1 /* packet-dcerpc-rs_attr.c
3 * Routines for dcerpc Registry Server Attributes Manipulation Interface
4 * Copyright 2002, Jaime Fournier <Jaime.Fournier@hush.com>
5 * This information is based off the released idl files from opengroup.
6 * ftp://ftp.opengroup.org/pub/dce122/dce/src/security.tar.gz security/idl/rs_attr.idl
8 * Wireshark - Network traffic analyzer
9 * By Gerald Combs <gerald@wireshark.org>
10 * Copyright 1998 Gerald Combs
12 * SPDX-License-Identifier: GPL-2.0-or-later
18 #include <epan/packet.h>
19 #include "packet-dcerpc.h"
21 void proto_register_rs_attr (void);
22 void proto_reg_handoff_rs_attr (void);
24 static int proto_rs_attr
;
25 static int hf_rs_attr_opnum
;
28 static int ett_rs_attr
;
31 static e_guid_t uuid_rs_attr
= { 0xa71fc1e8, 0x567f, 0x11cb, { 0x98, 0xa0, 0x08, 0x00, 0x1e, 0x04, 0xde, 0x8c } };
32 static uint16_t ver_rs_attr
;
35 static const dcerpc_sub_dissector rs_attr_dissectors
[] = {
36 { 0, "rs_attr_cursor_init", NULL
, NULL
},
37 { 1, "rs_attr_lookup_by_id", NULL
, NULL
},
38 { 2, "rs_attr_lookup_no_expand", NULL
, NULL
},
39 { 3, "rs_attr_lookup_by_name", NULL
, NULL
},
40 { 4, "rs_attr_update", NULL
, NULL
},
41 { 5, "rs_attr_test_and_update", NULL
, NULL
},
42 { 6, "rs_attr_delete", NULL
, NULL
},
43 { 7, "rs_attr_get_referral", NULL
, NULL
},
44 { 8, "rs_attr_get_effective", NULL
, NULL
},
45 { 0, NULL
, NULL
, NULL
}
49 proto_register_rs_attr (void)
51 static hf_register_info hf
[] = {
53 { "Operation", "rs_attr.opnum", FT_UINT16
, BASE_DEC
, NULL
, 0x0, NULL
, HFILL
}},
59 proto_rs_attr
= proto_register_protocol ("Registry Server Attributes Manipulation Interface", "RS_ATTR", "rs_attr");
60 proto_register_field_array (proto_rs_attr
, hf
, array_length (hf
));
61 proto_register_subtree_array (ett
, array_length (ett
));
65 proto_reg_handoff_rs_attr (void)
67 /* Register the protocol as dcerpc */
68 dcerpc_init_uuid (proto_rs_attr
, ett_rs_attr
, &uuid_rs_attr
, ver_rs_attr
, rs_attr_dissectors
, hf_rs_attr_opnum
);
72 * Editor modelines - https://www.wireshark.org/tools/modelines.html
80 * vi: set shiftwidth=8 tabstop=8 noexpandtab:
81 * :indentSize=8:tabSize=8:noTabs=false: