1 HF_FIELD hf_KERB_RPC_ENCRYPTION_KEY_reserved1 "Reserved1" "rcg.KERB_RPC_ENCRYPTION_KEY.reserved1" FT_UINT32 BASE_HEX NULL 0 "" "" ""
2 HF_RENAME hf_rcg_KERB_RPC_ENCRYPTION_KEY_reserved1 hf_KERB_RPC_ENCRYPTION_KEY_reserved1
4 HF_FIELD hf_KERB_RPC_ENCRYPTION_KEY_reserved2 "Encoding type" "rcg.KERB_RPC_ENCRYPTION_KEY.reserved2" FT_UINT32 BASE_HEX NULL 0 "" "" ""
5 HF_RENAME hf_rcg_KERB_RPC_ENCRYPTION_KEY_reserved2 hf_KERB_RPC_ENCRYPTION_KEY_reserved2
8 NOEMIT rcg_dissect_element_KERB_ASN1_DATA_CHECKSUM_checksum__
9 MANUAL rcg_dissect_element_KERB_ASN1_DATA_CHECKSUM_checksum__
10 MANUAL rcg_dissect_element_KERB_ASN1_DATA_CHECKSUM_checksum_
12 MANUAL rcg_dissect_struct_KerbCredIsoRemoteOutput
13 MANUAL rcg_dissect_struct_KerbCredIsoRemoteInput
14 MANUAL rcg_dissect_struct_NtlmCredIsoRemoteOutput
15 MANUAL rcg_dissect_struct_NtlmCredIsoRemoteInput
20 #include <epan/asn1.h>
21 #include "packet-kerberos.h"
24 rcg_dissect_element_KERB_ASN1_DATA_CHECKSUM_checksum_(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, dcerpc_info* di _U_ , guint8 *drep _U_)
26 if (di->conformant_run)
33 asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
34 asn1_ctx.private_data = /*&rcg*/NULL;
36 offset = dissect_krb5_Checksum(tree, tvb, offset + 4, &asn1_ctx);
42 rcg_dissect_struct_KerbCredIsoRemoteOutput(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_)
45 proto_item *item = NULL;
46 proto_tree *tree = NULL;
54 item = proto_tree_add_item(parent_tree, hf_index, tvb, offset, -1, ENC_NA);
55 tree = proto_item_add_subtree(item, ett_rcg_KerbCredIsoRemoteOutput);
58 offset = rcg_dissect_element_KerbCredIsoRemoteOutput_CallId(tvb, offset, pinfo, tree, di, drep, &CallId);
59 col_set_str(pinfo->cinfo, COL_INFO, val_to_str(CallId, rcg_RemoteGuardCallId_vals, "unknown operation (%u)"));
61 offset = rcg_dissect_element_KerbCredIsoRemoteOutput_Status(tvb, offset, pinfo, tree, di, drep);
62 offset = rcg_dissect_element_KerbCredIsoRemoteOutput_callUnion(tvb, offset, pinfo, tree, di, drep, CallId);
63 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
65 proto_item_set_len(item, offset-old_offset);
67 if (di->call_data->flags & DCERPC_IS_NDR64) {
75 rcg_dissect_struct_KerbCredIsoRemoteInput(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, guint8 *drep _U_, int hf_index _U_, guint32 param _U_)
78 proto_item *item = NULL;
79 proto_tree *tree = NULL;
87 item = proto_tree_add_item(parent_tree, hf_index, tvb, offset, -1, ENC_NA);
88 tree = proto_item_add_subtree(item, ett_rcg_KerbCredIsoRemoteInput);
91 offset = rcg_dissect_element_KerbCredIsoRemoteInput_CallId(tvb, offset, pinfo, tree, di, drep, &CallId);
92 col_set_str(pinfo->cinfo, COL_INFO, val_to_str(CallId, rcg_RemoteGuardCallId_vals, "unknown operation (%u)"));
94 offset = rcg_dissect_element_KerbCredIsoRemoteInput_callUnion(tvb, offset, pinfo, tree, di, drep, CallId);
95 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
96 proto_item_set_len(item, offset-old_offset);
98 if (di->call_data->flags & DCERPC_IS_NDR64) {
106 rcg_dissect_struct_NtlmCredIsoRemoteOutput(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_, int hf_index _U_, uint32_t param _U_)
109 proto_item *item = NULL;
110 proto_tree *tree = NULL;
113 if (di->conformant_run) return offset;
120 item = proto_tree_add_item(parent_tree, hf_index, tvb, offset, -1, ENC_NA);
121 tree = proto_item_add_subtree(item, ett_rcg_NtlmCredIsoRemoteOutput);
124 offset = rcg_dissect_element_NtlmCredIsoRemoteOutput_CallId(tvb, offset, pinfo, tree, di, drep, &CallId);
125 col_set_str(pinfo->cinfo, COL_INFO, val_to_str(CallId, rcg_RemoteGuardCallId_vals, "unknown operation (%u)"));
127 offset = rcg_dissect_element_NtlmCredIsoRemoteOutput_Status(tvb, offset, pinfo, tree, di, drep);
128 offset = rcg_dissect_element_NtlmCredIsoRemoteOutput_callUnion(tvb, offset, pinfo, tree, di, drep, CallId);
129 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
131 proto_item_set_len(item, offset-old_offset);
133 if (di->call_data->flags & DCERPC_IS_NDR64) {
141 rcg_dissect_struct_NtlmCredIsoRemoteInput(tvbuff_t *tvb _U_, int offset _U_, packet_info *pinfo _U_, proto_tree *parent_tree _U_, dcerpc_info* di _U_, uint8_t *drep _U_, int hf_index _U_, uint32_t param _U_)
144 proto_item *item = NULL;
145 proto_tree *tree = NULL;
148 if (di->conformant_run) return offset;
155 item = proto_tree_add_item(parent_tree, hf_index, tvb, offset, -1, ENC_NA);
156 tree = proto_item_add_subtree(item, ett_rcg_NtlmCredIsoRemoteInput);
159 offset = rcg_dissect_element_NtlmCredIsoRemoteInput_CallId(tvb, offset, pinfo, tree, di, drep, &CallId);
160 col_set_str(pinfo->cinfo, COL_INFO, val_to_str(CallId, rcg_RemoteGuardCallId_vals, "unknown operation (%u)"));
162 offset = rcg_dissect_element_NtlmCredIsoRemoteInput_callUnion(tvb, offset, pinfo, tree, di, drep, CallId);
163 offset = dissect_deferred_pointers(pinfo, tvb, offset, di, drep);
165 proto_item_set_len(item, offset-old_offset);
167 if (di->call_data->flags & DCERPC_IS_NDR64) {