [size_is(num_names)] lsa_String names[*], */
13377 /* IDL: [out] [ref] lsa_RefDomainList **domains, */
13378 /* IDL: [in] [out] [ref] lsa_TransSidArray2 *sids, */
13379 /* IDL: [in] lsa_LookupNamesLevel level, */
13380 /* IDL: [in] [out] [ref] uint32 *count, */
13381 /* IDL: [in] lsa_LookupOptions lookup_options, */
13382 /* IDL: [in] lsa_ClientRevision client_revision */
13386 lsarpc_dissect_lsa_LookupNames2_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13390 di
->dcerpc_procedure_name
="lsa_LookupNames2";
13391 offset
= lsarpc_dissect_element_lsa_LookupNames2_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
13392 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13394 offset
= lsarpc_dissect_element_lsa_LookupNames2_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
13395 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13397 offset
= lsarpc_dissect_element_lsa_LookupNames2_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
13398 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13400 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13403 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13409 lsarpc_dissect_lsa_LookupNames2_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13411 di
->dcerpc_procedure_name
="lsa_LookupNames2";
13412 offset
= lsarpc_dissect_element_lsa_LookupNames2_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
13413 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13414 offset
= lsarpc_dissect_element_lsa_LookupNames2_num_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
13415 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13416 offset
= lsarpc_dissect_element_lsa_LookupNames2_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
13417 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13418 offset
= lsarpc_dissect_element_lsa_LookupNames2_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
13419 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13420 offset
= lsarpc_dissect_element_lsa_LookupNames2_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
13421 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13422 offset
= lsarpc_dissect_element_lsa_LookupNames2_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
13423 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13424 offset
= lsarpc_dissect_element_lsa_LookupNames2_lookup_options(tvb
, offset
, pinfo
, tree
, di
, drep
);
13425 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13426 offset
= lsarpc_dissect_element_lsa_LookupNames2_client_revision(tvb
, offset
, pinfo
, tree
, di
, drep
);
13427 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13432 lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_policy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13434 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_policy_handle_
, NDR_POINTER_REF
, "Pointer to Policy Handle (policy_handle)",hf_lsarpc_lsa_CreateTrustedDomainEx2_policy_handle
);
13440 lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_policy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13442 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomainEx2_policy_handle
, 0);
13448 lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13450 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_TrustDomainInfoInfoEx)",hf_lsarpc_lsa_CreateTrustedDomainEx2_info
);
13456 lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13458 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_CreateTrustedDomainEx2_info
,0);
13464 lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_auth_info_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13466 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_auth_info_internal_
, NDR_POINTER_REF
, "Pointer to Auth Info Internal (lsa_TrustDomainInfoAuthInfoInternal)",hf_lsarpc_lsa_CreateTrustedDomainEx2_auth_info_internal
);
13472 lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_auth_info_internal_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13474 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternal(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_CreateTrustedDomainEx2_auth_info_internal
,0);
13480 lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13482 offset
= lsarpc_dissect_bitmap_lsa_TrustedAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomainEx2_access_mask
, 0);
13488 lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13490 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_trustdom_handle_
, NDR_POINTER_REF
, "Pointer to Trustdom Handle (policy_handle)",hf_lsarpc_lsa_CreateTrustedDomainEx2_trustdom_handle
);
13496 lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13498 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomainEx2_trustdom_handle
, 0);
13503 /* IDL: NTSTATUS lsa_CreateTrustedDomainEx2( */
13504 /* IDL: [in] [ref] policy_handle *policy_handle, */
13505 /* IDL: [in] [ref] lsa_TrustDomainInfoInfoEx *info, */
13506 /* IDL: [in] [ref] lsa_TrustDomainInfoAuthInfoInternal *auth_info_internal, */
13507 /* IDL: [in] lsa_TrustedAccessMask access_mask, */
13508 /* IDL: [out] [ref] policy_handle *trustdom_handle */
13512 lsarpc_dissect_lsa_CreateTrustedDomainEx2_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13516 di
->dcerpc_procedure_name
="lsa_CreateTrustedDomainEx2";
13517 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_trustdom_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
13518 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13520 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13523 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13529 lsarpc_dissect_lsa_CreateTrustedDomainEx2_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13531 di
->dcerpc_procedure_name
="lsa_CreateTrustedDomainEx2";
13532 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_policy_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
13533 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13534 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
13535 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13536 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_auth_info_internal(tvb
, offset
, pinfo
, tree
, di
, drep
);
13537 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13538 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
13539 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13543 /* IDL: NTSTATUS lsa_CREDRWRITE( */
13548 lsarpc_dissect_lsa_CREDRWRITE_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13552 di
->dcerpc_procedure_name
="lsa_CREDRWRITE";
13553 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13556 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13562 lsarpc_dissect_lsa_CREDRWRITE_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13564 di
->dcerpc_procedure_name
="lsa_CREDRWRITE";
13568 /* IDL: NTSTATUS lsa_CREDRREAD( */
13573 lsarpc_dissect_lsa_CREDRREAD_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13577 di
->dcerpc_procedure_name
="lsa_CREDRREAD";
13578 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13581 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13587 lsarpc_dissect_lsa_CREDRREAD_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13589 di
->dcerpc_procedure_name
="lsa_CREDRREAD";
13593 /* IDL: NTSTATUS lsa_CREDRENUMERATE( */
13598 lsarpc_dissect_lsa_CREDRENUMERATE_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13602 di
->dcerpc_procedure_name
="lsa_CREDRENUMERATE";
13603 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13606 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13612 lsarpc_dissect_lsa_CREDRENUMERATE_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13614 di
->dcerpc_procedure_name
="lsa_CREDRENUMERATE";
13618 /* IDL: NTSTATUS lsa_CREDRWRITEDOMAINCREDENTIALS( */
13623 lsarpc_dissect_lsa_CREDRWRITEDOMAINCREDENTIALS_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13627 di
->dcerpc_procedure_name
="lsa_CREDRWRITEDOMAINCREDENTIALS";
13628 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13631 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13637 lsarpc_dissect_lsa_CREDRWRITEDOMAINCREDENTIALS_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13639 di
->dcerpc_procedure_name
="lsa_CREDRWRITEDOMAINCREDENTIALS";
13643 /* IDL: NTSTATUS lsa_CREDRREADDOMAINCREDENTIALS( */
13648 lsarpc_dissect_lsa_CREDRREADDOMAINCREDENTIALS_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13652 di
->dcerpc_procedure_name
="lsa_CREDRREADDOMAINCREDENTIALS";
13653 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13656 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13662 lsarpc_dissect_lsa_CREDRREADDOMAINCREDENTIALS_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13664 di
->dcerpc_procedure_name
="lsa_CREDRREADDOMAINCREDENTIALS";
13668 /* IDL: NTSTATUS lsa_CREDRDELETE( */
13673 lsarpc_dissect_lsa_CREDRDELETE_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13677 di
->dcerpc_procedure_name
="lsa_CREDRDELETE";
13678 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13681 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13687 lsarpc_dissect_lsa_CREDRDELETE_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13689 di
->dcerpc_procedure_name
="lsa_CREDRDELETE";
13693 /* IDL: NTSTATUS lsa_CREDRGETTARGETINFO( */
13698 lsarpc_dissect_lsa_CREDRGETTARGETINFO_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13702 di
->dcerpc_procedure_name
="lsa_CREDRGETTARGETINFO";
13703 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13706 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13712 lsarpc_dissect_lsa_CREDRGETTARGETINFO_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13714 di
->dcerpc_procedure_name
="lsa_CREDRGETTARGETINFO";
13718 /* IDL: NTSTATUS lsa_CREDRPROFILELOADED( */
13723 lsarpc_dissect_lsa_CREDRPROFILELOADED_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13727 di
->dcerpc_procedure_name
="lsa_CREDRPROFILELOADED";
13728 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13731 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13737 lsarpc_dissect_lsa_CREDRPROFILELOADED_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13739 di
->dcerpc_procedure_name
="lsa_CREDRPROFILELOADED";
13744 lsarpc_dissect_element_lsa_LookupNames3_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13746 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_LookupNames3_handle
);
13752 lsarpc_dissect_element_lsa_LookupNames3_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13754 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames3_handle
, 0);
13760 lsarpc_dissect_element_lsa_LookupNames3_num_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13762 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames3_num_names
, 0);
13768 lsarpc_dissect_element_lsa_LookupNames3_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13770 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupNames3_names
,0);
13776 lsarpc_dissect_element_lsa_LookupNames3_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13778 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_domains_
, NDR_POINTER_REF
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupNames3_domains
);
13784 lsarpc_dissect_element_lsa_LookupNames3_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13786 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_domains__
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupNames3_domains
);
13792 lsarpc_dissect_element_lsa_LookupNames3_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13794 offset
= lsarpc_dissect_struct_lsa_RefDomainList(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupNames3_domains
,0);
13800 lsarpc_dissect_element_lsa_LookupNames3_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13802 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_sids_
, NDR_POINTER_REF
, "Pointer to Sids (lsa_TransSidArray3)",hf_lsarpc_lsa_LookupNames3_sids
);
13808 lsarpc_dissect_element_lsa_LookupNames3_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13810 offset
= lsarpc_dissect_struct_lsa_TransSidArray3(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupNames3_sids
,0);
13816 lsarpc_dissect_element_lsa_LookupNames3_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13818 offset
= lsarpc_dissect_enum_lsa_LookupNamesLevel(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames3_level
, 0);
13824 lsarpc_dissect_element_lsa_LookupNames3_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13826 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_count_
, NDR_POINTER_REF
, "Pointer to Count (uint32)",hf_lsarpc_lsa_LookupNames3_count
);
13832 lsarpc_dissect_element_lsa_LookupNames3_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13834 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames3_count
, 0);
13840 lsarpc_dissect_element_lsa_LookupNames3_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13842 offset
= lsarpc_dissect_enum_lsa_LookupOptions(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames3_lookup_options
, 0);
13848 lsarpc_dissect_element_lsa_LookupNames3_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13850 offset
= lsarpc_dissect_enum_lsa_ClientRevision(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames3_client_revision
, 0);
13855 /* IDL: NTSTATUS lsa_LookupNames3( */
13856 /* IDL: [in] [ref] policy_handle *handle, */
13857 /* IDL: [in] [range(0,1000)] uint32 num_names, */
13858 /* IDL: [in] [size_is(num_names)] lsa_String names[*], */
13859 /* IDL: [out] [ref] lsa_RefDomainList **domains, */
13860 /* IDL: [in] [out] [ref] lsa_TransSidArray3 *sids, */
13861 /* IDL: [in] lsa_LookupNamesLevel level, */
13862 /* IDL: [in] [out] [ref] uint32 *count, */
13863 /* IDL: [in] lsa_LookupOptions lookup_options, */
13864 /* IDL: [in] lsa_ClientRevision client_revision */
13868 lsarpc_dissect_lsa_LookupNames3_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13872 di
->dcerpc_procedure_name
="lsa_LookupNames3";
13873 offset
= lsarpc_dissect_element_lsa_LookupNames3_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
13874 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13876 offset
= lsarpc_dissect_element_lsa_LookupNames3_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
13877 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13879 offset
= lsarpc_dissect_element_lsa_LookupNames3_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
13880 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13882 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13885 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13891 lsarpc_dissect_lsa_LookupNames3_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13893 di
->dcerpc_procedure_name
="lsa_LookupNames3";
13894 offset
= lsarpc_dissect_element_lsa_LookupNames3_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
13895 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13896 offset
= lsarpc_dissect_element_lsa_LookupNames3_num_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
13897 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13898 offset
= lsarpc_dissect_element_lsa_LookupNames3_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
13899 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13900 offset
= lsarpc_dissect_element_lsa_LookupNames3_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
13901 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13902 offset
= lsarpc_dissect_element_lsa_LookupNames3_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
13903 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13904 offset
= lsarpc_dissect_element_lsa_LookupNames3_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
13905 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13906 offset
= lsarpc_dissect_element_lsa_LookupNames3_lookup_options(tvb
, offset
, pinfo
, tree
, di
, drep
);
13907 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13908 offset
= lsarpc_dissect_element_lsa_LookupNames3_client_revision(tvb
, offset
, pinfo
, tree
, di
, drep
);
13909 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13913 /* IDL: NTSTATUS lsa_CREDRGETSESSIONTYPES( */
13918 lsarpc_dissect_lsa_CREDRGETSESSIONTYPES_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13922 di
->dcerpc_procedure_name
="lsa_CREDRGETSESSIONTYPES";
13923 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13926 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13932 lsarpc_dissect_lsa_CREDRGETSESSIONTYPES_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13934 di
->dcerpc_procedure_name
="lsa_CREDRGETSESSIONTYPES";
13938 /* IDL: NTSTATUS lsa_LSARREGISTERAUDITEVENT( */
13943 lsarpc_dissect_lsa_LSARREGISTERAUDITEVENT_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13947 di
->dcerpc_procedure_name
="lsa_LSARREGISTERAUDITEVENT";
13948 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13951 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13957 lsarpc_dissect_lsa_LSARREGISTERAUDITEVENT_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13959 di
->dcerpc_procedure_name
="lsa_LSARREGISTERAUDITEVENT";
13963 /* IDL: NTSTATUS lsa_LSARGENAUDITEVENT( */
13968 lsarpc_dissect_lsa_LSARGENAUDITEVENT_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13972 di
->dcerpc_procedure_name
="lsa_LSARGENAUDITEVENT";
13973 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13976 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13982 lsarpc_dissect_lsa_LSARGENAUDITEVENT_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13984 di
->dcerpc_procedure_name
="lsa_LSARGENAUDITEVENT";
13988 /* IDL: NTSTATUS lsa_LSARUNREGISTERAUDITEVENT( */
13993 lsarpc_dissect_lsa_LSARUNREGISTERAUDITEVENT_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13997 di
->dcerpc_procedure_name
="lsa_LSARUNREGISTERAUDITEVENT";
13998 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
14001 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
14007 lsarpc_dissect_lsa_LSARUNREGISTERAUDITEVENT_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14009 di
->dcerpc_procedure_name
="lsa_LSARUNREGISTERAUDITEVENT";
14014 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14016 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_lsaRQueryForestTrustInformation_handle
);
14022 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14024 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRQueryForestTrustInformation_handle
, 0);
14030 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_trusted_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14032 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_trusted_domain_name_
, NDR_POINTER_REF
, "Pointer to Trusted Domain Name (lsa_String)",hf_lsarpc_lsa_lsaRQueryForestTrustInformation_trusted_domain_name
);
14038 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_trusted_domain_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14040 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRQueryForestTrustInformation_trusted_domain_name
,0);
14046 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_highest_record_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14048 offset
= lsarpc_dissect_enum_lsa_ForestTrustRecordType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRQueryForestTrustInformation_highest_record_type
, 0);
14054 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_forest_trust_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14056 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_forest_trust_info_
, NDR_POINTER_REF
, "Pointer to Forest Trust Info (lsa_ForestTrustInformation)",hf_lsarpc_lsa_lsaRQueryForestTrustInformation_forest_trust_info
);
14062 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_forest_trust_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14064 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_forest_trust_info__
, NDR_POINTER_UNIQUE
, "Pointer to Forest Trust Info (lsa_ForestTrustInformation)",hf_lsarpc_lsa_lsaRQueryForestTrustInformation_forest_trust_info
);
14070 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_forest_trust_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14072 offset
= lsarpc_dissect_struct_lsa_ForestTrustInformation(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRQueryForestTrustInformation_forest_trust_info
,0);
14077 /* IDL: NTSTATUS lsa_lsaRQueryForestTrustInformation( */
14078 /* IDL: [in] [ref] policy_handle *handle, */
14079 /* IDL: [in] [ref] lsa_String *trusted_domain_name, */
14080 /* IDL: [in] lsa_ForestTrustRecordType highest_record_type, */
14081 /* IDL: [out] [ref] lsa_ForestTrustInformation **forest_trust_info */
14085 lsarpc_dissect_lsa_lsaRQueryForestTrustInformation_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14089 di
->dcerpc_procedure_name
="lsa_lsaRQueryForestTrustInformation";
14090 offset
= lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_forest_trust_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
14091 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14093 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
14096 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
14102 lsarpc_dissect_lsa_lsaRQueryForestTrustInformation_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14104 di
->dcerpc_procedure_name
="lsa_lsaRQueryForestTrustInformation";
14105 offset
= lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
14106 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14107 offset
= lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_trusted_domain_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
14108 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14109 offset
= lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_highest_record_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
14110 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14115 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14117 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_lsaRSetForestTrustInformation_handle
);
14123 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14125 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRSetForestTrustInformation_handle
, 0);
14131 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_trusted_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14133 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_trusted_domain_name_
, NDR_POINTER_REF
, "Pointer to Trusted Domain Name (lsa_StringLarge)",hf_lsarpc_lsa_lsaRSetForestTrustInformation_trusted_domain_name
);
14139 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_trusted_domain_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14141 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRSetForestTrustInformation_trusted_domain_name
,0);
14147 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_highest_record_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14149 offset
= lsarpc_dissect_enum_lsa_ForestTrustRecordType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRSetForestTrustInformation_highest_record_type
, 0);
14155 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_forest_trust_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14157 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_forest_trust_info_
, NDR_POINTER_REF
, "Pointer to Forest Trust Info (lsa_ForestTrustInformation)",hf_lsarpc_lsa_lsaRSetForestTrustInformation_forest_trust_info
);
14163 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_forest_trust_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14165 offset
= lsarpc_dissect_struct_lsa_ForestTrustInformation(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRSetForestTrustInformation_forest_trust_info
,0);
14171 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_check_only(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14173 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRSetForestTrustInformation_check_only
, 0);
14179 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_collision_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14181 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_collision_info_
, NDR_POINTER_REF
, "Pointer to Collision Info (lsa_ForestTrustCollisionInfo)",hf_lsarpc_lsa_lsaRSetForestTrustInformation_collision_info
);
14187 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_collision_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14189 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_collision_info__
, NDR_POINTER_UNIQUE
, "Pointer to Collision Info (lsa_ForestTrustCollisionInfo)",hf_lsarpc_lsa_lsaRSetForestTrustInformation_collision_info
);
14195 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_collision_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14197 offset
= lsarpc_dissect_struct_lsa_ForestTrustCollisionInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRSetForestTrustInformation_collision_info
,0);
14202 /* IDL: NTSTATUS lsa_lsaRSetForestTrustInformation( */
14203 /* IDL: [in] [ref] policy_handle *handle, */
14204 /* IDL: [in] [ref] lsa_StringLarge *trusted_domain_name, */
14205 /* IDL: [in] lsa_ForestTrustRecordType highest_record_type, */
14206 /* IDL: [in] [ref] lsa_ForestTrustInformation *forest_trust_info, */
14207 /* IDL: [in] uint8 check_only, */
14208 /* IDL: [out] [ref] lsa_ForestTrustCollisionInfo **collision_info */
14212 lsarpc_dissect_lsa_lsaRSetForestTrustInformation_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14216 di
->dcerpc_procedure_name
="lsa_lsaRSetForestTrustInformation";
14217 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_collision_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
14218 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14220 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
14223 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
14229 lsarpc_dissect_lsa_lsaRSetForestTrustInformation_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14231 di
->dcerpc_procedure_name
="lsa_lsaRSetForestTrustInformation";
14232 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
14233 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14234 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_trusted_domain_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
14235 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14236 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_highest_record_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
14237 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14238 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_forest_trust_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
14239 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14240 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_check_only(tvb
, offset
, pinfo
, tree
, di
, drep
);
14241 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14245 /* IDL: NTSTATUS lsa_CREDRRENAME( */
14250 lsarpc_dissect_lsa_CREDRRENAME_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14254 di
->dcerpc_procedure_name
="lsa_CREDRRENAME";
14255 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
14258 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
14264 lsarpc_dissect_lsa_CREDRRENAME_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14266 di
->dcerpc_procedure_name
="lsa_CREDRRENAME";
14271 lsarpc_dissect_element_lsa_LookupSids3_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14273 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids3_sids_
, NDR_POINTER_REF
, "Pointer to Sids (lsa_SidArray)",hf_lsarpc_lsa_LookupSids3_sids
);
14279 lsarpc_dissect_element_lsa_LookupSids3_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14281 offset
= lsarpc_dissect_struct_lsa_SidArray(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupSids3_sids
,0);
14287 lsarpc_dissect_element_lsa_LookupSids3_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14289 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids3_domains_
, NDR_POINTER_REF
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupSids3_domains
);
14295 lsarpc_dissect_element_lsa_LookupSids3_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14297 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids3_domains__
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupSids3_domains
);
14303 lsarpc_dissect_element_lsa_LookupSids3_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14305 offset
= lsarpc_dissect_struct_lsa_RefDomainList(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupSids3_domains
,0);
14311 lsarpc_dissect_element_lsa_LookupSids3_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14313 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids3_names_
, NDR_POINTER_REF
, "Pointer to Names (lsa_TransNameArray2)",hf_lsarpc_lsa_LookupSids3_names
);
14319 lsarpc_dissect_element_lsa_LookupSids3_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14321 offset
= lsarpc_dissect_struct_lsa_TransNameArray2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupSids3_names
,0);
14327 lsarpc_dissect_element_lsa_LookupSids3_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14329 offset
= lsarpc_dissect_enum_lsa_LookupNamesLevel(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids3_level
, 0);
14335 lsarpc_dissect_element_lsa_LookupSids3_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14337 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids3_count_
, NDR_POINTER_REF
, "Pointer to Count (uint32)",hf_lsarpc_lsa_LookupSids3_count
);
14343 lsarpc_dissect_element_lsa_LookupSids3_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14345 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids3_count
, 0);
14351 lsarpc_dissect_element_lsa_LookupSids3_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14353 offset
= lsarpc_dissect_enum_lsa_LookupOptions(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids3_lookup_options
, 0);
14359 lsarpc_dissect_element_lsa_LookupSids3_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14361 offset
= lsarpc_dissect_enum_lsa_ClientRevision(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids3_client_revision
, 0);
14366 /* IDL: NTSTATUS lsa_LookupSids3( */
14367 /* IDL: [in] [ref] lsa_SidArray *sids, */
14368 /* IDL: [out] [ref] lsa_RefDomainList **domains, */
14369 /* IDL: [in] [out] [ref] lsa_TransNameArray2 *names, */
14370 /* IDL: [in] lsa_LookupNamesLevel level, */
14371 /* IDL: [in] [out] [ref] uint32 *count, */
14372 /* IDL: [in] lsa_LookupOptions lookup_options, */
14373 /* IDL: [in] lsa_ClientRevision client_revision */
14377 lsarpc_dissect_lsa_LookupSids3_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14381 di
->dcerpc_procedure_name
="lsa_LookupSids3";
14382 offset
= lsarpc_dissect_element_lsa_LookupSids3_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
14383 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14385 offset
= lsarpc_dissect_element_lsa_LookupSids3_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
14386 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14388 offset
= lsarpc_dissect_element_lsa_LookupSids3_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
14389 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14391 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
14394 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
14400 lsarpc_dissect_lsa_LookupSids3_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14402 di
->dcerpc_procedure_name
="lsa_LookupSids3";
14403 offset
= lsarpc_dissect_element_lsa_LookupSids3_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
14404 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14405 offset
= lsarpc_dissect_element_lsa_LookupSids3_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
14406 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14407 offset
= lsarpc_dissect_element_lsa_LookupSids3_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
14408 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14409 offset
= lsarpc_dissect_element_lsa_LookupSids3_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
14410 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14411 offset
= lsarpc_dissect_element_lsa_LookupSids3_lookup_options(tvb
, offset
, pinfo
, tree
, di
, drep
);
14412 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14413 offset
= lsarpc_dissect_element_lsa_LookupSids3_client_revision(tvb
, offset
, pinfo
, tree
, di
, drep
);
14414 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14419 lsarpc_dissect_element_lsa_LookupNames4_num_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14421 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames4_num_names
, 0);
14427 lsarpc_dissect_element_lsa_LookupNames4_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14429 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames4_domains_
, NDR_POINTER_REF
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupNames4_domains
);
14435 lsarpc_dissect_element_lsa_LookupNames4_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14437 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames4_domains__
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupNames4_domains
);
14443 lsarpc_dissect_element_lsa_LookupNames4_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14445 offset
= lsarpc_dissect_struct_lsa_RefDomainList(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupNames4_domains
,0);
14451 lsarpc_dissect_element_lsa_LookupNames4_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14453 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames4_sids_
, NDR_POINTER_REF
, "Pointer to Sids (lsa_TransSidArray3)",hf_lsarpc_lsa_LookupNames4_sids
);
14459 lsarpc_dissect_element_lsa_LookupNames4_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14461 offset
= lsarpc_dissect_struct_lsa_TransSidArray3(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupNames4_sids
,0);
14467 lsarpc_dissect_element_lsa_LookupNames4_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14469 offset
= lsarpc_dissect_enum_lsa_LookupNamesLevel(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames4_level
, 0);
14475 lsarpc_dissect_element_lsa_LookupNames4_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14477 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames4_count_
, NDR_POINTER_REF
, "Pointer to Count (uint32)",hf_lsarpc_lsa_LookupNames4_count
);
14483 lsarpc_dissect_element_lsa_LookupNames4_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14485 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames4_count
, 0);
14491 lsarpc_dissect_element_lsa_LookupNames4_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14493 offset
= lsarpc_dissect_enum_lsa_LookupOptions(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames4_lookup_options
, 0);
14499 lsarpc_dissect_element_lsa_LookupNames4_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14501 offset
= lsarpc_dissect_enum_lsa_ClientRevision(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames4_client_revision
, 0);
14506 /* IDL: NTSTATUS lsa_LookupNames4( */
14507 /* IDL: [in] [range(0,1000)] uint32 num_names, */
14508 /* IDL: [in] [size_is(num_names)] lsa_String names[*], */
14509 /* IDL: [out] [ref] lsa_RefDomainList **domains, */
14510 /* IDL: [in] [out] [ref] lsa_TransSidArray3 *sids, */
14511 /* IDL: [in] lsa_LookupNamesLevel level, */
14512 /* IDL: [in] [out] [ref] uint32 *count, */
14513 /* IDL: [in] lsa_LookupOptions lookup_options, */
14514 /* IDL: [in] lsa_ClientRevision client_revision */
14518 lsarpc_dissect_lsa_LookupNames4_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14522 di
->dcerpc_procedure_name
="lsa_LookupNames4";
14523 offset
= lsarpc_dissect_element_lsa_LookupNames4_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
14524 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14526 offset
= lsarpc_dissect_element_lsa_LookupNames4_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
14527 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14529 offset
= lsarpc_dissect_element_lsa_LookupNames4_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
14530 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14532 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
14535 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
14541 lsarpc_dissect_lsa_LookupNames4_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14543 di
->dcerpc_procedure_name
="lsa_LookupNames4";
14544 offset
= lsarpc_dissect_element_lsa_LookupNames4_num_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
14545 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14546 offset
= lsarpc_dissect_element_lsa_LookupNames4_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
14547 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14548 offset
= lsarpc_dissect_element_lsa_LookupNames4_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
14549 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14550 offset
= lsarpc_dissect_element_lsa_LookupNames4_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
14551 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14552 offset
= lsarpc_dissect_element_lsa_LookupNames4_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
14553 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14554 offset
= lsarpc_dissect_element_lsa_LookupNames4_lookup_options(tvb
, offset
, pinfo
, tree
, di
, drep
);
14555 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14556 offset
= lsarpc_dissect_element_lsa_LookupNames4_client_revision(tvb
, offset
, pinfo
, tree
, di
, drep
);
14557 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14561 /* IDL: NTSTATUS lsa_LSAROPENPOLICYSCE( */
14566 lsarpc_dissect_lsa_LSAROPENPOLICYSCE_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14570 di
->dcerpc_procedure_name
="lsa_LSAROPENPOLICYSCE";
14571 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
14574 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
14580 lsarpc_dissect_lsa_LSAROPENPOLICYSCE_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14582 di
->dcerpc_procedure_name
="lsa_LSAROPENPOLICYSCE";
14586 /* IDL: NTSTATUS lsa_LSARADTREGISTERSECURITYEVENTSOURCE( */
14591 lsarpc_dissect_lsa_LSARADTREGISTERSECURITYEVENTSOURCE_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14595 di
->dcerpc_procedure_name
="lsa_LSARADTREGISTERSECURITYEVENTSOURCE";
14596 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
14599 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
14605 lsarpc_dissect_lsa_LSARADTREGISTERSECURITYEVENTSOURCE_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14607 di
->dcerpc_procedure_name
="lsa_LSARADTREGISTERSECURITYEVENTSOURCE";
14611 /* IDL: NTSTATUS lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE( */
14616 lsarpc_dissect_lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14620 di
->dcerpc_procedure_name
="lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE";
14621 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
14624 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
14630 lsarpc_dissect_lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14632 di
->dcerpc_procedure_name
="lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE";
14636 /* IDL: NTSTATUS lsa_LSARADTREPORTSECURITYEVENT( */
14641 lsarpc_dissect_lsa_LSARADTREPORTSECURITYEVENT_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14645 di
->dcerpc_procedure_name
="lsa_LSARADTREPORTSECURITYEVENT";
14646 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
14649 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
14655 lsarpc_dissect_lsa_LSARADTREPORTSECURITYEVENT_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14657 di
->dcerpc_procedure_name
="lsa_LSARADTREPORTSECURITYEVENT";
14661 /* IDL: void lsa_Opnum82NotUsedOnWire( */
14666 lsarpc_dissect_lsa_Opnum82NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14668 di
->dcerpc_procedure_name
="lsa_Opnum82NotUsedOnWire";
14673 lsarpc_dissect_lsa_Opnum82NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14675 di
->dcerpc_procedure_name
="lsa_Opnum82NotUsedOnWire";
14679 /* IDL: void lsa_Opnum83NotUsedOnWire( */
14684 lsarpc_dissect_lsa_Opnum83NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14686 di
->dcerpc_procedure_name
="lsa_Opnum83NotUsedOnWire";
14691 lsarpc_dissect_lsa_Opnum83NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14693 di
->dcerpc_procedure_name
="lsa_Opnum83NotUsedOnWire";
14697 /* IDL: void lsa_Opnum84NotUsedOnWire( */
14702 lsarpc_dissect_lsa_Opnum84NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14704 di
->dcerpc_procedure_name
="lsa_Opnum84NotUsedOnWire";
14709 lsarpc_dissect_lsa_Opnum84NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14711 di
->dcerpc_procedure_name
="lsa_Opnum84NotUsedOnWire";
14715 /* IDL: void lsa_Opnum85NotUsedOnWire( */
14720 lsarpc_dissect_lsa_Opnum85NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14722 di
->dcerpc_procedure_name
="lsa_Opnum85NotUsedOnWire";
14727 lsarpc_dissect_lsa_Opnum85NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14729 di
->dcerpc_procedure_name
="lsa_Opnum85NotUsedOnWire";
14733 /* IDL: void lsa_Opnum86NotUsedOnWire( */
14738 lsarpc_dissect_lsa_Opnum86NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14740 di
->dcerpc_procedure_name
="lsa_Opnum86NotUsedOnWire";
14745 lsarpc_dissect_lsa_Opnum86NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14747 di
->dcerpc_procedure_name
="lsa_Opnum86NotUsedOnWire";
14751 /* IDL: void lsa_Opnum87NotUsedOnWire( */
14756 lsarpc_dissect_lsa_Opnum87NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14758 di
->dcerpc_procedure_name
="lsa_Opnum87NotUsedOnWire";
14763 lsarpc_dissect_lsa_Opnum87NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14765 di
->dcerpc_procedure_name
="lsa_Opnum87NotUsedOnWire";
14769 /* IDL: void lsa_Opnum88NotUsedOnWire( */
14774 lsarpc_dissect_lsa_Opnum88NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14776 di
->dcerpc_procedure_name
="lsa_Opnum88NotUsedOnWire";
14781 lsarpc_dissect_lsa_Opnum88NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14783 di
->dcerpc_procedure_name
="lsa_Opnum88NotUsedOnWire";
14787 /* IDL: void lsa_Opnum89NotUsedOnWire( */
14792 lsarpc_dissect_lsa_Opnum89NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14794 di
->dcerpc_procedure_name
="lsa_Opnum89NotUsedOnWire";
14799 lsarpc_dissect_lsa_Opnum89NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14801 di
->dcerpc_procedure_name
="lsa_Opnum89NotUsedOnWire";
14805 /* IDL: void lsa_Opnum90NotUsedOnWire( */
14810 lsarpc_dissect_lsa_Opnum90NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14812 di
->dcerpc_procedure_name
="lsa_Opnum90NotUsedOnWire";
14817 lsarpc_dissect_lsa_Opnum90NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14819 di
->dcerpc_procedure_name
="lsa_Opnum90NotUsedOnWire";
14823 /* IDL: void lsa_Opnum91NotUsedOnWire( */
14828 lsarpc_dissect_lsa_Opnum91NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14830 di
->dcerpc_procedure_name
="lsa_Opnum91NotUsedOnWire";
14835 lsarpc_dissect_lsa_Opnum91NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14837 di
->dcerpc_procedure_name
="lsa_Opnum91NotUsedOnWire";
14841 /* IDL: void lsa_Opnum92NotUsedOnWire( */
14846 lsarpc_dissect_lsa_Opnum92NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14848 di
->dcerpc_procedure_name
="lsa_Opnum92NotUsedOnWire";
14853 lsarpc_dissect_lsa_Opnum92NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14855 di
->dcerpc_procedure_name
="lsa_Opnum92NotUsedOnWire";
14859 /* IDL: void lsa_Opnum93NotUsedOnWire( */
14864 lsarpc_dissect_lsa_Opnum93NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14866 di
->dcerpc_procedure_name
="lsa_Opnum93NotUsedOnWire";
14871 lsarpc_dissect_lsa_Opnum93NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14873 di
->dcerpc_procedure_name
="lsa_Opnum93NotUsedOnWire";
14877 /* IDL: void lsa_Opnum94NotUsedOnWire( */
14882 lsarpc_dissect_lsa_Opnum94NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14884 di
->dcerpc_procedure_name
="lsa_Opnum94NotUsedOnWire";
14889 lsarpc_dissect_lsa_Opnum94NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14891 di
->dcerpc_procedure_name
="lsa_Opnum94NotUsedOnWire";
14895 /* IDL: void lsa_Opnum95NotUsedOnWire( */
14900 lsarpc_dissect_lsa_Opnum95NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14902 di
->dcerpc_procedure_name
="lsa_Opnum95NotUsedOnWire";
14907 lsarpc_dissect_lsa_Opnum95NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14909 di
->dcerpc_procedure_name
="lsa_Opnum95NotUsedOnWire";
14913 /* IDL: void lsa_Opnum96NotUsedOnWire( */
14918 lsarpc_dissect_lsa_Opnum96NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14920 di
->dcerpc_procedure_name
="lsa_Opnum96NotUsedOnWire";
14925 lsarpc_dissect_lsa_Opnum96NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14927 di
->dcerpc_procedure_name
="lsa_Opnum96NotUsedOnWire";
14931 /* IDL: void lsa_Opnum97NotUsedOnWire( */
14936 lsarpc_dissect_lsa_Opnum97NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14938 di
->dcerpc_procedure_name
="lsa_Opnum97NotUsedOnWire";
14943 lsarpc_dissect_lsa_Opnum97NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14945 di
->dcerpc_procedure_name
="lsa_Opnum97NotUsedOnWire";
14949 /* IDL: void lsa_Opnum98NotUsedOnWire( */
14954 lsarpc_dissect_lsa_Opnum98NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14956 di
->dcerpc_procedure_name
="lsa_Opnum98NotUsedOnWire";
14961 lsarpc_dissect_lsa_Opnum98NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14963 di
->dcerpc_procedure_name
="lsa_Opnum98NotUsedOnWire";
14967 /* IDL: void lsa_Opnum99NotUsedOnWire( */
14972 lsarpc_dissect_lsa_Opnum99NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14974 di
->dcerpc_procedure_name
="lsa_Opnum99NotUsedOnWire";
14979 lsarpc_dissect_lsa_Opnum99NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14981 di
->dcerpc_procedure_name
="lsa_Opnum99NotUsedOnWire";
14985 /* IDL: void lsa_Opnum100NotUsedOnWire( */
14990 lsarpc_dissect_lsa_Opnum100NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14992 di
->dcerpc_procedure_name
="lsa_Opnum100NotUsedOnWire";
14997 lsarpc_dissect_lsa_Opnum100NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14999 di
->dcerpc_procedure_name
="lsa_Opnum100NotUsedOnWire";
15003 /* IDL: void lsa_Opnum101NotUsedOnWire( */
15008 lsarpc_dissect_lsa_Opnum101NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15010 di
->dcerpc_procedure_name
="lsa_Opnum101NotUsedOnWire";
15015 lsarpc_dissect_lsa_Opnum101NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15017 di
->dcerpc_procedure_name
="lsa_Opnum101NotUsedOnWire";
15021 /* IDL: void lsa_Opnum102NotUsedOnWire( */
15026 lsarpc_dissect_lsa_Opnum102NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15028 di
->dcerpc_procedure_name
="lsa_Opnum102NotUsedOnWire";
15033 lsarpc_dissect_lsa_Opnum102NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15035 di
->dcerpc_procedure_name
="lsa_Opnum102NotUsedOnWire";
15039 /* IDL: void lsa_Opnum103NotUsedOnWire( */
15044 lsarpc_dissect_lsa_Opnum103NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15046 di
->dcerpc_procedure_name
="lsa_Opnum103NotUsedOnWire";
15051 lsarpc_dissect_lsa_Opnum103NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15053 di
->dcerpc_procedure_name
="lsa_Opnum103NotUsedOnWire";
15057 /* IDL: void lsa_Opnum104NotUsedOnWire( */
15062 lsarpc_dissect_lsa_Opnum104NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15064 di
->dcerpc_procedure_name
="lsa_Opnum104NotUsedOnWire";
15069 lsarpc_dissect_lsa_Opnum104NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15071 di
->dcerpc_procedure_name
="lsa_Opnum104NotUsedOnWire";
15075 /* IDL: void lsa_Opnum105NotUsedOnWire( */
15080 lsarpc_dissect_lsa_Opnum105NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15082 di
->dcerpc_procedure_name
="lsa_Opnum105NotUsedOnWire";
15087 lsarpc_dissect_lsa_Opnum105NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15089 di
->dcerpc_procedure_name
="lsa_Opnum105NotUsedOnWire";
15093 /* IDL: void lsa_Opnum106NotUsedOnWire( */
15098 lsarpc_dissect_lsa_Opnum106NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15100 di
->dcerpc_procedure_name
="lsa_Opnum106NotUsedOnWire";
15105 lsarpc_dissect_lsa_Opnum106NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15107 di
->dcerpc_procedure_name
="lsa_Opnum106NotUsedOnWire";
15111 /* IDL: void lsa_Opnum107NotUsedOnWire( */
15116 lsarpc_dissect_lsa_Opnum107NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15118 di
->dcerpc_procedure_name
="lsa_Opnum107NotUsedOnWire";
15123 lsarpc_dissect_lsa_Opnum107NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15125 di
->dcerpc_procedure_name
="lsa_Opnum107NotUsedOnWire";
15129 /* IDL: void lsa_Opnum108NotUsedOnWire( */
15134 lsarpc_dissect_lsa_Opnum108NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15136 di
->dcerpc_procedure_name
="lsa_Opnum108NotUsedOnWire";
15141 lsarpc_dissect_lsa_Opnum108NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15143 di
->dcerpc_procedure_name
="lsa_Opnum108NotUsedOnWire";
15147 /* IDL: void lsa_Opnum109NotUsedOnWire( */
15152 lsarpc_dissect_lsa_Opnum109NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15154 di
->dcerpc_procedure_name
="lsa_Opnum109NotUsedOnWire";
15159 lsarpc_dissect_lsa_Opnum109NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15161 di
->dcerpc_procedure_name
="lsa_Opnum109NotUsedOnWire";
15165 /* IDL: void lsa_Opnum110NotUsedOnWire( */
15170 lsarpc_dissect_lsa_Opnum110NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15172 di
->dcerpc_procedure_name
="lsa_Opnum110NotUsedOnWire";
15177 lsarpc_dissect_lsa_Opnum110NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15179 di
->dcerpc_procedure_name
="lsa_Opnum110NotUsedOnWire";
15183 /* IDL: void lsa_Opnum111NotUsedOnWire( */
15188 lsarpc_dissect_lsa_Opnum111NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15190 di
->dcerpc_procedure_name
="lsa_Opnum111NotUsedOnWire";
15195 lsarpc_dissect_lsa_Opnum111NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15197 di
->dcerpc_procedure_name
="lsa_Opnum111NotUsedOnWire";
15201 /* IDL: void lsa_Opnum112NotUsedOnWire( */
15206 lsarpc_dissect_lsa_Opnum112NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15208 di
->dcerpc_procedure_name
="lsa_Opnum112NotUsedOnWire";
15213 lsarpc_dissect_lsa_Opnum112NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15215 di
->dcerpc_procedure_name
="lsa_Opnum112NotUsedOnWire";
15219 /* IDL: void lsa_Opnum113NotUsedOnWire( */
15224 lsarpc_dissect_lsa_Opnum113NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15226 di
->dcerpc_procedure_name
="lsa_Opnum113NotUsedOnWire";
15231 lsarpc_dissect_lsa_Opnum113NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15233 di
->dcerpc_procedure_name
="lsa_Opnum113NotUsedOnWire";
15237 /* IDL: void lsa_Opnum114NotUsedOnWire( */
15242 lsarpc_dissect_lsa_Opnum114NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15244 di
->dcerpc_procedure_name
="lsa_Opnum114NotUsedOnWire";
15249 lsarpc_dissect_lsa_Opnum114NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15251 di
->dcerpc_procedure_name
="lsa_Opnum114NotUsedOnWire";
15255 /* IDL: void lsa_Opnum115NotUsedOnWire( */
15260 lsarpc_dissect_lsa_Opnum115NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15262 di
->dcerpc_procedure_name
="lsa_Opnum115NotUsedOnWire";
15267 lsarpc_dissect_lsa_Opnum115NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15269 di
->dcerpc_procedure_name
="lsa_Opnum115NotUsedOnWire";
15273 /* IDL: void lsa_Opnum116NotUsedOnWire( */
15278 lsarpc_dissect_lsa_Opnum116NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15280 di
->dcerpc_procedure_name
="lsa_Opnum116NotUsedOnWire";
15285 lsarpc_dissect_lsa_Opnum116NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15287 di
->dcerpc_procedure_name
="lsa_Opnum116NotUsedOnWire";
15291 /* IDL: void lsa_Opnum117NotUsedOnWire( */
15296 lsarpc_dissect_lsa_Opnum117NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15298 di
->dcerpc_procedure_name
="lsa_Opnum117NotUsedOnWire";
15303 lsarpc_dissect_lsa_Opnum117NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15305 di
->dcerpc_procedure_name
="lsa_Opnum117NotUsedOnWire";
15309 /* IDL: void lsa_Opnum118NotUsedOnWire( */
15314 lsarpc_dissect_lsa_Opnum118NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15316 di
->dcerpc_procedure_name
="lsa_Opnum118NotUsedOnWire";
15321 lsarpc_dissect_lsa_Opnum118NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15323 di
->dcerpc_procedure_name
="lsa_Opnum118NotUsedOnWire";
15327 /* IDL: void lsa_Opnum119NotUsedOnWire( */
15332 lsarpc_dissect_lsa_Opnum119NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15334 di
->dcerpc_procedure_name
="lsa_Opnum119NotUsedOnWire";
15339 lsarpc_dissect_lsa_Opnum119NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15341 di
->dcerpc_procedure_name
="lsa_Opnum119NotUsedOnWire";
15345 /* IDL: void lsa_Opnum120NotUsedOnWire( */
15350 lsarpc_dissect_lsa_Opnum120NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15352 di
->dcerpc_procedure_name
="lsa_Opnum120NotUsedOnWire";
15357 lsarpc_dissect_lsa_Opnum120NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15359 di
->dcerpc_procedure_name
="lsa_Opnum120NotUsedOnWire";
15363 /* IDL: void lsa_Opnum121NotUsedOnWire( */
15368 lsarpc_dissect_lsa_Opnum121NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15370 di
->dcerpc_procedure_name
="lsa_Opnum121NotUsedOnWire";
15375 lsarpc_dissect_lsa_Opnum121NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15377 di
->dcerpc_procedure_name
="lsa_Opnum121NotUsedOnWire";
15381 /* IDL: void lsa_Opnum122NotUsedOnWire( */
15386 lsarpc_dissect_lsa_Opnum122NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15388 di
->dcerpc_procedure_name
="lsa_Opnum122NotUsedOnWire";
15393 lsarpc_dissect_lsa_Opnum122NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15395 di
->dcerpc_procedure_name
="lsa_Opnum122NotUsedOnWire";
15399 /* IDL: void lsa_Opnum123NotUsedOnWire( */
15404 lsarpc_dissect_lsa_Opnum123NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15406 di
->dcerpc_procedure_name
="lsa_Opnum123NotUsedOnWire";
15411 lsarpc_dissect_lsa_Opnum123NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15413 di
->dcerpc_procedure_name
="lsa_Opnum123NotUsedOnWire";
15417 /* IDL: void lsa_Opnum124NotUsedOnWire( */
15422 lsarpc_dissect_lsa_Opnum124NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15424 di
->dcerpc_procedure_name
="lsa_Opnum124NotUsedOnWire";
15429 lsarpc_dissect_lsa_Opnum124NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15431 di
->dcerpc_procedure_name
="lsa_Opnum124NotUsedOnWire";
15435 /* IDL: void lsa_Opnum125NotUsedOnWire( */
15440 lsarpc_dissect_lsa_Opnum125NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15442 di
->dcerpc_procedure_name
="lsa_Opnum125NotUsedOnWire";
15447 lsarpc_dissect_lsa_Opnum125NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15449 di
->dcerpc_procedure_name
="lsa_Opnum125NotUsedOnWire";
15453 /* IDL: void lsa_Opnum126NotUsedOnWire( */
15458 lsarpc_dissect_lsa_Opnum126NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15460 di
->dcerpc_procedure_name
="lsa_Opnum126NotUsedOnWire";
15465 lsarpc_dissect_lsa_Opnum126NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15467 di
->dcerpc_procedure_name
="lsa_Opnum126NotUsedOnWire";
15471 /* IDL: void lsa_Opnum127NotUsedOnWire( */
15476 lsarpc_dissect_lsa_Opnum127NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15478 di
->dcerpc_procedure_name
="lsa_Opnum127NotUsedOnWire";
15483 lsarpc_dissect_lsa_Opnum127NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15485 di
->dcerpc_procedure_name
="lsa_Opnum127NotUsedOnWire";
15489 /* IDL: void lsa_Opnum128NotUsedOnWire( */
15494 lsarpc_dissect_lsa_Opnum128NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15496 di
->dcerpc_procedure_name
="lsa_Opnum128NotUsedOnWire";
15501 lsarpc_dissect_lsa_Opnum128NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15503 di
->dcerpc_procedure_name
="lsa_Opnum128NotUsedOnWire";
15508 lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_policy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15510 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_policy_handle_
, NDR_POINTER_REF
, "Pointer to Policy Handle (policy_handle)",hf_lsarpc_lsa_CreateTrustedDomainEx3_policy_handle
);
15516 lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_policy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15518 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomainEx3_policy_handle
, 0);
15524 lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15526 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_TrustDomainInfoInfoEx)",hf_lsarpc_lsa_CreateTrustedDomainEx3_info
);
15532 lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15534 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_CreateTrustedDomainEx3_info
,0);
15540 lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_auth_info_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15542 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_auth_info_internal_
, NDR_POINTER_REF
, "Pointer to Auth Info Internal (lsa_TrustDomainInfoAuthInfoInternalAES)",hf_lsarpc_lsa_CreateTrustedDomainEx3_auth_info_internal
);
15548 lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_auth_info_internal_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15550 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternalAES(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_CreateTrustedDomainEx3_auth_info_internal
,0);
15556 lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15558 offset
= lsarpc_dissect_bitmap_lsa_TrustedAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomainEx3_access_mask
, 0);
15564 lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15566 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_trustdom_handle_
, NDR_POINTER_REF
, "Pointer to Trustdom Handle (policy_handle)",hf_lsarpc_lsa_CreateTrustedDomainEx3_trustdom_handle
);
15572 lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15574 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomainEx3_trustdom_handle
, 0);
15579 /* IDL: NTSTATUS lsa_CreateTrustedDomainEx3( */
15580 /* IDL: [in] [ref] policy_handle *policy_handle, */
15581 /* IDL: [in] [ref] lsa_TrustDomainInfoInfoEx *info, */
15582 /* IDL: [in] [ref] lsa_TrustDomainInfoAuthInfoInternalAES *auth_info_internal, */
15583 /* IDL: [in] lsa_TrustedAccessMask access_mask, */
15584 /* IDL: [out] [ref] policy_handle *trustdom_handle */
15588 lsarpc_dissect_lsa_CreateTrustedDomainEx3_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15592 di
->dcerpc_procedure_name
="lsa_CreateTrustedDomainEx3";
15593 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_trustdom_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
15594 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15596 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
15599 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
15605 lsarpc_dissect_lsa_CreateTrustedDomainEx3_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15607 di
->dcerpc_procedure_name
="lsa_CreateTrustedDomainEx3";
15608 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_policy_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
15609 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15610 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
15611 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15612 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_auth_info_internal(tvb
, offset
, pinfo
, tree
, di
, drep
);
15613 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15614 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
15615 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15620 lsarpc_dissect_element_lsa_OpenPolicy3_system_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15622 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy3_system_name_
, NDR_POINTER_UNIQUE
, "Pointer to System Name (uint16)",hf_lsarpc_lsa_OpenPolicy3_system_name
);
15628 lsarpc_dissect_element_lsa_OpenPolicy3_system_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15631 struct ndr_generic_array nga
= { .is_conformant
= false, };
15633 offset
= dissect_ndr_conformant_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
15635 offset
= dissect_ndr_varying_array_hdr(tvb
, offset
, pinfo
, tree
, di
, drep
, &nga
);
15636 offset
= dissect_ndr_generic_array_string(tvb
, offset
, pinfo
, tree
, di
, drep
, sizeof(uint16_t), hf_lsarpc_lsa_OpenPolicy3_system_name
, false, &nga
, &data
);
15637 proto_item_append_text(tree
, ": %s", data
);
15643 lsarpc_dissect_element_lsa_OpenPolicy3_attr(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15645 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy3_attr_
, NDR_POINTER_REF
, "Pointer to Attr (lsa_ObjectAttribute)",hf_lsarpc_lsa_OpenPolicy3_attr
);
15651 lsarpc_dissect_element_lsa_OpenPolicy3_attr_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15653 offset
= lsarpc_dissect_struct_lsa_ObjectAttribute(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_OpenPolicy3_attr
,0);
15659 lsarpc_dissect_element_lsa_OpenPolicy3_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15661 offset
= lsarpc_dissect_bitmap_lsa_PolicyAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy3_access_mask
, 0);
15667 lsarpc_dissect_element_lsa_OpenPolicy3_in_version(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15669 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy3_in_version
, 0);
15675 lsarpc_dissect_element_lsa_OpenPolicy3_in_revision_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15677 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy3_in_revision_info_
, NDR_POINTER_REF
, "Pointer to In Revision Info (lsa_revision_info)",hf_lsarpc_lsa_OpenPolicy3_in_revision_info
);
15683 lsarpc_dissect_element_lsa_OpenPolicy3_in_revision_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15685 offset
= lsarpc_dissect_lsa_revision_info(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy3_in_revision_info
, 0);
15691 lsarpc_dissect_element_lsa_OpenPolicy3_out_version(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15693 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy3_out_version_
, NDR_POINTER_REF
, "Pointer to Out Version (uint32)",hf_lsarpc_lsa_OpenPolicy3_out_version
);
15699 lsarpc_dissect_element_lsa_OpenPolicy3_out_version_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15701 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy3_out_version
, 0);
15707 lsarpc_dissect_element_lsa_OpenPolicy3_out_revision_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15709 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy3_out_revision_info_
, NDR_POINTER_REF
, "Pointer to Out Revision Info (lsa_revision_info)",hf_lsarpc_lsa_OpenPolicy3_out_revision_info
);
15715 lsarpc_dissect_element_lsa_OpenPolicy3_out_revision_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15717 offset
= lsarpc_dissect_lsa_revision_info(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy3_out_revision_info
, 0);
15723 lsarpc_dissect_element_lsa_OpenPolicy3_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15725 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy3_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_OpenPolicy3_handle
);
15731 lsarpc_dissect_element_lsa_OpenPolicy3_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15733 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy3_handle
, 0);
15738 /* IDL: NTSTATUS lsa_OpenPolicy3( */
15739 /* IDL: [charset(UTF16)] [in] [unique(1)] uint16 *system_name, */
15740 /* IDL: [in] [ref] lsa_ObjectAttribute *attr, */
15741 /* IDL: [in] lsa_PolicyAccessMask access_mask, */
15742 /* IDL: [in] uint32 in_version, */
15743 /* IDL: [in] [ref] [switch_is(in_version)] lsa_revision_info *in_revision_info, */
15744 /* IDL: [out] [ref] uint32 *out_version, */
15745 /* IDL: [out] [ref] [switch_is(*out_version)] lsa_revision_info *out_revision_info, */
15746 /* IDL: [out] [ref] policy_handle *handle */
15750 lsarpc_dissect_lsa_OpenPolicy3_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15754 di
->dcerpc_procedure_name
="lsa_OpenPolicy3";
15755 offset
= lsarpc_dissect_element_lsa_OpenPolicy3_out_version(tvb
, offset
, pinfo
, tree
, di
, drep
);
15756 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15758 offset
= lsarpc_dissect_element_lsa_OpenPolicy3_out_revision_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
15759 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15761 offset
= lsarpc_dissect_element_lsa_OpenPolicy3_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
15762 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15764 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
15767 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
15773 lsarpc_dissect_lsa_OpenPolicy3_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15775 di
->dcerpc_procedure_name
="lsa_OpenPolicy3";
15776 offset
= lsarpc_dissect_element_lsa_OpenPolicy3_system_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
15777 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15778 offset
= lsarpc_dissect_element_lsa_OpenPolicy3_attr(tvb
, offset
, pinfo
, tree
, di
, drep
);
15779 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15780 offset
= lsarpc_dissect_element_lsa_OpenPolicy3_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
15781 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15782 offset
= lsarpc_dissect_element_lsa_OpenPolicy3_in_version(tvb
, offset
, pinfo
, tree
, di
, drep
);
15783 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15784 offset
= lsarpc_dissect_element_lsa_OpenPolicy3_in_revision_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
15785 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15789 /* IDL: void lsa_Opnum131NotUsedOnWire( */
15794 lsarpc_dissect_lsa_Opnum131NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15796 di
->dcerpc_procedure_name
="lsa_Opnum131NotUsedOnWire";
15801 lsarpc_dissect_lsa_Opnum131NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15803 di
->dcerpc_procedure_name
="lsa_Opnum131NotUsedOnWire";
15808 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15810 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_handle
);
15816 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15818 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_handle
, 0);
15824 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15826 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name_
, NDR_POINTER_REF
, "Pointer to Trusted Domain Name (lsa_String)",hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name
);
15832 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15834 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name
,0);
15840 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_highest_record_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15842 offset
= lsarpc_dissect_enum_lsa_ForestTrustRecordType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_highest_record_type
, 0);
15848 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_forest_trust_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15850 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_forest_trust_info_
, NDR_POINTER_REF
, "Pointer to Forest Trust Info (lsa_ForestTrustInformation2)",hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_forest_trust_info
);
15856 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_forest_trust_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15858 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_forest_trust_info__
, NDR_POINTER_UNIQUE
, "Pointer to Forest Trust Info (lsa_ForestTrustInformation2)",hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_forest_trust_info
);
15864 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_forest_trust_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15866 offset
= lsarpc_dissect_struct_lsa_ForestTrustInformation2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_forest_trust_info
,0);
15871 /* IDL: NTSTATUS lsa_lsaRQueryForestTrustInformation2( */
15872 /* IDL: [in] [ref] policy_handle *handle, */
15873 /* IDL: [in] [ref] lsa_String *trusted_domain_name, */
15874 /* IDL: [in] lsa_ForestTrustRecordType highest_record_type, */
15875 /* IDL: [out] [ref] lsa_ForestTrustInformation2 **forest_trust_info */
15879 lsarpc_dissect_lsa_lsaRQueryForestTrustInformation2_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15883 di
->dcerpc_procedure_name
="lsa_lsaRQueryForestTrustInformation2";
15884 offset
= lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_forest_trust_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
15885 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15887 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
15890 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
15896 lsarpc_dissect_lsa_lsaRQueryForestTrustInformation2_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15898 di
->dcerpc_procedure_name
="lsa_lsaRQueryForestTrustInformation2";
15899 offset
= lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
15900 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15901 offset
= lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
15902 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15903 offset
= lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_highest_record_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
15904 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15909 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15911 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_lsaRSetForestTrustInformation2_handle
);
15917 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15919 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRSetForestTrustInformation2_handle
, 0);
15925 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_trusted_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15927 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_trusted_domain_name_
, NDR_POINTER_REF
, "Pointer to Trusted Domain Name (lsa_StringLarge)",hf_lsarpc_lsa_lsaRSetForestTrustInformation2_trusted_domain_name
);
15933 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_trusted_domain_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15935 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRSetForestTrustInformation2_trusted_domain_name
,0);
15941 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_highest_record_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15943 offset
= lsarpc_dissect_enum_lsa_ForestTrustRecordType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRSetForestTrustInformation2_highest_record_type
, 0);
15949 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_forest_trust_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15951 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_forest_trust_info_
, NDR_POINTER_REF
, "Pointer to Forest Trust Info (lsa_ForestTrustInformation2)",hf_lsarpc_lsa_lsaRSetForestTrustInformation2_forest_trust_info
);
15957 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_forest_trust_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15959 offset
= lsarpc_dissect_struct_lsa_ForestTrustInformation2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRSetForestTrustInformation2_forest_trust_info
,0);
15965 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_check_only(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15967 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRSetForestTrustInformation2_check_only
, 0);
15973 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_collision_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15975 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_collision_info_
, NDR_POINTER_REF
, "Pointer to Collision Info (lsa_ForestTrustCollisionInfo)",hf_lsarpc_lsa_lsaRSetForestTrustInformation2_collision_info
);
15981 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_collision_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15983 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_collision_info__
, NDR_POINTER_UNIQUE
, "Pointer to Collision Info (lsa_ForestTrustCollisionInfo)",hf_lsarpc_lsa_lsaRSetForestTrustInformation2_collision_info
);
15989 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_collision_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15991 offset
= lsarpc_dissect_struct_lsa_ForestTrustCollisionInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRSetForestTrustInformation2_collision_info
,0);
15996 /* IDL: NTSTATUS lsa_lsaRSetForestTrustInformation2( */
15997 /* IDL: [in] [ref] policy_handle *handle, */
15998 /* IDL: [in] [ref] lsa_StringLarge *trusted_domain_name, */
15999 /* IDL: [in] lsa_ForestTrustRecordType highest_record_type, */
16000 /* IDL: [in] [ref] lsa_ForestTrustInformation2 *forest_trust_info, */
16001 /* IDL: [in] uint8 check_only, */
16002 /* IDL: [out] [ref] lsa_ForestTrustCollisionInfo **collision_info */
16006 lsarpc_dissect_lsa_lsaRSetForestTrustInformation2_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
16010 di
->dcerpc_procedure_name
="lsa_lsaRSetForestTrustInformation2";
16011 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_collision_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
16012 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
16014 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
16017 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
16023 lsarpc_dissect_lsa_lsaRSetForestTrustInformation2_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
16025 di
->dcerpc_procedure_name
="lsa_lsaRSetForestTrustInformation2";
16026 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
16027 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
16028 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_trusted_domain_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
16029 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
16030 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_highest_record_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
16031 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
16032 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_forest_trust_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
16033 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
16034 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_check_only(tvb
, offset
, pinfo
, tree
, di
, drep
);
16035 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
16040 static const dcerpc_sub_dissector lsarpc_dissectors
[] = {
16042 lsarpc_dissect_lsa_Close_request
, lsarpc_dissect_lsa_Close_response
},
16044 lsarpc_dissect_lsa_Delete_request
, lsarpc_dissect_lsa_Delete_response
},
16045 { 2, "lsa_EnumPrivs",
16046 lsarpc_dissect_lsa_EnumPrivs_request
, lsarpc_dissect_lsa_EnumPrivs_response
},
16047 { 3, "lsa_QuerySecurity",
16048 lsarpc_dissect_lsa_QuerySecurity_request
, lsarpc_dissect_lsa_QuerySecurity_response
},
16049 { 4, "lsa_SetSecObj",
16050 lsarpc_dissect_lsa_SetSecObj_request
, lsarpc_dissect_lsa_SetSecObj_response
},
16051 { 5, "lsa_ChangePassword",
16052 lsarpc_dissect_lsa_ChangePassword_request
, lsarpc_dissect_lsa_ChangePassword_response
},
16053 { 6, "lsa_OpenPolicy",
16054 lsarpc_dissect_lsa_OpenPolicy_request
, lsarpc_dissect_lsa_OpenPolicy_response
},
16055 { 7, "lsa_QueryInfoPolicy",
16056 lsarpc_dissect_lsa_QueryInfoPolicy_request
, lsarpc_dissect_lsa_QueryInfoPolicy_response
},
16057 { 8, "lsa_SetInfoPolicy",
16058 lsarpc_dissect_lsa_SetInfoPolicy_request
, lsarpc_dissect_lsa_SetInfoPolicy_response
},
16059 { 9, "lsa_ClearAuditLog",
16060 lsarpc_dissect_lsa_ClearAuditLog_request
, lsarpc_dissect_lsa_ClearAuditLog_response
},
16061 { 10, "lsa_CreateAccount",
16062 lsarpc_dissect_lsa_CreateAccount_request
, lsarpc_dissect_lsa_CreateAccount_response
},
16063 { 11, "lsa_EnumAccounts",
16064 lsarpc_dissect_lsa_EnumAccounts_request
, lsarpc_dissect_lsa_EnumAccounts_response
},
16065 { 12, "lsa_CreateTrustedDomain",
16066 lsarpc_dissect_lsa_CreateTrustedDomain_request
, lsarpc_dissect_lsa_CreateTrustedDomain_response
},
16067 { 13, "lsa_EnumTrustDom",
16068 lsarpc_dissect_lsa_EnumTrustDom_request
, lsarpc_dissect_lsa_EnumTrustDom_response
},
16069 { 14, "lsa_LookupNames",
16070 lsarpc_dissect_lsa_LookupNames_request
, lsarpc_dissect_lsa_LookupNames_response
},
16071 { 15, "lsa_LookupSids",
16072 lsarpc_dissect_lsa_LookupSids_request
, lsarpc_dissect_lsa_LookupSids_response
},
16073 { 16, "lsa_CreateSecret",
16074 lsarpc_dissect_lsa_CreateSecret_request
, lsarpc_dissect_lsa_CreateSecret_response
},
16075 { 17, "lsa_OpenAccount",
16076 lsarpc_dissect_lsa_OpenAccount_request
, lsarpc_dissect_lsa_OpenAccount_response
},
16077 { 18, "lsa_EnumPrivsAccount",
16078 lsarpc_dissect_lsa_EnumPrivsAccount_request
, lsarpc_dissect_lsa_EnumPrivsAccount_response
},
16079 { 19, "lsa_AddPrivilegesToAccount",
16080 lsarpc_dissect_lsa_AddPrivilegesToAccount_request
, lsarpc_dissect_lsa_AddPrivilegesToAccount_response
},
16081 { 20, "lsa_RemovePrivilegesFromAccount",
16082 lsarpc_dissect_lsa_RemovePrivilegesFromAccount_request
, lsarpc_dissect_lsa_RemovePrivilegesFromAccount_response
},
16083 { 21, "lsa_GetQuotasForAccount",
16084 lsarpc_dissect_lsa_GetQuotasForAccount_request
, lsarpc_dissect_lsa_GetQuotasForAccount_response
},
16085 { 22, "lsa_SetQuotasForAccount",
16086 lsarpc_dissect_lsa_SetQuotasForAccount_request
, lsarpc_dissect_lsa_SetQuotasForAccount_response
},
16087 { 23, "lsa_GetSystemAccessAccount",
16088 lsarpc_dissect_lsa_GetSystemAccessAccount_request
, lsarpc_dissect_lsa_GetSystemAccessAccount_response
},
16089 { 24, "lsa_SetSystemAccessAccount",
16090 lsarpc_dissect_lsa_SetSystemAccessAccount_request
, lsarpc_dissect_lsa_SetSystemAccessAccount_response
},
16091 { 25, "lsa_OpenTrustedDomain",
16092 lsarpc_dissect_lsa_OpenTrustedDomain_request
, lsarpc_dissect_lsa_OpenTrustedDomain_response
},
16093 { 26, "lsa_QueryTrustedDomainInfo",
16094 lsarpc_dissect_lsa_QueryTrustedDomainInfo_request
, lsarpc_dissect_lsa_QueryTrustedDomainInfo_response
},
16095 { 27, "lsa_SetInformationTrustedDomain",
16096 lsarpc_dissect_lsa_SetInformationTrustedDomain_request
, lsarpc_dissect_lsa_SetInformationTrustedDomain_response
},
16097 { 28, "lsa_OpenSecret",
16098 lsarpc_dissect_lsa_OpenSecret_request
, lsarpc_dissect_lsa_OpenSecret_response
},
16099 { 29, "lsa_SetSecret",
16100 lsarpc_dissect_lsa_SetSecret_request
, lsarpc_dissect_lsa_SetSecret_response
},
16101 { 30, "lsa_QuerySecret",
16102 lsarpc_dissect_lsa_QuerySecret_request
, lsarpc_dissect_lsa_QuerySecret_response
},
16103 { 31, "lsa_LookupPrivValue",
16104 lsarpc_dissect_lsa_LookupPrivValue_request
, lsarpc_dissect_lsa_LookupPrivValue_response
},
16105 { 32, "lsa_LookupPrivName",
16106 lsarpc_dissect_lsa_LookupPrivName_request
, lsarpc_dissect_lsa_LookupPrivName_response
},
16107 { 33, "lsa_LookupPrivDisplayName",
16108 lsarpc_dissect_lsa_LookupPrivDisplayName_request
, lsarpc_dissect_lsa_LookupPrivDisplayName_response
},
16109 { 34, "lsa_DeleteObject",
16110 lsarpc_dissect_lsa_DeleteObject_request
, lsarpc_dissect_lsa_DeleteObject_response
},
16111 { 35, "lsa_EnumAccountsWithUserRight",
16112 lsarpc_dissect_lsa_EnumAccountsWithUserRight_request
, lsarpc_dissect_lsa_EnumAccountsWithUserRight_response
},
16113 { 36, "lsa_EnumAccountRights",
16114 lsarpc_dissect_lsa_EnumAccountRights_request
, lsarpc_dissect_lsa_EnumAccountRights_response
},
16115 { 37, "lsa_AddAccountRights",
16116 lsarpc_dissect_lsa_AddAccountRights_request
, lsarpc_dissect_lsa_AddAccountRights_response
},
16117 { 38, "lsa_RemoveAccountRights",
16118 lsarpc_dissect_lsa_RemoveAccountRights_request
, lsarpc_dissect_lsa_RemoveAccountRights_response
},
16119 { 39, "lsa_QueryTrustedDomainInfoBySid",
16120 lsarpc_dissect_lsa_QueryTrustedDomainInfoBySid_request
, lsarpc_dissect_lsa_QueryTrustedDomainInfoBySid_response
},
16121 { 40, "lsa_SetTrustedDomainInfo",
16122 lsarpc_dissect_lsa_SetTrustedDomainInfo_request
, lsarpc_dissect_lsa_SetTrustedDomainInfo_response
},
16123 { 41, "lsa_DeleteTrustedDomain",
16124 lsarpc_dissect_lsa_DeleteTrustedDomain_request
, lsarpc_dissect_lsa_DeleteTrustedDomain_response
},
16125 { 42, "lsa_StorePrivateData",
16126 lsarpc_dissect_lsa_StorePrivateData_request
, lsarpc_dissect_lsa_StorePrivateData_response
},
16127 { 43, "lsa_RetrievePrivateData",
16128 lsarpc_dissect_lsa_RetrievePrivateData_request
, lsarpc_dissect_lsa_RetrievePrivateData_response
},
16129 { 44, "lsa_OpenPolicy2",
16130 lsarpc_dissect_lsa_OpenPolicy2_request
, lsarpc_dissect_lsa_OpenPolicy2_response
},
16131 { 45, "lsa_GetUserName",
16132 lsarpc_dissect_lsa_GetUserName_request
, lsarpc_dissect_lsa_GetUserName_response
},
16133 { 46, "lsa_QueryInfoPolicy2",
16134 lsarpc_dissect_lsa_QueryInfoPolicy2_request
, lsarpc_dissect_lsa_QueryInfoPolicy2_response
},
16135 { 47, "lsa_SetInfoPolicy2",
16136 lsarpc_dissect_lsa_SetInfoPolicy2_request
, lsarpc_dissect_lsa_SetInfoPolicy2_response
},
16137 { 48, "lsa_QueryTrustedDomainInfoByName",
16138 lsarpc_dissect_lsa_QueryTrustedDomainInfoByName_request
, lsarpc_dissect_lsa_QueryTrustedDomainInfoByName_response
},
16139 { 49, "lsa_SetTrustedDomainInfoByName",
16140 lsarpc_dissect_lsa_SetTrustedDomainInfoByName_request
, lsarpc_dissect_lsa_SetTrustedDomainInfoByName_response
},
16141 { 50, "lsa_EnumTrustedDomainsEx",
16142 lsarpc_dissect_lsa_EnumTrustedDomainsEx_request
, lsarpc_dissect_lsa_EnumTrustedDomainsEx_response
},
16143 { 51, "lsa_CreateTrustedDomainEx",
16144 lsarpc_dissect_lsa_CreateTrustedDomainEx_request
, lsarpc_dissect_lsa_CreateTrustedDomainEx_response
},
16145 { 52, "lsa_CloseTrustedDomainEx",
16146 lsarpc_dissect_lsa_CloseTrustedDomainEx_request
, lsarpc_dissect_lsa_CloseTrustedDomainEx_response
},
16147 { 53, "lsa_QueryDomainInformationPolicy",
16148 lsarpc_dissect_lsa_QueryDomainInformationPolicy_request
, lsarpc_dissect_lsa_QueryDomainInformationPolicy_response
},
16149 { 54, "lsa_SetDomainInformationPolicy",
16150 lsarpc_dissect_lsa_SetDomainInformationPolicy_request
, lsarpc_dissect_lsa_SetDomainInformationPolicy_response
},
16151 { 55, "lsa_OpenTrustedDomainByName",
16152 lsarpc_dissect_lsa_OpenTrustedDomainByName_request
, lsarpc_dissect_lsa_OpenTrustedDomainByName_response
},
16153 { 56, "lsa_TestCall",
16154 lsarpc_dissect_lsa_TestCall_request
, lsarpc_dissect_lsa_TestCall_response
},
16155 { 57, "lsa_LookupSids2",
16156 lsarpc_dissect_lsa_LookupSids2_request
, lsarpc_dissect_lsa_LookupSids2_response
},
16157 { 58, "lsa_LookupNames2",
16158 lsarpc_dissect_lsa_LookupNames2_request
, lsarpc_dissect_lsa_LookupNames2_response
},
16159 { 59, "lsa_CreateTrustedDomainEx2",
16160 lsarpc_dissect_lsa_CreateTrustedDomainEx2_request
, lsarpc_dissect_lsa_CreateTrustedDomainEx2_response
},
16161 { 60, "lsa_CREDRWRITE",
16162 lsarpc_dissect_lsa_CREDRWRITE_request
, lsarpc_dissect_lsa_CREDRWRITE_response
},
16163 { 61, "lsa_CREDRREAD",
16164 lsarpc_dissect_lsa_CREDRREAD_request
, lsarpc_dissect_lsa_CREDRREAD_response
},
16165 { 62, "lsa_CREDRENUMERATE",
16166 lsarpc_dissect_lsa_CREDRENUMERATE_request
, lsarpc_dissect_lsa_CREDRENUMERATE_response
},
16167 { 63, "lsa_CREDRWRITEDOMAINCREDENTIALS",
16168 lsarpc_dissect_lsa_CREDRWRITEDOMAINCREDENTIALS_request
, lsarpc_dissect_lsa_CREDRWRITEDOMAINCREDENTIALS_response
},
16169 { 64, "lsa_CREDRREADDOMAINCREDENTIALS",
16170 lsarpc_dissect_lsa_CREDRREADDOMAINCREDENTIALS_request
, lsarpc_dissect_lsa_CREDRREADDOMAINCREDENTIALS_response
},
16171 { 65, "lsa_CREDRDELETE",
16172 lsarpc_dissect_lsa_CREDRDELETE_request
, lsarpc_dissect_lsa_CREDRDELETE_response
},
16173 { 66, "lsa_CREDRGETTARGETINFO",
16174 lsarpc_dissect_lsa_CREDRGETTARGETINFO_request
, lsarpc_dissect_lsa_CREDRGETTARGETINFO_response
},
16175 { 67, "lsa_CREDRPROFILELOADED",
16176 lsarpc_dissect_lsa_CREDRPROFILELOADED_request
, lsarpc_dissect_lsa_CREDRPROFILELOADED_response
},
16177 { 68, "lsa_LookupNames3",
16178 lsarpc_dissect_lsa_LookupNames3_request
, lsarpc_dissect_lsa_LookupNames3_response
},
16179 { 69, "lsa_CREDRGETSESSIONTYPES",
16180 lsarpc_dissect_lsa_CREDRGETSESSIONTYPES_request
, lsarpc_dissect_lsa_CREDRGETSESSIONTYPES_response
},
16181 { 70, "lsa_LSARREGISTERAUDITEVENT",
16182 lsarpc_dissect_lsa_LSARREGISTERAUDITEVENT_request
, lsarpc_dissect_lsa_LSARREGISTERAUDITEVENT_response
},
16183 { 71, "lsa_LSARGENAUDITEVENT",
16184 lsarpc_dissect_lsa_LSARGENAUDITEVENT_request
, lsarpc_dissect_lsa_LSARGENAUDITEVENT_response
},
16185 { 72, "lsa_LSARUNREGISTERAUDITEVENT",
16186 lsarpc_dissect_lsa_LSARUNREGISTERAUDITEVENT_request
, lsarpc_dissect_lsa_LSARUNREGISTERAUDITEVENT_response
},
16187 { 73, "lsa_lsaRQueryForestTrustInformation",
16188 lsarpc_dissect_lsa_lsaRQueryForestTrustInformation_request
, lsarpc_dissect_lsa_lsaRQueryForestTrustInformation_response
},
16189 { 74, "lsa_lsaRSetForestTrustInformation",
16190 lsarpc_dissect_lsa_lsaRSetForestTrustInformation_request
, lsarpc_dissect_lsa_lsaRSetForestTrustInformation_response
},
16191 { 75, "lsa_CREDRRENAME",
16192 lsarpc_dissect_lsa_CREDRRENAME_request
, lsarpc_dissect_lsa_CREDRRENAME_response
},
16193 { 76, "lsa_LookupSids3",
16194 lsarpc_dissect_lsa_LookupSids3_request
, lsarpc_dissect_lsa_LookupSids3_response
},
16195 { 77, "lsa_LookupNames4",
16196 lsarpc_dissect_lsa_LookupNames4_request
, lsarpc_dissect_lsa_LookupNames4_response
},
16197 { 78, "lsa_LSAROPENPOLICYSCE",
16198 lsarpc_dissect_lsa_LSAROPENPOLICYSCE_request
, lsarpc_dissect_lsa_LSAROPENPOLICYSCE_response
},
16199 { 79, "lsa_LSARADTREGISTERSECURITYEVENTSOURCE",
16200 lsarpc_dissect_lsa_LSARADTREGISTERSECURITYEVENTSOURCE_request
, lsarpc_dissect_lsa_LSARADTREGISTERSECURITYEVENTSOURCE_response
},
16201 { 80, "lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE",
16202 lsarpc_dissect_lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE_request
, lsarpc_dissect_lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE_response
},
16203 { 81, "lsa_LSARADTREPORTSECURITYEVENT",
16204 lsarpc_dissect_lsa_LSARADTREPORTSECURITYEVENT_request
, lsarpc_dissect_lsa_LSARADTREPORTSECURITYEVENT_response
},
16205 { 82, "lsa_Opnum82NotUsedOnWire",
16206 lsarpc_dissect_lsa_Opnum82NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum82NotUsedOnWire_response
},
16207 { 83, "lsa_Opnum83NotUsedOnWire",
16208 lsarpc_dissect_lsa_Opnum83NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum83NotUsedOnWire_response
},
16209 { 84, "lsa_Opnum84NotUsedOnWire",
16210 lsarpc_dissect_lsa_Opnum84NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum84NotUsedOnWire_response
},
16211 { 85, "lsa_Opnum85NotUsedOnWire",
16212 lsarpc_dissect_lsa_Opnum85NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum85NotUsedOnWire_response
},
16213 { 86, "lsa_Opnum86NotUsedOnWire",
16214 lsarpc_dissect_lsa_Opnum86NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum86NotUsedOnWire_response
},
16215 { 87, "lsa_Opnum87NotUsedOnWire",
16216 lsarpc_dissect_lsa_Opnum87NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum87NotUsedOnWire_response
},
16217 { 88, "lsa_Opnum88NotUsedOnWire",
16218 lsarpc_dissect_lsa_Opnum88NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum88NotUsedOnWire_response
},
16219 { 89, "lsa_Opnum89NotUsedOnWire",
16220 lsarpc_dissect_lsa_Opnum89NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum89NotUsedOnWire_response
},
16221 { 90, "lsa_Opnum90NotUsedOnWire",
16222 lsarpc_dissect_lsa_Opnum90NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum90NotUsedOnWire_response
},
16223 { 91, "lsa_Opnum91NotUsedOnWire",
16224 lsarpc_dissect_lsa_Opnum91NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum91NotUsedOnWire_response
},
16225 { 92, "lsa_Opnum92NotUsedOnWire",
16226 lsarpc_dissect_lsa_Opnum92NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum92NotUsedOnWire_response
},
16227 { 93, "lsa_Opnum93NotUsedOnWire",
16228 lsarpc_dissect_lsa_Opnum93NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum93NotUsedOnWire_response
},
16229 { 94, "lsa_Opnum94NotUsedOnWire",
16230 lsarpc_dissect_lsa_Opnum94NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum94NotUsedOnWire_response
},
16231 { 95, "lsa_Opnum95NotUsedOnWire",
16232 lsarpc_dissect_lsa_Opnum95NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum95NotUsedOnWire_response
},
16233 { 96, "lsa_Opnum96NotUsedOnWire",
16234 lsarpc_dissect_lsa_Opnum96NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum96NotUsedOnWire_response
},
16235 { 97, "lsa_Opnum97NotUsedOnWire",
16236 lsarpc_dissect_lsa_Opnum97NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum97NotUsedOnWire_response
},
16237 { 98, "lsa_Opnum98NotUsedOnWire",
16238 lsarpc_dissect_lsa_Opnum98NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum98NotUsedOnWire_response
},
16239 { 99, "lsa_Opnum99NotUsedOnWire",
16240 lsarpc_dissect_lsa_Opnum99NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum99NotUsedOnWire_response
},
16241 { 100, "lsa_Opnum100NotUsedOnWire",
16242 lsarpc_dissect_lsa_Opnum100NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum100NotUsedOnWire_response
},
16243 { 101, "lsa_Opnum101NotUsedOnWire",
16244 lsarpc_dissect_lsa_Opnum101NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum101NotUsedOnWire_response
},
16245 { 102, "lsa_Opnum102NotUsedOnWire",
16246 lsarpc_dissect_lsa_Opnum102NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum102NotUsedOnWire_response
},
16247 { 103, "lsa_Opnum103NotUsedOnWire",
16248 lsarpc_dissect_lsa_Opnum103NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum103NotUsedOnWire_response
},
16249 { 104, "lsa_Opnum104NotUsedOnWire",
16250 lsarpc_dissect_lsa_Opnum104NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum104NotUsedOnWire_response
},
16251 { 105, "lsa_Opnum105NotUsedOnWire",
16252 lsarpc_dissect_lsa_Opnum105NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum105NotUsedOnWire_response
},
16253 { 106, "lsa_Opnum106NotUsedOnWire",
16254 lsarpc_dissect_lsa_Opnum106NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum106NotUsedOnWire_response
},
16255 { 107, "lsa_Opnum107NotUsedOnWire",
16256 lsarpc_dissect_lsa_Opnum107NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum107NotUsedOnWire_response
},
16257 { 108, "lsa_Opnum108NotUsedOnWire",
16258 lsarpc_dissect_lsa_Opnum108NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum108NotUsedOnWire_response
},
16259 { 109, "lsa_Opnum109NotUsedOnWire",
16260 lsarpc_dissect_lsa_Opnum109NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum109NotUsedOnWire_response
},
16261 { 110, "lsa_Opnum110NotUsedOnWire",
16262 lsarpc_dissect_lsa_Opnum110NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum110NotUsedOnWire_response
},
16263 { 111, "lsa_Opnum111NotUsedOnWire",
16264 lsarpc_dissect_lsa_Opnum111NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum111NotUsedOnWire_response
},
16265 { 112, "lsa_Opnum112NotUsedOnWire",
16266 lsarpc_dissect_lsa_Opnum112NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum112NotUsedOnWire_response
},
16267 { 113, "lsa_Opnum113NotUsedOnWire",
16268 lsarpc_dissect_lsa_Opnum113NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum113NotUsedOnWire_response
},
16269 { 114, "lsa_Opnum114NotUsedOnWire",
16270 lsarpc_dissect_lsa_Opnum114NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum114NotUsedOnWire_response
},
16271 { 115, "lsa_Opnum115NotUsedOnWire",
16272 lsarpc_dissect_lsa_Opnum115NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum115NotUsedOnWire_response
},
16273 { 116, "lsa_Opnum116NotUsedOnWire",
16274 lsarpc_dissect_lsa_Opnum116NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum116NotUsedOnWire_response
},
16275 { 117, "lsa_Opnum117NotUsedOnWire",
16276 lsarpc_dissect_lsa_Opnum117NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum117NotUsedOnWire_response
},
16277 { 118, "lsa_Opnum118NotUsedOnWire",
16278 lsarpc_dissect_lsa_Opnum118NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum118NotUsedOnWire_response
},
16279 { 119, "lsa_Opnum119NotUsedOnWire",
16280 lsarpc_dissect_lsa_Opnum119NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum119NotUsedOnWire_response
},
16281 { 120, "lsa_Opnum120NotUsedOnWire",
16282 lsarpc_dissect_lsa_Opnum120NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum120NotUsedOnWire_response
},
16283 { 121, "lsa_Opnum121NotUsedOnWire",
16284 lsarpc_dissect_lsa_Opnum121NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum121NotUsedOnWire_response
},
16285 { 122, "lsa_Opnum122NotUsedOnWire",
16286 lsarpc_dissect_lsa_Opnum122NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum122NotUsedOnWire_response
},
16287 { 123, "lsa_Opnum123NotUsedOnWire",
16288 lsarpc_dissect_lsa_Opnum123NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum123NotUsedOnWire_response
},
16289 { 124, "lsa_Opnum124NotUsedOnWire",
16290 lsarpc_dissect_lsa_Opnum124NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum124NotUsedOnWire_response
},
16291 { 125, "lsa_Opnum125NotUsedOnWire",
16292 lsarpc_dissect_lsa_Opnum125NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum125NotUsedOnWire_response
},
16293 { 126, "lsa_Opnum126NotUsedOnWire",
16294 lsarpc_dissect_lsa_Opnum126NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum126NotUsedOnWire_response
},
16295 { 127, "lsa_Opnum127NotUsedOnWire",
16296 lsarpc_dissect_lsa_Opnum127NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum127NotUsedOnWire_response
},
16297 { 128, "lsa_Opnum128NotUsedOnWire",
16298 lsarpc_dissect_lsa_Opnum128NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum128NotUsedOnWire_response
},
16299 { 129, "lsa_CreateTrustedDomainEx3",
16300 lsarpc_dissect_lsa_CreateTrustedDomainEx3_request
, lsarpc_dissect_lsa_CreateTrustedDomainEx3_response
},
16301 { 130, "lsa_OpenPolicy3",
16302 lsarpc_dissect_lsa_OpenPolicy3_request
, lsarpc_dissect_lsa_OpenPolicy3_response
},
16303 { 131, "lsa_Opnum131NotUsedOnWire",
16304 lsarpc_dissect_lsa_Opnum131NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum131NotUsedOnWire_response
},
16305 { 132, "lsa_lsaRQueryForestTrustInformation2",
16306 lsarpc_dissect_lsa_lsaRQueryForestTrustInformation2_request
, lsarpc_dissect_lsa_lsaRQueryForestTrustInformation2_response
},
16307 { 133, "lsa_lsaRSetForestTrustInformation2",
16308 lsarpc_dissect_lsa_lsaRSetForestTrustInformation2_request
, lsarpc_dissect_lsa_lsaRSetForestTrustInformation2_response
},
16309 { 0, NULL
, NULL
, NULL
}
16312 void proto_register_dcerpc_lsarpc(void)
16314 static hf_register_info hf
[] = {
16315 { &hf_lsarpc_String_name
,
16316 { "String", "lsarpc.lsa.string", FT_STRING
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16317 { &hf_lsarpc_account_access_mask
,
16318 { "Access Mask", "lsarpc.policy.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16319 { &hf_lsarpc_domain_access_mask
,
16320 { "Access Mask", "lsarpc.policy.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16321 { &hf_lsarpc_efs_blob_len
,
16322 { "EFS blob size", "lsarpc.efs.blob_size", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16323 { &hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_PRIVILEGES
,
16324 { "LSA ACCOUNT ADJUST PRIVILEGES", "lsarpc.lsa_AccountAccessMask.LSA_ACCOUNT_ADJUST_PRIVILEGES", FT_BOOLEAN
, 32, TFS(&lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_PRIVILEGES_tfs
), ( 0x00000002 ), NULL
, HFILL
}},
16325 { &hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_QUOTAS
,
16326 { "LSA ACCOUNT ADJUST QUOTAS", "lsarpc.lsa_AccountAccessMask.LSA_ACCOUNT_ADJUST_QUOTAS", FT_BOOLEAN
, 32, TFS(&lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_QUOTAS_tfs
), ( 0x00000004 ), NULL
, HFILL
}},
16327 { &hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS
,
16328 { "LSA ACCOUNT ADJUST SYSTEM ACCESS", "lsarpc.lsa_AccountAccessMask.LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS", FT_BOOLEAN
, 32, TFS(&lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS_tfs
), ( 0x00000008 ), NULL
, HFILL
}},
16329 { &hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_VIEW
,
16330 { "LSA ACCOUNT VIEW", "lsarpc.lsa_AccountAccessMask.LSA_ACCOUNT_VIEW", FT_BOOLEAN
, 32, TFS(&lsa_AccountAccessMask_LSA_ACCOUNT_VIEW_tfs
), ( 0x00000001 ), NULL
, HFILL
}},
16331 { &hf_lsarpc_lsa_AddAccountRights_handle
,
16332 { "Handle", "lsarpc.lsa_AddAccountRights.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16333 { &hf_lsarpc_lsa_AddAccountRights_rights
,
16334 { "Rights", "lsarpc.lsa_AddAccountRights.rights", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16335 { &hf_lsarpc_lsa_AddAccountRights_sid
,
16336 { "Sid", "lsarpc.lsa_AddAccountRights.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16337 { &hf_lsarpc_lsa_AddPrivilegesToAccount_handle
,
16338 { "Handle", "lsarpc.lsa_AddPrivilegesToAccount.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16339 { &hf_lsarpc_lsa_AddPrivilegesToAccount_privs
,
16340 { "Privs", "lsarpc.lsa_AddPrivilegesToAccount.privs", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16341 { &hf_lsarpc_lsa_AsciiStringLarge_length
,
16342 { "Length", "lsarpc.lsa_AsciiStringLarge.length", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16343 { &hf_lsarpc_lsa_AsciiStringLarge_size
,
16344 { "Size", "lsarpc.lsa_AsciiStringLarge.size", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16345 { &hf_lsarpc_lsa_AsciiStringLarge_string
,
16346 { "String", "lsarpc.lsa_AsciiStringLarge.string", FT_STRING
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16347 { &hf_lsarpc_lsa_AsciiString_length
,
16348 { "Length", "lsarpc.lsa_AsciiString.length", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16349 { &hf_lsarpc_lsa_AsciiString_size
,
16350 { "Size", "lsarpc.lsa_AsciiString.size", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16351 { &hf_lsarpc_lsa_AsciiString_string
,
16352 { "String", "lsarpc.lsa_AsciiString.string", FT_STRING
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16353 { &hf_lsarpc_lsa_AuditEventsInfo_auditing_mode
,
16354 { "Auditing Mode", "lsarpc.lsa_AuditEventsInfo.auditing_mode", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16355 { &hf_lsarpc_lsa_AuditEventsInfo_count
,
16356 { "Count", "lsarpc.lsa_AuditEventsInfo.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16357 { &hf_lsarpc_lsa_AuditEventsInfo_settings
,
16358 { "Settings", "lsarpc.lsa_AuditEventsInfo.settings", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_PolicyAuditPolicy_vals
), 0, NULL
, HFILL
}},
16359 { &hf_lsarpc_lsa_AuditFullQueryInfo_log_is_full
,
16360 { "Log Is Full", "lsarpc.lsa_AuditFullQueryInfo.log_is_full", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16361 { &hf_lsarpc_lsa_AuditFullQueryInfo_shutdown_on_full
,
16362 { "Shutdown On Full", "lsarpc.lsa_AuditFullQueryInfo.shutdown_on_full", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16363 { &hf_lsarpc_lsa_AuditFullSetInfo_shutdown_on_full
,
16364 { "Shutdown On Full", "lsarpc.lsa_AuditFullSetInfo.shutdown_on_full", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16365 { &hf_lsarpc_lsa_AuditLogInfo_maximum_log_size
,
16366 { "Maximum Log Size", "lsarpc.lsa_AuditLogInfo.maximum_log_size", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16367 { &hf_lsarpc_lsa_AuditLogInfo_next_audit_record
,
16368 { "Next Audit Record", "lsarpc.lsa_AuditLogInfo.next_audit_record", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16369 { &hf_lsarpc_lsa_AuditLogInfo_percent_full
,
16370 { "Percent Full", "lsarpc.lsa_AuditLogInfo.percent_full", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16371 { &hf_lsarpc_lsa_AuditLogInfo_retention_time
,
16372 { "Retention Time", "lsarpc.lsa_AuditLogInfo.retention_time", FT_UINT64
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16373 { &hf_lsarpc_lsa_AuditLogInfo_shutdown_in_progress
,
16374 { "Shutdown In Progress", "lsarpc.lsa_AuditLogInfo.shutdown_in_progress", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16375 { &hf_lsarpc_lsa_AuditLogInfo_time_to_shutdown
,
16376 { "Time To Shutdown", "lsarpc.lsa_AuditLogInfo.time_to_shutdown", FT_UINT64
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16377 { &hf_lsarpc_lsa_BinaryString_array
,
16378 { "Array", "lsarpc.lsa_BinaryString.array", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16379 { &hf_lsarpc_lsa_BinaryString_length
,
16380 { "Length", "lsarpc.lsa_BinaryString.length", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16381 { &hf_lsarpc_lsa_BinaryString_size
,
16382 { "Size", "lsarpc.lsa_BinaryString.size", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16383 { &hf_lsarpc_lsa_CloseTrustedDomainEx_handle
,
16384 { "Handle", "lsarpc.lsa_CloseTrustedDomainEx.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16385 { &hf_lsarpc_lsa_Close_handle
,
16386 { "Handle", "lsarpc.lsa_Close.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16387 { &hf_lsarpc_lsa_CreateAccount_access_mask
,
16388 { "Access Mask", "lsarpc.lsa_CreateAccount.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16389 { &hf_lsarpc_lsa_CreateAccount_acct_handle
,
16390 { "Acct Handle", "lsarpc.lsa_CreateAccount.acct_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16391 { &hf_lsarpc_lsa_CreateAccount_handle
,
16392 { "Handle", "lsarpc.lsa_CreateAccount.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16393 { &hf_lsarpc_lsa_CreateAccount_sid
,
16394 { "Sid", "lsarpc.lsa_CreateAccount.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16395 { &hf_lsarpc_lsa_CreateSecret_access_mask
,
16396 { "Access Mask", "lsarpc.lsa_CreateSecret.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16397 { &hf_lsarpc_lsa_CreateSecret_handle
,
16398 { "Handle", "lsarpc.lsa_CreateSecret.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16399 { &hf_lsarpc_lsa_CreateSecret_name
,
16400 { "Name", "lsarpc.lsa_CreateSecret.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16401 { &hf_lsarpc_lsa_CreateSecret_sec_handle
,
16402 { "Sec Handle", "lsarpc.lsa_CreateSecret.sec_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16403 { &hf_lsarpc_lsa_CreateTrustedDomainEx2_access_mask
,
16404 { "Access Mask", "lsarpc.lsa_CreateTrustedDomainEx2.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16405 { &hf_lsarpc_lsa_CreateTrustedDomainEx2_auth_info_internal
,
16406 { "Auth Info Internal", "lsarpc.lsa_CreateTrustedDomainEx2.auth_info_internal", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16407 { &hf_lsarpc_lsa_CreateTrustedDomainEx2_info
,
16408 { "Info", "lsarpc.lsa_CreateTrustedDomainEx2.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16409 { &hf_lsarpc_lsa_CreateTrustedDomainEx2_policy_handle
,
16410 { "Policy Handle", "lsarpc.lsa_CreateTrustedDomainEx2.policy_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16411 { &hf_lsarpc_lsa_CreateTrustedDomainEx2_trustdom_handle
,
16412 { "Trustdom Handle", "lsarpc.lsa_CreateTrustedDomainEx2.trustdom_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16413 { &hf_lsarpc_lsa_CreateTrustedDomainEx3_access_mask
,
16414 { "Access Mask", "lsarpc.lsa_CreateTrustedDomainEx3.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16415 { &hf_lsarpc_lsa_CreateTrustedDomainEx3_auth_info_internal
,
16416 { "Auth Info Internal", "lsarpc.lsa_CreateTrustedDomainEx3.auth_info_internal", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16417 { &hf_lsarpc_lsa_CreateTrustedDomainEx3_info
,
16418 { "Info", "lsarpc.lsa_CreateTrustedDomainEx3.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16419 { &hf_lsarpc_lsa_CreateTrustedDomainEx3_policy_handle
,
16420 { "Policy Handle", "lsarpc.lsa_CreateTrustedDomainEx3.policy_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16421 { &hf_lsarpc_lsa_CreateTrustedDomainEx3_trustdom_handle
,
16422 { "Trustdom Handle", "lsarpc.lsa_CreateTrustedDomainEx3.trustdom_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16423 { &hf_lsarpc_lsa_CreateTrustedDomainEx_access_mask
,
16424 { "Access Mask", "lsarpc.lsa_CreateTrustedDomainEx.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16425 { &hf_lsarpc_lsa_CreateTrustedDomainEx_auth_info
,
16426 { "Auth Info", "lsarpc.lsa_CreateTrustedDomainEx.auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16427 { &hf_lsarpc_lsa_CreateTrustedDomainEx_info
,
16428 { "Info", "lsarpc.lsa_CreateTrustedDomainEx.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16429 { &hf_lsarpc_lsa_CreateTrustedDomainEx_policy_handle
,
16430 { "Policy Handle", "lsarpc.lsa_CreateTrustedDomainEx.policy_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16431 { &hf_lsarpc_lsa_CreateTrustedDomainEx_trustdom_handle
,
16432 { "Trustdom Handle", "lsarpc.lsa_CreateTrustedDomainEx.trustdom_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16433 { &hf_lsarpc_lsa_CreateTrustedDomain_access_mask
,
16434 { "Access Mask", "lsarpc.lsa_CreateTrustedDomain.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16435 { &hf_lsarpc_lsa_CreateTrustedDomain_info
,
16436 { "Info", "lsarpc.lsa_CreateTrustedDomain.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16437 { &hf_lsarpc_lsa_CreateTrustedDomain_policy_handle
,
16438 { "Policy Handle", "lsarpc.lsa_CreateTrustedDomain.policy_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16439 { &hf_lsarpc_lsa_CreateTrustedDomain_trustdom_handle
,
16440 { "Trustdom Handle", "lsarpc.lsa_CreateTrustedDomain.trustdom_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16441 { &hf_lsarpc_lsa_DATA_BUF2_data
,
16442 { "Data", "lsarpc.lsa_DATA_BUF2.data", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16443 { &hf_lsarpc_lsa_DATA_BUF2_size
,
16444 { "Size", "lsarpc.lsa_DATA_BUF2.size", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16445 { &hf_lsarpc_lsa_DATA_BUF_PTR_buf
,
16446 { "Buf", "lsarpc.lsa_DATA_BUF_PTR.buf", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16447 { &hf_lsarpc_lsa_DATA_BUF_data
,
16448 { "Data", "lsarpc.lsa_DATA_BUF.data", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16449 { &hf_lsarpc_lsa_DATA_BUF_length
,
16450 { "Length", "lsarpc.lsa_DATA_BUF.length", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16451 { &hf_lsarpc_lsa_DATA_BUF_size
,
16452 { "Size", "lsarpc.lsa_DATA_BUF.size", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16453 { &hf_lsarpc_lsa_DefaultQuotaInfo_max_wss
,
16454 { "Max Wss", "lsarpc.lsa_DefaultQuotaInfo.max_wss", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16455 { &hf_lsarpc_lsa_DefaultQuotaInfo_min_wss
,
16456 { "Min Wss", "lsarpc.lsa_DefaultQuotaInfo.min_wss", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16457 { &hf_lsarpc_lsa_DefaultQuotaInfo_non_paged_pool
,
16458 { "Non Paged Pool", "lsarpc.lsa_DefaultQuotaInfo.non_paged_pool", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16459 { &hf_lsarpc_lsa_DefaultQuotaInfo_paged_pool
,
16460 { "Paged Pool", "lsarpc.lsa_DefaultQuotaInfo.paged_pool", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16461 { &hf_lsarpc_lsa_DefaultQuotaInfo_pagefile
,
16462 { "Pagefile", "lsarpc.lsa_DefaultQuotaInfo.pagefile", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16463 { &hf_lsarpc_lsa_DefaultQuotaInfo_unknown
,
16464 { "Unknown", "lsarpc.lsa_DefaultQuotaInfo.unknown", FT_UINT64
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16465 { &hf_lsarpc_lsa_DeleteObject_handle
,
16466 { "Handle", "lsarpc.lsa_DeleteObject.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16467 { &hf_lsarpc_lsa_DeleteTrustedDomain_dom_sid
,
16468 { "Dom Sid", "lsarpc.lsa_DeleteTrustedDomain.dom_sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16469 { &hf_lsarpc_lsa_DeleteTrustedDomain_handle
,
16470 { "Handle", "lsarpc.lsa_DeleteTrustedDomain.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16471 { &hf_lsarpc_lsa_Delete_handle
,
16472 { "Handle", "lsarpc.lsa_Delete.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16473 { &hf_lsarpc_lsa_DnsDomainInfo_dns_domain
,
16474 { "Dns Domain", "lsarpc.lsa_DnsDomainInfo.dns_domain", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16475 { &hf_lsarpc_lsa_DnsDomainInfo_dns_forest
,
16476 { "Dns Forest", "lsarpc.lsa_DnsDomainInfo.dns_forest", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16477 { &hf_lsarpc_lsa_DnsDomainInfo_domain_guid
,
16478 { "Domain Guid", "lsarpc.lsa_DnsDomainInfo.domain_guid", FT_GUID
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16479 { &hf_lsarpc_lsa_DnsDomainInfo_name
,
16480 { "Name", "lsarpc.lsa_DnsDomainInfo.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16481 { &hf_lsarpc_lsa_DnsDomainInfo_sid
,
16482 { "Sid", "lsarpc.lsa_DnsDomainInfo.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16483 { &hf_lsarpc_lsa_DomainInfoEfs_blob_size
,
16484 { "Blob Size", "lsarpc.lsa_DomainInfoEfs.blob_size", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16485 { &hf_lsarpc_lsa_DomainInfoEfs_efs_blob
,
16486 { "Efs Blob", "lsarpc.lsa_DomainInfoEfs.efs_blob", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16487 { &hf_lsarpc_lsa_DomainInfoKerberos_authentication_options
,
16488 { "Authentication Options", "lsarpc.lsa_DomainInfoKerberos.authentication_options", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16489 { &hf_lsarpc_lsa_DomainInfoKerberos_clock_skew
,
16490 { "Clock Skew", "lsarpc.lsa_DomainInfoKerberos.clock_skew", FT_UINT64
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16491 { &hf_lsarpc_lsa_DomainInfoKerberos_reserved
,
16492 { "Reserved", "lsarpc.lsa_DomainInfoKerberos.reserved", FT_UINT64
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16493 { &hf_lsarpc_lsa_DomainInfoKerberos_service_tkt_lifetime
,
16494 { "Service Tkt Lifetime", "lsarpc.lsa_DomainInfoKerberos.service_tkt_lifetime", FT_UINT64
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16495 { &hf_lsarpc_lsa_DomainInfoKerberos_user_tkt_lifetime
,
16496 { "User Tkt Lifetime", "lsarpc.lsa_DomainInfoKerberos.user_tkt_lifetime", FT_UINT64
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16497 { &hf_lsarpc_lsa_DomainInfoKerberos_user_tkt_renewaltime
,
16498 { "User Tkt Renewaltime", "lsarpc.lsa_DomainInfoKerberos.user_tkt_renewaltime", FT_UINT64
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16499 { &hf_lsarpc_lsa_DomainInfoQoS_quality_of_service
,
16500 { "Quality Of Service", "lsarpc.lsa_DomainInfoQoS.quality_of_service", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16501 { &hf_lsarpc_lsa_DomainInfo_name
,
16502 { "Name", "lsarpc.lsa_DomainInfo.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16503 { &hf_lsarpc_lsa_DomainInfo_sid
,
16504 { "Sid", "lsarpc.lsa_DomainInfo.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16505 { &hf_lsarpc_lsa_DomainInformationPolicy_efs_info
,
16506 { "Efs Info", "lsarpc.lsa_DomainInformationPolicy.efs_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16507 { &hf_lsarpc_lsa_DomainInformationPolicy_kerberos_info
,
16508 { "Kerberos Info", "lsarpc.lsa_DomainInformationPolicy.kerberos_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16509 { &hf_lsarpc_lsa_DomainInformationPolicy_qos_info
,
16510 { "Qos Info", "lsarpc.lsa_DomainInformationPolicy.qos_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16511 { &hf_lsarpc_lsa_DomainListEx_count
,
16512 { "Count", "lsarpc.lsa_DomainListEx.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16513 { &hf_lsarpc_lsa_DomainListEx_domains
,
16514 { "Domains", "lsarpc.lsa_DomainListEx.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16515 { &hf_lsarpc_lsa_DomainList_count
,
16516 { "Count", "lsarpc.lsa_DomainList.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16517 { &hf_lsarpc_lsa_DomainList_domains
,
16518 { "Domains", "lsarpc.lsa_DomainList.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16519 { &hf_lsarpc_lsa_EnumAccountRights_handle
,
16520 { "Handle", "lsarpc.lsa_EnumAccountRights.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16521 { &hf_lsarpc_lsa_EnumAccountRights_rights
,
16522 { "Rights", "lsarpc.lsa_EnumAccountRights.rights", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16523 { &hf_lsarpc_lsa_EnumAccountRights_sid
,
16524 { "Sid", "lsarpc.lsa_EnumAccountRights.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16525 { &hf_lsarpc_lsa_EnumAccountsWithUserRight_handle
,
16526 { "Handle", "lsarpc.lsa_EnumAccountsWithUserRight.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16527 { &hf_lsarpc_lsa_EnumAccountsWithUserRight_name
,
16528 { "Name", "lsarpc.lsa_EnumAccountsWithUserRight.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16529 { &hf_lsarpc_lsa_EnumAccountsWithUserRight_sids
,
16530 { "Sids", "lsarpc.lsa_EnumAccountsWithUserRight.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16531 { &hf_lsarpc_lsa_EnumAccounts_handle
,
16532 { "Handle", "lsarpc.lsa_EnumAccounts.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16533 { &hf_lsarpc_lsa_EnumAccounts_num_entries
,
16534 { "Num Entries", "lsarpc.lsa_EnumAccounts.num_entries", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16535 { &hf_lsarpc_lsa_EnumAccounts_resume_handle
,
16536 { "Resume Handle", "lsarpc.lsa_EnumAccounts.resume_handle", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16537 { &hf_lsarpc_lsa_EnumAccounts_sids
,
16538 { "Sids", "lsarpc.lsa_EnumAccounts.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16539 { &hf_lsarpc_lsa_EnumPrivsAccount_handle
,
16540 { "Handle", "lsarpc.lsa_EnumPrivsAccount.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16541 { &hf_lsarpc_lsa_EnumPrivsAccount_privs
,
16542 { "Privs", "lsarpc.lsa_EnumPrivsAccount.privs", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16543 { &hf_lsarpc_lsa_EnumPrivs_handle
,
16544 { "Handle", "lsarpc.lsa_EnumPrivs.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16545 { &hf_lsarpc_lsa_EnumPrivs_max_count
,
16546 { "Max Count", "lsarpc.lsa_EnumPrivs.max_count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16547 { &hf_lsarpc_lsa_EnumPrivs_privs
,
16548 { "Privs", "lsarpc.lsa_EnumPrivs.privs", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16549 { &hf_lsarpc_lsa_EnumPrivs_resume_handle
,
16550 { "Resume Handle", "lsarpc.lsa_EnumPrivs.resume_handle", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16551 { &hf_lsarpc_lsa_EnumTrustDom_domains
,
16552 { "Domains", "lsarpc.lsa_EnumTrustDom.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16553 { &hf_lsarpc_lsa_EnumTrustDom_handle
,
16554 { "Handle", "lsarpc.lsa_EnumTrustDom.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16555 { &hf_lsarpc_lsa_EnumTrustDom_max_size
,
16556 { "Max Size", "lsarpc.lsa_EnumTrustDom.max_size", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16557 { &hf_lsarpc_lsa_EnumTrustDom_resume_handle
,
16558 { "Resume Handle", "lsarpc.lsa_EnumTrustDom.resume_handle", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16559 { &hf_lsarpc_lsa_EnumTrustedDomainsEx_domains
,
16560 { "Domains", "lsarpc.lsa_EnumTrustedDomainsEx.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16561 { &hf_lsarpc_lsa_EnumTrustedDomainsEx_handle
,
16562 { "Handle", "lsarpc.lsa_EnumTrustedDomainsEx.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16563 { &hf_lsarpc_lsa_EnumTrustedDomainsEx_max_size
,
16564 { "Max Size", "lsarpc.lsa_EnumTrustedDomainsEx.max_size", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16565 { &hf_lsarpc_lsa_EnumTrustedDomainsEx_resume_handle
,
16566 { "Resume Handle", "lsarpc.lsa_EnumTrustedDomainsEx.resume_handle", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16567 { &hf_lsarpc_lsa_ForestTrustBinaryData_data
,
16568 { "Data", "lsarpc.lsa_ForestTrustBinaryData.data", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16569 { &hf_lsarpc_lsa_ForestTrustBinaryData_length
,
16570 { "Length", "lsarpc.lsa_ForestTrustBinaryData.length", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16571 { &hf_lsarpc_lsa_ForestTrustCollisionInfo_count
,
16572 { "Count", "lsarpc.lsa_ForestTrustCollisionInfo.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16573 { &hf_lsarpc_lsa_ForestTrustCollisionInfo_entries
,
16574 { "Entries", "lsarpc.lsa_ForestTrustCollisionInfo.entries", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16575 { &hf_lsarpc_lsa_ForestTrustCollisionRecord_flags
,
16576 { "Flags", "lsarpc.lsa_ForestTrustCollisionRecord.flags", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16577 { &hf_lsarpc_lsa_ForestTrustCollisionRecord_index
,
16578 { "Index", "lsarpc.lsa_ForestTrustCollisionRecord.index", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16579 { &hf_lsarpc_lsa_ForestTrustCollisionRecord_name
,
16580 { "Name", "lsarpc.lsa_ForestTrustCollisionRecord.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16581 { &hf_lsarpc_lsa_ForestTrustCollisionRecord_type
,
16582 { "Type", "lsarpc.lsa_ForestTrustCollisionRecord.type", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_ForestTrustCollisionRecordType_vals
), 0, NULL
, HFILL
}},
16583 { &hf_lsarpc_lsa_ForestTrustData2_data
,
16584 { "Data", "lsarpc.lsa_ForestTrustData2.data", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16585 { &hf_lsarpc_lsa_ForestTrustData2_domain_info
,
16586 { "Domain Info", "lsarpc.lsa_ForestTrustData2.domain_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16587 { &hf_lsarpc_lsa_ForestTrustData2_scanner_info
,
16588 { "Scanner Info", "lsarpc.lsa_ForestTrustData2.scanner_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16589 { &hf_lsarpc_lsa_ForestTrustData2_top_level_name
,
16590 { "Top Level Name", "lsarpc.lsa_ForestTrustData2.top_level_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16591 { &hf_lsarpc_lsa_ForestTrustData2_top_level_name_ex
,
16592 { "Top Level Name Ex", "lsarpc.lsa_ForestTrustData2.top_level_name_ex", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16593 { &hf_lsarpc_lsa_ForestTrustData_data
,
16594 { "Data", "lsarpc.lsa_ForestTrustData.data", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16595 { &hf_lsarpc_lsa_ForestTrustData_domain_info
,
16596 { "Domain Info", "lsarpc.lsa_ForestTrustData.domain_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16597 { &hf_lsarpc_lsa_ForestTrustData_top_level_name
,
16598 { "Top Level Name", "lsarpc.lsa_ForestTrustData.top_level_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16599 { &hf_lsarpc_lsa_ForestTrustData_top_level_name_ex
,
16600 { "Top Level Name Ex", "lsarpc.lsa_ForestTrustData.top_level_name_ex", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16601 { &hf_lsarpc_lsa_ForestTrustDomainInfo_dns_domain_name
,
16602 { "Dns Domain Name", "lsarpc.lsa_ForestTrustDomainInfo.dns_domain_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16603 { &hf_lsarpc_lsa_ForestTrustDomainInfo_domain_sid
,
16604 { "Domain Sid", "lsarpc.lsa_ForestTrustDomainInfo.domain_sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16605 { &hf_lsarpc_lsa_ForestTrustDomainInfo_netbios_domain_name
,
16606 { "Netbios Domain Name", "lsarpc.lsa_ForestTrustDomainInfo.netbios_domain_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16607 { &hf_lsarpc_lsa_ForestTrustInformation2_count
,
16608 { "Count", "lsarpc.lsa_ForestTrustInformation2.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16609 { &hf_lsarpc_lsa_ForestTrustInformation2_entries
,
16610 { "Entries", "lsarpc.lsa_ForestTrustInformation2.entries", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16611 { &hf_lsarpc_lsa_ForestTrustInformation_count
,
16612 { "Count", "lsarpc.lsa_ForestTrustInformation.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16613 { &hf_lsarpc_lsa_ForestTrustInformation_entries
,
16614 { "Entries", "lsarpc.lsa_ForestTrustInformation.entries", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16615 { &hf_lsarpc_lsa_ForestTrustRecord2_flags
,
16616 { "Flags", "lsarpc.lsa_ForestTrustRecord2.flags", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16617 { &hf_lsarpc_lsa_ForestTrustRecord2_forest_trust_data
,
16618 { "Forest Trust Data", "lsarpc.lsa_ForestTrustRecord2.forest_trust_data", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16619 { &hf_lsarpc_lsa_ForestTrustRecord2_time
,
16620 { "Time", "lsarpc.lsa_ForestTrustRecord2.time", FT_ABSOLUTE_TIME
, ABSOLUTE_TIME_LOCAL
, NULL
, 0, NULL
, HFILL
}},
16621 { &hf_lsarpc_lsa_ForestTrustRecord2_type
,
16622 { "Type", "lsarpc.lsa_ForestTrustRecord2.type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_ForestTrustRecordType_vals
), 0, NULL
, HFILL
}},
16623 { &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_ADMIN
,
16624 { "LSA NB DISABLED ADMIN", "lsarpc.lsa_ForestTrustRecordFlags.LSA_NB_DISABLED_ADMIN", FT_BOOLEAN
, 32, TFS(&lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_ADMIN_tfs
), ( 0x00000004 ), NULL
, HFILL
}},
16625 { &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_CONFLICT
,
16626 { "LSA NB DISABLED CONFLICT", "lsarpc.lsa_ForestTrustRecordFlags.LSA_NB_DISABLED_CONFLICT", FT_BOOLEAN
, 32, TFS(&lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_CONFLICT_tfs
), ( 0x00000008 ), NULL
, HFILL
}},
16627 { &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_ADMIN
,
16628 { "LSA SID DISABLED ADMIN", "lsarpc.lsa_ForestTrustRecordFlags.LSA_SID_DISABLED_ADMIN", FT_BOOLEAN
, 32, TFS(&lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_ADMIN_tfs
), ( 0x00000001 ), NULL
, HFILL
}},
16629 { &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_CONFLICT
,
16630 { "LSA SID DISABLED CONFLICT", "lsarpc.lsa_ForestTrustRecordFlags.LSA_SID_DISABLED_CONFLICT", FT_BOOLEAN
, 32, TFS(&lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_CONFLICT_tfs
), ( 0x00000002 ), NULL
, HFILL
}},
16631 { &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_ADMIN
,
16632 { "LSA TLN DISABLED ADMIN", "lsarpc.lsa_ForestTrustRecordFlags.LSA_TLN_DISABLED_ADMIN", FT_BOOLEAN
, 32, TFS(&lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_ADMIN_tfs
), ( 0x00000002 ), NULL
, HFILL
}},
16633 { &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_CONFLICT
,
16634 { "LSA TLN DISABLED CONFLICT", "lsarpc.lsa_ForestTrustRecordFlags.LSA_TLN_DISABLED_CONFLICT", FT_BOOLEAN
, 32, TFS(&lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_CONFLICT_tfs
), ( 0x00000004 ), NULL
, HFILL
}},
16635 { &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_NEW
,
16636 { "LSA TLN DISABLED NEW", "lsarpc.lsa_ForestTrustRecordFlags.LSA_TLN_DISABLED_NEW", FT_BOOLEAN
, 32, TFS(&lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_NEW_tfs
), ( 0x00000001 ), NULL
, HFILL
}},
16637 { &hf_lsarpc_lsa_ForestTrustRecord_flags
,
16638 { "Flags", "lsarpc.lsa_ForestTrustRecord.flags", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16639 { &hf_lsarpc_lsa_ForestTrustRecord_forest_trust_data
,
16640 { "Forest Trust Data", "lsarpc.lsa_ForestTrustRecord.forest_trust_data", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16641 { &hf_lsarpc_lsa_ForestTrustRecord_time
,
16642 { "Time", "lsarpc.lsa_ForestTrustRecord.time", FT_ABSOLUTE_TIME
, ABSOLUTE_TIME_LOCAL
, NULL
, 0, NULL
, HFILL
}},
16643 { &hf_lsarpc_lsa_ForestTrustRecord_type
,
16644 { "Type", "lsarpc.lsa_ForestTrustRecord.type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_ForestTrustRecordType_vals
), 0, NULL
, HFILL
}},
16645 { &hf_lsarpc_lsa_GetSystemAccessAccount_access_mask
,
16646 { "Access Mask", "lsarpc.lsa_GetSystemAccessAccount.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16647 { &hf_lsarpc_lsa_GetSystemAccessAccount_handle
,
16648 { "Handle", "lsarpc.lsa_GetSystemAccessAccount.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16649 { &hf_lsarpc_lsa_GetUserName_account_name
,
16650 { "Account Name", "lsarpc.lsa_GetUserName.account_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16651 { &hf_lsarpc_lsa_GetUserName_authority_name
,
16652 { "Authority Name", "lsarpc.lsa_GetUserName.authority_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16653 { &hf_lsarpc_lsa_GetUserName_system_name
,
16654 { "System Name", "lsarpc.lsa_GetUserName.system_name", FT_STRING
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16655 { &hf_lsarpc_lsa_LUIDAttribute_attribute
,
16656 { "Attribute", "lsarpc.lsa_LUIDAttribute.attribute", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16657 { &hf_lsarpc_lsa_LUIDAttribute_luid
,
16658 { "Luid", "lsarpc.lsa_LUIDAttribute.luid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16659 { &hf_lsarpc_lsa_LUID_high
,
16660 { "High", "lsarpc.lsa_LUID.high", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16661 { &hf_lsarpc_lsa_LUID_low
,
16662 { "Low", "lsarpc.lsa_LUID.low", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16663 { &hf_lsarpc_lsa_LookupNames2_client_revision
,
16664 { "Client Revision", "lsarpc.lsa_LookupNames2.client_revision", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_ClientRevision_vals
), 0, NULL
, HFILL
}},
16665 { &hf_lsarpc_lsa_LookupNames2_count
,
16666 { "Count", "lsarpc.lsa_LookupNames2.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16667 { &hf_lsarpc_lsa_LookupNames2_domains
,
16668 { "Domains", "lsarpc.lsa_LookupNames2.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16669 { &hf_lsarpc_lsa_LookupNames2_handle
,
16670 { "Handle", "lsarpc.lsa_LookupNames2.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16671 { &hf_lsarpc_lsa_LookupNames2_level
,
16672 { "Level", "lsarpc.lsa_LookupNames2.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_LookupNamesLevel_vals
), 0, NULL
, HFILL
}},
16673 { &hf_lsarpc_lsa_LookupNames2_lookup_options
,
16674 { "Lookup Options", "lsarpc.lsa_LookupNames2.lookup_options", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_LookupOptions_vals
), 0, NULL
, HFILL
}},
16675 { &hf_lsarpc_lsa_LookupNames2_names
,
16676 { "Names", "lsarpc.lsa_LookupNames2.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16677 { &hf_lsarpc_lsa_LookupNames2_num_names
,
16678 { "Num Names", "lsarpc.lsa_LookupNames2.num_names", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16679 { &hf_lsarpc_lsa_LookupNames2_sids
,
16680 { "Sids", "lsarpc.lsa_LookupNames2.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16681 { &hf_lsarpc_lsa_LookupNames3_client_revision
,
16682 { "Client Revision", "lsarpc.lsa_LookupNames3.client_revision", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_ClientRevision_vals
), 0, NULL
, HFILL
}},
16683 { &hf_lsarpc_lsa_LookupNames3_count
,
16684 { "Count", "lsarpc.lsa_LookupNames3.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16685 { &hf_lsarpc_lsa_LookupNames3_domains
,
16686 { "Domains", "lsarpc.lsa_LookupNames3.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16687 { &hf_lsarpc_lsa_LookupNames3_handle
,
16688 { "Handle", "lsarpc.lsa_LookupNames3.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16689 { &hf_lsarpc_lsa_LookupNames3_level
,
16690 { "Level", "lsarpc.lsa_LookupNames3.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_LookupNamesLevel_vals
), 0, NULL
, HFILL
}},
16691 { &hf_lsarpc_lsa_LookupNames3_lookup_options
,
16692 { "Lookup Options", "lsarpc.lsa_LookupNames3.lookup_options", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_LookupOptions_vals
), 0, NULL
, HFILL
}},
16693 { &hf_lsarpc_lsa_LookupNames3_names
,
16694 { "Names", "lsarpc.lsa_LookupNames3.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16695 { &hf_lsarpc_lsa_LookupNames3_num_names
,
16696 { "Num Names", "lsarpc.lsa_LookupNames3.num_names", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16697 { &hf_lsarpc_lsa_LookupNames3_sids
,
16698 { "Sids", "lsarpc.lsa_LookupNames3.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16699 { &hf_lsarpc_lsa_LookupNames4_client_revision
,
16700 { "Client Revision", "lsarpc.lsa_LookupNames4.client_revision", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_ClientRevision_vals
), 0, NULL
, HFILL
}},
16701 { &hf_lsarpc_lsa_LookupNames4_count
,
16702 { "Count", "lsarpc.lsa_LookupNames4.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16703 { &hf_lsarpc_lsa_LookupNames4_domains
,
16704 { "Domains", "lsarpc.lsa_LookupNames4.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16705 { &hf_lsarpc_lsa_LookupNames4_level
,
16706 { "Level", "lsarpc.lsa_LookupNames4.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_LookupNamesLevel_vals
), 0, NULL
, HFILL
}},
16707 { &hf_lsarpc_lsa_LookupNames4_lookup_options
,
16708 { "Lookup Options", "lsarpc.lsa_LookupNames4.lookup_options", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_LookupOptions_vals
), 0, NULL
, HFILL
}},
16709 { &hf_lsarpc_lsa_LookupNames4_names
,
16710 { "Names", "lsarpc.lsa_LookupNames4.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16711 { &hf_lsarpc_lsa_LookupNames4_num_names
,
16712 { "Num Names", "lsarpc.lsa_LookupNames4.num_names", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16713 { &hf_lsarpc_lsa_LookupNames4_sids
,
16714 { "Sids", "lsarpc.lsa_LookupNames4.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16715 { &hf_lsarpc_lsa_LookupNames_count
,
16716 { "Count", "lsarpc.lsa_LookupNames.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16717 { &hf_lsarpc_lsa_LookupNames_domains
,
16718 { "Domains", "lsarpc.lsa_LookupNames.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16719 { &hf_lsarpc_lsa_LookupNames_handle
,
16720 { "Handle", "lsarpc.lsa_LookupNames.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16721 { &hf_lsarpc_lsa_LookupNames_level
,
16722 { "Level", "lsarpc.lsa_LookupNames.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_LookupNamesLevel_vals
), 0, NULL
, HFILL
}},
16723 { &hf_lsarpc_lsa_LookupNames_names
,
16724 { "Names", "lsarpc.lsa_LookupNames.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16725 { &hf_lsarpc_lsa_LookupNames_num_names
,
16726 { "Num Names", "lsarpc.lsa_LookupNames.num_names", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16727 { &hf_lsarpc_lsa_LookupNames_sids
,
16728 { "Sids", "lsarpc.lsa_LookupNames.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16729 { &hf_lsarpc_lsa_LookupPrivDisplayName_disp_name
,
16730 { "Disp Name", "lsarpc.lsa_LookupPrivDisplayName.disp_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16731 { &hf_lsarpc_lsa_LookupPrivDisplayName_handle
,
16732 { "Handle", "lsarpc.lsa_LookupPrivDisplayName.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16733 { &hf_lsarpc_lsa_LookupPrivDisplayName_language_id
,
16734 { "Language Id", "lsarpc.lsa_LookupPrivDisplayName.language_id", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16735 { &hf_lsarpc_lsa_LookupPrivDisplayName_language_id_sys
,
16736 { "Language Id Sys", "lsarpc.lsa_LookupPrivDisplayName.language_id_sys", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16737 { &hf_lsarpc_lsa_LookupPrivDisplayName_name
,
16738 { "Name", "lsarpc.lsa_LookupPrivDisplayName.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16739 { &hf_lsarpc_lsa_LookupPrivDisplayName_returned_language_id
,
16740 { "Returned Language Id", "lsarpc.lsa_LookupPrivDisplayName.returned_language_id", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16741 { &hf_lsarpc_lsa_LookupPrivName_handle
,
16742 { "Handle", "lsarpc.lsa_LookupPrivName.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16743 { &hf_lsarpc_lsa_LookupPrivName_luid
,
16744 { "Luid", "lsarpc.lsa_LookupPrivName.luid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16745 { &hf_lsarpc_lsa_LookupPrivName_name
,
16746 { "Name", "lsarpc.lsa_LookupPrivName.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16747 { &hf_lsarpc_lsa_LookupPrivValue_handle
,
16748 { "Handle", "lsarpc.lsa_LookupPrivValue.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16749 { &hf_lsarpc_lsa_LookupPrivValue_luid
,
16750 { "Luid", "lsarpc.lsa_LookupPrivValue.luid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16751 { &hf_lsarpc_lsa_LookupPrivValue_name
,
16752 { "Name", "lsarpc.lsa_LookupPrivValue.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16753 { &hf_lsarpc_lsa_LookupSids2_client_revision
,
16754 { "Client Revision", "lsarpc.lsa_LookupSids2.client_revision", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_ClientRevision_vals
), 0, NULL
, HFILL
}},
16755 { &hf_lsarpc_lsa_LookupSids2_count
,
16756 { "Count", "lsarpc.lsa_LookupSids2.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16757 { &hf_lsarpc_lsa_LookupSids2_domains
,
16758 { "Domains", "lsarpc.lsa_LookupSids2.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16759 { &hf_lsarpc_lsa_LookupSids2_handle
,
16760 { "Handle", "lsarpc.lsa_LookupSids2.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16761 { &hf_lsarpc_lsa_LookupSids2_level
,
16762 { "Level", "lsarpc.lsa_LookupSids2.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_LookupNamesLevel_vals
), 0, NULL
, HFILL
}},
16763 { &hf_lsarpc_lsa_LookupSids2_lookup_options
,
16764 { "Lookup Options", "lsarpc.lsa_LookupSids2.lookup_options", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_LookupOptions_vals
), 0, NULL
, HFILL
}},
16765 { &hf_lsarpc_lsa_LookupSids2_names
,
16766 { "Names", "lsarpc.lsa_LookupSids2.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16767 { &hf_lsarpc_lsa_LookupSids2_sids
,
16768 { "Sids", "lsarpc.lsa_LookupSids2.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16769 { &hf_lsarpc_lsa_LookupSids3_client_revision
,
16770 { "Client Revision", "lsarpc.lsa_LookupSids3.client_revision", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_ClientRevision_vals
), 0, NULL
, HFILL
}},
16771 { &hf_lsarpc_lsa_LookupSids3_count
,
16772 { "Count", "lsarpc.lsa_LookupSids3.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16773 { &hf_lsarpc_lsa_LookupSids3_domains
,
16774 { "Domains", "lsarpc.lsa_LookupSids3.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16775 { &hf_lsarpc_lsa_LookupSids3_level
,
16776 { "Level", "lsarpc.lsa_LookupSids3.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_LookupNamesLevel_vals
), 0, NULL
, HFILL
}},
16777 { &hf_lsarpc_lsa_LookupSids3_lookup_options
,
16778 { "Lookup Options", "lsarpc.lsa_LookupSids3.lookup_options", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_LookupOptions_vals
), 0, NULL
, HFILL
}},
16779 { &hf_lsarpc_lsa_LookupSids3_names
,
16780 { "Names", "lsarpc.lsa_LookupSids3.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16781 { &hf_lsarpc_lsa_LookupSids3_sids
,
16782 { "Sids", "lsarpc.lsa_LookupSids3.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16783 { &hf_lsarpc_lsa_LookupSids_count
,
16784 { "Count", "lsarpc.lsa_LookupSids.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16785 { &hf_lsarpc_lsa_LookupSids_domains
,
16786 { "Domains", "lsarpc.lsa_LookupSids.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16787 { &hf_lsarpc_lsa_LookupSids_handle
,
16788 { "Handle", "lsarpc.lsa_LookupSids.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16789 { &hf_lsarpc_lsa_LookupSids_level
,
16790 { "Level", "lsarpc.lsa_LookupSids.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_LookupNamesLevel_vals
), 0, NULL
, HFILL
}},
16791 { &hf_lsarpc_lsa_LookupSids_names
,
16792 { "Names", "lsarpc.lsa_LookupSids.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16793 { &hf_lsarpc_lsa_LookupSids_sids
,
16794 { "Sids", "lsarpc.lsa_LookupSids.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16795 { &hf_lsarpc_lsa_ModificationInfo_db_create_time
,
16796 { "Db Create Time", "lsarpc.lsa_ModificationInfo.db_create_time", FT_ABSOLUTE_TIME
, ABSOLUTE_TIME_LOCAL
, NULL
, 0, NULL
, HFILL
}},
16797 { &hf_lsarpc_lsa_ModificationInfo_modified_id
,
16798 { "Modified Id", "lsarpc.lsa_ModificationInfo.modified_id", FT_UINT64
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16799 { &hf_lsarpc_lsa_ObjectAttribute_attributes
,
16800 { "Attributes", "lsarpc.lsa_ObjectAttribute.attributes", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16801 { &hf_lsarpc_lsa_ObjectAttribute_len
,
16802 { "Len", "lsarpc.lsa_ObjectAttribute.len", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16803 { &hf_lsarpc_lsa_ObjectAttribute_object_name
,
16804 { "Object Name", "lsarpc.lsa_ObjectAttribute.object_name", FT_STRING
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16805 { &hf_lsarpc_lsa_ObjectAttribute_root_dir
,
16806 { "Root Dir", "lsarpc.lsa_ObjectAttribute.root_dir", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16807 { &hf_lsarpc_lsa_ObjectAttribute_sec_desc
,
16808 { "Sec Desc", "lsarpc.lsa_ObjectAttribute.sec_desc", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16809 { &hf_lsarpc_lsa_ObjectAttribute_sec_qos
,
16810 { "Sec Qos", "lsarpc.lsa_ObjectAttribute.sec_qos", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16811 { &hf_lsarpc_lsa_OpenAccount_access_mask
,
16812 { "Access Mask", "lsarpc.lsa_OpenAccount.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16813 { &hf_lsarpc_lsa_OpenAccount_acct_handle
,
16814 { "Acct Handle", "lsarpc.lsa_OpenAccount.acct_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16815 { &hf_lsarpc_lsa_OpenAccount_handle
,
16816 { "Handle", "lsarpc.lsa_OpenAccount.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16817 { &hf_lsarpc_lsa_OpenAccount_sid
,
16818 { "Sid", "lsarpc.lsa_OpenAccount.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16819 { &hf_lsarpc_lsa_OpenPolicy2_access_mask
,
16820 { "Access Mask", "lsarpc.lsa_OpenPolicy2.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16821 { &hf_lsarpc_lsa_OpenPolicy2_attr
,
16822 { "Attr", "lsarpc.lsa_OpenPolicy2.attr", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16823 { &hf_lsarpc_lsa_OpenPolicy2_handle
,
16824 { "Handle", "lsarpc.lsa_OpenPolicy2.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16825 { &hf_lsarpc_lsa_OpenPolicy2_system_name
,
16826 { "System Name", "lsarpc.lsa_OpenPolicy2.system_name", FT_STRING
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16827 { &hf_lsarpc_lsa_OpenPolicy3_access_mask
,
16828 { "Access Mask", "lsarpc.lsa_OpenPolicy3.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16829 { &hf_lsarpc_lsa_OpenPolicy3_attr
,
16830 { "Attr", "lsarpc.lsa_OpenPolicy3.attr", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16831 { &hf_lsarpc_lsa_OpenPolicy3_handle
,
16832 { "Handle", "lsarpc.lsa_OpenPolicy3.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16833 { &hf_lsarpc_lsa_OpenPolicy3_in_revision_info
,
16834 { "In Revision Info", "lsarpc.lsa_OpenPolicy3.in_revision_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16835 { &hf_lsarpc_lsa_OpenPolicy3_in_version
,
16836 { "In Version", "lsarpc.lsa_OpenPolicy3.in_version", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16837 { &hf_lsarpc_lsa_OpenPolicy3_out_revision_info
,
16838 { "Out Revision Info", "lsarpc.lsa_OpenPolicy3.out_revision_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16839 { &hf_lsarpc_lsa_OpenPolicy3_out_version
,
16840 { "Out Version", "lsarpc.lsa_OpenPolicy3.out_version", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16841 { &hf_lsarpc_lsa_OpenPolicy3_system_name
,
16842 { "System Name", "lsarpc.lsa_OpenPolicy3.system_name", FT_STRING
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16843 { &hf_lsarpc_lsa_OpenPolicy_access_mask
,
16844 { "Access Mask", "lsarpc.lsa_OpenPolicy.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16845 { &hf_lsarpc_lsa_OpenPolicy_attr
,
16846 { "Attr", "lsarpc.lsa_OpenPolicy.attr", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16847 { &hf_lsarpc_lsa_OpenPolicy_handle
,
16848 { "Handle", "lsarpc.lsa_OpenPolicy.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16849 { &hf_lsarpc_lsa_OpenPolicy_system_name
,
16850 { "System Name", "lsarpc.lsa_OpenPolicy.system_name", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16851 { &hf_lsarpc_lsa_OpenSecret_access_mask
,
16852 { "Access Mask", "lsarpc.lsa_OpenSecret.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16853 { &hf_lsarpc_lsa_OpenSecret_handle
,
16854 { "Handle", "lsarpc.lsa_OpenSecret.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16855 { &hf_lsarpc_lsa_OpenSecret_name
,
16856 { "Name", "lsarpc.lsa_OpenSecret.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16857 { &hf_lsarpc_lsa_OpenSecret_sec_handle
,
16858 { "Sec Handle", "lsarpc.lsa_OpenSecret.sec_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16859 { &hf_lsarpc_lsa_OpenTrustedDomainByName_access_mask
,
16860 { "Access Mask", "lsarpc.lsa_OpenTrustedDomainByName.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16861 { &hf_lsarpc_lsa_OpenTrustedDomainByName_handle
,
16862 { "Handle", "lsarpc.lsa_OpenTrustedDomainByName.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16863 { &hf_lsarpc_lsa_OpenTrustedDomainByName_name
,
16864 { "Name", "lsarpc.lsa_OpenTrustedDomainByName.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16865 { &hf_lsarpc_lsa_OpenTrustedDomainByName_trustdom_handle
,
16866 { "Trustdom Handle", "lsarpc.lsa_OpenTrustedDomainByName.trustdom_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16867 { &hf_lsarpc_lsa_OpenTrustedDomain_access_mask
,
16868 { "Access Mask", "lsarpc.lsa_OpenTrustedDomain.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16869 { &hf_lsarpc_lsa_OpenTrustedDomain_handle
,
16870 { "Handle", "lsarpc.lsa_OpenTrustedDomain.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16871 { &hf_lsarpc_lsa_OpenTrustedDomain_sid
,
16872 { "Sid", "lsarpc.lsa_OpenTrustedDomain.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16873 { &hf_lsarpc_lsa_OpenTrustedDomain_trustdom_handle
,
16874 { "Trustdom Handle", "lsarpc.lsa_OpenTrustedDomain.trustdom_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16875 { &hf_lsarpc_lsa_PDAccountInfo_name
,
16876 { "Name", "lsarpc.lsa_PDAccountInfo.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16877 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_AUDIT_LOG_ADMIN
,
16878 { "LSA POLICY AUDIT LOG ADMIN", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_AUDIT_LOG_ADMIN", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_AUDIT_LOG_ADMIN_tfs
), ( 0x00000200 ), NULL
, HFILL
}},
16879 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_CREATE_ACCOUNT
,
16880 { "LSA POLICY CREATE ACCOUNT", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_CREATE_ACCOUNT", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_CREATE_ACCOUNT_tfs
), ( 0x00000010 ), NULL
, HFILL
}},
16881 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_CREATE_PRIVILEGE
,
16882 { "LSA POLICY CREATE PRIVILEGE", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_CREATE_PRIVILEGE", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_CREATE_PRIVILEGE_tfs
), ( 0x00000040 ), NULL
, HFILL
}},
16883 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_CREATE_SECRET
,
16884 { "LSA POLICY CREATE SECRET", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_CREATE_SECRET", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_CREATE_SECRET_tfs
), ( 0x00000020 ), NULL
, HFILL
}},
16885 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_GET_PRIVATE_INFORMATION
,
16886 { "LSA POLICY GET PRIVATE INFORMATION", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_GET_PRIVATE_INFORMATION", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_GET_PRIVATE_INFORMATION_tfs
), ( 0x00000004 ), NULL
, HFILL
}},
16887 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_LOOKUP_NAMES
,
16888 { "LSA POLICY LOOKUP NAMES", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_LOOKUP_NAMES", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_LOOKUP_NAMES_tfs
), ( 0x00000800 ), NULL
, HFILL
}},
16889 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_NOTIFICATION
,
16890 { "LSA POLICY NOTIFICATION", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_NOTIFICATION", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_NOTIFICATION_tfs
), ( 0x00001000 ), NULL
, HFILL
}},
16891 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_SERVER_ADMIN
,
16892 { "LSA POLICY SERVER ADMIN", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_SERVER_ADMIN", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_SERVER_ADMIN_tfs
), ( 0x00000400 ), NULL
, HFILL
}},
16893 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_SET_AUDIT_REQUIREMENTS
,
16894 { "LSA POLICY SET AUDIT REQUIREMENTS", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_SET_AUDIT_REQUIREMENTS", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_SET_AUDIT_REQUIREMENTS_tfs
), ( 0x00000100 ), NULL
, HFILL
}},
16895 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS
,
16896 { "LSA POLICY SET DEFAULT QUOTA LIMITS", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS_tfs
), ( 0x00000080 ), NULL
, HFILL
}},
16897 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_TRUST_ADMIN
,
16898 { "LSA POLICY TRUST ADMIN", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_TRUST_ADMIN", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_TRUST_ADMIN_tfs
), ( 0x00000008 ), NULL
, HFILL
}},
16899 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_VIEW_AUDIT_INFORMATION
,
16900 { "LSA POLICY VIEW AUDIT INFORMATION", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_VIEW_AUDIT_INFORMATION", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_VIEW_AUDIT_INFORMATION_tfs
), ( 0x00000002 ), NULL
, HFILL
}},
16901 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_VIEW_LOCAL_INFORMATION
,
16902 { "LSA POLICY VIEW LOCAL INFORMATION", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_VIEW_LOCAL_INFORMATION", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_VIEW_LOCAL_INFORMATION_tfs
), ( 0x00000001 ), NULL
, HFILL
}},
16903 { &hf_lsarpc_lsa_PolicyInformation_account_domain
,
16904 { "Account Domain", "lsarpc.lsa_PolicyInformation.account_domain", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16905 { &hf_lsarpc_lsa_PolicyInformation_audit_events
,
16906 { "Audit Events", "lsarpc.lsa_PolicyInformation.audit_events", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16907 { &hf_lsarpc_lsa_PolicyInformation_audit_log
,
16908 { "Audit Log", "lsarpc.lsa_PolicyInformation.audit_log", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16909 { &hf_lsarpc_lsa_PolicyInformation_auditfullquery
,
16910 { "Auditfullquery", "lsarpc.lsa_PolicyInformation.auditfullquery", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16911 { &hf_lsarpc_lsa_PolicyInformation_auditfullset
,
16912 { "Auditfullset", "lsarpc.lsa_PolicyInformation.auditfullset", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16913 { &hf_lsarpc_lsa_PolicyInformation_dns
,
16914 { "Dns", "lsarpc.lsa_PolicyInformation.dns", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16915 { &hf_lsarpc_lsa_PolicyInformation_dns_int
,
16916 { "Dns Int", "lsarpc.lsa_PolicyInformation.dns_int", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16917 { &hf_lsarpc_lsa_PolicyInformation_domain
,
16918 { "Domain", "lsarpc.lsa_PolicyInformation.domain", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16919 { &hf_lsarpc_lsa_PolicyInformation_l_account_domain
,
16920 { "L Account Domain", "lsarpc.lsa_PolicyInformation.l_account_domain", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16921 { &hf_lsarpc_lsa_PolicyInformation_mod
,
16922 { "Mod", "lsarpc.lsa_PolicyInformation.mod", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16923 { &hf_lsarpc_lsa_PolicyInformation_pd
,
16924 { "Pd", "lsarpc.lsa_PolicyInformation.pd", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16925 { &hf_lsarpc_lsa_PolicyInformation_quota
,
16926 { "Quota", "lsarpc.lsa_PolicyInformation.quota", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16927 { &hf_lsarpc_lsa_PolicyInformation_replica
,
16928 { "Replica", "lsarpc.lsa_PolicyInformation.replica", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16929 { &hf_lsarpc_lsa_PolicyInformation_role
,
16930 { "Role", "lsarpc.lsa_PolicyInformation.role", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16931 { &hf_lsarpc_lsa_PrivArray_count
,
16932 { "Count", "lsarpc.lsa_PrivArray.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16933 { &hf_lsarpc_lsa_PrivArray_privs
,
16934 { "Privs", "lsarpc.lsa_PrivArray.privs", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16935 { &hf_lsarpc_lsa_PrivEntry_luid
,
16936 { "Luid", "lsarpc.lsa_PrivEntry.luid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16937 { &hf_lsarpc_lsa_PrivEntry_name
,
16938 { "Name", "lsarpc.lsa_PrivEntry.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16939 { &hf_lsarpc_lsa_PrivilegeSet_count
,
16940 { "Count", "lsarpc.lsa_PrivilegeSet.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16941 { &hf_lsarpc_lsa_PrivilegeSet_set
,
16942 { "Set", "lsarpc.lsa_PrivilegeSet.set", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16943 { &hf_lsarpc_lsa_PrivilegeSet_unknown
,
16944 { "Unknown", "lsarpc.lsa_PrivilegeSet.unknown", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16945 { &hf_lsarpc_lsa_QosInfo_context_mode
,
16946 { "Context Mode", "lsarpc.lsa_QosInfo.context_mode", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16947 { &hf_lsarpc_lsa_QosInfo_effective_only
,
16948 { "Effective Only", "lsarpc.lsa_QosInfo.effective_only", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16949 { &hf_lsarpc_lsa_QosInfo_impersonation_level
,
16950 { "Impersonation Level", "lsarpc.lsa_QosInfo.impersonation_level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_SecurityImpersonationLevel_vals
), 0, NULL
, HFILL
}},
16951 { &hf_lsarpc_lsa_QosInfo_len
,
16952 { "Len", "lsarpc.lsa_QosInfo.len", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16953 { &hf_lsarpc_lsa_QueryDomainInformationPolicy_handle
,
16954 { "Handle", "lsarpc.lsa_QueryDomainInformationPolicy.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16955 { &hf_lsarpc_lsa_QueryDomainInformationPolicy_info
,
16956 { "Info", "lsarpc.lsa_QueryDomainInformationPolicy.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16957 { &hf_lsarpc_lsa_QueryDomainInformationPolicy_level
,
16958 { "Level", "lsarpc.lsa_QueryDomainInformationPolicy.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_DomainInfoEnum_vals
), 0, NULL
, HFILL
}},
16959 { &hf_lsarpc_lsa_QueryInfoPolicy2_handle
,
16960 { "Handle", "lsarpc.lsa_QueryInfoPolicy2.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16961 { &hf_lsarpc_lsa_QueryInfoPolicy2_info
,
16962 { "Info", "lsarpc.lsa_QueryInfoPolicy2.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16963 { &hf_lsarpc_lsa_QueryInfoPolicy2_level
,
16964 { "Level", "lsarpc.lsa_QueryInfoPolicy2.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_PolicyInfo_vals
), 0, NULL
, HFILL
}},
16965 { &hf_lsarpc_lsa_QueryInfoPolicy_handle
,
16966 { "Handle", "lsarpc.lsa_QueryInfoPolicy.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16967 { &hf_lsarpc_lsa_QueryInfoPolicy_info
,
16968 { "Info", "lsarpc.lsa_QueryInfoPolicy.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16969 { &hf_lsarpc_lsa_QueryInfoPolicy_level
,
16970 { "Level", "lsarpc.lsa_QueryInfoPolicy.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_PolicyInfo_vals
), 0, NULL
, HFILL
}},
16971 { &hf_lsarpc_lsa_QuerySecret_new_mtime
,
16972 { "New Mtime", "lsarpc.lsa_QuerySecret.new_mtime", FT_ABSOLUTE_TIME
, ABSOLUTE_TIME_LOCAL
, NULL
, 0, NULL
, HFILL
}},
16973 { &hf_lsarpc_lsa_QuerySecret_new_val
,
16974 { "New Val", "lsarpc.lsa_QuerySecret.new_val", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16975 { &hf_lsarpc_lsa_QuerySecret_old_mtime
,
16976 { "Old Mtime", "lsarpc.lsa_QuerySecret.old_mtime", FT_ABSOLUTE_TIME
, ABSOLUTE_TIME_LOCAL
, NULL
, 0, NULL
, HFILL
}},
16977 { &hf_lsarpc_lsa_QuerySecret_old_val
,
16978 { "Old Val", "lsarpc.lsa_QuerySecret.old_val", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16979 { &hf_lsarpc_lsa_QuerySecret_sec_handle
,
16980 { "Sec Handle", "lsarpc.lsa_QuerySecret.sec_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16981 { &hf_lsarpc_lsa_QuerySecurity_handle
,
16982 { "Handle", "lsarpc.lsa_QuerySecurity.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16983 { &hf_lsarpc_lsa_QuerySecurity_sdbuf
,
16984 { "Sdbuf", "lsarpc.lsa_QuerySecurity.sdbuf", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16985 { &hf_lsarpc_lsa_QuerySecurity_sec_info
,
16986 { "Sec Info", "lsarpc.lsa_QuerySecurity.sec_info", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16987 { &hf_lsarpc_lsa_QueryTrustedDomainInfoByName_handle
,
16988 { "Handle", "lsarpc.lsa_QueryTrustedDomainInfoByName.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16989 { &hf_lsarpc_lsa_QueryTrustedDomainInfoByName_info
,
16990 { "Info", "lsarpc.lsa_QueryTrustedDomainInfoByName.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16991 { &hf_lsarpc_lsa_QueryTrustedDomainInfoByName_level
,
16992 { "Level", "lsarpc.lsa_QueryTrustedDomainInfoByName.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_TrustDomInfoEnum_vals
), 0, NULL
, HFILL
}},
16993 { &hf_lsarpc_lsa_QueryTrustedDomainInfoByName_trusted_domain
,
16994 { "Trusted Domain", "lsarpc.lsa_QueryTrustedDomainInfoByName.trusted_domain", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16995 { &hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_dom_sid
,
16996 { "Dom Sid", "lsarpc.lsa_QueryTrustedDomainInfoBySid.dom_sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16997 { &hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_handle
,
16998 { "Handle", "lsarpc.lsa_QueryTrustedDomainInfoBySid.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16999 { &hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_info
,
17000 { "Info", "lsarpc.lsa_QueryTrustedDomainInfoBySid.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17001 { &hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_level
,
17002 { "Level", "lsarpc.lsa_QueryTrustedDomainInfoBySid.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_TrustDomInfoEnum_vals
), 0, NULL
, HFILL
}},
17003 { &hf_lsarpc_lsa_QueryTrustedDomainInfo_info
,
17004 { "Info", "lsarpc.lsa_QueryTrustedDomainInfo.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17005 { &hf_lsarpc_lsa_QueryTrustedDomainInfo_level
,
17006 { "Level", "lsarpc.lsa_QueryTrustedDomainInfo.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_TrustDomInfoEnum_vals
), 0, NULL
, HFILL
}},
17007 { &hf_lsarpc_lsa_QueryTrustedDomainInfo_trustdom_handle
,
17008 { "Trustdom Handle", "lsarpc.lsa_QueryTrustedDomainInfo.trustdom_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17009 { &hf_lsarpc_lsa_RefDomainList_count
,
17010 { "Count", "lsarpc.lsa_RefDomainList.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17011 { &hf_lsarpc_lsa_RefDomainList_domains
,
17012 { "Domains", "lsarpc.lsa_RefDomainList.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17013 { &hf_lsarpc_lsa_RefDomainList_max_size
,
17014 { "Max Size", "lsarpc.lsa_RefDomainList.max_size", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17015 { &hf_lsarpc_lsa_RemoveAccountRights_handle
,
17016 { "Handle", "lsarpc.lsa_RemoveAccountRights.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17017 { &hf_lsarpc_lsa_RemoveAccountRights_remove_all
,
17018 { "Remove All", "lsarpc.lsa_RemoveAccountRights.remove_all", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17019 { &hf_lsarpc_lsa_RemoveAccountRights_rights
,
17020 { "Rights", "lsarpc.lsa_RemoveAccountRights.rights", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17021 { &hf_lsarpc_lsa_RemoveAccountRights_sid
,
17022 { "Sid", "lsarpc.lsa_RemoveAccountRights.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17023 { &hf_lsarpc_lsa_RemovePrivilegesFromAccount_handle
,
17024 { "Handle", "lsarpc.lsa_RemovePrivilegesFromAccount.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17025 { &hf_lsarpc_lsa_RemovePrivilegesFromAccount_privs
,
17026 { "Privs", "lsarpc.lsa_RemovePrivilegesFromAccount.privs", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17027 { &hf_lsarpc_lsa_RemovePrivilegesFromAccount_remove_all
,
17028 { "Remove All", "lsarpc.lsa_RemovePrivilegesFromAccount.remove_all", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17029 { &hf_lsarpc_lsa_ReplicaSourceInfo_account
,
17030 { "Account", "lsarpc.lsa_ReplicaSourceInfo.account", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17031 { &hf_lsarpc_lsa_ReplicaSourceInfo_source
,
17032 { "Source", "lsarpc.lsa_ReplicaSourceInfo.source", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17033 { &hf_lsarpc_lsa_RetrievePrivateData_handle
,
17034 { "Handle", "lsarpc.lsa_RetrievePrivateData.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17035 { &hf_lsarpc_lsa_RetrievePrivateData_name
,
17036 { "Name", "lsarpc.lsa_RetrievePrivateData.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17037 { &hf_lsarpc_lsa_RetrievePrivateData_val
,
17038 { "Val", "lsarpc.lsa_RetrievePrivateData.val", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17039 { &hf_lsarpc_lsa_RevisionSupportedFeature_LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER
,
17040 { "LSA FEATURE TDO AUTH INFO AES CIPHER", "lsarpc.lsa_RevisionSupportedFeature.LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER", FT_BOOLEAN
, 32, TFS(&lsa_RevisionSupportedFeature_LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER_tfs
), ( 0x00000001 ), NULL
, HFILL
}},
17041 { &hf_lsarpc_lsa_RightAttribute_name
,
17042 { "Name", "lsarpc.lsa_RightAttribute.name", FT_STRING
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17043 { &hf_lsarpc_lsa_RightSet_count
,
17044 { "Count", "lsarpc.lsa_RightSet.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17045 { &hf_lsarpc_lsa_RightSet_names
,
17046 { "Names", "lsarpc.lsa_RightSet.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17047 { &hf_lsarpc_lsa_SecretAccessMask_LSA_SECRET_QUERY_VALUE
,
17048 { "LSA SECRET QUERY VALUE", "lsarpc.lsa_SecretAccessMask.LSA_SECRET_QUERY_VALUE", FT_BOOLEAN
, 32, TFS(&lsa_SecretAccessMask_LSA_SECRET_QUERY_VALUE_tfs
), ( 0x00000002 ), NULL
, HFILL
}},
17049 { &hf_lsarpc_lsa_SecretAccessMask_LSA_SECRET_SET_VALUE
,
17050 { "LSA SECRET SET VALUE", "lsarpc.lsa_SecretAccessMask.LSA_SECRET_SET_VALUE", FT_BOOLEAN
, 32, TFS(&lsa_SecretAccessMask_LSA_SECRET_SET_VALUE_tfs
), ( 0x00000001 ), NULL
, HFILL
}},
17051 { &hf_lsarpc_lsa_ServerRole_role
,
17052 { "Role", "lsarpc.lsa_ServerRole.role", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_Role_vals
), 0, NULL
, HFILL
}},
17053 { &hf_lsarpc_lsa_SetDomainInformationPolicy_handle
,
17054 { "Handle", "lsarpc.lsa_SetDomainInformationPolicy.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17055 { &hf_lsarpc_lsa_SetDomainInformationPolicy_info
,
17056 { "Info", "lsarpc.lsa_SetDomainInformationPolicy.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17057 { &hf_lsarpc_lsa_SetDomainInformationPolicy_level
,
17058 { "Level", "lsarpc.lsa_SetDomainInformationPolicy.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_DomainInfoEnum_vals
), 0, NULL
, HFILL
}},
17059 { &hf_lsarpc_lsa_SetInfoPolicy2_handle
,
17060 { "Handle", "lsarpc.lsa_SetInfoPolicy2.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17061 { &hf_lsarpc_lsa_SetInfoPolicy2_info
,
17062 { "Info", "lsarpc.lsa_SetInfoPolicy2.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17063 { &hf_lsarpc_lsa_SetInfoPolicy2_level
,
17064 { "Level", "lsarpc.lsa_SetInfoPolicy2.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_PolicyInfo_vals
), 0, NULL
, HFILL
}},
17065 { &hf_lsarpc_lsa_SetInfoPolicy_handle
,
17066 { "Handle", "lsarpc.lsa_SetInfoPolicy.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17067 { &hf_lsarpc_lsa_SetInfoPolicy_info
,
17068 { "Info", "lsarpc.lsa_SetInfoPolicy.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17069 { &hf_lsarpc_lsa_SetInfoPolicy_level
,
17070 { "Level", "lsarpc.lsa_SetInfoPolicy.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_PolicyInfo_vals
), 0, NULL
, HFILL
}},
17071 { &hf_lsarpc_lsa_SetInformationTrustedDomain_info
,
17072 { "Info", "lsarpc.lsa_SetInformationTrustedDomain.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17073 { &hf_lsarpc_lsa_SetInformationTrustedDomain_level
,
17074 { "Level", "lsarpc.lsa_SetInformationTrustedDomain.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_TrustDomInfoEnum_vals
), 0, NULL
, HFILL
}},
17075 { &hf_lsarpc_lsa_SetInformationTrustedDomain_trustdom_handle
,
17076 { "Trustdom Handle", "lsarpc.lsa_SetInformationTrustedDomain.trustdom_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17077 { &hf_lsarpc_lsa_SetSecObj_handle
,
17078 { "Handle", "lsarpc.lsa_SetSecObj.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17079 { &hf_lsarpc_lsa_SetSecObj_sdbuf
,
17080 { "Sdbuf", "lsarpc.lsa_SetSecObj.sdbuf", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17081 { &hf_lsarpc_lsa_SetSecObj_sec_info
,
17082 { "Sec Info", "lsarpc.lsa_SetSecObj.sec_info", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
17083 { &hf_lsarpc_lsa_SetSecret_new_val
,
17084 { "New Val", "lsarpc.lsa_SetSecret.new_val", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17085 { &hf_lsarpc_lsa_SetSecret_old_val
,
17086 { "Old Val", "lsarpc.lsa_SetSecret.old_val", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17087 { &hf_lsarpc_lsa_SetSecret_sec_handle
,
17088 { "Sec Handle", "lsarpc.lsa_SetSecret.sec_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17089 { &hf_lsarpc_lsa_SetSystemAccessAccount_access_mask
,
17090 { "Access Mask", "lsarpc.lsa_SetSystemAccessAccount.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
17091 { &hf_lsarpc_lsa_SetSystemAccessAccount_handle
,
17092 { "Handle", "lsarpc.lsa_SetSystemAccessAccount.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17093 { &hf_lsarpc_lsa_SetTrustedDomainInfoByName_handle
,
17094 { "Handle", "lsarpc.lsa_SetTrustedDomainInfoByName.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17095 { &hf_lsarpc_lsa_SetTrustedDomainInfoByName_info
,
17096 { "Info", "lsarpc.lsa_SetTrustedDomainInfoByName.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17097 { &hf_lsarpc_lsa_SetTrustedDomainInfoByName_level
,
17098 { "Level", "lsarpc.lsa_SetTrustedDomainInfoByName.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_TrustDomInfoEnum_vals
), 0, NULL
, HFILL
}},
17099 { &hf_lsarpc_lsa_SetTrustedDomainInfoByName_trusted_domain
,
17100 { "Trusted Domain", "lsarpc.lsa_SetTrustedDomainInfoByName.trusted_domain", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17101 { &hf_lsarpc_lsa_SetTrustedDomainInfo_dom_sid
,
17102 { "Dom Sid", "lsarpc.lsa_SetTrustedDomainInfo.dom_sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17103 { &hf_lsarpc_lsa_SetTrustedDomainInfo_handle
,
17104 { "Handle", "lsarpc.lsa_SetTrustedDomainInfo.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17105 { &hf_lsarpc_lsa_SetTrustedDomainInfo_info
,
17106 { "Info", "lsarpc.lsa_SetTrustedDomainInfo.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17107 { &hf_lsarpc_lsa_SetTrustedDomainInfo_level
,
17108 { "Level", "lsarpc.lsa_SetTrustedDomainInfo.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_TrustDomInfoEnum_vals
), 0, NULL
, HFILL
}},
17109 { &hf_lsarpc_lsa_SidArray_num_sids
,
17110 { "Num Sids", "lsarpc.lsa_SidArray.num_sids", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17111 { &hf_lsarpc_lsa_SidArray_sids
,
17112 { "Sids", "lsarpc.lsa_SidArray.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17113 { &hf_lsarpc_lsa_SidPtr_sid
,
17114 { "Sid", "lsarpc.lsa_SidPtr.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17115 { &hf_lsarpc_lsa_StorePrivateData_handle
,
17116 { "Handle", "lsarpc.lsa_StorePrivateData.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17117 { &hf_lsarpc_lsa_StorePrivateData_name
,
17118 { "Name", "lsarpc.lsa_StorePrivateData.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17119 { &hf_lsarpc_lsa_StorePrivateData_val
,
17120 { "Val", "lsarpc.lsa_StorePrivateData.val", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17121 { &hf_lsarpc_lsa_StringLarge_length
,
17122 { "Length", "lsarpc.lsa_StringLarge.length", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17123 { &hf_lsarpc_lsa_StringLarge_size
,
17124 { "Size", "lsarpc.lsa_StringLarge.size", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17125 { &hf_lsarpc_lsa_StringLarge_string
,
17126 { "String", "lsarpc.lsa_StringLarge.string", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17127 { &hf_lsarpc_lsa_String_length
,
17128 { "Length", "lsarpc.lsa_String.length", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17129 { &hf_lsarpc_lsa_String_size
,
17130 { "Size", "lsarpc.lsa_String.size", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17131 { &hf_lsarpc_lsa_String_string
,
17132 { "String", "lsarpc.lsa_String.string", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17133 { &hf_lsarpc_lsa_Strings_count
,
17134 { "Count", "lsarpc.lsa_Strings.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17135 { &hf_lsarpc_lsa_Strings_names
,
17136 { "Names", "lsarpc.lsa_Strings.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17137 { &hf_lsarpc_lsa_TransNameArray2_count
,
17138 { "Count", "lsarpc.lsa_TransNameArray2.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17139 { &hf_lsarpc_lsa_TransNameArray2_names
,
17140 { "Names", "lsarpc.lsa_TransNameArray2.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17141 { &hf_lsarpc_lsa_TransNameArray_count
,
17142 { "Count", "lsarpc.lsa_TransNameArray.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17143 { &hf_lsarpc_lsa_TransNameArray_names
,
17144 { "Names", "lsarpc.lsa_TransNameArray.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17145 { &hf_lsarpc_lsa_TransSidArray2_count
,
17146 { "Count", "lsarpc.lsa_TransSidArray2.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17147 { &hf_lsarpc_lsa_TransSidArray2_sids
,
17148 { "Sids", "lsarpc.lsa_TransSidArray2.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17149 { &hf_lsarpc_lsa_TransSidArray3_count
,
17150 { "Count", "lsarpc.lsa_TransSidArray3.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17151 { &hf_lsarpc_lsa_TransSidArray3_sids
,
17152 { "Sids", "lsarpc.lsa_TransSidArray3.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17153 { &hf_lsarpc_lsa_TransSidArray_count
,
17154 { "Count", "lsarpc.lsa_TransSidArray.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17155 { &hf_lsarpc_lsa_TransSidArray_sids
,
17156 { "Sids", "lsarpc.lsa_TransSidArray.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17157 { &hf_lsarpc_lsa_TranslatedName2_name
,
17158 { "Name", "lsarpc.lsa_TranslatedName2.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17159 { &hf_lsarpc_lsa_TranslatedName2_sid_index
,
17160 { "Sid Index", "lsarpc.lsa_TranslatedName2.sid_index", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17161 { &hf_lsarpc_lsa_TranslatedName2_sid_type
,
17162 { "Sid Type", "lsarpc.lsa_TranslatedName2.sid_type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_SidType_vals
), 0, NULL
, HFILL
}},
17163 { &hf_lsarpc_lsa_TranslatedName2_unknown
,
17164 { "Unknown", "lsarpc.lsa_TranslatedName2.unknown", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17165 { &hf_lsarpc_lsa_TranslatedName_name
,
17166 { "Name", "lsarpc.lsa_TranslatedName.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17167 { &hf_lsarpc_lsa_TranslatedName_sid_index
,
17168 { "Sid Index", "lsarpc.lsa_TranslatedName.sid_index", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17169 { &hf_lsarpc_lsa_TranslatedName_sid_type
,
17170 { "Sid Type", "lsarpc.lsa_TranslatedName.sid_type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_SidType_vals
), 0, NULL
, HFILL
}},
17171 { &hf_lsarpc_lsa_TranslatedSid2_rid
,
17172 { "Rid", "lsarpc.lsa_TranslatedSid2.rid", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17173 { &hf_lsarpc_lsa_TranslatedSid2_sid_index
,
17174 { "Sid Index", "lsarpc.lsa_TranslatedSid2.sid_index", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17175 { &hf_lsarpc_lsa_TranslatedSid2_sid_type
,
17176 { "Sid Type", "lsarpc.lsa_TranslatedSid2.sid_type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_SidType_vals
), 0, NULL
, HFILL
}},
17177 { &hf_lsarpc_lsa_TranslatedSid2_unknown
,
17178 { "Unknown", "lsarpc.lsa_TranslatedSid2.unknown", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17179 { &hf_lsarpc_lsa_TranslatedSid3_flags
,
17180 { "Flags", "lsarpc.lsa_TranslatedSid3.flags", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17181 { &hf_lsarpc_lsa_TranslatedSid3_sid
,
17182 { "Sid", "lsarpc.lsa_TranslatedSid3.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17183 { &hf_lsarpc_lsa_TranslatedSid3_sid_index
,
17184 { "Sid Index", "lsarpc.lsa_TranslatedSid3.sid_index", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17185 { &hf_lsarpc_lsa_TranslatedSid3_sid_type
,
17186 { "Sid Type", "lsarpc.lsa_TranslatedSid3.sid_type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_SidType_vals
), 0, NULL
, HFILL
}},
17187 { &hf_lsarpc_lsa_TranslatedSid_rid
,
17188 { "Rid", "lsarpc.lsa_TranslatedSid.rid", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17189 { &hf_lsarpc_lsa_TranslatedSid_sid_index
,
17190 { "Sid Index", "lsarpc.lsa_TranslatedSid.sid_index", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17191 { &hf_lsarpc_lsa_TranslatedSid_sid_type
,
17192 { "Sid Type", "lsarpc.lsa_TranslatedSid.sid_type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_SidType_vals
), 0, NULL
, HFILL
}},
17193 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION
,
17194 { "LSA TRUST ATTRIBUTE CROSS ORGANIZATION", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_tfs
), ( 0x00000010 ), NULL
, HFILL
}},
17195 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION
,
17196 { "LSA TRUST ATTRIBUTE CROSS ORGANIZATION ENABLE TGT DELEGATION", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION_tfs
), ( 0x00000800 ), NULL
, HFILL
}},
17197 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION
,
17198 { "LSA TRUST ATTRIBUTE CROSS ORGANIZATION NO TGT DELEGATION", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION_tfs
), ( 0x00000200 ), NULL
, HFILL
}},
17199 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE
,
17200 { "LSA TRUST ATTRIBUTE FOREST TRANSITIVE", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE_tfs
), ( 0x00000008 ), NULL
, HFILL
}},
17201 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE
,
17202 { "LSA TRUST ATTRIBUTE NON TRANSITIVE", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE_tfs
), ( 0x00000001 ), NULL
, HFILL
}},
17203 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_PIM_TRUST
,
17204 { "LSA TRUST ATTRIBUTE PIM TRUST", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_PIM_TRUST", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_PIM_TRUST_tfs
), ( 0x00000400 ), NULL
, HFILL
}},
17205 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN
,
17206 { "LSA TRUST ATTRIBUTE QUARANTINED DOMAIN", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN_tfs
), ( 0x00000004 ), NULL
, HFILL
}},
17207 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL
,
17208 { "LSA TRUST ATTRIBUTE TREAT AS EXTERNAL", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL_tfs
), ( 0x00000040 ), NULL
, HFILL
}},
17209 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY
,
17210 { "LSA TRUST ATTRIBUTE UPLEVEL ONLY", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY_tfs
), ( 0x00000002 ), NULL
, HFILL
}},
17211 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION
,
17212 { "LSA TRUST ATTRIBUTE USES RC4 ENCRYPTION", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION_tfs
), ( 0x00000080 ), NULL
, HFILL
}},
17213 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_WITHIN_FOREST
,
17214 { "LSA TRUST ATTRIBUTE WITHIN FOREST", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_WITHIN_FOREST", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_WITHIN_FOREST_tfs
), ( 0x00000020 ), NULL
, HFILL
}},
17215 { &hf_lsarpc_lsa_TrustDirection_LSA_TRUST_DIRECTION_INBOUND
,
17216 { "LSA TRUST DIRECTION INBOUND", "lsarpc.lsa_TrustDirection.LSA_TRUST_DIRECTION_INBOUND", FT_BOOLEAN
, 32, TFS(&lsa_TrustDirection_LSA_TRUST_DIRECTION_INBOUND_tfs
), ( 0x00000001 ), NULL
, HFILL
}},
17217 { &hf_lsarpc_lsa_TrustDirection_LSA_TRUST_DIRECTION_OUTBOUND
,
17218 { "LSA TRUST DIRECTION OUTBOUND", "lsarpc.lsa_TrustDirection.LSA_TRUST_DIRECTION_OUTBOUND", FT_BOOLEAN
, 32, TFS(&lsa_TrustDirection_LSA_TRUST_DIRECTION_OUTBOUND_tfs
), ( 0x00000002 ), NULL
, HFILL
}},
17219 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES_auth_data
,
17220 { "Auth Data", "lsarpc.lsa_TrustDomainInfoAuthInfoInternalAES.auth_data", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17221 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES_cipher
,
17222 { "Cipher", "lsarpc.lsa_TrustDomainInfoAuthInfoInternalAES.cipher", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17223 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES_salt
,
17224 { "Salt", "lsarpc.lsa_TrustDomainInfoAuthInfoInternalAES.salt", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17225 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternal_auth_blob
,
17226 { "Auth Blob", "lsarpc.lsa_TrustDomainInfoAuthInfoInternal.auth_blob", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17227 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_count
,
17228 { "Incoming Count", "lsarpc.lsa_TrustDomainInfoAuthInfo.incoming_count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17229 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info
,
17230 { "Incoming Current Auth Info", "lsarpc.lsa_TrustDomainInfoAuthInfo.incoming_current_auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17231 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info
,
17232 { "Incoming Previous Auth Info", "lsarpc.lsa_TrustDomainInfoAuthInfo.incoming_previous_auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17233 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_count
,
17234 { "Outgoing Count", "lsarpc.lsa_TrustDomainInfoAuthInfo.outgoing_count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17235 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info
,
17236 { "Outgoing Current Auth Info", "lsarpc.lsa_TrustDomainInfoAuthInfo.outgoing_current_auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17237 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info
,
17238 { "Outgoing Previous Auth Info", "lsarpc.lsa_TrustDomainInfoAuthInfo.outgoing_previous_auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17239 { &hf_lsarpc_lsa_TrustDomainInfoBasic_netbios_name
,
17240 { "Netbios Name", "lsarpc.lsa_TrustDomainInfoBasic.netbios_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17241 { &hf_lsarpc_lsa_TrustDomainInfoBasic_sid
,
17242 { "Sid", "lsarpc.lsa_TrustDomainInfoBasic.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17243 { &hf_lsarpc_lsa_TrustDomainInfoBuffer_AuthType
,
17244 { "AuthType", "lsarpc.lsa_TrustDomainInfoBuffer.AuthType", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_TrustAuthType_vals
), 0, NULL
, HFILL
}},
17245 { &hf_lsarpc_lsa_TrustDomainInfoBuffer_data
,
17246 { "Data", "lsarpc.lsa_TrustDomainInfoBuffer.data", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17247 { &hf_lsarpc_lsa_TrustDomainInfoBuffer_last_update_time
,
17248 { "Last Update Time", "lsarpc.lsa_TrustDomainInfoBuffer.last_update_time", FT_ABSOLUTE_TIME
, ABSOLUTE_TIME_LOCAL
, NULL
, 0, NULL
, HFILL
}},
17249 { &hf_lsarpc_lsa_TrustDomainInfoControllers_entries
,
17250 { "Entries", "lsarpc.lsa_TrustDomainInfoControllers.entries", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17251 { &hf_lsarpc_lsa_TrustDomainInfoControllers_netbios_names
,
17252 { "Netbios Names", "lsarpc.lsa_TrustDomainInfoControllers.netbios_names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17253 { &hf_lsarpc_lsa_TrustDomainInfoFullInfo2Internal_auth_info
,
17254 { "Auth Info", "lsarpc.lsa_TrustDomainInfoFullInfo2Internal.auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17255 { &hf_lsarpc_lsa_TrustDomainInfoFullInfo2Internal_info
,
17256 { "Info", "lsarpc.lsa_TrustDomainInfoFullInfo2Internal.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17257 { &hf_lsarpc_lsa_TrustDomainInfoFullInfo2Internal_posix_offset
,
17258 { "Posix Offset", "lsarpc.lsa_TrustDomainInfoFullInfo2Internal.posix_offset", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17259 { &hf_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES_auth_info
,
17260 { "Auth Info", "lsarpc.lsa_TrustDomainInfoFullInfoInternalAES.auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17261 { &hf_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES_info_ex
,
17262 { "Info Ex", "lsarpc.lsa_TrustDomainInfoFullInfoInternalAES.info_ex", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17263 { &hf_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES_posix_offset
,
17264 { "Posix Offset", "lsarpc.lsa_TrustDomainInfoFullInfoInternalAES.posix_offset", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17265 { &hf_lsarpc_lsa_TrustDomainInfoFullInfoInternal_auth_info
,
17266 { "Auth Info", "lsarpc.lsa_TrustDomainInfoFullInfoInternal.auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17267 { &hf_lsarpc_lsa_TrustDomainInfoFullInfoInternal_info_ex
,
17268 { "Info Ex", "lsarpc.lsa_TrustDomainInfoFullInfoInternal.info_ex", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17269 { &hf_lsarpc_lsa_TrustDomainInfoFullInfoInternal_posix_offset
,
17270 { "Posix Offset", "lsarpc.lsa_TrustDomainInfoFullInfoInternal.posix_offset", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17271 { &hf_lsarpc_lsa_TrustDomainInfoFullInfo_auth_info
,
17272 { "Auth Info", "lsarpc.lsa_TrustDomainInfoFullInfo.auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17273 { &hf_lsarpc_lsa_TrustDomainInfoFullInfo_info_ex
,
17274 { "Info Ex", "lsarpc.lsa_TrustDomainInfoFullInfo.info_ex", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17275 { &hf_lsarpc_lsa_TrustDomainInfoFullInfo_posix_offset
,
17276 { "Posix Offset", "lsarpc.lsa_TrustDomainInfoFullInfo.posix_offset", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17277 { &hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data
,
17278 { "Forest Trust Data", "lsarpc.lsa_TrustDomainInfoInfoEx2Internal.forest_trust_data", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17279 { &hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_length
,
17280 { "Forest Trust Length", "lsarpc.lsa_TrustDomainInfoInfoEx2Internal.forest_trust_length", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17281 { &hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_info_ex
,
17282 { "Info Ex", "lsarpc.lsa_TrustDomainInfoInfoEx2Internal.info_ex", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17283 { &hf_lsarpc_lsa_TrustDomainInfoInfoEx_domain_name
,
17284 { "Domain Name", "lsarpc.lsa_TrustDomainInfoInfoEx.domain_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17285 { &hf_lsarpc_lsa_TrustDomainInfoInfoEx_netbios_name
,
17286 { "Netbios Name", "lsarpc.lsa_TrustDomainInfoInfoEx.netbios_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17287 { &hf_lsarpc_lsa_TrustDomainInfoInfoEx_sid
,
17288 { "Sid", "lsarpc.lsa_TrustDomainInfoInfoEx.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17289 { &hf_lsarpc_lsa_TrustDomainInfoInfoEx_trust_attributes
,
17290 { "Trust Attributes", "lsarpc.lsa_TrustDomainInfoInfoEx.trust_attributes", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
17291 { &hf_lsarpc_lsa_TrustDomainInfoInfoEx_trust_direction
,
17292 { "Trust Direction", "lsarpc.lsa_TrustDomainInfoInfoEx.trust_direction", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
17293 { &hf_lsarpc_lsa_TrustDomainInfoInfoEx_trust_type
,
17294 { "Trust Type", "lsarpc.lsa_TrustDomainInfoInfoEx.trust_type", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_TrustType_vals
), 0, NULL
, HFILL
}},
17295 { &hf_lsarpc_lsa_TrustDomainInfoName_netbios_name
,
17296 { "Netbios Name", "lsarpc.lsa_TrustDomainInfoName.netbios_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17297 { &hf_lsarpc_lsa_TrustDomainInfoPassword_old_password
,
17298 { "Old Password", "lsarpc.lsa_TrustDomainInfoPassword.old_password", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17299 { &hf_lsarpc_lsa_TrustDomainInfoPassword_password
,
17300 { "Password", "lsarpc.lsa_TrustDomainInfoPassword.password", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17301 { &hf_lsarpc_lsa_TrustDomainInfoPosixOffset_posix_offset
,
17302 { "Posix Offset", "lsarpc.lsa_TrustDomainInfoPosixOffset.posix_offset", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17303 { &hf_lsarpc_lsa_TrustDomainInfoSupportedEncTypes_enc_types
,
17304 { "Enc Types", "lsarpc.lsa_TrustDomainInfoSupportedEncTypes.enc_types", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
17305 { &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_AUTH
,
17306 { "LSA TRUSTED QUERY AUTH", "lsarpc.lsa_TrustedAccessMask.LSA_TRUSTED_QUERY_AUTH", FT_BOOLEAN
, 32, TFS(&lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_AUTH_tfs
), ( 0x00000040 ), NULL
, HFILL
}},
17307 { &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_CONTROLLERS
,
17308 { "LSA TRUSTED QUERY CONTROLLERS", "lsarpc.lsa_TrustedAccessMask.LSA_TRUSTED_QUERY_CONTROLLERS", FT_BOOLEAN
, 32, TFS(&lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_CONTROLLERS_tfs
), ( 0x00000002 ), NULL
, HFILL
}},
17309 { &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_DOMAIN_NAME
,
17310 { "LSA TRUSTED QUERY DOMAIN NAME", "lsarpc.lsa_TrustedAccessMask.LSA_TRUSTED_QUERY_DOMAIN_NAME", FT_BOOLEAN
, 32, TFS(&lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_DOMAIN_NAME_tfs
), ( 0x00000001 ), NULL
, HFILL
}},
17311 { &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_POSIX
,
17312 { "LSA TRUSTED QUERY POSIX", "lsarpc.lsa_TrustedAccessMask.LSA_TRUSTED_QUERY_POSIX", FT_BOOLEAN
, 32, TFS(&lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_POSIX_tfs
), ( 0x00000008 ), NULL
, HFILL
}},
17313 { &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_AUTH
,
17314 { "LSA TRUSTED SET AUTH", "lsarpc.lsa_TrustedAccessMask.LSA_TRUSTED_SET_AUTH", FT_BOOLEAN
, 32, TFS(&lsa_TrustedAccessMask_LSA_TRUSTED_SET_AUTH_tfs
), ( 0x00000020 ), NULL
, HFILL
}},
17315 { &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_CONTROLLERS
,
17316 { "LSA TRUSTED SET CONTROLLERS", "lsarpc.lsa_TrustedAccessMask.LSA_TRUSTED_SET_CONTROLLERS", FT_BOOLEAN
, 32, TFS(&lsa_TrustedAccessMask_LSA_TRUSTED_SET_CONTROLLERS_tfs
), ( 0x00000004 ), NULL
, HFILL
}},
17317 { &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_POSIX
,
17318 { "LSA TRUSTED SET POSIX", "lsarpc.lsa_TrustedAccessMask.LSA_TRUSTED_SET_POSIX", FT_BOOLEAN
, 32, TFS(&lsa_TrustedAccessMask_LSA_TRUSTED_SET_POSIX_tfs
), ( 0x00000010 ), NULL
, HFILL
}},
17319 { &hf_lsarpc_lsa_TrustedDomainInfo_auth_info
,
17320 { "Auth Info", "lsarpc.lsa_TrustedDomainInfo.auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17321 { &hf_lsarpc_lsa_TrustedDomainInfo_auth_info_internal
,
17322 { "Auth Info Internal", "lsarpc.lsa_TrustedDomainInfo.auth_info_internal", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17323 { &hf_lsarpc_lsa_TrustedDomainInfo_auth_info_internal_aes
,
17324 { "Auth Info Internal Aes", "lsarpc.lsa_TrustedDomainInfo.auth_info_internal_aes", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17325 { &hf_lsarpc_lsa_TrustedDomainInfo_controllers
,
17326 { "Controllers", "lsarpc.lsa_TrustedDomainInfo.controllers", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17327 { &hf_lsarpc_lsa_TrustedDomainInfo_enc_types
,
17328 { "Enc Types", "lsarpc.lsa_TrustedDomainInfo.enc_types", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17329 { &hf_lsarpc_lsa_TrustedDomainInfo_full_info
,
17330 { "Full Info", "lsarpc.lsa_TrustedDomainInfo.full_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17331 { &hf_lsarpc_lsa_TrustedDomainInfo_full_info2_internal
,
17332 { "Full Info2 Internal", "lsarpc.lsa_TrustedDomainInfo.full_info2_internal", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17333 { &hf_lsarpc_lsa_TrustedDomainInfo_full_info_internal
,
17334 { "Full Info Internal", "lsarpc.lsa_TrustedDomainInfo.full_info_internal", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17335 { &hf_lsarpc_lsa_TrustedDomainInfo_full_info_internal_aes
,
17336 { "Full Info Internal Aes", "lsarpc.lsa_TrustedDomainInfo.full_info_internal_aes", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17337 { &hf_lsarpc_lsa_TrustedDomainInfo_info_basic
,
17338 { "Info Basic", "lsarpc.lsa_TrustedDomainInfo.info_basic", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17339 { &hf_lsarpc_lsa_TrustedDomainInfo_info_ex
,
17340 { "Info Ex", "lsarpc.lsa_TrustedDomainInfo.info_ex", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17341 { &hf_lsarpc_lsa_TrustedDomainInfo_info_ex2_internal
,
17342 { "Info Ex2 Internal", "lsarpc.lsa_TrustedDomainInfo.info_ex2_internal", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17343 { &hf_lsarpc_lsa_TrustedDomainInfo_name
,
17344 { "Name", "lsarpc.lsa_TrustedDomainInfo.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17345 { &hf_lsarpc_lsa_TrustedDomainInfo_password
,
17346 { "Password", "lsarpc.lsa_TrustedDomainInfo.password", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17347 { &hf_lsarpc_lsa_TrustedDomainInfo_posix_offset
,
17348 { "Posix Offset", "lsarpc.lsa_TrustedDomainInfo.posix_offset", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17349 { &hf_lsarpc_lsa_krbAuthenticationOptions_LSA_POLICY_KERBEROS_VALIDATE_CLIENT
,
17350 { "LSA POLICY KERBEROS VALIDATE CLIENT", "lsarpc.lsa_krbAuthenticationOptions.LSA_POLICY_KERBEROS_VALIDATE_CLIENT", FT_BOOLEAN
, 32, TFS(&lsa_krbAuthenticationOptions_LSA_POLICY_KERBEROS_VALIDATE_CLIENT_tfs
), ( 0x00000080 ), NULL
, HFILL
}},
17351 { &hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_forest_trust_info
,
17352 { "Forest Trust Info", "lsarpc.lsa_lsaRQueryForestTrustInformation2.forest_trust_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17353 { &hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_handle
,
17354 { "Handle", "lsarpc.lsa_lsaRQueryForestTrustInformation2.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17355 { &hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_highest_record_type
,
17356 { "Highest Record Type", "lsarpc.lsa_lsaRQueryForestTrustInformation2.highest_record_type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_ForestTrustRecordType_vals
), 0, NULL
, HFILL
}},
17357 { &hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name
,
17358 { "Trusted Domain Name", "lsarpc.lsa_lsaRQueryForestTrustInformation2.trusted_domain_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17359 { &hf_lsarpc_lsa_lsaRQueryForestTrustInformation_forest_trust_info
,
17360 { "Forest Trust Info", "lsarpc.lsa_lsaRQueryForestTrustInformation.forest_trust_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17361 { &hf_lsarpc_lsa_lsaRQueryForestTrustInformation_handle
,
17362 { "Handle", "lsarpc.lsa_lsaRQueryForestTrustInformation.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17363 { &hf_lsarpc_lsa_lsaRQueryForestTrustInformation_highest_record_type
,
17364 { "Highest Record Type", "lsarpc.lsa_lsaRQueryForestTrustInformation.highest_record_type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_ForestTrustRecordType_vals
), 0, NULL
, HFILL
}},
17365 { &hf_lsarpc_lsa_lsaRQueryForestTrustInformation_trusted_domain_name
,
17366 { "Trusted Domain Name", "lsarpc.lsa_lsaRQueryForestTrustInformation.trusted_domain_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17367 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation2_check_only
,
17368 { "Check Only", "lsarpc.lsa_lsaRSetForestTrustInformation2.check_only", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17369 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation2_collision_info
,
17370 { "Collision Info", "lsarpc.lsa_lsaRSetForestTrustInformation2.collision_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17371 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation2_forest_trust_info
,
17372 { "Forest Trust Info", "lsarpc.lsa_lsaRSetForestTrustInformation2.forest_trust_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17373 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation2_handle
,
17374 { "Handle", "lsarpc.lsa_lsaRSetForestTrustInformation2.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17375 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation2_highest_record_type
,
17376 { "Highest Record Type", "lsarpc.lsa_lsaRSetForestTrustInformation2.highest_record_type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_ForestTrustRecordType_vals
), 0, NULL
, HFILL
}},
17377 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation2_trusted_domain_name
,
17378 { "Trusted Domain Name", "lsarpc.lsa_lsaRSetForestTrustInformation2.trusted_domain_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17379 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation_check_only
,
17380 { "Check Only", "lsarpc.lsa_lsaRSetForestTrustInformation.check_only", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17381 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation_collision_info
,
17382 { "Collision Info", "lsarpc.lsa_lsaRSetForestTrustInformation.collision_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17383 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation_forest_trust_info
,
17384 { "Forest Trust Info", "lsarpc.lsa_lsaRSetForestTrustInformation.forest_trust_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17385 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation_handle
,
17386 { "Handle", "lsarpc.lsa_lsaRSetForestTrustInformation.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17387 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation_highest_record_type
,
17388 { "Highest Record Type", "lsarpc.lsa_lsaRSetForestTrustInformation.highest_record_type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_ForestTrustRecordType_vals
), 0, NULL
, HFILL
}},
17389 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation_trusted_domain_name
,
17390 { "Trusted Domain Name", "lsarpc.lsa_lsaRSetForestTrustInformation.trusted_domain_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17391 { &hf_lsarpc_lsa_revision_info1_revision
,
17392 { "Revision", "lsarpc.lsa_revision_info1.revision", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17393 { &hf_lsarpc_lsa_revision_info1_supported_features
,
17394 { "Supported Features", "lsarpc.lsa_revision_info1.supported_features", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
17395 { &hf_lsarpc_lsa_revision_info_info1
,
17396 { "Info1", "lsarpc.lsa_revision_info.info1", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17397 { &hf_lsarpc_names
,
17398 { "Names", "lsarpc.lookup.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17399 { &hf_lsarpc_opnum
,
17400 { "Operation", "lsarpc.opnum", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17401 { &hf_lsarpc_policy_access_mask
,
17402 { "Access Mask", "lsarpc.policy.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
17403 { &hf_lsarpc_sec_desc_buf_len
,
17404 { "Sec Desc Buf Len", "lsarpc.sec_desc_buf_len", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17405 { &hf_lsarpc_secret_access_mask
,
17406 { "Access Mask", "lsarpc.policy.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
17407 { &hf_lsarpc_status
,
17408 { "NT Error", "lsarpc.status", FT_UINT32
, BASE_HEX
|BASE_EXT_STRING
, &NT_errors_ext
, 0, NULL
, HFILL
}},
17412 static int *ett
[] = {
17414 &ett_dcerpc_lsarpc
,
17415 &ett_lsarpc_security_secinfo
,
17416 &ett_lsarpc_kerb_EncTypes
,
17417 &ett_lsarpc_lsa_String
,
17418 &ett_lsarpc_lsa_StringLarge
,
17419 &ett_lsarpc_lsa_Strings
,
17420 &ett_lsarpc_lsa_AsciiString
,
17421 &ett_lsarpc_lsa_AsciiStringLarge
,
17422 &ett_lsarpc_lsa_BinaryString
,
17423 &ett_lsarpc_lsa_LUID
,
17424 &ett_lsarpc_lsa_PrivEntry
,
17425 &ett_lsarpc_lsa_PrivArray
,
17426 &ett_lsarpc_lsa_QosInfo
,
17427 &ett_lsarpc_lsa_ObjectAttribute
,
17428 &ett_lsarpc_lsa_PolicyAccessMask
,
17429 &ett_lsarpc_lsa_AccountAccessMask
,
17430 &ett_lsarpc_lsa_SecretAccessMask
,
17431 &ett_lsarpc_lsa_TrustedAccessMask
,
17432 &ett_lsarpc_lsa_AuditLogInfo
,
17433 &ett_lsarpc_lsa_AuditEventsInfo
,
17434 &ett_lsarpc_lsa_DomainInfo
,
17435 &ett_lsarpc_lsa_PDAccountInfo
,
17436 &ett_lsarpc_lsa_ServerRole
,
17437 &ett_lsarpc_lsa_ReplicaSourceInfo
,
17438 &ett_lsarpc_lsa_DefaultQuotaInfo
,
17439 &ett_lsarpc_lsa_ModificationInfo
,
17440 &ett_lsarpc_lsa_AuditFullSetInfo
,
17441 &ett_lsarpc_lsa_AuditFullQueryInfo
,
17442 &ett_lsarpc_lsa_DnsDomainInfo
,
17443 &ett_lsarpc_lsa_PolicyInformation
,
17444 &ett_lsarpc_lsa_SidPtr
,
17445 &ett_lsarpc_lsa_SidArray
,
17446 &ett_lsarpc_lsa_DomainList
,
17447 &ett_lsarpc_lsa_TranslatedSid
,
17448 &ett_lsarpc_lsa_TransSidArray
,
17449 &ett_lsarpc_lsa_RefDomainList
,
17450 &ett_lsarpc_lsa_TranslatedName
,
17451 &ett_lsarpc_lsa_TransNameArray
,
17452 &ett_lsarpc_lsa_LUIDAttribute
,
17453 &ett_lsarpc_lsa_PrivilegeSet
,
17454 &ett_lsarpc_lsa_DATA_BUF
,
17455 &ett_lsarpc_lsa_DATA_BUF2
,
17456 &ett_lsarpc_lsa_TrustDirection
,
17457 &ett_lsarpc_lsa_TrustAttributes
,
17458 &ett_lsarpc_lsa_TrustDomainInfoName
,
17459 &ett_lsarpc_lsa_TrustDomainInfoControllers
,
17460 &ett_lsarpc_lsa_TrustDomainInfoPosixOffset
,
17461 &ett_lsarpc_lsa_TrustDomainInfoPassword
,
17462 &ett_lsarpc_lsa_TrustDomainInfoBasic
,
17463 &ett_lsarpc_lsa_TrustDomainInfoInfoEx
,
17464 &ett_lsarpc_lsa_TrustDomainInfoBuffer
,
17465 &ett_lsarpc_lsa_TrustDomainInfoAuthInfo
,
17466 &ett_lsarpc_lsa_TrustDomainInfoFullInfo
,
17467 &ett_lsarpc_lsa_TrustDomainInfoAuthInfoInternal
,
17468 &ett_lsarpc_lsa_TrustDomainInfoFullInfoInternal
,
17469 &ett_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES
,
17470 &ett_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES
,
17471 &ett_lsarpc_lsa_TrustDomainInfoInfoEx2Internal
,
17472 &ett_lsarpc_lsa_TrustDomainInfoFullInfo2Internal
,
17473 &ett_lsarpc_lsa_TrustDomainInfoSupportedEncTypes
,
17474 &ett_lsarpc_lsa_TrustedDomainInfo
,
17475 &ett_lsarpc_lsa_DATA_BUF_PTR
,
17476 &ett_lsarpc_lsa_RightAttribute
,
17477 &ett_lsarpc_lsa_RightSet
,
17478 &ett_lsarpc_lsa_DomainListEx
,
17479 &ett_lsarpc_lsa_DomainInfoQoS
,
17480 &ett_lsarpc_lsa_krbAuthenticationOptions
,
17481 &ett_lsarpc_lsa_DomainInfoKerberos
,
17482 &ett_lsarpc_lsa_DomainInfoEfs
,
17483 &ett_lsarpc_lsa_DomainInformationPolicy
,
17484 &ett_lsarpc_lsa_TranslatedName2
,
17485 &ett_lsarpc_lsa_TransNameArray2
,
17486 &ett_lsarpc_lsa_TranslatedSid2
,
17487 &ett_lsarpc_lsa_TransSidArray2
,
17488 &ett_lsarpc_lsa_TranslatedSid3
,
17489 &ett_lsarpc_lsa_TransSidArray3
,
17490 &ett_lsarpc_lsa_ForestTrustRecordFlags
,
17491 &ett_lsarpc_lsa_ForestTrustBinaryData
,
17492 &ett_lsarpc_lsa_ForestTrustDomainInfo
,
17493 &ett_lsarpc_lsa_ForestTrustData
,
17494 &ett_lsarpc_lsa_ForestTrustRecord
,
17495 &ett_lsarpc_lsa_ForestTrustInformation
,
17496 &ett_lsarpc_lsa_ForestTrustCollisionRecord
,
17497 &ett_lsarpc_lsa_ForestTrustCollisionInfo
,
17498 &ett_lsarpc_lsa_RevisionSupportedFeature
,
17499 &ett_lsarpc_lsa_revision_info1
,
17500 &ett_lsarpc_lsa_revision_info
,
17501 &ett_lsarpc_lsa_ForestTrustData2
,
17502 &ett_lsarpc_lsa_ForestTrustRecord2
,
17503 &ett_lsarpc_lsa_ForestTrustInformation2
,
17506 proto_dcerpc_lsarpc
= proto_register_protocol("Local Security Authority", "LSARPC", "lsarpc");
17507 proto_register_field_array(proto_dcerpc_lsarpc
, hf
, array_length (hf
));
17508 proto_register_subtree_array(ett
, array_length(ett
));
17511 void proto_reg_handoff_dcerpc_lsarpc(void)
17513 dcerpc_init_uuid(proto_dcerpc_lsarpc
, ett_dcerpc_lsarpc
,
17514 &uuid_dcerpc_lsarpc
, ver_dcerpc_lsarpc
,
17515 lsarpc_dissectors
, hf_lsarpc_opnum
);