1 /* packet-dcerpc-rs_attr_schema.c
3 * Routines for rs_attr_schema dissection
4 * Copyright 2004, Jaime Fournier <jaime.fournier@hush.com>
5 * This information is based off the released idl files from opengroup.
6 * ftp://ftp.opengroup.org/pub/dce122/dce/src/security.tar.gz security/idl/rs_attr_schema.idl
8 * Wireshark - Network traffic analyzer
9 * By Gerald Combs <gerald@wireshark.org>
10 * Copyright 1998 Gerald Combs
12 * SPDX-License-Identifier: GPL-2.0-or-later
18 #include <epan/packet.h>
19 #include "packet-dcerpc.h"
21 void proto_register_rs_attr_schema (void);
22 void proto_reg_handoff_rs_attr_schema (void);
24 static int proto_rs_attr_schema
;
25 static int hf_rs_attr_schema_opnum
;
28 static int ett_rs_attr_schema
;
29 static e_guid_t uuid_rs_attr_schema
=
30 { 0xb47c9460, 0x567f, 0x11cb, {0x8c, 0x09, 0x08, 0x00, 0x1e, 0x04, 0xde,
32 static uint16_t ver_rs_attr_schema
;
35 static const dcerpc_sub_dissector rs_attr_schema_dissectors
[] = {
36 {0, "create_entry", NULL
, NULL
},
37 {1, "delete_entry", NULL
, NULL
},
38 {2, "update_entry", NULL
, NULL
},
39 {3, "cursor_init", NULL
, NULL
},
40 {4, "scan", NULL
, NULL
},
41 {5, "lookup_by_name", NULL
, NULL
},
42 {6, "lookup_by_id", NULL
, NULL
},
43 {7, "get_referral", NULL
, NULL
},
44 {8, "get_acl_mgrs", NULL
, NULL
},
45 {9, "aclmgr_strings", NULL
, NULL
},
50 proto_register_rs_attr_schema (void)
52 static hf_register_info hf
[] = {
53 {&hf_rs_attr_schema_opnum
,
54 {"Operation", "rs_attr_schema.opnum", FT_UINT16
, BASE_DEC
, NULL
, 0x0,
61 proto_rs_attr_schema
=
62 proto_register_protocol ("DCE/RPC Registry Server Attributes Schema",
63 "rs_attr_schema", "rs_attr_schema");
64 proto_register_field_array (proto_rs_attr_schema
, hf
, array_length (hf
));
65 proto_register_subtree_array (ett
, array_length (ett
));
69 proto_reg_handoff_rs_attr_schema (void)
71 /* Register the protocol as dcerpc */
72 dcerpc_init_uuid (proto_rs_attr_schema
, ett_rs_attr_schema
,
73 &uuid_rs_attr_schema
, ver_rs_attr_schema
,
74 rs_attr_schema_dissectors
, hf_rs_attr_schema_opnum
);
78 * Editor modelines - https://www.wireshark.org/tools/modelines.html
83 * indent-tabs-mode: nil
86 * ex: set shiftwidth=2 tabstop=8 expandtab:
87 * :indentSize=2:tabSize=8:noTabs=true: