2 This file was automatically generated by Pidl
3 from lsa.idl and lsa.cnf.
5 Pidl is a perl based IDL compiler for DCE/RPC idl files.
6 It is maintained by the Samba team, not the Wireshark team.
7 Instructions on how to download and install Pidl can be
8 found at https://wiki.wireshark.org/Pidl
14 #include <wsutil/array.h>
15 #include <epan/packet.h>
18 #include "packet-dcerpc.h"
19 #include "packet-dcerpc-nt.h"
20 #include "packet-windows-common.h"
21 #include "packet-dcerpc-lsa.h"
22 void proto_register_dcerpc_lsarpc(void);
23 void proto_reg_handoff_dcerpc_lsarpc(void);
25 /* Ett declarations */
26 static int ett_lsarpc_names
;
27 static int ett_dcerpc_lsarpc
;
28 static int ett_lsarpc_security_secinfo
;
29 static int ett_lsarpc_kerb_EncTypes
;
30 static int ett_lsarpc_lsa_String
;
31 static int ett_lsarpc_lsa_StringLarge
;
32 static int ett_lsarpc_lsa_Strings
;
33 static int ett_lsarpc_lsa_AsciiString
;
34 static int ett_lsarpc_lsa_AsciiStringLarge
;
35 static int ett_lsarpc_lsa_BinaryString
;
36 static int ett_lsarpc_lsa_LUID
;
37 static int ett_lsarpc_lsa_PrivEntry
;
38 static int ett_lsarpc_lsa_PrivArray
;
39 static int ett_lsarpc_lsa_QosInfo
;
40 static int ett_lsarpc_lsa_ObjectAttribute
;
41 static int ett_lsarpc_lsa_PolicyAccessMask
;
42 static int ett_lsarpc_lsa_AccountAccessMask
;
43 static int ett_lsarpc_lsa_SecretAccessMask
;
44 static int ett_lsarpc_lsa_TrustedAccessMask
;
45 static int ett_lsarpc_lsa_AuditLogInfo
;
46 static int ett_lsarpc_lsa_AuditEventsInfo
;
47 static int ett_lsarpc_lsa_DomainInfo
;
48 static int ett_lsarpc_lsa_PDAccountInfo
;
49 static int ett_lsarpc_lsa_ServerRole
;
50 static int ett_lsarpc_lsa_ReplicaSourceInfo
;
51 static int ett_lsarpc_lsa_DefaultQuotaInfo
;
52 static int ett_lsarpc_lsa_ModificationInfo
;
53 static int ett_lsarpc_lsa_AuditFullSetInfo
;
54 static int ett_lsarpc_lsa_AuditFullQueryInfo
;
55 static int ett_lsarpc_lsa_DnsDomainInfo
;
56 static int ett_lsarpc_lsa_PolicyInformation
;
57 static int ett_lsarpc_lsa_SidPtr
;
58 static int ett_lsarpc_lsa_SidArray
;
59 static int ett_lsarpc_lsa_DomainList
;
60 static int ett_lsarpc_lsa_TranslatedSid
;
61 static int ett_lsarpc_lsa_TransSidArray
;
62 static int ett_lsarpc_lsa_RefDomainList
;
63 static int ett_lsarpc_lsa_TranslatedName
;
64 static int ett_lsarpc_lsa_TransNameArray
;
65 static int ett_lsarpc_lsa_LUIDAttribute
;
66 static int ett_lsarpc_lsa_PrivilegeSet
;
67 static int ett_lsarpc_lsa_DATA_BUF
;
68 static int ett_lsarpc_lsa_DATA_BUF2
;
69 static int ett_lsarpc_lsa_TrustDirection
;
70 static int ett_lsarpc_lsa_TrustAttributes
;
71 static int ett_lsarpc_lsa_TrustDomainInfoName
;
72 static int ett_lsarpc_lsa_TrustDomainInfoControllers
;
73 static int ett_lsarpc_lsa_TrustDomainInfoPosixOffset
;
74 static int ett_lsarpc_lsa_TrustDomainInfoPassword
;
75 static int ett_lsarpc_lsa_TrustDomainInfoBasic
;
76 static int ett_lsarpc_lsa_TrustDomainInfoInfoEx
;
77 static int ett_lsarpc_lsa_TrustDomainInfoBuffer
;
78 static int ett_lsarpc_lsa_TrustDomainInfoAuthInfo
;
79 static int ett_lsarpc_lsa_TrustDomainInfoFullInfo
;
80 static int ett_lsarpc_lsa_TrustDomainInfoAuthInfoInternal
;
81 static int ett_lsarpc_lsa_TrustDomainInfoFullInfoInternal
;
82 static int ett_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES
;
83 static int ett_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES
;
84 static int ett_lsarpc_lsa_TrustDomainInfoInfoEx2Internal
;
85 static int ett_lsarpc_lsa_TrustDomainInfoFullInfo2Internal
;
86 static int ett_lsarpc_lsa_TrustDomainInfoSupportedEncTypes
;
87 static int ett_lsarpc_lsa_TrustedDomainInfo
;
88 static int ett_lsarpc_lsa_DATA_BUF_PTR
;
89 static int ett_lsarpc_lsa_RightAttribute
;
90 static int ett_lsarpc_lsa_RightSet
;
91 static int ett_lsarpc_lsa_DomainListEx
;
92 static int ett_lsarpc_lsa_DomainInfoQoS
;
93 static int ett_lsarpc_lsa_krbAuthenticationOptions
;
94 static int ett_lsarpc_lsa_DomainInfoKerberos
;
95 static int ett_lsarpc_lsa_DomainInfoEfs
;
96 static int ett_lsarpc_lsa_DomainInformationPolicy
;
97 static int ett_lsarpc_lsa_TranslatedName2
;
98 static int ett_lsarpc_lsa_TransNameArray2
;
99 static int ett_lsarpc_lsa_TranslatedSid2
;
100 static int ett_lsarpc_lsa_TransSidArray2
;
101 static int ett_lsarpc_lsa_TranslatedSid3
;
102 static int ett_lsarpc_lsa_TransSidArray3
;
103 static int ett_lsarpc_lsa_ForestTrustRecordFlags
;
104 static int ett_lsarpc_lsa_ForestTrustBinaryData
;
105 static int ett_lsarpc_lsa_ForestTrustDomainInfo
;
106 static int ett_lsarpc_lsa_ForestTrustData
;
107 static int ett_lsarpc_lsa_ForestTrustRecord
;
108 static int ett_lsarpc_lsa_ForestTrustInformation
;
109 static int ett_lsarpc_lsa_ForestTrustCollisionRecord
;
110 static int ett_lsarpc_lsa_ForestTrustCollisionInfo
;
111 static int ett_lsarpc_lsa_RevisionSupportedFeature
;
112 static int ett_lsarpc_lsa_revision_info1
;
113 static int ett_lsarpc_lsa_revision_info
;
114 static int ett_lsarpc_lsa_ForestTrustData2
;
115 static int ett_lsarpc_lsa_ForestTrustRecord2
;
116 static int ett_lsarpc_lsa_ForestTrustInformation2
;
119 /* Header field declarations */
120 static int hf_lsarpc_String_name
;
121 static int hf_lsarpc_account_access_mask
;
122 static int hf_lsarpc_domain_access_mask
;
123 static int hf_lsarpc_efs_blob_len
;
124 static int hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_PRIVILEGES
;
125 static int hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_QUOTAS
;
126 static int hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS
;
127 static int hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_VIEW
;
128 static int hf_lsarpc_lsa_AddAccountRights_handle
;
129 static int hf_lsarpc_lsa_AddAccountRights_rights
;
130 static int hf_lsarpc_lsa_AddAccountRights_sid
;
131 static int hf_lsarpc_lsa_AddPrivilegesToAccount_handle
;
132 static int hf_lsarpc_lsa_AddPrivilegesToAccount_privs
;
133 static int hf_lsarpc_lsa_AsciiStringLarge_length
;
134 static int hf_lsarpc_lsa_AsciiStringLarge_size
;
135 static int hf_lsarpc_lsa_AsciiStringLarge_string
;
136 static int hf_lsarpc_lsa_AsciiString_length
;
137 static int hf_lsarpc_lsa_AsciiString_size
;
138 static int hf_lsarpc_lsa_AsciiString_string
;
139 static int hf_lsarpc_lsa_AuditEventsInfo_auditing_mode
;
140 static int hf_lsarpc_lsa_AuditEventsInfo_count
;
141 static int hf_lsarpc_lsa_AuditEventsInfo_settings
;
142 static int hf_lsarpc_lsa_AuditFullQueryInfo_log_is_full
;
143 static int hf_lsarpc_lsa_AuditFullQueryInfo_shutdown_on_full
;
144 static int hf_lsarpc_lsa_AuditFullSetInfo_shutdown_on_full
;
145 static int hf_lsarpc_lsa_AuditLogInfo_maximum_log_size
;
146 static int hf_lsarpc_lsa_AuditLogInfo_next_audit_record
;
147 static int hf_lsarpc_lsa_AuditLogInfo_percent_full
;
148 static int hf_lsarpc_lsa_AuditLogInfo_retention_time
;
149 static int hf_lsarpc_lsa_AuditLogInfo_shutdown_in_progress
;
150 static int hf_lsarpc_lsa_AuditLogInfo_time_to_shutdown
;
151 static int hf_lsarpc_lsa_BinaryString_array
;
152 static int hf_lsarpc_lsa_BinaryString_length
;
153 static int hf_lsarpc_lsa_BinaryString_size
;
154 static int hf_lsarpc_lsa_CloseTrustedDomainEx_handle
;
155 static int hf_lsarpc_lsa_Close_handle
;
156 static int hf_lsarpc_lsa_CreateAccount_access_mask
;
157 static int hf_lsarpc_lsa_CreateAccount_acct_handle
;
158 static int hf_lsarpc_lsa_CreateAccount_handle
;
159 static int hf_lsarpc_lsa_CreateAccount_sid
;
160 static int hf_lsarpc_lsa_CreateSecret_access_mask
;
161 static int hf_lsarpc_lsa_CreateSecret_handle
;
162 static int hf_lsarpc_lsa_CreateSecret_name
;
163 static int hf_lsarpc_lsa_CreateSecret_sec_handle
;
164 static int hf_lsarpc_lsa_CreateTrustedDomainEx2_access_mask
;
165 static int hf_lsarpc_lsa_CreateTrustedDomainEx2_auth_info_internal
;
166 static int hf_lsarpc_lsa_CreateTrustedDomainEx2_info
;
167 static int hf_lsarpc_lsa_CreateTrustedDomainEx2_policy_handle
;
168 static int hf_lsarpc_lsa_CreateTrustedDomainEx2_trustdom_handle
;
169 static int hf_lsarpc_lsa_CreateTrustedDomainEx3_access_mask
;
170 static int hf_lsarpc_lsa_CreateTrustedDomainEx3_auth_info_internal
;
171 static int hf_lsarpc_lsa_CreateTrustedDomainEx3_info
;
172 static int hf_lsarpc_lsa_CreateTrustedDomainEx3_policy_handle
;
173 static int hf_lsarpc_lsa_CreateTrustedDomainEx3_trustdom_handle
;
174 static int hf_lsarpc_lsa_CreateTrustedDomainEx_access_mask
;
175 static int hf_lsarpc_lsa_CreateTrustedDomainEx_auth_info
;
176 static int hf_lsarpc_lsa_CreateTrustedDomainEx_info
;
177 static int hf_lsarpc_lsa_CreateTrustedDomainEx_policy_handle
;
178 static int hf_lsarpc_lsa_CreateTrustedDomainEx_trustdom_handle
;
179 static int hf_lsarpc_lsa_CreateTrustedDomain_access_mask
;
180 static int hf_lsarpc_lsa_CreateTrustedDomain_info
;
181 static int hf_lsarpc_lsa_CreateTrustedDomain_policy_handle
;
182 static int hf_lsarpc_lsa_CreateTrustedDomain_trustdom_handle
;
183 static int hf_lsarpc_lsa_DATA_BUF2_data
;
184 static int hf_lsarpc_lsa_DATA_BUF2_size
;
185 static int hf_lsarpc_lsa_DATA_BUF_PTR_buf
;
186 static int hf_lsarpc_lsa_DATA_BUF_data
;
187 static int hf_lsarpc_lsa_DATA_BUF_length
;
188 static int hf_lsarpc_lsa_DATA_BUF_size
;
189 static int hf_lsarpc_lsa_DefaultQuotaInfo_max_wss
;
190 static int hf_lsarpc_lsa_DefaultQuotaInfo_min_wss
;
191 static int hf_lsarpc_lsa_DefaultQuotaInfo_non_paged_pool
;
192 static int hf_lsarpc_lsa_DefaultQuotaInfo_paged_pool
;
193 static int hf_lsarpc_lsa_DefaultQuotaInfo_pagefile
;
194 static int hf_lsarpc_lsa_DefaultQuotaInfo_unknown
;
195 static int hf_lsarpc_lsa_DeleteObject_handle
;
196 static int hf_lsarpc_lsa_DeleteTrustedDomain_dom_sid
;
197 static int hf_lsarpc_lsa_DeleteTrustedDomain_handle
;
198 static int hf_lsarpc_lsa_Delete_handle
;
199 static int hf_lsarpc_lsa_DnsDomainInfo_dns_domain
;
200 static int hf_lsarpc_lsa_DnsDomainInfo_dns_forest
;
201 static int hf_lsarpc_lsa_DnsDomainInfo_domain_guid
;
202 static int hf_lsarpc_lsa_DnsDomainInfo_name
;
203 static int hf_lsarpc_lsa_DnsDomainInfo_sid
;
204 static int hf_lsarpc_lsa_DomainInfoEfs_blob_size
;
205 static int hf_lsarpc_lsa_DomainInfoEfs_efs_blob
;
206 static int hf_lsarpc_lsa_DomainInfoKerberos_authentication_options
;
207 static int hf_lsarpc_lsa_DomainInfoKerberos_clock_skew
;
208 static int hf_lsarpc_lsa_DomainInfoKerberos_reserved
;
209 static int hf_lsarpc_lsa_DomainInfoKerberos_service_tkt_lifetime
;
210 static int hf_lsarpc_lsa_DomainInfoKerberos_user_tkt_lifetime
;
211 static int hf_lsarpc_lsa_DomainInfoKerberos_user_tkt_renewaltime
;
212 static int hf_lsarpc_lsa_DomainInfoQoS_quality_of_service
;
213 static int hf_lsarpc_lsa_DomainInfo_name
;
214 static int hf_lsarpc_lsa_DomainInfo_sid
;
215 static int hf_lsarpc_lsa_DomainInformationPolicy_efs_info
;
216 static int hf_lsarpc_lsa_DomainInformationPolicy_kerberos_info
;
217 static int hf_lsarpc_lsa_DomainInformationPolicy_qos_info
;
218 static int hf_lsarpc_lsa_DomainListEx_count
;
219 static int hf_lsarpc_lsa_DomainListEx_domains
;
220 static int hf_lsarpc_lsa_DomainList_count
;
221 static int hf_lsarpc_lsa_DomainList_domains
;
222 static int hf_lsarpc_lsa_EnumAccountRights_handle
;
223 static int hf_lsarpc_lsa_EnumAccountRights_rights
;
224 static int hf_lsarpc_lsa_EnumAccountRights_sid
;
225 static int hf_lsarpc_lsa_EnumAccountsWithUserRight_handle
;
226 static int hf_lsarpc_lsa_EnumAccountsWithUserRight_name
;
227 static int hf_lsarpc_lsa_EnumAccountsWithUserRight_sids
;
228 static int hf_lsarpc_lsa_EnumAccounts_handle
;
229 static int hf_lsarpc_lsa_EnumAccounts_num_entries
;
230 static int hf_lsarpc_lsa_EnumAccounts_resume_handle
;
231 static int hf_lsarpc_lsa_EnumAccounts_sids
;
232 static int hf_lsarpc_lsa_EnumPrivsAccount_handle
;
233 static int hf_lsarpc_lsa_EnumPrivsAccount_privs
;
234 static int hf_lsarpc_lsa_EnumPrivs_handle
;
235 static int hf_lsarpc_lsa_EnumPrivs_max_count
;
236 static int hf_lsarpc_lsa_EnumPrivs_privs
;
237 static int hf_lsarpc_lsa_EnumPrivs_resume_handle
;
238 static int hf_lsarpc_lsa_EnumTrustDom_domains
;
239 static int hf_lsarpc_lsa_EnumTrustDom_handle
;
240 static int hf_lsarpc_lsa_EnumTrustDom_max_size
;
241 static int hf_lsarpc_lsa_EnumTrustDom_resume_handle
;
242 static int hf_lsarpc_lsa_EnumTrustedDomainsEx_domains
;
243 static int hf_lsarpc_lsa_EnumTrustedDomainsEx_handle
;
244 static int hf_lsarpc_lsa_EnumTrustedDomainsEx_max_size
;
245 static int hf_lsarpc_lsa_EnumTrustedDomainsEx_resume_handle
;
246 static int hf_lsarpc_lsa_ForestTrustBinaryData_data
;
247 static int hf_lsarpc_lsa_ForestTrustBinaryData_length
;
248 static int hf_lsarpc_lsa_ForestTrustCollisionInfo_count
;
249 static int hf_lsarpc_lsa_ForestTrustCollisionInfo_entries
;
250 static int hf_lsarpc_lsa_ForestTrustCollisionRecord_flags
;
251 static int hf_lsarpc_lsa_ForestTrustCollisionRecord_index
;
252 static int hf_lsarpc_lsa_ForestTrustCollisionRecord_name
;
253 static int hf_lsarpc_lsa_ForestTrustCollisionRecord_type
;
254 static int hf_lsarpc_lsa_ForestTrustData2_data
;
255 static int hf_lsarpc_lsa_ForestTrustData2_domain_info
;
256 static int hf_lsarpc_lsa_ForestTrustData2_scanner_info
;
257 static int hf_lsarpc_lsa_ForestTrustData2_top_level_name
;
258 static int hf_lsarpc_lsa_ForestTrustData2_top_level_name_ex
;
259 static int hf_lsarpc_lsa_ForestTrustData_data
;
260 static int hf_lsarpc_lsa_ForestTrustData_domain_info
;
261 static int hf_lsarpc_lsa_ForestTrustData_top_level_name
;
262 static int hf_lsarpc_lsa_ForestTrustData_top_level_name_ex
;
263 static int hf_lsarpc_lsa_ForestTrustDomainInfo_dns_domain_name
;
264 static int hf_lsarpc_lsa_ForestTrustDomainInfo_domain_sid
;
265 static int hf_lsarpc_lsa_ForestTrustDomainInfo_netbios_domain_name
;
266 static int hf_lsarpc_lsa_ForestTrustInformation2_count
;
267 static int hf_lsarpc_lsa_ForestTrustInformation2_entries
;
268 static int hf_lsarpc_lsa_ForestTrustInformation_count
;
269 static int hf_lsarpc_lsa_ForestTrustInformation_entries
;
270 static int hf_lsarpc_lsa_ForestTrustRecord2_flags
;
271 static int hf_lsarpc_lsa_ForestTrustRecord2_forest_trust_data
;
272 static int hf_lsarpc_lsa_ForestTrustRecord2_time
;
273 static int hf_lsarpc_lsa_ForestTrustRecord2_type
;
274 static int hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_ADMIN
;
275 static int hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_CONFLICT
;
276 static int hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_ADMIN
;
277 static int hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_CONFLICT
;
278 static int hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_ADMIN
;
279 static int hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_CONFLICT
;
280 static int hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_NEW
;
281 static int hf_lsarpc_lsa_ForestTrustRecord_flags
;
282 static int hf_lsarpc_lsa_ForestTrustRecord_forest_trust_data
;
283 static int hf_lsarpc_lsa_ForestTrustRecord_time
;
284 static int hf_lsarpc_lsa_ForestTrustRecord_type
;
285 static int hf_lsarpc_lsa_GetSystemAccessAccount_access_mask
;
286 static int hf_lsarpc_lsa_GetSystemAccessAccount_handle
;
287 static int hf_lsarpc_lsa_GetUserName_account_name
;
288 static int hf_lsarpc_lsa_GetUserName_authority_name
;
289 static int hf_lsarpc_lsa_GetUserName_system_name
;
290 static int hf_lsarpc_lsa_LUIDAttribute_attribute
;
291 static int hf_lsarpc_lsa_LUIDAttribute_luid
;
292 static int hf_lsarpc_lsa_LUID_high
;
293 static int hf_lsarpc_lsa_LUID_low
;
294 static int hf_lsarpc_lsa_LookupNames2_client_revision
;
295 static int hf_lsarpc_lsa_LookupNames2_count
;
296 static int hf_lsarpc_lsa_LookupNames2_domains
;
297 static int hf_lsarpc_lsa_LookupNames2_handle
;
298 static int hf_lsarpc_lsa_LookupNames2_level
;
299 static int hf_lsarpc_lsa_LookupNames2_lookup_options
;
300 static int hf_lsarpc_lsa_LookupNames2_names
;
301 static int hf_lsarpc_lsa_LookupNames2_num_names
;
302 static int hf_lsarpc_lsa_LookupNames2_sids
;
303 static int hf_lsarpc_lsa_LookupNames3_client_revision
;
304 static int hf_lsarpc_lsa_LookupNames3_count
;
305 static int hf_lsarpc_lsa_LookupNames3_domains
;
306 static int hf_lsarpc_lsa_LookupNames3_handle
;
307 static int hf_lsarpc_lsa_LookupNames3_level
;
308 static int hf_lsarpc_lsa_LookupNames3_lookup_options
;
309 static int hf_lsarpc_lsa_LookupNames3_names
;
310 static int hf_lsarpc_lsa_LookupNames3_num_names
;
311 static int hf_lsarpc_lsa_LookupNames3_sids
;
312 static int hf_lsarpc_lsa_LookupNames4_client_revision
;
313 static int hf_lsarpc_lsa_LookupNames4_count
;
314 static int hf_lsarpc_lsa_LookupNames4_domains
;
315 static int hf_lsarpc_lsa_LookupNames4_level
;
316 static int hf_lsarpc_lsa_LookupNames4_lookup_options
;
317 static int hf_lsarpc_lsa_LookupNames4_names
;
318 static int hf_lsarpc_lsa_LookupNames4_num_names
;
319 static int hf_lsarpc_lsa_LookupNames4_sids
;
320 static int hf_lsarpc_lsa_LookupNames_count
;
321 static int hf_lsarpc_lsa_LookupNames_domains
;
322 static int hf_lsarpc_lsa_LookupNames_handle
;
323 static int hf_lsarpc_lsa_LookupNames_level
;
324 static int hf_lsarpc_lsa_LookupNames_names
;
325 static int hf_lsarpc_lsa_LookupNames_num_names
;
326 static int hf_lsarpc_lsa_LookupNames_sids
;
327 static int hf_lsarpc_lsa_LookupPrivDisplayName_disp_name
;
328 static int hf_lsarpc_lsa_LookupPrivDisplayName_handle
;
329 static int hf_lsarpc_lsa_LookupPrivDisplayName_language_id
;
330 static int hf_lsarpc_lsa_LookupPrivDisplayName_language_id_sys
;
331 static int hf_lsarpc_lsa_LookupPrivDisplayName_name
;
332 static int hf_lsarpc_lsa_LookupPrivDisplayName_returned_language_id
;
333 static int hf_lsarpc_lsa_LookupPrivName_handle
;
334 static int hf_lsarpc_lsa_LookupPrivName_luid
;
335 static int hf_lsarpc_lsa_LookupPrivName_name
;
336 static int hf_lsarpc_lsa_LookupPrivValue_handle
;
337 static int hf_lsarpc_lsa_LookupPrivValue_luid
;
338 static int hf_lsarpc_lsa_LookupPrivValue_name
;
339 static int hf_lsarpc_lsa_LookupSids2_client_revision
;
340 static int hf_lsarpc_lsa_LookupSids2_count
;
341 static int hf_lsarpc_lsa_LookupSids2_domains
;
342 static int hf_lsarpc_lsa_LookupSids2_handle
;
343 static int hf_lsarpc_lsa_LookupSids2_level
;
344 static int hf_lsarpc_lsa_LookupSids2_lookup_options
;
345 static int hf_lsarpc_lsa_LookupSids2_names
;
346 static int hf_lsarpc_lsa_LookupSids2_sids
;
347 static int hf_lsarpc_lsa_LookupSids3_client_revision
;
348 static int hf_lsarpc_lsa_LookupSids3_count
;
349 static int hf_lsarpc_lsa_LookupSids3_domains
;
350 static int hf_lsarpc_lsa_LookupSids3_level
;
351 static int hf_lsarpc_lsa_LookupSids3_lookup_options
;
352 static int hf_lsarpc_lsa_LookupSids3_names
;
353 static int hf_lsarpc_lsa_LookupSids3_sids
;
354 static int hf_lsarpc_lsa_LookupSids_count
;
355 static int hf_lsarpc_lsa_LookupSids_domains
;
356 static int hf_lsarpc_lsa_LookupSids_handle
;
357 static int hf_lsarpc_lsa_LookupSids_level
;
358 static int hf_lsarpc_lsa_LookupSids_names
;
359 static int hf_lsarpc_lsa_LookupSids_sids
;
360 static int hf_lsarpc_lsa_ModificationInfo_db_create_time
;
361 static int hf_lsarpc_lsa_ModificationInfo_modified_id
;
362 static int hf_lsarpc_lsa_ObjectAttribute_attributes
;
363 static int hf_lsarpc_lsa_ObjectAttribute_len
;
364 static int hf_lsarpc_lsa_ObjectAttribute_object_name
;
365 static int hf_lsarpc_lsa_ObjectAttribute_root_dir
;
366 static int hf_lsarpc_lsa_ObjectAttribute_sec_desc
;
367 static int hf_lsarpc_lsa_ObjectAttribute_sec_qos
;
368 static int hf_lsarpc_lsa_OpenAccount_access_mask
;
369 static int hf_lsarpc_lsa_OpenAccount_acct_handle
;
370 static int hf_lsarpc_lsa_OpenAccount_handle
;
371 static int hf_lsarpc_lsa_OpenAccount_sid
;
372 static int hf_lsarpc_lsa_OpenPolicy2_access_mask
;
373 static int hf_lsarpc_lsa_OpenPolicy2_attr
;
374 static int hf_lsarpc_lsa_OpenPolicy2_handle
;
375 static int hf_lsarpc_lsa_OpenPolicy2_system_name
;
376 static int hf_lsarpc_lsa_OpenPolicy3_access_mask
;
377 static int hf_lsarpc_lsa_OpenPolicy3_attr
;
378 static int hf_lsarpc_lsa_OpenPolicy3_handle
;
379 static int hf_lsarpc_lsa_OpenPolicy3_in_revision_info
;
380 static int hf_lsarpc_lsa_OpenPolicy3_in_version
;
381 static int hf_lsarpc_lsa_OpenPolicy3_out_revision_info
;
382 static int hf_lsarpc_lsa_OpenPolicy3_out_version
;
383 static int hf_lsarpc_lsa_OpenPolicy3_system_name
;
384 static int hf_lsarpc_lsa_OpenPolicy_access_mask
;
385 static int hf_lsarpc_lsa_OpenPolicy_attr
;
386 static int hf_lsarpc_lsa_OpenPolicy_handle
;
387 static int hf_lsarpc_lsa_OpenPolicy_system_name
;
388 static int hf_lsarpc_lsa_OpenSecret_access_mask
;
389 static int hf_lsarpc_lsa_OpenSecret_handle
;
390 static int hf_lsarpc_lsa_OpenSecret_name
;
391 static int hf_lsarpc_lsa_OpenSecret_sec_handle
;
392 static int hf_lsarpc_lsa_OpenTrustedDomainByName_access_mask
;
393 static int hf_lsarpc_lsa_OpenTrustedDomainByName_handle
;
394 static int hf_lsarpc_lsa_OpenTrustedDomainByName_name
;
395 static int hf_lsarpc_lsa_OpenTrustedDomainByName_trustdom_handle
;
396 static int hf_lsarpc_lsa_OpenTrustedDomain_access_mask
;
397 static int hf_lsarpc_lsa_OpenTrustedDomain_handle
;
398 static int hf_lsarpc_lsa_OpenTrustedDomain_sid
;
399 static int hf_lsarpc_lsa_OpenTrustedDomain_trustdom_handle
;
400 static int hf_lsarpc_lsa_PDAccountInfo_name
;
401 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_AUDIT_LOG_ADMIN
;
402 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_CREATE_ACCOUNT
;
403 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_CREATE_PRIVILEGE
;
404 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_CREATE_SECRET
;
405 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_GET_PRIVATE_INFORMATION
;
406 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_LOOKUP_NAMES
;
407 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_NOTIFICATION
;
408 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_SERVER_ADMIN
;
409 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_SET_AUDIT_REQUIREMENTS
;
410 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS
;
411 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_TRUST_ADMIN
;
412 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_VIEW_AUDIT_INFORMATION
;
413 static int hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_VIEW_LOCAL_INFORMATION
;
414 static int hf_lsarpc_lsa_PolicyInformation_account_domain
;
415 static int hf_lsarpc_lsa_PolicyInformation_audit_events
;
416 static int hf_lsarpc_lsa_PolicyInformation_audit_log
;
417 static int hf_lsarpc_lsa_PolicyInformation_auditfullquery
;
418 static int hf_lsarpc_lsa_PolicyInformation_auditfullset
;
419 static int hf_lsarpc_lsa_PolicyInformation_dns
;
420 static int hf_lsarpc_lsa_PolicyInformation_dns_int
;
421 static int hf_lsarpc_lsa_PolicyInformation_domain
;
422 static int hf_lsarpc_lsa_PolicyInformation_l_account_domain
;
423 static int hf_lsarpc_lsa_PolicyInformation_mod
;
424 static int hf_lsarpc_lsa_PolicyInformation_pd
;
425 static int hf_lsarpc_lsa_PolicyInformation_quota
;
426 static int hf_lsarpc_lsa_PolicyInformation_replica
;
427 static int hf_lsarpc_lsa_PolicyInformation_role
;
428 static int hf_lsarpc_lsa_PrivArray_count
;
429 static int hf_lsarpc_lsa_PrivArray_privs
;
430 static int hf_lsarpc_lsa_PrivEntry_luid
;
431 static int hf_lsarpc_lsa_PrivEntry_name
;
432 static int hf_lsarpc_lsa_PrivilegeSet_count
;
433 static int hf_lsarpc_lsa_PrivilegeSet_set
;
434 static int hf_lsarpc_lsa_PrivilegeSet_unknown
;
435 static int hf_lsarpc_lsa_QosInfo_context_mode
;
436 static int hf_lsarpc_lsa_QosInfo_effective_only
;
437 static int hf_lsarpc_lsa_QosInfo_impersonation_level
;
438 static int hf_lsarpc_lsa_QosInfo_len
;
439 static int hf_lsarpc_lsa_QueryDomainInformationPolicy_handle
;
440 static int hf_lsarpc_lsa_QueryDomainInformationPolicy_info
;
441 static int hf_lsarpc_lsa_QueryDomainInformationPolicy_level
;
442 static int hf_lsarpc_lsa_QueryInfoPolicy2_handle
;
443 static int hf_lsarpc_lsa_QueryInfoPolicy2_info
;
444 static int hf_lsarpc_lsa_QueryInfoPolicy2_level
;
445 static int hf_lsarpc_lsa_QueryInfoPolicy_handle
;
446 static int hf_lsarpc_lsa_QueryInfoPolicy_info
;
447 static int hf_lsarpc_lsa_QueryInfoPolicy_level
;
448 static int hf_lsarpc_lsa_QuerySecret_new_mtime
;
449 static int hf_lsarpc_lsa_QuerySecret_new_val
;
450 static int hf_lsarpc_lsa_QuerySecret_old_mtime
;
451 static int hf_lsarpc_lsa_QuerySecret_old_val
;
452 static int hf_lsarpc_lsa_QuerySecret_sec_handle
;
453 static int hf_lsarpc_lsa_QuerySecurity_handle
;
454 static int hf_lsarpc_lsa_QuerySecurity_sdbuf
;
455 static int hf_lsarpc_lsa_QuerySecurity_sec_info
;
456 static int hf_lsarpc_lsa_QueryTrustedDomainInfoByName_handle
;
457 static int hf_lsarpc_lsa_QueryTrustedDomainInfoByName_info
;
458 static int hf_lsarpc_lsa_QueryTrustedDomainInfoByName_level
;
459 static int hf_lsarpc_lsa_QueryTrustedDomainInfoByName_trusted_domain
;
460 static int hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_dom_sid
;
461 static int hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_handle
;
462 static int hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_info
;
463 static int hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_level
;
464 static int hf_lsarpc_lsa_QueryTrustedDomainInfo_info
;
465 static int hf_lsarpc_lsa_QueryTrustedDomainInfo_level
;
466 static int hf_lsarpc_lsa_QueryTrustedDomainInfo_trustdom_handle
;
467 static int hf_lsarpc_lsa_RefDomainList_count
;
468 static int hf_lsarpc_lsa_RefDomainList_domains
;
469 static int hf_lsarpc_lsa_RefDomainList_max_size
;
470 static int hf_lsarpc_lsa_RemoveAccountRights_handle
;
471 static int hf_lsarpc_lsa_RemoveAccountRights_remove_all
;
472 static int hf_lsarpc_lsa_RemoveAccountRights_rights
;
473 static int hf_lsarpc_lsa_RemoveAccountRights_sid
;
474 static int hf_lsarpc_lsa_RemovePrivilegesFromAccount_handle
;
475 static int hf_lsarpc_lsa_RemovePrivilegesFromAccount_privs
;
476 static int hf_lsarpc_lsa_RemovePrivilegesFromAccount_remove_all
;
477 static int hf_lsarpc_lsa_ReplicaSourceInfo_account
;
478 static int hf_lsarpc_lsa_ReplicaSourceInfo_source
;
479 static int hf_lsarpc_lsa_RetrievePrivateData_handle
;
480 static int hf_lsarpc_lsa_RetrievePrivateData_name
;
481 static int hf_lsarpc_lsa_RetrievePrivateData_val
;
482 static int hf_lsarpc_lsa_RevisionSupportedFeature_LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER
;
483 static int hf_lsarpc_lsa_RightAttribute_name
;
484 static int hf_lsarpc_lsa_RightSet_count
;
485 static int hf_lsarpc_lsa_RightSet_names
;
486 static int hf_lsarpc_lsa_SecretAccessMask_LSA_SECRET_QUERY_VALUE
;
487 static int hf_lsarpc_lsa_SecretAccessMask_LSA_SECRET_SET_VALUE
;
488 static int hf_lsarpc_lsa_ServerRole_role
;
489 static int hf_lsarpc_lsa_SetDomainInformationPolicy_handle
;
490 static int hf_lsarpc_lsa_SetDomainInformationPolicy_info
;
491 static int hf_lsarpc_lsa_SetDomainInformationPolicy_level
;
492 static int hf_lsarpc_lsa_SetInfoPolicy2_handle
;
493 static int hf_lsarpc_lsa_SetInfoPolicy2_info
;
494 static int hf_lsarpc_lsa_SetInfoPolicy2_level
;
495 static int hf_lsarpc_lsa_SetInfoPolicy_handle
;
496 static int hf_lsarpc_lsa_SetInfoPolicy_info
;
497 static int hf_lsarpc_lsa_SetInfoPolicy_level
;
498 static int hf_lsarpc_lsa_SetInformationTrustedDomain_info
;
499 static int hf_lsarpc_lsa_SetInformationTrustedDomain_level
;
500 static int hf_lsarpc_lsa_SetInformationTrustedDomain_trustdom_handle
;
501 static int hf_lsarpc_lsa_SetSecObj_handle
;
502 static int hf_lsarpc_lsa_SetSecObj_sdbuf
;
503 static int hf_lsarpc_lsa_SetSecObj_sec_info
;
504 static int hf_lsarpc_lsa_SetSecret_new_val
;
505 static int hf_lsarpc_lsa_SetSecret_old_val
;
506 static int hf_lsarpc_lsa_SetSecret_sec_handle
;
507 static int hf_lsarpc_lsa_SetSystemAccessAccount_access_mask
;
508 static int hf_lsarpc_lsa_SetSystemAccessAccount_handle
;
509 static int hf_lsarpc_lsa_SetTrustedDomainInfoByName_handle
;
510 static int hf_lsarpc_lsa_SetTrustedDomainInfoByName_info
;
511 static int hf_lsarpc_lsa_SetTrustedDomainInfoByName_level
;
512 static int hf_lsarpc_lsa_SetTrustedDomainInfoByName_trusted_domain
;
513 static int hf_lsarpc_lsa_SetTrustedDomainInfo_dom_sid
;
514 static int hf_lsarpc_lsa_SetTrustedDomainInfo_handle
;
515 static int hf_lsarpc_lsa_SetTrustedDomainInfo_info
;
516 static int hf_lsarpc_lsa_SetTrustedDomainInfo_level
;
517 static int hf_lsarpc_lsa_SidArray_num_sids
;
518 static int hf_lsarpc_lsa_SidArray_sids
;
519 static int hf_lsarpc_lsa_SidPtr_sid
;
520 static int hf_lsarpc_lsa_StorePrivateData_handle
;
521 static int hf_lsarpc_lsa_StorePrivateData_name
;
522 static int hf_lsarpc_lsa_StorePrivateData_val
;
523 static int hf_lsarpc_lsa_StringLarge_length
;
524 static int hf_lsarpc_lsa_StringLarge_size
;
525 static int hf_lsarpc_lsa_StringLarge_string
;
526 static int hf_lsarpc_lsa_String_length
;
527 static int hf_lsarpc_lsa_String_size
;
528 static int hf_lsarpc_lsa_String_string
;
529 static int hf_lsarpc_lsa_Strings_count
;
530 static int hf_lsarpc_lsa_Strings_names
;
531 static int hf_lsarpc_lsa_TransNameArray2_count
;
532 static int hf_lsarpc_lsa_TransNameArray2_names
;
533 static int hf_lsarpc_lsa_TransNameArray_count
;
534 static int hf_lsarpc_lsa_TransNameArray_names
;
535 static int hf_lsarpc_lsa_TransSidArray2_count
;
536 static int hf_lsarpc_lsa_TransSidArray2_sids
;
537 static int hf_lsarpc_lsa_TransSidArray3_count
;
538 static int hf_lsarpc_lsa_TransSidArray3_sids
;
539 static int hf_lsarpc_lsa_TransSidArray_count
;
540 static int hf_lsarpc_lsa_TransSidArray_sids
;
541 static int hf_lsarpc_lsa_TranslatedName2_name
;
542 static int hf_lsarpc_lsa_TranslatedName2_sid_index
;
543 static int hf_lsarpc_lsa_TranslatedName2_sid_type
;
544 static int hf_lsarpc_lsa_TranslatedName2_unknown
;
545 static int hf_lsarpc_lsa_TranslatedName_name
;
546 static int hf_lsarpc_lsa_TranslatedName_sid_index
;
547 static int hf_lsarpc_lsa_TranslatedName_sid_type
;
548 static int hf_lsarpc_lsa_TranslatedSid2_rid
;
549 static int hf_lsarpc_lsa_TranslatedSid2_sid_index
;
550 static int hf_lsarpc_lsa_TranslatedSid2_sid_type
;
551 static int hf_lsarpc_lsa_TranslatedSid2_unknown
;
552 static int hf_lsarpc_lsa_TranslatedSid3_flags
;
553 static int hf_lsarpc_lsa_TranslatedSid3_sid
;
554 static int hf_lsarpc_lsa_TranslatedSid3_sid_index
;
555 static int hf_lsarpc_lsa_TranslatedSid3_sid_type
;
556 static int hf_lsarpc_lsa_TranslatedSid_rid
;
557 static int hf_lsarpc_lsa_TranslatedSid_sid_index
;
558 static int hf_lsarpc_lsa_TranslatedSid_sid_type
;
559 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION
;
560 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION
;
561 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION
;
562 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE
;
563 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE
;
564 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_PIM_TRUST
;
565 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN
;
566 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL
;
567 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY
;
568 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION
;
569 static int hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_WITHIN_FOREST
;
570 static int hf_lsarpc_lsa_TrustDirection_LSA_TRUST_DIRECTION_INBOUND
;
571 static int hf_lsarpc_lsa_TrustDirection_LSA_TRUST_DIRECTION_OUTBOUND
;
572 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES_auth_data
;
573 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES_cipher
;
574 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES_salt
;
575 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternal_auth_blob
;
576 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_count
;
577 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info
;
578 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info
;
579 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_count
;
580 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info
;
581 static int hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info
;
582 static int hf_lsarpc_lsa_TrustDomainInfoBasic_netbios_name
;
583 static int hf_lsarpc_lsa_TrustDomainInfoBasic_sid
;
584 static int hf_lsarpc_lsa_TrustDomainInfoBuffer_AuthType
;
585 static int hf_lsarpc_lsa_TrustDomainInfoBuffer_data
;
586 static int hf_lsarpc_lsa_TrustDomainInfoBuffer_last_update_time
;
587 static int hf_lsarpc_lsa_TrustDomainInfoControllers_entries
;
588 static int hf_lsarpc_lsa_TrustDomainInfoControllers_netbios_names
;
589 static int hf_lsarpc_lsa_TrustDomainInfoFullInfo2Internal_auth_info
;
590 static int hf_lsarpc_lsa_TrustDomainInfoFullInfo2Internal_info
;
591 static int hf_lsarpc_lsa_TrustDomainInfoFullInfo2Internal_posix_offset
;
592 static int hf_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES_auth_info
;
593 static int hf_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES_info_ex
;
594 static int hf_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES_posix_offset
;
595 static int hf_lsarpc_lsa_TrustDomainInfoFullInfoInternal_auth_info
;
596 static int hf_lsarpc_lsa_TrustDomainInfoFullInfoInternal_info_ex
;
597 static int hf_lsarpc_lsa_TrustDomainInfoFullInfoInternal_posix_offset
;
598 static int hf_lsarpc_lsa_TrustDomainInfoFullInfo_auth_info
;
599 static int hf_lsarpc_lsa_TrustDomainInfoFullInfo_info_ex
;
600 static int hf_lsarpc_lsa_TrustDomainInfoFullInfo_posix_offset
;
601 static int hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data
;
602 static int hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_length
;
603 static int hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_info_ex
;
604 static int hf_lsarpc_lsa_TrustDomainInfoInfoEx_domain_name
;
605 static int hf_lsarpc_lsa_TrustDomainInfoInfoEx_netbios_name
;
606 static int hf_lsarpc_lsa_TrustDomainInfoInfoEx_sid
;
607 static int hf_lsarpc_lsa_TrustDomainInfoInfoEx_trust_attributes
;
608 static int hf_lsarpc_lsa_TrustDomainInfoInfoEx_trust_direction
;
609 static int hf_lsarpc_lsa_TrustDomainInfoInfoEx_trust_type
;
610 static int hf_lsarpc_lsa_TrustDomainInfoName_netbios_name
;
611 static int hf_lsarpc_lsa_TrustDomainInfoPassword_old_password
;
612 static int hf_lsarpc_lsa_TrustDomainInfoPassword_password
;
613 static int hf_lsarpc_lsa_TrustDomainInfoPosixOffset_posix_offset
;
614 static int hf_lsarpc_lsa_TrustDomainInfoSupportedEncTypes_enc_types
;
615 static int hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_AUTH
;
616 static int hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_CONTROLLERS
;
617 static int hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_DOMAIN_NAME
;
618 static int hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_POSIX
;
619 static int hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_AUTH
;
620 static int hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_CONTROLLERS
;
621 static int hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_POSIX
;
622 static int hf_lsarpc_lsa_TrustedDomainInfo_auth_info
;
623 static int hf_lsarpc_lsa_TrustedDomainInfo_auth_info_internal
;
624 static int hf_lsarpc_lsa_TrustedDomainInfo_auth_info_internal_aes
;
625 static int hf_lsarpc_lsa_TrustedDomainInfo_controllers
;
626 static int hf_lsarpc_lsa_TrustedDomainInfo_enc_types
;
627 static int hf_lsarpc_lsa_TrustedDomainInfo_full_info
;
628 static int hf_lsarpc_lsa_TrustedDomainInfo_full_info2_internal
;
629 static int hf_lsarpc_lsa_TrustedDomainInfo_full_info_internal
;
630 static int hf_lsarpc_lsa_TrustedDomainInfo_full_info_internal_aes
;
631 static int hf_lsarpc_lsa_TrustedDomainInfo_info_basic
;
632 static int hf_lsarpc_lsa_TrustedDomainInfo_info_ex
;
633 static int hf_lsarpc_lsa_TrustedDomainInfo_info_ex2_internal
;
634 static int hf_lsarpc_lsa_TrustedDomainInfo_name
;
635 static int hf_lsarpc_lsa_TrustedDomainInfo_password
;
636 static int hf_lsarpc_lsa_TrustedDomainInfo_posix_offset
;
637 static int hf_lsarpc_lsa_krbAuthenticationOptions_LSA_POLICY_KERBEROS_VALIDATE_CLIENT
;
638 static int hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_forest_trust_info
;
639 static int hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_handle
;
640 static int hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_highest_record_type
;
641 static int hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name
;
642 static int hf_lsarpc_lsa_lsaRQueryForestTrustInformation_forest_trust_info
;
643 static int hf_lsarpc_lsa_lsaRQueryForestTrustInformation_handle
;
644 static int hf_lsarpc_lsa_lsaRQueryForestTrustInformation_highest_record_type
;
645 static int hf_lsarpc_lsa_lsaRQueryForestTrustInformation_trusted_domain_name
;
646 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation2_check_only
;
647 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation2_collision_info
;
648 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation2_forest_trust_info
;
649 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation2_handle
;
650 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation2_highest_record_type
;
651 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation2_trusted_domain_name
;
652 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation_check_only
;
653 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation_collision_info
;
654 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation_forest_trust_info
;
655 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation_handle
;
656 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation_highest_record_type
;
657 static int hf_lsarpc_lsa_lsaRSetForestTrustInformation_trusted_domain_name
;
658 static int hf_lsarpc_lsa_revision_info1_revision
;
659 static int hf_lsarpc_lsa_revision_info1_supported_features
;
660 static int hf_lsarpc_lsa_revision_info_info1
;
661 static int hf_lsarpc_names
;
662 static int hf_lsarpc_opnum
;
663 static int hf_lsarpc_policy_access_mask
;
664 static int hf_lsarpc_sec_desc_buf_len
;
665 static int hf_lsarpc_secret_access_mask
;
666 static int hf_lsarpc_status
;
668 static int proto_dcerpc_lsarpc
;
669 /* Version information */
672 static e_guid_t uuid_dcerpc_lsarpc
= {
673 0x12345778, 0x1234, 0xabcd,
674 { 0xef, 0x00, 0x01, 0x23, 0x45, 0x67, 0x89, 0xab }
676 static uint16_t ver_dcerpc_lsarpc
= 0;
678 static int lsarpc_dissect_element_lsa_String_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
679 static int lsarpc_dissect_element_lsa_String_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
680 static int lsarpc_dissect_element_lsa_String_string(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
681 static int lsarpc_dissect_element_lsa_String_string_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
682 static int lsarpc_dissect_element_lsa_StringLarge_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
683 static int lsarpc_dissect_element_lsa_StringLarge_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
684 static int lsarpc_dissect_element_lsa_StringLarge_string(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
685 static int lsarpc_dissect_element_lsa_StringLarge_string_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
686 static int lsarpc_dissect_element_lsa_Strings_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
687 static int lsarpc_dissect_element_lsa_Strings_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
688 static int lsarpc_dissect_element_lsa_Strings_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
689 static int lsarpc_dissect_element_lsa_Strings_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
690 static int lsarpc_dissect_element_lsa_AsciiString_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
691 static int lsarpc_dissect_element_lsa_AsciiString_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
692 static int lsarpc_dissect_element_lsa_AsciiString_string(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
693 static int lsarpc_dissect_element_lsa_AsciiString_string_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
694 static int lsarpc_dissect_element_lsa_AsciiString_string__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
695 static int lsarpc_dissect_element_lsa_AsciiStringLarge_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
696 static int lsarpc_dissect_element_lsa_AsciiStringLarge_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
697 static int lsarpc_dissect_element_lsa_AsciiStringLarge_string(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
698 static int lsarpc_dissect_element_lsa_AsciiStringLarge_string_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
699 static int lsarpc_dissect_element_lsa_AsciiStringLarge_string__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
700 static int lsarpc_dissect_element_lsa_BinaryString_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
701 static int lsarpc_dissect_element_lsa_BinaryString_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
702 static int lsarpc_dissect_element_lsa_BinaryString_array(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
703 static int lsarpc_dissect_element_lsa_BinaryString_array_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
704 static int lsarpc_dissect_element_lsa_BinaryString_array__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
705 static int lsarpc_dissect_element_lsa_LUID_low(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
706 static int lsarpc_dissect_element_lsa_LUID_high(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
707 static int lsarpc_dissect_element_lsa_PrivEntry_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
708 static int lsarpc_dissect_element_lsa_PrivEntry_luid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
709 static int lsarpc_dissect_element_lsa_PrivArray_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
710 static int lsarpc_dissect_element_lsa_PrivArray_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
711 static int lsarpc_dissect_element_lsa_PrivArray_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
712 static int lsarpc_dissect_element_lsa_PrivArray_privs__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
713 const value_string lsarpc_lsa_SecurityImpersonationLevel_vals
[] = {
714 { LSA_SECURITY_ANONYMOUS
, "LSA_SECURITY_ANONYMOUS" },
715 { LSA_SECURITY_IDENTIFICATION
, "LSA_SECURITY_IDENTIFICATION" },
716 { LSA_SECURITY_IMPERSONATION
, "LSA_SECURITY_IMPERSONATION" },
717 { LSA_SECURITY_DELEGATION
, "LSA_SECURITY_DELEGATION" },
720 static int lsarpc_dissect_element_lsa_QosInfo_len(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
721 static int lsarpc_dissect_element_lsa_QosInfo_impersonation_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
722 static int lsarpc_dissect_element_lsa_QosInfo_context_mode(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
723 static int lsarpc_dissect_element_lsa_QosInfo_effective_only(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
724 static int lsarpc_dissect_element_lsa_ObjectAttribute_len(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
725 static int lsarpc_dissect_element_lsa_ObjectAttribute_root_dir(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
726 static int lsarpc_dissect_element_lsa_ObjectAttribute_root_dir_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
727 static int lsarpc_dissect_element_lsa_ObjectAttribute_object_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
728 static int lsarpc_dissect_element_lsa_ObjectAttribute_object_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
729 static int lsarpc_dissect_element_lsa_ObjectAttribute_attributes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
730 static int lsarpc_dissect_element_lsa_ObjectAttribute_sec_desc(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
731 static int lsarpc_dissect_element_lsa_ObjectAttribute_sec_desc_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
732 static int lsarpc_dissect_element_lsa_ObjectAttribute_sec_qos(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
733 static int lsarpc_dissect_element_lsa_ObjectAttribute_sec_qos_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
734 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_VIEW_LOCAL_INFORMATION_tfs
= {
735 "LSA_POLICY_VIEW_LOCAL_INFORMATION is SET",
736 "LSA_POLICY_VIEW_LOCAL_INFORMATION is NOT SET",
738 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_VIEW_AUDIT_INFORMATION_tfs
= {
739 "LSA_POLICY_VIEW_AUDIT_INFORMATION is SET",
740 "LSA_POLICY_VIEW_AUDIT_INFORMATION is NOT SET",
742 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_GET_PRIVATE_INFORMATION_tfs
= {
743 "LSA_POLICY_GET_PRIVATE_INFORMATION is SET",
744 "LSA_POLICY_GET_PRIVATE_INFORMATION is NOT SET",
746 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_TRUST_ADMIN_tfs
= {
747 "LSA_POLICY_TRUST_ADMIN is SET",
748 "LSA_POLICY_TRUST_ADMIN is NOT SET",
750 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_CREATE_ACCOUNT_tfs
= {
751 "LSA_POLICY_CREATE_ACCOUNT is SET",
752 "LSA_POLICY_CREATE_ACCOUNT is NOT SET",
754 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_CREATE_SECRET_tfs
= {
755 "LSA_POLICY_CREATE_SECRET is SET",
756 "LSA_POLICY_CREATE_SECRET is NOT SET",
758 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_CREATE_PRIVILEGE_tfs
= {
759 "LSA_POLICY_CREATE_PRIVILEGE is SET",
760 "LSA_POLICY_CREATE_PRIVILEGE is NOT SET",
762 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS_tfs
= {
763 "LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS is SET",
764 "LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS is NOT SET",
766 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_SET_AUDIT_REQUIREMENTS_tfs
= {
767 "LSA_POLICY_SET_AUDIT_REQUIREMENTS is SET",
768 "LSA_POLICY_SET_AUDIT_REQUIREMENTS is NOT SET",
770 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_AUDIT_LOG_ADMIN_tfs
= {
771 "LSA_POLICY_AUDIT_LOG_ADMIN is SET",
772 "LSA_POLICY_AUDIT_LOG_ADMIN is NOT SET",
774 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_SERVER_ADMIN_tfs
= {
775 "LSA_POLICY_SERVER_ADMIN is SET",
776 "LSA_POLICY_SERVER_ADMIN is NOT SET",
778 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_LOOKUP_NAMES_tfs
= {
779 "LSA_POLICY_LOOKUP_NAMES is SET",
780 "LSA_POLICY_LOOKUP_NAMES is NOT SET",
782 static const true_false_string lsa_PolicyAccessMask_LSA_POLICY_NOTIFICATION_tfs
= {
783 "LSA_POLICY_NOTIFICATION is SET",
784 "LSA_POLICY_NOTIFICATION is NOT SET",
786 static const true_false_string lsa_AccountAccessMask_LSA_ACCOUNT_VIEW_tfs
= {
787 "LSA_ACCOUNT_VIEW is SET",
788 "LSA_ACCOUNT_VIEW is NOT SET",
790 static const true_false_string lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_PRIVILEGES_tfs
= {
791 "LSA_ACCOUNT_ADJUST_PRIVILEGES is SET",
792 "LSA_ACCOUNT_ADJUST_PRIVILEGES is NOT SET",
794 static const true_false_string lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_QUOTAS_tfs
= {
795 "LSA_ACCOUNT_ADJUST_QUOTAS is SET",
796 "LSA_ACCOUNT_ADJUST_QUOTAS is NOT SET",
798 static const true_false_string lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS_tfs
= {
799 "LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS is SET",
800 "LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS is NOT SET",
802 static const true_false_string lsa_SecretAccessMask_LSA_SECRET_SET_VALUE_tfs
= {
803 "LSA_SECRET_SET_VALUE is SET",
804 "LSA_SECRET_SET_VALUE is NOT SET",
806 static const true_false_string lsa_SecretAccessMask_LSA_SECRET_QUERY_VALUE_tfs
= {
807 "LSA_SECRET_QUERY_VALUE is SET",
808 "LSA_SECRET_QUERY_VALUE is NOT SET",
810 static const true_false_string lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_DOMAIN_NAME_tfs
= {
811 "LSA_TRUSTED_QUERY_DOMAIN_NAME is SET",
812 "LSA_TRUSTED_QUERY_DOMAIN_NAME is NOT SET",
814 static const true_false_string lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_CONTROLLERS_tfs
= {
815 "LSA_TRUSTED_QUERY_CONTROLLERS is SET",
816 "LSA_TRUSTED_QUERY_CONTROLLERS is NOT SET",
818 static const true_false_string lsa_TrustedAccessMask_LSA_TRUSTED_SET_CONTROLLERS_tfs
= {
819 "LSA_TRUSTED_SET_CONTROLLERS is SET",
820 "LSA_TRUSTED_SET_CONTROLLERS is NOT SET",
822 static const true_false_string lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_POSIX_tfs
= {
823 "LSA_TRUSTED_QUERY_POSIX is SET",
824 "LSA_TRUSTED_QUERY_POSIX is NOT SET",
826 static const true_false_string lsa_TrustedAccessMask_LSA_TRUSTED_SET_POSIX_tfs
= {
827 "LSA_TRUSTED_SET_POSIX is SET",
828 "LSA_TRUSTED_SET_POSIX is NOT SET",
830 static const true_false_string lsa_TrustedAccessMask_LSA_TRUSTED_SET_AUTH_tfs
= {
831 "LSA_TRUSTED_SET_AUTH is SET",
832 "LSA_TRUSTED_SET_AUTH is NOT SET",
834 static const true_false_string lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_AUTH_tfs
= {
835 "LSA_TRUSTED_QUERY_AUTH is SET",
836 "LSA_TRUSTED_QUERY_AUTH is NOT SET",
838 static int lsarpc_dissect_element_lsa_AuditLogInfo_percent_full(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
839 static int lsarpc_dissect_element_lsa_AuditLogInfo_maximum_log_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
840 static int lsarpc_dissect_element_lsa_AuditLogInfo_retention_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
841 static int lsarpc_dissect_element_lsa_AuditLogInfo_shutdown_in_progress(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
842 static int lsarpc_dissect_element_lsa_AuditLogInfo_time_to_shutdown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
843 static int lsarpc_dissect_element_lsa_AuditLogInfo_next_audit_record(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
844 const value_string lsarpc_lsa_PolicyAuditPolicy_vals
[] = {
845 { LSA_AUDIT_POLICY_NONE
, "LSA_AUDIT_POLICY_NONE" },
846 { LSA_AUDIT_POLICY_SUCCESS
, "LSA_AUDIT_POLICY_SUCCESS" },
847 { LSA_AUDIT_POLICY_FAILURE
, "LSA_AUDIT_POLICY_FAILURE" },
848 { LSA_AUDIT_POLICY_ALL
, "LSA_AUDIT_POLICY_ALL" },
849 { LSA_AUDIT_POLICY_CLEAR
, "LSA_AUDIT_POLICY_CLEAR" },
852 const value_string lsarpc_lsa_PolicyAuditEventType_vals
[] = {
853 { LSA_AUDIT_CATEGORY_SYSTEM
, "LSA_AUDIT_CATEGORY_SYSTEM" },
854 { LSA_AUDIT_CATEGORY_LOGON
, "LSA_AUDIT_CATEGORY_LOGON" },
855 { LSA_AUDIT_CATEGORY_FILE_AND_OBJECT_ACCESS
, "LSA_AUDIT_CATEGORY_FILE_AND_OBJECT_ACCESS" },
856 { LSA_AUDIT_CATEGORY_USE_OF_USER_RIGHTS
, "LSA_AUDIT_CATEGORY_USE_OF_USER_RIGHTS" },
857 { LSA_AUDIT_CATEGORY_PROCESS_TRACKING
, "LSA_AUDIT_CATEGORY_PROCESS_TRACKING" },
858 { LSA_AUDIT_CATEGORY_SECURITY_POLICY_CHANGES
, "LSA_AUDIT_CATEGORY_SECURITY_POLICY_CHANGES" },
859 { LSA_AUDIT_CATEGORY_ACCOUNT_MANAGEMENT
, "LSA_AUDIT_CATEGORY_ACCOUNT_MANAGEMENT" },
860 { LSA_AUDIT_CATEGORY_DIRECTORY_SERVICE_ACCESS
, "LSA_AUDIT_CATEGORY_DIRECTORY_SERVICE_ACCESS" },
861 { LSA_AUDIT_CATEGORY_ACCOUNT_LOGON
, "LSA_AUDIT_CATEGORY_ACCOUNT_LOGON" },
864 static int lsarpc_dissect_element_lsa_AuditEventsInfo_auditing_mode(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
865 static int lsarpc_dissect_element_lsa_AuditEventsInfo_settings(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
866 static int lsarpc_dissect_element_lsa_AuditEventsInfo_settings_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
867 static int lsarpc_dissect_element_lsa_AuditEventsInfo_settings__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
868 static int lsarpc_dissect_element_lsa_AuditEventsInfo_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
869 static int lsarpc_dissect_element_lsa_DomainInfo_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
870 static int lsarpc_dissect_element_lsa_DomainInfo_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
871 static int lsarpc_dissect_element_lsa_DomainInfo_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
872 static int lsarpc_dissect_element_lsa_PDAccountInfo_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
873 const value_string lsarpc_lsa_Role_vals
[] = {
874 { LSA_ROLE_BACKUP
, "LSA_ROLE_BACKUP" },
875 { LSA_ROLE_PRIMARY
, "LSA_ROLE_PRIMARY" },
878 static int lsarpc_dissect_element_lsa_ServerRole_role(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
879 static int lsarpc_dissect_element_lsa_ReplicaSourceInfo_source(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
880 static int lsarpc_dissect_element_lsa_ReplicaSourceInfo_account(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
881 static int lsarpc_dissect_element_lsa_DefaultQuotaInfo_paged_pool(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
882 static int lsarpc_dissect_element_lsa_DefaultQuotaInfo_non_paged_pool(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
883 static int lsarpc_dissect_element_lsa_DefaultQuotaInfo_min_wss(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
884 static int lsarpc_dissect_element_lsa_DefaultQuotaInfo_max_wss(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
885 static int lsarpc_dissect_element_lsa_DefaultQuotaInfo_pagefile(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
886 static int lsarpc_dissect_element_lsa_DefaultQuotaInfo_unknown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
887 static int lsarpc_dissect_element_lsa_ModificationInfo_modified_id(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
888 static int lsarpc_dissect_element_lsa_ModificationInfo_db_create_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
889 static int lsarpc_dissect_element_lsa_AuditFullSetInfo_shutdown_on_full(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
890 static int lsarpc_dissect_element_lsa_AuditFullQueryInfo_shutdown_on_full(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
891 static int lsarpc_dissect_element_lsa_AuditFullQueryInfo_log_is_full(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
892 static int lsarpc_dissect_element_lsa_DnsDomainInfo_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
893 static int lsarpc_dissect_element_lsa_DnsDomainInfo_dns_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
894 static int lsarpc_dissect_element_lsa_DnsDomainInfo_dns_forest(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
895 static int lsarpc_dissect_element_lsa_DnsDomainInfo_domain_guid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
896 static int lsarpc_dissect_element_lsa_DnsDomainInfo_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
897 static int lsarpc_dissect_element_lsa_DnsDomainInfo_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
898 const value_string lsarpc_lsa_PolicyInfo_vals
[] = {
899 { LSA_POLICY_INFO_AUDIT_LOG
, "LSA_POLICY_INFO_AUDIT_LOG" },
900 { LSA_POLICY_INFO_AUDIT_EVENTS
, "LSA_POLICY_INFO_AUDIT_EVENTS" },
901 { LSA_POLICY_INFO_DOMAIN
, "LSA_POLICY_INFO_DOMAIN" },
902 { LSA_POLICY_INFO_PD
, "LSA_POLICY_INFO_PD" },
903 { LSA_POLICY_INFO_ACCOUNT_DOMAIN
, "LSA_POLICY_INFO_ACCOUNT_DOMAIN" },
904 { LSA_POLICY_INFO_ROLE
, "LSA_POLICY_INFO_ROLE" },
905 { LSA_POLICY_INFO_REPLICA
, "LSA_POLICY_INFO_REPLICA" },
906 { LSA_POLICY_INFO_QUOTA
, "LSA_POLICY_INFO_QUOTA" },
907 { LSA_POLICY_INFO_MOD
, "LSA_POLICY_INFO_MOD" },
908 { LSA_POLICY_INFO_AUDIT_FULL_SET
, "LSA_POLICY_INFO_AUDIT_FULL_SET" },
909 { LSA_POLICY_INFO_AUDIT_FULL_QUERY
, "LSA_POLICY_INFO_AUDIT_FULL_QUERY" },
910 { LSA_POLICY_INFO_DNS
, "LSA_POLICY_INFO_DNS" },
911 { LSA_POLICY_INFO_DNS_INT
, "LSA_POLICY_INFO_DNS_INT" },
912 { LSA_POLICY_INFO_L_ACCOUNT_DOMAIN
, "LSA_POLICY_INFO_L_ACCOUNT_DOMAIN" },
915 static int lsarpc_dissect_element_lsa_PolicyInformation_audit_log(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
916 static int lsarpc_dissect_element_lsa_PolicyInformation_audit_events(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
917 static int lsarpc_dissect_element_lsa_PolicyInformation_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
918 static int lsarpc_dissect_element_lsa_PolicyInformation_pd(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
919 static int lsarpc_dissect_element_lsa_PolicyInformation_account_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
920 static int lsarpc_dissect_element_lsa_PolicyInformation_role(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
921 static int lsarpc_dissect_element_lsa_PolicyInformation_replica(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
922 static int lsarpc_dissect_element_lsa_PolicyInformation_quota(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
923 static int lsarpc_dissect_element_lsa_PolicyInformation_mod(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
924 static int lsarpc_dissect_element_lsa_PolicyInformation_auditfullset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
925 static int lsarpc_dissect_element_lsa_PolicyInformation_auditfullquery(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
926 static int lsarpc_dissect_element_lsa_PolicyInformation_dns(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
927 static int lsarpc_dissect_element_lsa_PolicyInformation_dns_int(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
928 static int lsarpc_dissect_element_lsa_PolicyInformation_l_account_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
929 static int lsarpc_dissect_element_lsa_SidPtr_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
930 static int lsarpc_dissect_element_lsa_SidPtr_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
931 static int lsarpc_dissect_element_lsa_SidArray_num_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
932 static int lsarpc_dissect_element_lsa_SidArray_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
933 static int lsarpc_dissect_element_lsa_SidArray_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
934 static int lsarpc_dissect_element_lsa_SidArray_sids__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
935 static int lsarpc_dissect_element_lsa_DomainList_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
936 static int lsarpc_dissect_element_lsa_DomainList_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
937 static int lsarpc_dissect_element_lsa_DomainList_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
938 static int lsarpc_dissect_element_lsa_DomainList_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
939 const value_string lsarpc_lsa_SidType_vals
[] = {
940 { SID_NAME_USE_NONE
, "SID_NAME_USE_NONE" },
941 { SID_NAME_USER
, "SID_NAME_USER" },
942 { SID_NAME_DOM_GRP
, "SID_NAME_DOM_GRP" },
943 { SID_NAME_DOMAIN
, "SID_NAME_DOMAIN" },
944 { SID_NAME_ALIAS
, "SID_NAME_ALIAS" },
945 { SID_NAME_WKN_GRP
, "SID_NAME_WKN_GRP" },
946 { SID_NAME_DELETED
, "SID_NAME_DELETED" },
947 { SID_NAME_INVALID
, "SID_NAME_INVALID" },
948 { SID_NAME_UNKNOWN
, "SID_NAME_UNKNOWN" },
949 { SID_NAME_COMPUTER
, "SID_NAME_COMPUTER" },
950 { SID_NAME_LABEL
, "SID_NAME_LABEL" },
953 static int lsarpc_dissect_element_lsa_TranslatedSid_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
954 static int lsarpc_dissect_element_lsa_TranslatedSid_rid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
955 static int lsarpc_dissect_element_lsa_TranslatedSid_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
956 static int lsarpc_dissect_element_lsa_TransSidArray_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
957 static int lsarpc_dissect_element_lsa_TransSidArray_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
958 static int lsarpc_dissect_element_lsa_TransSidArray_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
959 static int lsarpc_dissect_element_lsa_TransSidArray_sids__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
960 static int lsarpc_dissect_element_lsa_RefDomainList_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
961 static int lsarpc_dissect_element_lsa_RefDomainList_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
962 static int lsarpc_dissect_element_lsa_RefDomainList_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
963 static int lsarpc_dissect_element_lsa_RefDomainList_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
964 static int lsarpc_dissect_element_lsa_RefDomainList_max_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
965 const value_string lsarpc_lsa_LookupNamesLevel_vals
[] = {
966 { LSA_LOOKUP_NAMES_ALL
, "LSA_LOOKUP_NAMES_ALL" },
967 { LSA_LOOKUP_NAMES_DOMAINS_ONLY
, "LSA_LOOKUP_NAMES_DOMAINS_ONLY" },
968 { LSA_LOOKUP_NAMES_PRIMARY_DOMAIN_ONLY
, "LSA_LOOKUP_NAMES_PRIMARY_DOMAIN_ONLY" },
969 { LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY
, "LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY" },
970 { LSA_LOOKUP_NAMES_FOREST_TRUSTS_ONLY
, "LSA_LOOKUP_NAMES_FOREST_TRUSTS_ONLY" },
971 { LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY2
, "LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY2" },
972 { LSA_LOOKUP_NAMES_RODC_REFERRAL_TO_FULL_DC
, "LSA_LOOKUP_NAMES_RODC_REFERRAL_TO_FULL_DC" },
975 static int lsarpc_dissect_element_lsa_TranslatedName_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
976 static int lsarpc_dissect_element_lsa_TranslatedName_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
977 static int lsarpc_dissect_element_lsa_TranslatedName_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
978 static int lsarpc_dissect_element_lsa_TransNameArray_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
979 static int lsarpc_dissect_element_lsa_TransNameArray_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
980 static int lsarpc_dissect_element_lsa_TransNameArray_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
981 static int lsarpc_dissect_element_lsa_TransNameArray_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
982 static int lsarpc_dissect_element_lsa_LUIDAttribute_luid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
983 static int lsarpc_dissect_element_lsa_LUIDAttribute_attribute(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
984 static int lsarpc_dissect_element_lsa_PrivilegeSet_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
985 static int lsarpc_dissect_element_lsa_PrivilegeSet_unknown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
986 static int lsarpc_dissect_element_lsa_PrivilegeSet_set(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
987 static int lsarpc_dissect_element_lsa_PrivilegeSet_set_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
988 static int lsarpc_dissect_element_lsa_DATA_BUF_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
989 static int lsarpc_dissect_element_lsa_DATA_BUF_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
990 static int lsarpc_dissect_element_lsa_DATA_BUF_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
991 static int lsarpc_dissect_element_lsa_DATA_BUF_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
992 static int lsarpc_dissect_element_lsa_DATA_BUF_data__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
993 static int lsarpc_dissect_element_lsa_DATA_BUF2_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
994 static int lsarpc_dissect_element_lsa_DATA_BUF2_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
995 static int lsarpc_dissect_element_lsa_DATA_BUF2_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
996 static int lsarpc_dissect_element_lsa_DATA_BUF2_data__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
997 const value_string lsarpc_lsa_TrustDomInfoEnum_vals
[] = {
998 { LSA_TRUSTED_DOMAIN_INFO_NAME
, "LSA_TRUSTED_DOMAIN_INFO_NAME" },
999 { LSA_TRUSTED_DOMAIN_INFO_CONTROLLERS
, "LSA_TRUSTED_DOMAIN_INFO_CONTROLLERS" },
1000 { LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET
, "LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET" },
1001 { LSA_TRUSTED_DOMAIN_INFO_PASSWORD
, "LSA_TRUSTED_DOMAIN_INFO_PASSWORD" },
1002 { LSA_TRUSTED_DOMAIN_INFO_BASIC
, "LSA_TRUSTED_DOMAIN_INFO_BASIC" },
1003 { LSA_TRUSTED_DOMAIN_INFO_INFO_EX
, "LSA_TRUSTED_DOMAIN_INFO_INFO_EX" },
1004 { LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO
, "LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO" },
1005 { LSA_TRUSTED_DOMAIN_INFO_FULL_INFO
, "LSA_TRUSTED_DOMAIN_INFO_FULL_INFO" },
1006 { LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL
, "LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL" },
1007 { LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL
, "LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL" },
1008 { LSA_TRUSTED_DOMAIN_INFO_INFO_EX2_INTERNAL
, "LSA_TRUSTED_DOMAIN_INFO_INFO_EX2_INTERNAL" },
1009 { LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_2_INTERNAL
, "LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_2_INTERNAL" },
1010 { LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES
, "LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES" },
1011 { LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL_AES
, "LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL_AES" },
1012 { LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL_AES
, "LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL_AES" },
1015 static const true_false_string lsa_TrustDirection_LSA_TRUST_DIRECTION_INBOUND_tfs
= {
1016 "LSA_TRUST_DIRECTION_INBOUND is SET",
1017 "LSA_TRUST_DIRECTION_INBOUND is NOT SET",
1019 static const true_false_string lsa_TrustDirection_LSA_TRUST_DIRECTION_OUTBOUND_tfs
= {
1020 "LSA_TRUST_DIRECTION_OUTBOUND is SET",
1021 "LSA_TRUST_DIRECTION_OUTBOUND is NOT SET",
1023 const value_string lsarpc_lsa_TrustType_vals
[] = {
1024 { LSA_TRUST_TYPE_DOWNLEVEL
, "LSA_TRUST_TYPE_DOWNLEVEL" },
1025 { LSA_TRUST_TYPE_UPLEVEL
, "LSA_TRUST_TYPE_UPLEVEL" },
1026 { LSA_TRUST_TYPE_MIT
, "LSA_TRUST_TYPE_MIT" },
1027 { LSA_TRUST_TYPE_DCE
, "LSA_TRUST_TYPE_DCE" },
1030 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE_tfs
= {
1031 "LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE is SET",
1032 "LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE is NOT SET",
1034 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY_tfs
= {
1035 "LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY is SET",
1036 "LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY is NOT SET",
1038 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN_tfs
= {
1039 "LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN is SET",
1040 "LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN is NOT SET",
1042 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE_tfs
= {
1043 "LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE is SET",
1044 "LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE is NOT SET",
1046 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_tfs
= {
1047 "LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION is SET",
1048 "LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION is NOT SET",
1050 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_WITHIN_FOREST_tfs
= {
1051 "LSA_TRUST_ATTRIBUTE_WITHIN_FOREST is SET",
1052 "LSA_TRUST_ATTRIBUTE_WITHIN_FOREST is NOT SET",
1054 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL_tfs
= {
1055 "LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL is SET",
1056 "LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL is NOT SET",
1058 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION_tfs
= {
1059 "LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION is SET",
1060 "LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION is NOT SET",
1062 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION_tfs
= {
1063 "LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION is SET",
1064 "LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION is NOT SET",
1066 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_PIM_TRUST_tfs
= {
1067 "LSA_TRUST_ATTRIBUTE_PIM_TRUST is SET",
1068 "LSA_TRUST_ATTRIBUTE_PIM_TRUST is NOT SET",
1070 static const true_false_string lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION_tfs
= {
1071 "LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION is SET",
1072 "LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION is NOT SET",
1074 static int lsarpc_dissect_element_lsa_TrustDomainInfoName_netbios_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1075 static int lsarpc_dissect_element_lsa_TrustDomainInfoControllers_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1076 static int lsarpc_dissect_element_lsa_TrustDomainInfoControllers_netbios_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1077 static int lsarpc_dissect_element_lsa_TrustDomainInfoControllers_netbios_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1078 static int lsarpc_dissect_element_lsa_TrustDomainInfoControllers_netbios_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1079 static int lsarpc_dissect_element_lsa_TrustDomainInfoPosixOffset_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1080 static int lsarpc_dissect_element_lsa_TrustDomainInfoPassword_password(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1081 static int lsarpc_dissect_element_lsa_TrustDomainInfoPassword_password_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1082 static int lsarpc_dissect_element_lsa_TrustDomainInfoPassword_old_password(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1083 static int lsarpc_dissect_element_lsa_TrustDomainInfoPassword_old_password_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1084 static int lsarpc_dissect_element_lsa_TrustDomainInfoBasic_netbios_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1085 static int lsarpc_dissect_element_lsa_TrustDomainInfoBasic_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1086 static int lsarpc_dissect_element_lsa_TrustDomainInfoBasic_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1087 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1088 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_netbios_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1089 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1090 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1091 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_trust_direction(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1092 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_trust_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1093 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_trust_attributes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1094 const value_string lsarpc_lsa_TrustAuthType_vals
[] = {
1095 { TRUST_AUTH_TYPE_NONE
, "TRUST_AUTH_TYPE_NONE" },
1096 { TRUST_AUTH_TYPE_NT4OWF
, "TRUST_AUTH_TYPE_NT4OWF" },
1097 { TRUST_AUTH_TYPE_CLEAR
, "TRUST_AUTH_TYPE_CLEAR" },
1098 { TRUST_AUTH_TYPE_VERSION
, "TRUST_AUTH_TYPE_VERSION" },
1101 static int lsarpc_dissect_element_lsa_TrustDomainInfoBuffer_last_update_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1102 static int lsarpc_dissect_element_lsa_TrustDomainInfoBuffer_AuthType(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1103 static int lsarpc_dissect_element_lsa_TrustDomainInfoBuffer_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1104 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1105 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1106 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1107 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1108 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1109 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1110 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1111 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1112 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1113 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1114 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1115 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1116 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1117 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternal_auth_blob(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1118 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternal_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1119 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternal_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1120 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternal_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1121 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_auth_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1122 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_auth_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1123 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_salt(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1124 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_salt_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1125 static int lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_cipher(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1126 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternalAES_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1127 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternalAES_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1128 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternalAES_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1129 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1130 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1131 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1132 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1133 static int lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1134 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo2Internal_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1135 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo2Internal_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1136 static int lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo2Internal_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1137 static int lsarpc_dissect_element_lsa_TrustDomainInfoSupportedEncTypes_enc_types(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1138 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1139 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_controllers(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1140 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1141 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_password(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1142 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_info_basic(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1143 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1144 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1145 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1146 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_auth_info_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1147 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1148 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_info_ex2_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1149 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info2_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1150 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_enc_types(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1151 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_auth_info_internal_aes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1152 static int lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info_internal_aes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1153 static int lsarpc_dissect_element_lsa_DATA_BUF_PTR_buf(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1154 static int lsarpc_dissect_element_lsa_DATA_BUF_PTR_buf_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1155 static int lsarpc_dissect_element_lsa_RightAttribute_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1156 static int lsarpc_dissect_element_lsa_RightAttribute_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1157 static int lsarpc_dissect_element_lsa_RightSet_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1158 static int lsarpc_dissect_element_lsa_RightSet_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1159 static int lsarpc_dissect_element_lsa_RightSet_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1160 static int lsarpc_dissect_element_lsa_RightSet_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1161 static int lsarpc_dissect_element_lsa_DomainListEx_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1162 static int lsarpc_dissect_element_lsa_DomainListEx_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1163 static int lsarpc_dissect_element_lsa_DomainListEx_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1164 static int lsarpc_dissect_element_lsa_DomainListEx_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1165 static int lsarpc_dissect_element_lsa_DomainInfoQoS_quality_of_service(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1166 static const true_false_string lsa_krbAuthenticationOptions_LSA_POLICY_KERBEROS_VALIDATE_CLIENT_tfs
= {
1167 "LSA_POLICY_KERBEROS_VALIDATE_CLIENT is SET",
1168 "LSA_POLICY_KERBEROS_VALIDATE_CLIENT is NOT SET",
1170 static int lsarpc_dissect_element_lsa_DomainInfoKerberos_authentication_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1171 static int lsarpc_dissect_element_lsa_DomainInfoKerberos_service_tkt_lifetime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1172 static int lsarpc_dissect_element_lsa_DomainInfoKerberos_user_tkt_lifetime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1173 static int lsarpc_dissect_element_lsa_DomainInfoKerberos_user_tkt_renewaltime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1174 static int lsarpc_dissect_element_lsa_DomainInfoKerberos_clock_skew(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1175 static int lsarpc_dissect_element_lsa_DomainInfoKerberos_reserved(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1176 static int lsarpc_dissect_element_lsa_DomainInfoEfs_blob_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1177 static int lsarpc_dissect_element_lsa_DomainInfoEfs_efs_blob(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1178 static int lsarpc_dissect_element_lsa_DomainInfoEfs_efs_blob_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1179 const value_string lsarpc_lsa_DomainInfoEnum_vals
[] = {
1180 { LSA_DOMAIN_INFO_POLICY_QOS
, "LSA_DOMAIN_INFO_POLICY_QOS" },
1181 { LSA_DOMAIN_INFO_POLICY_EFS
, "LSA_DOMAIN_INFO_POLICY_EFS" },
1182 { LSA_DOMAIN_INFO_POLICY_KERBEROS
, "LSA_DOMAIN_INFO_POLICY_KERBEROS" },
1185 static int lsarpc_dissect_element_lsa_DomainInformationPolicy_qos_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1186 static int lsarpc_dissect_element_lsa_DomainInformationPolicy_efs_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1187 static int lsarpc_dissect_element_lsa_DomainInformationPolicy_kerberos_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1188 static int lsarpc_dissect_element_lsa_TranslatedName2_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1189 static int lsarpc_dissect_element_lsa_TranslatedName2_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1190 static int lsarpc_dissect_element_lsa_TranslatedName2_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1191 static int lsarpc_dissect_element_lsa_TranslatedName2_unknown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1192 static int lsarpc_dissect_element_lsa_TransNameArray2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1193 static int lsarpc_dissect_element_lsa_TransNameArray2_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1194 static int lsarpc_dissect_element_lsa_TransNameArray2_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1195 static int lsarpc_dissect_element_lsa_TransNameArray2_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1196 const value_string lsarpc_lsa_LookupOptions_vals
[] = {
1197 { LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES
, "LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES" },
1198 { LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES_LOCAL
, "LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES_LOCAL" },
1201 const value_string lsarpc_lsa_ClientRevision_vals
[] = {
1202 { LSA_CLIENT_REVISION_1
, "LSA_CLIENT_REVISION_1" },
1203 { LSA_CLIENT_REVISION_2
, "LSA_CLIENT_REVISION_2" },
1206 static int lsarpc_dissect_element_lsa_TranslatedSid2_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1207 static int lsarpc_dissect_element_lsa_TranslatedSid2_rid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1208 static int lsarpc_dissect_element_lsa_TranslatedSid2_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1209 static int lsarpc_dissect_element_lsa_TranslatedSid2_unknown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1210 static int lsarpc_dissect_element_lsa_TransSidArray2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1211 static int lsarpc_dissect_element_lsa_TransSidArray2_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1212 static int lsarpc_dissect_element_lsa_TransSidArray2_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1213 static int lsarpc_dissect_element_lsa_TransSidArray2_sids__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1214 static int lsarpc_dissect_element_lsa_TranslatedSid3_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1215 static int lsarpc_dissect_element_lsa_TranslatedSid3_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1216 static int lsarpc_dissect_element_lsa_TranslatedSid3_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1217 static int lsarpc_dissect_element_lsa_TranslatedSid3_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1218 static int lsarpc_dissect_element_lsa_TranslatedSid3_flags(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1219 static int lsarpc_dissect_element_lsa_TransSidArray3_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1220 static int lsarpc_dissect_element_lsa_TransSidArray3_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1221 static int lsarpc_dissect_element_lsa_TransSidArray3_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1222 static int lsarpc_dissect_element_lsa_TransSidArray3_sids__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1223 static const true_false_string lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_NEW_tfs
= {
1224 "LSA_TLN_DISABLED_NEW is SET",
1225 "LSA_TLN_DISABLED_NEW is NOT SET",
1227 static const true_false_string lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_ADMIN_tfs
= {
1228 "LSA_TLN_DISABLED_ADMIN is SET",
1229 "LSA_TLN_DISABLED_ADMIN is NOT SET",
1231 static const true_false_string lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_CONFLICT_tfs
= {
1232 "LSA_TLN_DISABLED_CONFLICT is SET",
1233 "LSA_TLN_DISABLED_CONFLICT is NOT SET",
1235 static const true_false_string lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_ADMIN_tfs
= {
1236 "LSA_SID_DISABLED_ADMIN is SET",
1237 "LSA_SID_DISABLED_ADMIN is NOT SET",
1239 static const true_false_string lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_CONFLICT_tfs
= {
1240 "LSA_SID_DISABLED_CONFLICT is SET",
1241 "LSA_SID_DISABLED_CONFLICT is NOT SET",
1243 static const true_false_string lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_ADMIN_tfs
= {
1244 "LSA_NB_DISABLED_ADMIN is SET",
1245 "LSA_NB_DISABLED_ADMIN is NOT SET",
1247 static const true_false_string lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_CONFLICT_tfs
= {
1248 "LSA_NB_DISABLED_CONFLICT is SET",
1249 "LSA_NB_DISABLED_CONFLICT is NOT SET",
1251 const value_string lsarpc_lsa_ForestTrustRecordType_vals
[] = {
1252 { LSA_FOREST_TRUST_TOP_LEVEL_NAME
, "LSA_FOREST_TRUST_TOP_LEVEL_NAME" },
1253 { LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX
, "LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX" },
1254 { LSA_FOREST_TRUST_DOMAIN_INFO
, "LSA_FOREST_TRUST_DOMAIN_INFO" },
1255 { LSA_FOREST_TRUST_BINARY_DATA
, "LSA_FOREST_TRUST_BINARY_DATA" },
1256 { LSA_FOREST_TRUST_SCANNER_INFO
, "LSA_FOREST_TRUST_SCANNER_INFO" },
1259 static int lsarpc_dissect_element_lsa_ForestTrustBinaryData_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1260 static int lsarpc_dissect_element_lsa_ForestTrustBinaryData_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1261 static int lsarpc_dissect_element_lsa_ForestTrustBinaryData_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1262 static int lsarpc_dissect_element_lsa_ForestTrustBinaryData_data__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1263 static int lsarpc_dissect_element_lsa_ForestTrustDomainInfo_domain_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1264 static int lsarpc_dissect_element_lsa_ForestTrustDomainInfo_domain_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1265 static int lsarpc_dissect_element_lsa_ForestTrustDomainInfo_dns_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1266 static int lsarpc_dissect_element_lsa_ForestTrustDomainInfo_netbios_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1267 static int lsarpc_dissect_element_lsa_ForestTrustData_top_level_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1268 static int lsarpc_dissect_element_lsa_ForestTrustData_top_level_name_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1269 static int lsarpc_dissect_element_lsa_ForestTrustData_domain_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1270 static int lsarpc_dissect_element_lsa_ForestTrustData_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1271 static int lsarpc_dissect_element_lsa_ForestTrustRecord_flags(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1272 static int lsarpc_dissect_element_lsa_ForestTrustRecord_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, uint32_t *type
);
1273 static int lsarpc_dissect_element_lsa_ForestTrustRecord_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1274 static int lsarpc_dissect_element_lsa_ForestTrustRecord_forest_trust_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, uint32_t *type
);
1275 static int lsarpc_dissect_element_lsa_ForestTrustInformation_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1276 static int lsarpc_dissect_element_lsa_ForestTrustInformation_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1277 static int lsarpc_dissect_element_lsa_ForestTrustInformation_entries_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1278 static int lsarpc_dissect_element_lsa_ForestTrustInformation_entries__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1279 static int lsarpc_dissect_element_lsa_ForestTrustInformation_entries___(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1280 const value_string lsarpc_lsa_ForestTrustCollisionRecordType_vals
[] = {
1281 { LSA_FOREST_TRUST_COLLISION_TDO
, "LSA_FOREST_TRUST_COLLISION_TDO" },
1282 { LSA_FOREST_TRUST_COLLISION_XREF
, "LSA_FOREST_TRUST_COLLISION_XREF" },
1283 { LSA_FOREST_TRUST_COLLISION_OTHER
, "LSA_FOREST_TRUST_COLLISION_OTHER" },
1286 static int lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1287 static int lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1288 static int lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_flags(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1289 static int lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1290 static int lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1291 static int lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1292 static int lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1293 static int lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1294 static int lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries___(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1295 static const true_false_string lsa_RevisionSupportedFeature_LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER_tfs
= {
1296 "LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER is SET",
1297 "LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER is NOT SET",
1299 static int lsarpc_dissect_element_lsa_revision_info1_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1300 static int lsarpc_dissect_element_lsa_revision_info1_supported_features(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1301 static int lsarpc_dissect_element_lsa_revision_info_info1(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1302 static int lsarpc_dissect_element_lsa_ForestTrustData2_top_level_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1303 static int lsarpc_dissect_element_lsa_ForestTrustData2_top_level_name_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1304 static int lsarpc_dissect_element_lsa_ForestTrustData2_domain_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1305 static int lsarpc_dissect_element_lsa_ForestTrustData2_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1306 static int lsarpc_dissect_element_lsa_ForestTrustData2_scanner_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1307 static int lsarpc_dissect_element_lsa_ForestTrustRecord2_flags(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1308 static int lsarpc_dissect_element_lsa_ForestTrustRecord2_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, uint32_t *type
);
1309 static int lsarpc_dissect_element_lsa_ForestTrustRecord2_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1310 static int lsarpc_dissect_element_lsa_ForestTrustRecord2_forest_trust_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, uint32_t *type
);
1311 static int lsarpc_dissect_element_lsa_ForestTrustInformation2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1312 static int lsarpc_dissect_element_lsa_ForestTrustInformation2_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1313 static int lsarpc_dissect_element_lsa_ForestTrustInformation2_entries_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1314 static int lsarpc_dissect_element_lsa_ForestTrustInformation2_entries__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1315 static int lsarpc_dissect_element_lsa_ForestTrustInformation2_entries___(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1316 static int lsarpc_dissect_element_lsa_Close_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1317 static int lsarpc_dissect_element_lsa_Close_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1318 static int lsarpc_dissect_element_lsa_Delete_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1319 static int lsarpc_dissect_element_lsa_Delete_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1320 static int lsarpc_dissect_element_lsa_EnumPrivs_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1321 static int lsarpc_dissect_element_lsa_EnumPrivs_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1322 static int lsarpc_dissect_element_lsa_EnumPrivs_resume_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1323 static int lsarpc_dissect_element_lsa_EnumPrivs_resume_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1324 static int lsarpc_dissect_element_lsa_EnumPrivs_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1325 static int lsarpc_dissect_element_lsa_EnumPrivs_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1326 static int lsarpc_dissect_element_lsa_EnumPrivs_max_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1327 static int lsarpc_dissect_element_lsa_QuerySecurity_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1328 static int lsarpc_dissect_element_lsa_QuerySecurity_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1329 static int lsarpc_dissect_element_lsa_QuerySecurity_sec_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1330 static int lsarpc_dissect_element_lsa_QuerySecurity_sdbuf(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1331 static int lsarpc_dissect_element_lsa_QuerySecurity_sdbuf_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1332 static int lsarpc_dissect_element_lsa_QuerySecurity_sdbuf__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1333 static int lsarpc_dissect_element_lsa_SetSecObj_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1334 static int lsarpc_dissect_element_lsa_SetSecObj_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1335 static int lsarpc_dissect_element_lsa_SetSecObj_sec_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1336 static int lsarpc_dissect_element_lsa_SetSecObj_sdbuf(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1337 static int lsarpc_dissect_element_lsa_SetSecObj_sdbuf_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1338 static int lsarpc_dissect_element_lsa_OpenPolicy_system_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1339 static int lsarpc_dissect_element_lsa_OpenPolicy_system_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1340 static int lsarpc_dissect_element_lsa_OpenPolicy_attr(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1341 static int lsarpc_dissect_element_lsa_OpenPolicy_attr_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1342 static int lsarpc_dissect_element_lsa_OpenPolicy_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1343 static int lsarpc_dissect_element_lsa_OpenPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1344 static int lsarpc_dissect_element_lsa_OpenPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1345 static int lsarpc_dissect_element_lsa_QueryInfoPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1346 static int lsarpc_dissect_element_lsa_QueryInfoPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1347 static int lsarpc_dissect_element_lsa_QueryInfoPolicy_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1348 static int lsarpc_dissect_element_lsa_QueryInfoPolicy_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1349 static int lsarpc_dissect_element_lsa_QueryInfoPolicy_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1350 static int lsarpc_dissect_element_lsa_QueryInfoPolicy_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1351 static int lsarpc_dissect_element_lsa_SetInfoPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1352 static int lsarpc_dissect_element_lsa_SetInfoPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1353 static int lsarpc_dissect_element_lsa_SetInfoPolicy_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1354 static int lsarpc_dissect_element_lsa_SetInfoPolicy_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1355 static int lsarpc_dissect_element_lsa_SetInfoPolicy_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1356 static int lsarpc_dissect_element_lsa_CreateAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1357 static int lsarpc_dissect_element_lsa_CreateAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1358 static int lsarpc_dissect_element_lsa_CreateAccount_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1359 static int lsarpc_dissect_element_lsa_CreateAccount_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1360 static int lsarpc_dissect_element_lsa_CreateAccount_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1361 static int lsarpc_dissect_element_lsa_CreateAccount_acct_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1362 static int lsarpc_dissect_element_lsa_CreateAccount_acct_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1363 static int lsarpc_dissect_element_lsa_EnumAccounts_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1364 static int lsarpc_dissect_element_lsa_EnumAccounts_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1365 static int lsarpc_dissect_element_lsa_EnumAccounts_resume_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1366 static int lsarpc_dissect_element_lsa_EnumAccounts_resume_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1367 static int lsarpc_dissect_element_lsa_EnumAccounts_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1368 static int lsarpc_dissect_element_lsa_EnumAccounts_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1369 static int lsarpc_dissect_element_lsa_EnumAccounts_num_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1370 static int lsarpc_dissect_element_lsa_CreateTrustedDomain_policy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1371 static int lsarpc_dissect_element_lsa_CreateTrustedDomain_policy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1372 static int lsarpc_dissect_element_lsa_CreateTrustedDomain_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1373 static int lsarpc_dissect_element_lsa_CreateTrustedDomain_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1374 static int lsarpc_dissect_element_lsa_CreateTrustedDomain_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1375 static int lsarpc_dissect_element_lsa_CreateTrustedDomain_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1376 static int lsarpc_dissect_element_lsa_CreateTrustedDomain_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1377 static int lsarpc_dissect_element_lsa_EnumTrustDom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1378 static int lsarpc_dissect_element_lsa_EnumTrustDom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1379 static int lsarpc_dissect_element_lsa_EnumTrustDom_resume_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1380 static int lsarpc_dissect_element_lsa_EnumTrustDom_resume_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1381 static int lsarpc_dissect_element_lsa_EnumTrustDom_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1382 static int lsarpc_dissect_element_lsa_EnumTrustDom_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1383 static int lsarpc_dissect_element_lsa_EnumTrustDom_max_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1384 static int lsarpc_dissect_element_lsa_LookupNames_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1385 static int lsarpc_dissect_element_lsa_LookupNames_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1386 static int lsarpc_dissect_element_lsa_LookupNames_num_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1387 static int lsarpc_dissect_element_lsa_LookupNames_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1388 static int lsarpc_dissect_element_lsa_LookupNames_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1389 static int lsarpc_dissect_element_lsa_LookupNames_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1390 static int lsarpc_dissect_element_lsa_LookupNames_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1391 static int lsarpc_dissect_element_lsa_LookupNames_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1392 static int lsarpc_dissect_element_lsa_LookupNames_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1393 static int lsarpc_dissect_element_lsa_LookupNames_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1394 static int lsarpc_dissect_element_lsa_LookupNames_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1395 static int lsarpc_dissect_element_lsa_LookupNames_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1396 static int lsarpc_dissect_element_lsa_LookupSids_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1397 static int lsarpc_dissect_element_lsa_LookupSids_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1398 static int lsarpc_dissect_element_lsa_LookupSids_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1399 static int lsarpc_dissect_element_lsa_LookupSids_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1400 static int lsarpc_dissect_element_lsa_LookupSids_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1401 static int lsarpc_dissect_element_lsa_LookupSids_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1402 static int lsarpc_dissect_element_lsa_LookupSids_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1403 static int lsarpc_dissect_element_lsa_LookupSids_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1404 static int lsarpc_dissect_element_lsa_LookupSids_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1405 static int lsarpc_dissect_element_lsa_LookupSids_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1406 static int lsarpc_dissect_element_lsa_LookupSids_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1407 static int lsarpc_dissect_element_lsa_LookupSids_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1408 static int lsarpc_dissect_element_lsa_CreateSecret_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1409 static int lsarpc_dissect_element_lsa_CreateSecret_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1410 static int lsarpc_dissect_element_lsa_CreateSecret_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1411 static int lsarpc_dissect_element_lsa_CreateSecret_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1412 static int lsarpc_dissect_element_lsa_CreateSecret_sec_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1413 static int lsarpc_dissect_element_lsa_CreateSecret_sec_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1414 static int lsarpc_dissect_element_lsa_OpenAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1415 static int lsarpc_dissect_element_lsa_OpenAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1416 static int lsarpc_dissect_element_lsa_OpenAccount_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1417 static int lsarpc_dissect_element_lsa_OpenAccount_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1418 static int lsarpc_dissect_element_lsa_OpenAccount_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1419 static int lsarpc_dissect_element_lsa_OpenAccount_acct_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1420 static int lsarpc_dissect_element_lsa_OpenAccount_acct_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1421 static int lsarpc_dissect_element_lsa_EnumPrivsAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1422 static int lsarpc_dissect_element_lsa_EnumPrivsAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1423 static int lsarpc_dissect_element_lsa_EnumPrivsAccount_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1424 static int lsarpc_dissect_element_lsa_EnumPrivsAccount_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1425 static int lsarpc_dissect_element_lsa_EnumPrivsAccount_privs__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1426 static int lsarpc_dissect_element_lsa_AddPrivilegesToAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1427 static int lsarpc_dissect_element_lsa_AddPrivilegesToAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1428 static int lsarpc_dissect_element_lsa_AddPrivilegesToAccount_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1429 static int lsarpc_dissect_element_lsa_AddPrivilegesToAccount_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1430 static int lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1431 static int lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1432 static int lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_remove_all(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1433 static int lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1434 static int lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1435 static int lsarpc_dissect_element_lsa_GetSystemAccessAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1436 static int lsarpc_dissect_element_lsa_GetSystemAccessAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1437 static int lsarpc_dissect_element_lsa_GetSystemAccessAccount_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1438 static int lsarpc_dissect_element_lsa_GetSystemAccessAccount_access_mask_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1439 static int lsarpc_dissect_element_lsa_SetSystemAccessAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1440 static int lsarpc_dissect_element_lsa_SetSystemAccessAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1441 static int lsarpc_dissect_element_lsa_SetSystemAccessAccount_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1442 static int lsarpc_dissect_element_lsa_OpenTrustedDomain_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1443 static int lsarpc_dissect_element_lsa_OpenTrustedDomain_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1444 static int lsarpc_dissect_element_lsa_OpenTrustedDomain_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1445 static int lsarpc_dissect_element_lsa_OpenTrustedDomain_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1446 static int lsarpc_dissect_element_lsa_OpenTrustedDomain_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1447 static int lsarpc_dissect_element_lsa_OpenTrustedDomain_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1448 static int lsarpc_dissect_element_lsa_OpenTrustedDomain_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1449 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1450 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1451 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1452 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1453 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1454 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1455 static int lsarpc_dissect_element_lsa_SetInformationTrustedDomain_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1456 static int lsarpc_dissect_element_lsa_SetInformationTrustedDomain_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1457 static int lsarpc_dissect_element_lsa_SetInformationTrustedDomain_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1458 static int lsarpc_dissect_element_lsa_SetInformationTrustedDomain_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1459 static int lsarpc_dissect_element_lsa_SetInformationTrustedDomain_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1460 static int lsarpc_dissect_element_lsa_OpenSecret_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1461 static int lsarpc_dissect_element_lsa_OpenSecret_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1462 static int lsarpc_dissect_element_lsa_OpenSecret_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1463 static int lsarpc_dissect_element_lsa_OpenSecret_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1464 static int lsarpc_dissect_element_lsa_OpenSecret_sec_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1465 static int lsarpc_dissect_element_lsa_OpenSecret_sec_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1466 static int lsarpc_dissect_element_lsa_SetSecret_sec_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1467 static int lsarpc_dissect_element_lsa_SetSecret_sec_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1468 static int lsarpc_dissect_element_lsa_SetSecret_new_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1469 static int lsarpc_dissect_element_lsa_SetSecret_new_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1470 static int lsarpc_dissect_element_lsa_SetSecret_old_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1471 static int lsarpc_dissect_element_lsa_SetSecret_old_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1472 static int lsarpc_dissect_element_lsa_QuerySecret_sec_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1473 static int lsarpc_dissect_element_lsa_QuerySecret_sec_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1474 static int lsarpc_dissect_element_lsa_QuerySecret_new_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1475 static int lsarpc_dissect_element_lsa_QuerySecret_new_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1476 static int lsarpc_dissect_element_lsa_QuerySecret_new_mtime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1477 static int lsarpc_dissect_element_lsa_QuerySecret_new_mtime_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1478 static int lsarpc_dissect_element_lsa_QuerySecret_old_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1479 static int lsarpc_dissect_element_lsa_QuerySecret_old_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1480 static int lsarpc_dissect_element_lsa_QuerySecret_old_mtime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1481 static int lsarpc_dissect_element_lsa_QuerySecret_old_mtime_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1482 static int lsarpc_dissect_element_lsa_LookupPrivValue_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1483 static int lsarpc_dissect_element_lsa_LookupPrivValue_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1484 static int lsarpc_dissect_element_lsa_LookupPrivValue_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1485 static int lsarpc_dissect_element_lsa_LookupPrivValue_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1486 static int lsarpc_dissect_element_lsa_LookupPrivValue_luid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1487 static int lsarpc_dissect_element_lsa_LookupPrivValue_luid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1488 static int lsarpc_dissect_element_lsa_LookupPrivName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1489 static int lsarpc_dissect_element_lsa_LookupPrivName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1490 static int lsarpc_dissect_element_lsa_LookupPrivName_luid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1491 static int lsarpc_dissect_element_lsa_LookupPrivName_luid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1492 static int lsarpc_dissect_element_lsa_LookupPrivName_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1493 static int lsarpc_dissect_element_lsa_LookupPrivName_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1494 static int lsarpc_dissect_element_lsa_LookupPrivName_name__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1495 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1496 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1497 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1498 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1499 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_language_id(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1500 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_language_id_sys(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1501 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_disp_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1502 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_disp_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1503 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_disp_name__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1504 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_returned_language_id(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1505 static int lsarpc_dissect_element_lsa_LookupPrivDisplayName_returned_language_id_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1506 static int lsarpc_dissect_element_lsa_DeleteObject_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1507 static int lsarpc_dissect_element_lsa_DeleteObject_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1508 static int lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1509 static int lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1510 static int lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1511 static int lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1512 static int lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1513 static int lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1514 static int lsarpc_dissect_element_lsa_EnumAccountRights_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1515 static int lsarpc_dissect_element_lsa_EnumAccountRights_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1516 static int lsarpc_dissect_element_lsa_EnumAccountRights_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1517 static int lsarpc_dissect_element_lsa_EnumAccountRights_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1518 static int lsarpc_dissect_element_lsa_EnumAccountRights_rights(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1519 static int lsarpc_dissect_element_lsa_EnumAccountRights_rights_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1520 static int lsarpc_dissect_element_lsa_AddAccountRights_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1521 static int lsarpc_dissect_element_lsa_AddAccountRights_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1522 static int lsarpc_dissect_element_lsa_AddAccountRights_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1523 static int lsarpc_dissect_element_lsa_AddAccountRights_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1524 static int lsarpc_dissect_element_lsa_AddAccountRights_rights(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1525 static int lsarpc_dissect_element_lsa_AddAccountRights_rights_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1526 static int lsarpc_dissect_element_lsa_RemoveAccountRights_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1527 static int lsarpc_dissect_element_lsa_RemoveAccountRights_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1528 static int lsarpc_dissect_element_lsa_RemoveAccountRights_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1529 static int lsarpc_dissect_element_lsa_RemoveAccountRights_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1530 static int lsarpc_dissect_element_lsa_RemoveAccountRights_remove_all(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1531 static int lsarpc_dissect_element_lsa_RemoveAccountRights_rights(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1532 static int lsarpc_dissect_element_lsa_RemoveAccountRights_rights_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1533 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1534 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1535 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_dom_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1536 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_dom_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1537 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1538 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1539 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1540 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1541 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfo_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1542 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfo_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1543 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfo_dom_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1544 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfo_dom_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1545 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfo_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1546 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfo_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1547 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfo_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1548 static int lsarpc_dissect_element_lsa_DeleteTrustedDomain_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1549 static int lsarpc_dissect_element_lsa_DeleteTrustedDomain_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1550 static int lsarpc_dissect_element_lsa_DeleteTrustedDomain_dom_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1551 static int lsarpc_dissect_element_lsa_DeleteTrustedDomain_dom_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1552 static int lsarpc_dissect_element_lsa_StorePrivateData_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1553 static int lsarpc_dissect_element_lsa_StorePrivateData_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1554 static int lsarpc_dissect_element_lsa_StorePrivateData_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1555 static int lsarpc_dissect_element_lsa_StorePrivateData_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1556 static int lsarpc_dissect_element_lsa_StorePrivateData_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1557 static int lsarpc_dissect_element_lsa_StorePrivateData_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1558 static int lsarpc_dissect_element_lsa_RetrievePrivateData_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1559 static int lsarpc_dissect_element_lsa_RetrievePrivateData_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1560 static int lsarpc_dissect_element_lsa_RetrievePrivateData_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1561 static int lsarpc_dissect_element_lsa_RetrievePrivateData_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1562 static int lsarpc_dissect_element_lsa_RetrievePrivateData_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1563 static int lsarpc_dissect_element_lsa_RetrievePrivateData_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1564 static int lsarpc_dissect_element_lsa_RetrievePrivateData_val__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1565 static int lsarpc_dissect_element_lsa_OpenPolicy2_system_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1566 static int lsarpc_dissect_element_lsa_OpenPolicy2_system_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1567 static int lsarpc_dissect_element_lsa_OpenPolicy2_attr(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1568 static int lsarpc_dissect_element_lsa_OpenPolicy2_attr_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1569 static int lsarpc_dissect_element_lsa_OpenPolicy2_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1570 static int lsarpc_dissect_element_lsa_OpenPolicy2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1571 static int lsarpc_dissect_element_lsa_OpenPolicy2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1572 static int lsarpc_dissect_element_lsa_GetUserName_system_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1573 static int lsarpc_dissect_element_lsa_GetUserName_system_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1574 static int lsarpc_dissect_element_lsa_GetUserName_account_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1575 static int lsarpc_dissect_element_lsa_GetUserName_account_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1576 static int lsarpc_dissect_element_lsa_GetUserName_account_name__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1577 static int lsarpc_dissect_element_lsa_GetUserName_authority_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1578 static int lsarpc_dissect_element_lsa_GetUserName_authority_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1579 static int lsarpc_dissect_element_lsa_GetUserName_authority_name__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1580 static int lsarpc_dissect_element_lsa_QueryInfoPolicy2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1581 static int lsarpc_dissect_element_lsa_QueryInfoPolicy2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1582 static int lsarpc_dissect_element_lsa_QueryInfoPolicy2_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1583 static int lsarpc_dissect_element_lsa_QueryInfoPolicy2_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1584 static int lsarpc_dissect_element_lsa_QueryInfoPolicy2_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1585 static int lsarpc_dissect_element_lsa_QueryInfoPolicy2_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1586 static int lsarpc_dissect_element_lsa_SetInfoPolicy2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1587 static int lsarpc_dissect_element_lsa_SetInfoPolicy2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1588 static int lsarpc_dissect_element_lsa_SetInfoPolicy2_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1589 static int lsarpc_dissect_element_lsa_SetInfoPolicy2_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1590 static int lsarpc_dissect_element_lsa_SetInfoPolicy2_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1591 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1592 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1593 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_trusted_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1594 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_trusted_domain_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1595 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1596 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1597 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1598 static int lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1599 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1600 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1601 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_trusted_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1602 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_trusted_domain_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1603 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1604 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1605 static int lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1606 static int lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1607 static int lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1608 static int lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_resume_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1609 static int lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_resume_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1610 static int lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1611 static int lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1612 static int lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_max_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1613 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx_policy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1614 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx_policy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1615 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1616 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1617 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1618 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1619 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1620 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1621 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1622 static int lsarpc_dissect_element_lsa_CloseTrustedDomainEx_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1623 static int lsarpc_dissect_element_lsa_CloseTrustedDomainEx_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1624 static int lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1625 static int lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1626 static int lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1627 static int lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1628 static int lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1629 static int lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1630 static int lsarpc_dissect_element_lsa_SetDomainInformationPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1631 static int lsarpc_dissect_element_lsa_SetDomainInformationPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1632 static int lsarpc_dissect_element_lsa_SetDomainInformationPolicy_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1633 static int lsarpc_dissect_element_lsa_SetDomainInformationPolicy_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1634 static int lsarpc_dissect_element_lsa_SetDomainInformationPolicy_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1635 static int lsarpc_dissect_element_lsa_OpenTrustedDomainByName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1636 static int lsarpc_dissect_element_lsa_OpenTrustedDomainByName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1637 static int lsarpc_dissect_element_lsa_OpenTrustedDomainByName_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1638 static int lsarpc_dissect_element_lsa_OpenTrustedDomainByName_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1639 static int lsarpc_dissect_element_lsa_OpenTrustedDomainByName_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1640 static int lsarpc_dissect_element_lsa_OpenTrustedDomainByName_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1641 static int lsarpc_dissect_element_lsa_LookupSids2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1642 static int lsarpc_dissect_element_lsa_LookupSids2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1643 static int lsarpc_dissect_element_lsa_LookupSids2_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1644 static int lsarpc_dissect_element_lsa_LookupSids2_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1645 static int lsarpc_dissect_element_lsa_LookupSids2_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1646 static int lsarpc_dissect_element_lsa_LookupSids2_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1647 static int lsarpc_dissect_element_lsa_LookupSids2_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1648 static int lsarpc_dissect_element_lsa_LookupSids2_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1649 static int lsarpc_dissect_element_lsa_LookupSids2_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1650 static int lsarpc_dissect_element_lsa_LookupSids2_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1651 static int lsarpc_dissect_element_lsa_LookupSids2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1652 static int lsarpc_dissect_element_lsa_LookupSids2_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1653 static int lsarpc_dissect_element_lsa_LookupSids2_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1654 static int lsarpc_dissect_element_lsa_LookupSids2_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1655 static int lsarpc_dissect_element_lsa_LookupNames2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1656 static int lsarpc_dissect_element_lsa_LookupNames2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1657 static int lsarpc_dissect_element_lsa_LookupNames2_num_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1658 static int lsarpc_dissect_element_lsa_LookupNames2_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1659 static int lsarpc_dissect_element_lsa_LookupNames2_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1660 static int lsarpc_dissect_element_lsa_LookupNames2_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1661 static int lsarpc_dissect_element_lsa_LookupNames2_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1662 static int lsarpc_dissect_element_lsa_LookupNames2_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1663 static int lsarpc_dissect_element_lsa_LookupNames2_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1664 static int lsarpc_dissect_element_lsa_LookupNames2_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1665 static int lsarpc_dissect_element_lsa_LookupNames2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1666 static int lsarpc_dissect_element_lsa_LookupNames2_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1667 static int lsarpc_dissect_element_lsa_LookupNames2_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1668 static int lsarpc_dissect_element_lsa_LookupNames2_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1669 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_policy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1670 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_policy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1671 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1672 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1673 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_auth_info_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1674 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_auth_info_internal_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1675 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1676 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1677 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1678 static int lsarpc_dissect_element_lsa_LookupNames3_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1679 static int lsarpc_dissect_element_lsa_LookupNames3_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1680 static int lsarpc_dissect_element_lsa_LookupNames3_num_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1681 static int lsarpc_dissect_element_lsa_LookupNames3_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1682 static int lsarpc_dissect_element_lsa_LookupNames3_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1683 static int lsarpc_dissect_element_lsa_LookupNames3_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1684 static int lsarpc_dissect_element_lsa_LookupNames3_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1685 static int lsarpc_dissect_element_lsa_LookupNames3_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1686 static int lsarpc_dissect_element_lsa_LookupNames3_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1687 static int lsarpc_dissect_element_lsa_LookupNames3_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1688 static int lsarpc_dissect_element_lsa_LookupNames3_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1689 static int lsarpc_dissect_element_lsa_LookupNames3_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1690 static int lsarpc_dissect_element_lsa_LookupNames3_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1691 static int lsarpc_dissect_element_lsa_LookupNames3_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1692 static int lsarpc_dissect_element_lsa_LookupNames3_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1693 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1694 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1695 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_trusted_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1696 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_trusted_domain_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1697 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_highest_record_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1698 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_forest_trust_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1699 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_forest_trust_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1700 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_forest_trust_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1701 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1702 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1703 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_trusted_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1704 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_trusted_domain_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1705 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_highest_record_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1706 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_forest_trust_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1707 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_forest_trust_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1708 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_check_only(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1709 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_collision_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1710 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_collision_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1711 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_collision_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1712 static int lsarpc_dissect_element_lsa_LookupSids3_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1713 static int lsarpc_dissect_element_lsa_LookupSids3_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1714 static int lsarpc_dissect_element_lsa_LookupSids3_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1715 static int lsarpc_dissect_element_lsa_LookupSids3_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1716 static int lsarpc_dissect_element_lsa_LookupSids3_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1717 static int lsarpc_dissect_element_lsa_LookupSids3_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1718 static int lsarpc_dissect_element_lsa_LookupSids3_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1719 static int lsarpc_dissect_element_lsa_LookupSids3_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1720 static int lsarpc_dissect_element_lsa_LookupSids3_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1721 static int lsarpc_dissect_element_lsa_LookupSids3_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1722 static int lsarpc_dissect_element_lsa_LookupSids3_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1723 static int lsarpc_dissect_element_lsa_LookupSids3_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1724 static int lsarpc_dissect_element_lsa_LookupNames4_num_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1725 static int lsarpc_dissect_element_lsa_LookupNames4_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1726 static int lsarpc_dissect_element_lsa_LookupNames4_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1727 static int lsarpc_dissect_element_lsa_LookupNames4_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1728 static int lsarpc_dissect_element_lsa_LookupNames4_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1729 static int lsarpc_dissect_element_lsa_LookupNames4_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1730 static int lsarpc_dissect_element_lsa_LookupNames4_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1731 static int lsarpc_dissect_element_lsa_LookupNames4_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1732 static int lsarpc_dissect_element_lsa_LookupNames4_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1733 static int lsarpc_dissect_element_lsa_LookupNames4_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1734 static int lsarpc_dissect_element_lsa_LookupNames4_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1735 static int lsarpc_dissect_element_lsa_LookupNames4_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1736 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_policy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1737 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_policy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1738 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1739 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1740 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_auth_info_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1741 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_auth_info_internal_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1742 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1743 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1744 static int lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1745 static int lsarpc_dissect_element_lsa_OpenPolicy3_system_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1746 static int lsarpc_dissect_element_lsa_OpenPolicy3_system_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1747 static int lsarpc_dissect_element_lsa_OpenPolicy3_attr(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1748 static int lsarpc_dissect_element_lsa_OpenPolicy3_attr_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1749 static int lsarpc_dissect_element_lsa_OpenPolicy3_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1750 static int lsarpc_dissect_element_lsa_OpenPolicy3_in_version(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1751 static int lsarpc_dissect_element_lsa_OpenPolicy3_in_revision_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1752 static int lsarpc_dissect_element_lsa_OpenPolicy3_in_revision_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1753 static int lsarpc_dissect_element_lsa_OpenPolicy3_out_version(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1754 static int lsarpc_dissect_element_lsa_OpenPolicy3_out_version_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1755 static int lsarpc_dissect_element_lsa_OpenPolicy3_out_revision_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1756 static int lsarpc_dissect_element_lsa_OpenPolicy3_out_revision_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1757 static int lsarpc_dissect_element_lsa_OpenPolicy3_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1758 static int lsarpc_dissect_element_lsa_OpenPolicy3_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1759 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1760 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1761 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1762 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1763 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_highest_record_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1764 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_forest_trust_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1765 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_forest_trust_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1766 static int lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_forest_trust_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1767 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1768 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1769 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_trusted_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1770 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_trusted_domain_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1771 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_highest_record_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1772 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_forest_trust_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1773 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_forest_trust_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1774 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_check_only(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1775 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_collision_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1776 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_collision_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1777 static int lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_collision_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
);
1779 lsarpc_policy_specific_rights(tvbuff_t
*tvb
, int offset
, proto_tree
*tree
, uint32_t access
)
1781 static int* const access_flags
[] = {
1782 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_NOTIFICATION
,
1783 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_LOOKUP_NAMES
,
1784 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_SERVER_ADMIN
,
1785 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_AUDIT_LOG_ADMIN
,
1786 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_SET_AUDIT_REQUIREMENTS
,
1787 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS
,
1788 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_CREATE_PRIVILEGE
,
1789 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_CREATE_SECRET
,
1790 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_CREATE_ACCOUNT
,
1791 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_TRUST_ADMIN
,
1792 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_GET_PRIVATE_INFORMATION
,
1793 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_VIEW_AUDIT_INFORMATION
,
1794 &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_VIEW_LOCAL_INFORMATION
,
1797 proto_tree_add_bitmask_list_value(tree
, tvb
, offset
, 4, access_flags
, access
);
1800 lsarpc_account_specific_rights(tvbuff_t
*tvb
, int offset
, proto_tree
*tree
, uint32_t access
)
1802 static int* const access_flags
[] = {
1803 &hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS
,
1804 &hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_QUOTAS
,
1805 &hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_PRIVILEGES
,
1806 &hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_VIEW
,
1809 proto_tree_add_bitmask_list_value(tree
, tvb
, offset
, 4, access_flags
, access
);
1812 lsarpc_secret_specific_rights(tvbuff_t
*tvb
, int offset
, proto_tree
*tree
, uint32_t access
)
1814 static int* const access_flags
[] = {
1815 &hf_lsarpc_lsa_SecretAccessMask_LSA_SECRET_QUERY_VALUE
,
1816 &hf_lsarpc_lsa_SecretAccessMask_LSA_SECRET_SET_VALUE
,
1819 proto_tree_add_bitmask_list_value(tree
, tvb
, offset
, 4, access_flags
, access
);
1822 lsarpc_domain_specific_rights(tvbuff_t
*tvb
, int offset
, proto_tree
*tree
, uint32_t access
)
1824 static int* const access_flags
[] = {
1825 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_AUTH
,
1826 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_AUTH
,
1827 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_POSIX
,
1828 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_POSIX
,
1829 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_CONTROLLERS
,
1830 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_CONTROLLERS
,
1831 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_DOMAIN_NAME
,
1834 proto_tree_add_bitmask_list_value(tree
, tvb
, offset
, 4, access_flags
, access
);
1836 static struct access_mask_info lsarpc_policy_access_mask_info
= {
1837 "LSA Policy", /* Name of specific rights */
1838 lsarpc_policy_specific_rights
, /* Dissection function */
1839 NULL
, /* Generic mapping table */
1840 NULL
/* Standard mapping table */
1842 static struct access_mask_info lsarpc_account_access_mask_info
= {
1843 "LSA Account", /* Name of specific rights */
1844 lsarpc_account_specific_rights
, /* Dissection function */
1845 NULL
, /* Generic mapping table */
1846 NULL
/* Standard mapping table */
1848 static struct access_mask_info lsarpc_secret_access_mask_info
= {
1849 "LSA Secret", /* Name of specific rights */
1850 lsarpc_secret_specific_rights
, /* Dissection function */
1851 NULL
, /* Generic mapping table */
1852 NULL
/* Standard mapping table */
1854 static struct access_mask_info lsarpc_domain_access_mask_info
= {
1855 "LSA Domain", /* Name of specific rights */
1856 lsarpc_domain_specific_rights
, /* Dissection function */
1857 NULL
, /* Generic mapping table */
1858 NULL
/* Standard mapping table */
1861 lsarpc_dissect_bitmap_lsa_PolicyAccessMask(tvbuff_t
*tvb
, int offset
, packet_info
*pinfo
, proto_tree
*tree
, dcerpc_info
* di
, uint8_t *drep
, int hf_index _U_
, uint32_t param _U_
)
1863 offset
= dissect_nt_access_mask(
1864 tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_policy_access_mask
,
1865 &lsarpc_policy_access_mask_info
, NULL
);
1869 lsarpc_dissect_bitmap_lsa_AccountAccessMask(tvbuff_t
*tvb
, int offset
, packet_info
*pinfo
, proto_tree
*tree
, dcerpc_info
* di
, uint8_t *drep
, int hf_index _U_
, uint32_t param _U_
)
1871 offset
= dissect_nt_access_mask(
1872 tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_account_access_mask
,
1873 &lsarpc_account_access_mask_info
, NULL
);
1877 lsarpc_dissect_bitmap_lsa_SecretAccessMask(tvbuff_t
*tvb
, int offset
, packet_info
*pinfo
, proto_tree
*tree
, dcerpc_info
* di
, uint8_t *drep
, int hf_index _U_
, uint32_t param _U_
)
1879 offset
= dissect_nt_access_mask(
1880 tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_secret_access_mask
,
1881 &lsarpc_secret_access_mask_info
, NULL
);
1884 /* TODO: not called, so couldn't make static. Delete? */
1886 lsarpc_dissect_bitmap_lsa_DomainAccessMask(tvbuff_t
*tvb
, int offset
, packet_info
*pinfo
, proto_tree
*tree
, dcerpc_info
* di
, uint8_t *drep
, int hf_index _U_
, uint32_t param _U_
)
1888 offset
= dissect_nt_access_mask(
1889 tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_domain_access_mask
,
1890 &lsarpc_domain_access_mask_info
, NULL
);
1894 cnf_dissect_sec_desc_buf_(tvbuff_t
*tvb
, int offset
, packet_info
*pinfo
, proto_tree
*tree
, dcerpc_info
* di
, uint8_t *drep
)
1897 e_ctx_hnd
*polhnd
= NULL
;
1898 dcerpc_call_value
*dcv
= NULL
;
1900 struct access_mask_info
*ami
=NULL
;
1901 if(di
->conformant_run
){
1902 /*just a run to handle conformant arrays, nothing to dissect */
1905 offset
= dissect_ndr_uint32 (tvb
, offset
, pinfo
, tree
, di
, drep
,
1906 hf_lsarpc_sec_desc_buf_len
, &len
);
1907 dcv
= (dcerpc_call_value
*)di
->call_data
;
1912 dcerpc_fetch_polhnd_data(polhnd
, NULL
, &type
, NULL
, NULL
,
1916 case PIDL_POLHND_TYPE_LSA_POLICY
:
1917 ami
=&lsarpc_policy_access_mask_info
;
1919 case PIDL_POLHND_TYPE_LSA_ACCOUNT
:
1920 ami
=&lsarpc_account_access_mask_info
;
1922 case PIDL_POLHND_TYPE_LSA_SECRET
:
1923 ami
=&lsarpc_secret_access_mask_info
;
1925 case PIDL_POLHND_TYPE_LSA_DOMAIN
:
1926 ami
=&lsarpc_domain_access_mask_info
;
1929 dissect_nt_sec_desc(tvb
, offset
, pinfo
, tree
, drep
, true, len
, ami
);
1934 cnf_dissect_sec_desc_buf(tvbuff_t
*tvb
, int offset
, packet_info
*pinfo
, proto_tree
*tree
, dcerpc_info
* di
, uint8_t *drep
)
1937 if(di
->conformant_run
){
1938 /*just a run to handle conformant arrays, nothing to dissect */
1941 offset
= dissect_ndr_uint32 (tvb
, offset
, pinfo
, tree
, di
, drep
,
1942 hf_lsarpc_sec_desc_buf_len
, &len
);
1943 offset
= dissect_ndr_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
,
1944 cnf_dissect_sec_desc_buf_
, NDR_POINTER_UNIQUE
,
1945 "LSA SECURITY DESCRIPTOR data:", -1);
1949 lsarpc_dissect_sec_desc_buf(tvbuff_t
*tvb
, int offset
, packet_info
*pinfo
, proto_tree
*tree
, dcerpc_info
* di
, uint8_t *drep
){
1950 return cnf_dissect_sec_desc_buf(tvb
, offset
, pinfo
, tree
, di
, drep
);
1953 lsarpc_dissect_struct_security_descriptor(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
, int unused1 _U_
, int unused2 _U_
){
1954 return cnf_dissect_sec_desc_buf(tvb
, offset
, pinfo
, tree
, di
, drep
);
1957 lsarpc_dissect_struct_dom_sid2(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
, int unused1 _U_
, int unused2 _U_
) {
1959 return dissect_ndr_nt_SID(tvb
, offset
, pinfo
, tree
, di
, drep
);
1962 cnf_dissect_hyper(tvbuff_t
*tvb
, int offset
, packet_info
*pinfo
, proto_tree
*tree
, dcerpc_info
* di
, uint8_t *drep
, uint32_t param _U_
, int hfindex
)
1964 offset
= dissect_ndr_uint64(tvb
, offset
, pinfo
, tree
, di
, drep
, hfindex
, NULL
);
1968 lsarpc_dissect_element_lsa_LookupNames3_names_X(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
)
1970 proto_item
*item
= NULL
;
1971 proto_tree
*tree
= NULL
;
1972 int old_offset
= offset
;
1974 item
= proto_tree_add_item(parent_tree
, hf_lsarpc_names
, tvb
, offset
, -1, ENC_NA
);
1975 tree
= proto_item_add_subtree(item
, ett_lsarpc_names
);
1977 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_names_
);
1978 proto_item_set_len(item
, offset
-old_offset
);
1982 lsarpc_dissect_element_lsa_LookupNames_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
)
1984 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_names_X
, NDR_POINTER_REF
, "Pointer to Names", hf_lsarpc_names
);
1988 lsarpc_dissect_element_lsa_LookupNames2_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
)
1990 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_names_X
, NDR_POINTER_REF
, "Pointer to Names", hf_lsarpc_names
);
1994 lsarpc_dissect_element_lsa_LookupNames3_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
)
1996 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_names_X
, NDR_POINTER_REF
, "Pointer to Names", hf_lsarpc_names
);
2000 lsarpc_dissect_element_lsa_LookupNames4_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
)
2002 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_names_X
, NDR_POINTER_REF
, "Pointer to Names", hf_lsarpc_names
);
2006 lsarpc_dissect_element_lsa_String_string_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
)
2009 offset
= dissect_ndr_cvstring(tvb
, offset
, pinfo
, tree
, di
, drep
, sizeof(uint16_t), hf_lsarpc_String_name
, false, &data
);
2010 proto_item_append_text(tree
, ": %s", data
);
2014 lsarpc_dissect_element_lsa_StringLarge_string_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
)
2017 offset
= dissect_ndr_cvstring(tvb
, offset
, pinfo
, tree
, di
, drep
, sizeof(uint16_t), hf_lsarpc_String_name
, false, &data
);
2018 proto_item_append_text(tree
, ": %s", data
);
2022 lsarpc_dissect_element_lsa_DomainInfoEfs_efs_blob_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di
, uint8_t *drep _U_
)
2025 int len
, reported_len
;
2026 dissector_handle_t efsblob_handle
;
2027 if(di
->conformant_run
){
2028 /*just a run to handle conformant arrays, nothing to dissect */
2031 offset
= dissect_ndr_uint32 (tvb
, offset
, pinfo
, tree
, di
, drep
,
2032 hf_lsarpc_efs_blob_len
, &reported_len
);
2034 if (len
> tvb_captured_length_remaining(tvb
, offset
)) {
2035 len
= tvb_captured_length_remaining(tvb
, offset
);
2037 next_tvb
= tvb_new_subset_length_caplen(tvb
, offset
, len
, reported_len
);
2038 efsblob_handle
= find_dissector("efsblob");
2039 if (efsblob_handle
) {
2040 call_dissector(efsblob_handle
, next_tvb
, pinfo
, tree
);
2042 offset
+= reported_len
;
2051 lsarpc_dissect_bitmap_security_secinfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2056 proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, 4, DREP_ENC_INTEGER(drep
));
2058 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, parent_tree
, di
, drep
, -1, &flags
);
2068 lsarpc_dissect_bitmap_kerb_EncTypes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2073 proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, 4, DREP_ENC_INTEGER(drep
));
2075 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, parent_tree
, di
, drep
, -1, &flags
);
2082 /* IDL: [value(2*strlen_m(string))] uint16 length; */
2083 /* IDL: [value(2*strlen_m(string))] uint16 size; */
2084 /* IDL: [charset(UTF16)] [length_is(length/2)] [size_is(size/2)] [unique(1)] uint16 *string; */
2088 lsarpc_dissect_element_lsa_String_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2090 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_String_length
, 0);
2096 lsarpc_dissect_element_lsa_String_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2098 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_String_size
, 0);
2104 lsarpc_dissect_element_lsa_String_string(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2106 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_String_string_
, NDR_POINTER_UNIQUE
, "Pointer to String (uint16)",hf_lsarpc_lsa_String_string
);
2112 lsarpc_dissect_struct_lsa_String(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2114 proto_item
*item
= NULL
;
2115 proto_tree
*tree
= NULL
;
2120 old_offset
= offset
;
2123 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2124 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_String
);
2127 offset
= lsarpc_dissect_element_lsa_String_length(tvb
, offset
, pinfo
, tree
, di
, drep
);
2129 offset
= lsarpc_dissect_element_lsa_String_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
2131 offset
= lsarpc_dissect_element_lsa_String_string(tvb
, offset
, pinfo
, tree
, di
, drep
);
2134 proto_item_set_len(item
, offset
-old_offset
);
2137 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2146 /* IDL: [value(2*strlen_m(string))] uint16 length; */
2147 /* IDL: [value(2*strlen_m_term(string))] uint16 size; */
2148 /* IDL: [charset(UTF16)] [length_is(length/2)] [size_is(size/2)] [unique(1)] uint16 *string; */
2152 lsarpc_dissect_element_lsa_StringLarge_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2154 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_StringLarge_length
, 0);
2160 lsarpc_dissect_element_lsa_StringLarge_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2162 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_StringLarge_size
, 0);
2168 lsarpc_dissect_element_lsa_StringLarge_string(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2170 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_StringLarge_string_
, NDR_POINTER_UNIQUE
, "Pointer to String (uint16)",hf_lsarpc_lsa_StringLarge_string
);
2176 lsarpc_dissect_struct_lsa_StringLarge(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2178 proto_item
*item
= NULL
;
2179 proto_tree
*tree
= NULL
;
2184 old_offset
= offset
;
2187 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2188 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_StringLarge
);
2191 offset
= lsarpc_dissect_element_lsa_StringLarge_length(tvb
, offset
, pinfo
, tree
, di
, drep
);
2193 offset
= lsarpc_dissect_element_lsa_StringLarge_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
2195 offset
= lsarpc_dissect_element_lsa_StringLarge_string(tvb
, offset
, pinfo
, tree
, di
, drep
);
2198 proto_item_set_len(item
, offset
-old_offset
);
2201 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2210 /* IDL: uint32 count; */
2211 /* IDL: [size_is(count)] [unique(1)] lsa_String *names; */
2215 lsarpc_dissect_element_lsa_Strings_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2217 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_Strings_count
, 0);
2223 lsarpc_dissect_element_lsa_Strings_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2225 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_Strings_names_
, NDR_POINTER_UNIQUE
, "Pointer to Names (lsa_String)",hf_lsarpc_lsa_Strings_names
);
2231 lsarpc_dissect_element_lsa_Strings_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2233 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_Strings_names__
);
2239 lsarpc_dissect_element_lsa_Strings_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2241 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_Strings_names
,0);
2247 lsarpc_dissect_struct_lsa_Strings(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2249 proto_item
*item
= NULL
;
2250 proto_tree
*tree
= NULL
;
2255 old_offset
= offset
;
2258 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2259 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_Strings
);
2262 offset
= lsarpc_dissect_element_lsa_Strings_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
2264 offset
= lsarpc_dissect_element_lsa_Strings_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
2267 proto_item_set_len(item
, offset
-old_offset
);
2270 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2279 /* IDL: [value(strlen_m(string))] uint16 length; */
2280 /* IDL: [value(strlen_m(string))] uint16 size; */
2281 /* IDL: [charset(DOS)] [length_is(length)] [size_is(size)] [unique(1)] uint8 *string; */
2285 lsarpc_dissect_element_lsa_AsciiString_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2287 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AsciiString_length
, 0);
2293 lsarpc_dissect_element_lsa_AsciiString_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2295 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AsciiString_size
, 0);
2301 lsarpc_dissect_element_lsa_AsciiString_string(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2303 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AsciiString_string_
, NDR_POINTER_UNIQUE
, "Pointer to String (uint8)",hf_lsarpc_lsa_AsciiString_string
);
2309 lsarpc_dissect_element_lsa_AsciiString_string_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2311 offset
= dissect_ndr_ucvarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AsciiString_string__
);
2317 lsarpc_dissect_element_lsa_AsciiString_string__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2319 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AsciiString_string
, 0);
2325 lsarpc_dissect_struct_lsa_AsciiString(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2327 proto_item
*item
= NULL
;
2328 proto_tree
*tree
= NULL
;
2333 old_offset
= offset
;
2336 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2337 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_AsciiString
);
2340 offset
= lsarpc_dissect_element_lsa_AsciiString_length(tvb
, offset
, pinfo
, tree
, di
, drep
);
2342 offset
= lsarpc_dissect_element_lsa_AsciiString_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
2344 offset
= lsarpc_dissect_element_lsa_AsciiString_string(tvb
, offset
, pinfo
, tree
, di
, drep
);
2347 proto_item_set_len(item
, offset
-old_offset
);
2350 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2359 /* IDL: [value(strlen_m(string))] uint16 length; */
2360 /* IDL: [value(strlen_m_term(string))] uint16 size; */
2361 /* IDL: [charset(DOS)] [length_is(length)] [size_is(size)] [unique(1)] uint8 *string; */
2365 lsarpc_dissect_element_lsa_AsciiStringLarge_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2367 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AsciiStringLarge_length
, 0);
2373 lsarpc_dissect_element_lsa_AsciiStringLarge_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2375 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AsciiStringLarge_size
, 0);
2381 lsarpc_dissect_element_lsa_AsciiStringLarge_string(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2383 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AsciiStringLarge_string_
, NDR_POINTER_UNIQUE
, "Pointer to String (uint8)",hf_lsarpc_lsa_AsciiStringLarge_string
);
2389 lsarpc_dissect_element_lsa_AsciiStringLarge_string_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2391 offset
= dissect_ndr_ucvarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AsciiStringLarge_string__
);
2397 lsarpc_dissect_element_lsa_AsciiStringLarge_string__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2399 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AsciiStringLarge_string
, 0);
2405 lsarpc_dissect_struct_lsa_AsciiStringLarge(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2407 proto_item
*item
= NULL
;
2408 proto_tree
*tree
= NULL
;
2413 old_offset
= offset
;
2416 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2417 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_AsciiStringLarge
);
2420 offset
= lsarpc_dissect_element_lsa_AsciiStringLarge_length(tvb
, offset
, pinfo
, tree
, di
, drep
);
2422 offset
= lsarpc_dissect_element_lsa_AsciiStringLarge_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
2424 offset
= lsarpc_dissect_element_lsa_AsciiStringLarge_string(tvb
, offset
, pinfo
, tree
, di
, drep
);
2427 proto_item_set_len(item
, offset
-old_offset
);
2430 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2439 /* IDL: uint16 length; */
2440 /* IDL: uint16 size; */
2441 /* IDL: [length_is(length/2)] [size_is(size/2)] [unique(1)] uint16 *array; */
2445 lsarpc_dissect_element_lsa_BinaryString_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2447 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_BinaryString_length
, 0);
2453 lsarpc_dissect_element_lsa_BinaryString_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2455 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_BinaryString_size
, 0);
2461 lsarpc_dissect_element_lsa_BinaryString_array(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2463 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_BinaryString_array_
, NDR_POINTER_UNIQUE
, "Pointer to Array (uint16)",hf_lsarpc_lsa_BinaryString_array
);
2469 lsarpc_dissect_element_lsa_BinaryString_array_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2471 offset
= dissect_ndr_ucvarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_BinaryString_array__
);
2477 lsarpc_dissect_element_lsa_BinaryString_array__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2479 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_BinaryString_array
, 0);
2485 lsarpc_dissect_struct_lsa_BinaryString(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2487 proto_item
*item
= NULL
;
2488 proto_tree
*tree
= NULL
;
2493 old_offset
= offset
;
2496 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2497 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_BinaryString
);
2500 offset
= lsarpc_dissect_element_lsa_BinaryString_length(tvb
, offset
, pinfo
, tree
, di
, drep
);
2502 offset
= lsarpc_dissect_element_lsa_BinaryString_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
2504 offset
= lsarpc_dissect_element_lsa_BinaryString_array(tvb
, offset
, pinfo
, tree
, di
, drep
);
2507 proto_item_set_len(item
, offset
-old_offset
);
2510 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2519 /* IDL: uint32 low; */
2520 /* IDL: uint32 high; */
2524 lsarpc_dissect_element_lsa_LUID_low(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2526 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LUID_low
, 0);
2532 lsarpc_dissect_element_lsa_LUID_high(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2534 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LUID_high
, 0);
2540 lsarpc_dissect_struct_lsa_LUID(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2542 proto_item
*item
= NULL
;
2543 proto_tree
*tree
= NULL
;
2548 old_offset
= offset
;
2551 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2552 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_LUID
);
2555 offset
= lsarpc_dissect_element_lsa_LUID_low(tvb
, offset
, pinfo
, tree
, di
, drep
);
2557 offset
= lsarpc_dissect_element_lsa_LUID_high(tvb
, offset
, pinfo
, tree
, di
, drep
);
2560 proto_item_set_len(item
, offset
-old_offset
);
2563 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2572 /* IDL: lsa_StringLarge name; */
2573 /* IDL: lsa_LUID luid; */
2577 lsarpc_dissect_element_lsa_PrivEntry_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2579 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PrivEntry_name
,0);
2585 lsarpc_dissect_element_lsa_PrivEntry_luid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2587 offset
= lsarpc_dissect_struct_lsa_LUID(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PrivEntry_luid
,0);
2593 lsarpc_dissect_struct_lsa_PrivEntry(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2595 proto_item
*item
= NULL
;
2596 proto_tree
*tree
= NULL
;
2601 old_offset
= offset
;
2604 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2605 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_PrivEntry
);
2608 offset
= lsarpc_dissect_element_lsa_PrivEntry_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
2610 offset
= lsarpc_dissect_element_lsa_PrivEntry_luid(tvb
, offset
, pinfo
, tree
, di
, drep
);
2613 proto_item_set_len(item
, offset
-old_offset
);
2616 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2625 /* IDL: uint32 count; */
2626 /* IDL: [size_is(count)] [unique(1)] lsa_PrivEntry *privs; */
2630 lsarpc_dissect_element_lsa_PrivArray_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2632 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_PrivArray_count
, 0);
2638 lsarpc_dissect_element_lsa_PrivArray_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2640 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_PrivArray_privs_
, NDR_POINTER_UNIQUE
, "Pointer to Privs (lsa_PrivEntry)",hf_lsarpc_lsa_PrivArray_privs
);
2646 lsarpc_dissect_element_lsa_PrivArray_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2648 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_PrivArray_privs__
);
2654 lsarpc_dissect_element_lsa_PrivArray_privs__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2656 offset
= lsarpc_dissect_struct_lsa_PrivEntry(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PrivArray_privs
,0);
2662 lsarpc_dissect_struct_lsa_PrivArray(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2664 proto_item
*item
= NULL
;
2665 proto_tree
*tree
= NULL
;
2670 old_offset
= offset
;
2673 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2674 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_PrivArray
);
2677 offset
= lsarpc_dissect_element_lsa_PrivArray_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
2679 offset
= lsarpc_dissect_element_lsa_PrivArray_privs(tvb
, offset
, pinfo
, tree
, di
, drep
);
2682 proto_item_set_len(item
, offset
-old_offset
);
2685 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2694 /* IDL: LSA_SECURITY_ANONYMOUS=0, */
2695 /* IDL: LSA_SECURITY_IDENTIFICATION=1, */
2696 /* IDL: LSA_SECURITY_IMPERSONATION=2, */
2697 /* IDL: LSA_SECURITY_DELEGATION=3, */
2701 lsarpc_dissect_enum_lsa_SecurityImpersonationLevel(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
2703 uint32_t parameter
=0;
2707 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
2716 /* IDL: uint3264 len; */
2717 /* IDL: lsa_SecurityImpersonationLevel impersonation_level; */
2718 /* IDL: uint8 context_mode; */
2719 /* IDL: uint8 effective_only; */
2723 lsarpc_dissect_element_lsa_QosInfo_len(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2725 offset
= dissect_ndr_uint3264(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QosInfo_len
, NULL
);
2731 lsarpc_dissect_element_lsa_QosInfo_impersonation_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2733 offset
= lsarpc_dissect_enum_lsa_SecurityImpersonationLevel(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QosInfo_impersonation_level
, 0);
2739 lsarpc_dissect_element_lsa_QosInfo_context_mode(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2741 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QosInfo_context_mode
, 0);
2747 lsarpc_dissect_element_lsa_QosInfo_effective_only(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2749 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QosInfo_effective_only
, 0);
2755 lsarpc_dissect_struct_lsa_QosInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2757 proto_item
*item
= NULL
;
2758 proto_tree
*tree
= NULL
;
2763 old_offset
= offset
;
2766 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2767 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_QosInfo
);
2770 offset
= lsarpc_dissect_element_lsa_QosInfo_len(tvb
, offset
, pinfo
, tree
, di
, drep
);
2772 offset
= lsarpc_dissect_element_lsa_QosInfo_impersonation_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
2774 offset
= lsarpc_dissect_element_lsa_QosInfo_context_mode(tvb
, offset
, pinfo
, tree
, di
, drep
);
2776 offset
= lsarpc_dissect_element_lsa_QosInfo_effective_only(tvb
, offset
, pinfo
, tree
, di
, drep
);
2779 proto_item_set_len(item
, offset
-old_offset
);
2782 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2791 /* IDL: uint3264 len; */
2792 /* IDL: [unique(1)] uint8 *root_dir; */
2793 /* IDL: [charset(UTF16)] [unique(1)] uint16 *object_name; */
2794 /* IDL: uint32 attributes; */
2795 /* IDL: [unique(1)] security_descriptor *sec_desc; */
2796 /* IDL: [unique(1)] lsa_QosInfo *sec_qos; */
2800 lsarpc_dissect_element_lsa_ObjectAttribute_len(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2802 offset
= dissect_ndr_uint3264(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ObjectAttribute_len
, NULL
);
2808 lsarpc_dissect_element_lsa_ObjectAttribute_root_dir(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2810 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ObjectAttribute_root_dir_
, NDR_POINTER_UNIQUE
, "Pointer to Root Dir (uint8)",hf_lsarpc_lsa_ObjectAttribute_root_dir
);
2816 lsarpc_dissect_element_lsa_ObjectAttribute_root_dir_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2818 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ObjectAttribute_root_dir
, 0);
2824 lsarpc_dissect_element_lsa_ObjectAttribute_object_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2826 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ObjectAttribute_object_name_
, NDR_POINTER_UNIQUE
, "Pointer to Object Name (uint16)",hf_lsarpc_lsa_ObjectAttribute_object_name
);
2832 lsarpc_dissect_element_lsa_ObjectAttribute_object_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2836 offset
= dissect_ndr_cvstring(tvb
, offset
, pinfo
, tree
, di
, drep
, sizeof(uint16_t), hf_lsarpc_lsa_ObjectAttribute_object_name
, false, &data
);
2837 proto_item_append_text(tree
, ": %s", data
);
2843 lsarpc_dissect_element_lsa_ObjectAttribute_attributes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2845 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ObjectAttribute_attributes
, 0);
2851 lsarpc_dissect_element_lsa_ObjectAttribute_sec_desc(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2853 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ObjectAttribute_sec_desc_
, NDR_POINTER_UNIQUE
, "Pointer to Sec Desc (security_descriptor)",hf_lsarpc_lsa_ObjectAttribute_sec_desc
);
2859 lsarpc_dissect_element_lsa_ObjectAttribute_sec_desc_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2861 offset
= lsarpc_dissect_struct_security_descriptor(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ObjectAttribute_sec_desc
,0);
2867 lsarpc_dissect_element_lsa_ObjectAttribute_sec_qos(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2869 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ObjectAttribute_sec_qos_
, NDR_POINTER_UNIQUE
, "Pointer to Sec Qos (lsa_QosInfo)",hf_lsarpc_lsa_ObjectAttribute_sec_qos
);
2875 lsarpc_dissect_element_lsa_ObjectAttribute_sec_qos_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
2877 offset
= lsarpc_dissect_struct_lsa_QosInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ObjectAttribute_sec_qos
,0);
2883 lsarpc_dissect_struct_lsa_ObjectAttribute(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2885 proto_item
*item
= NULL
;
2886 proto_tree
*tree
= NULL
;
2891 old_offset
= offset
;
2894 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
2895 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ObjectAttribute
);
2898 offset
= lsarpc_dissect_element_lsa_ObjectAttribute_len(tvb
, offset
, pinfo
, tree
, di
, drep
);
2900 offset
= lsarpc_dissect_element_lsa_ObjectAttribute_root_dir(tvb
, offset
, pinfo
, tree
, di
, drep
);
2902 offset
= lsarpc_dissect_element_lsa_ObjectAttribute_object_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
2904 offset
= lsarpc_dissect_element_lsa_ObjectAttribute_attributes(tvb
, offset
, pinfo
, tree
, di
, drep
);
2906 offset
= lsarpc_dissect_element_lsa_ObjectAttribute_sec_desc(tvb
, offset
, pinfo
, tree
, di
, drep
);
2908 offset
= lsarpc_dissect_element_lsa_ObjectAttribute_sec_qos(tvb
, offset
, pinfo
, tree
, di
, drep
);
2911 proto_item_set_len(item
, offset
-old_offset
);
2914 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
2923 /* IDL: LSA_POLICY_VIEW_LOCAL_INFORMATION = 0x00000001 , */
2924 /* IDL: LSA_POLICY_VIEW_AUDIT_INFORMATION = 0x00000002 , */
2925 /* IDL: LSA_POLICY_GET_PRIVATE_INFORMATION = 0x00000004 , */
2926 /* IDL: LSA_POLICY_TRUST_ADMIN = 0x00000008 , */
2927 /* IDL: LSA_POLICY_CREATE_ACCOUNT = 0x00000010 , */
2928 /* IDL: LSA_POLICY_CREATE_SECRET = 0x00000020 , */
2929 /* IDL: LSA_POLICY_CREATE_PRIVILEGE = 0x00000040 , */
2930 /* IDL: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS = 0x00000080 , */
2931 /* IDL: LSA_POLICY_SET_AUDIT_REQUIREMENTS = 0x00000100 , */
2932 /* IDL: LSA_POLICY_AUDIT_LOG_ADMIN = 0x00000200 , */
2933 /* IDL: LSA_POLICY_SERVER_ADMIN = 0x00000400 , */
2934 /* IDL: LSA_POLICY_LOOKUP_NAMES = 0x00000800 , */
2935 /* IDL: LSA_POLICY_NOTIFICATION = 0x00001000 , */
2940 /* IDL: LSA_ACCOUNT_VIEW = 0x00000001 , */
2941 /* IDL: LSA_ACCOUNT_ADJUST_PRIVILEGES = 0x00000002 , */
2942 /* IDL: LSA_ACCOUNT_ADJUST_QUOTAS = 0x00000004 , */
2943 /* IDL: LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS = 0x00000008 , */
2948 /* IDL: LSA_SECRET_SET_VALUE = 0x00000001 , */
2949 /* IDL: LSA_SECRET_QUERY_VALUE = 0x00000002 , */
2954 /* IDL: LSA_TRUSTED_QUERY_DOMAIN_NAME = 0x00000001 , */
2955 /* IDL: LSA_TRUSTED_QUERY_CONTROLLERS = 0x00000002 , */
2956 /* IDL: LSA_TRUSTED_SET_CONTROLLERS = 0x00000004 , */
2957 /* IDL: LSA_TRUSTED_QUERY_POSIX = 0x00000008 , */
2958 /* IDL: LSA_TRUSTED_SET_POSIX = 0x00000010 , */
2959 /* IDL: LSA_TRUSTED_SET_AUTH = 0x00000020 , */
2960 /* IDL: LSA_TRUSTED_QUERY_AUTH = 0x00000040 , */
2964 lsarpc_dissect_bitmap_lsa_TrustedAccessMask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
2967 static int * const lsarpc_lsa_TrustedAccessMask_fields
[] = {
2968 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_DOMAIN_NAME
,
2969 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_CONTROLLERS
,
2970 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_CONTROLLERS
,
2971 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_POSIX
,
2972 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_POSIX
,
2973 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_AUTH
,
2974 &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_AUTH
,
2980 item
= proto_tree_add_bitmask_with_flags(parent_tree
, tvb
, offset
, hf_index
,
2981 ett_lsarpc_lsa_TrustedAccessMask
, lsarpc_lsa_TrustedAccessMask_fields
, DREP_ENC_INTEGER(drep
), BMT_NO_FALSE
);
2983 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, parent_tree
, di
, drep
, -1, &flags
);
2986 proto_item_append_text(item
, ": (No values set)");
2988 if (flags
& (~0x0000007f)) {
2989 flags
&= (~0x0000007f);
2990 proto_item_append_text(item
, "Unknown bitmap value 0x%x", flags
);
2998 /* IDL: uint32 percent_full; */
2999 /* IDL: uint32 maximum_log_size; */
3000 /* IDL: hyper retention_time; */
3001 /* IDL: uint8 shutdown_in_progress; */
3002 /* IDL: hyper time_to_shutdown; */
3003 /* IDL: uint32 next_audit_record; */
3007 lsarpc_dissect_element_lsa_AuditLogInfo_percent_full(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3009 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditLogInfo_percent_full
, 0);
3015 lsarpc_dissect_element_lsa_AuditLogInfo_maximum_log_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3017 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditLogInfo_maximum_log_size
, 0);
3023 lsarpc_dissect_element_lsa_AuditLogInfo_retention_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3025 offset
=cnf_dissect_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, 0, hf_lsarpc_lsa_AuditLogInfo_retention_time
);
3031 lsarpc_dissect_element_lsa_AuditLogInfo_shutdown_in_progress(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3033 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditLogInfo_shutdown_in_progress
, 0);
3039 lsarpc_dissect_element_lsa_AuditLogInfo_time_to_shutdown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3041 offset
=cnf_dissect_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, 0, hf_lsarpc_lsa_AuditLogInfo_time_to_shutdown
);
3047 lsarpc_dissect_element_lsa_AuditLogInfo_next_audit_record(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3049 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditLogInfo_next_audit_record
, 0);
3055 lsarpc_dissect_struct_lsa_AuditLogInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3057 proto_item
*item
= NULL
;
3058 proto_tree
*tree
= NULL
;
3063 old_offset
= offset
;
3066 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3067 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_AuditLogInfo
);
3070 offset
= lsarpc_dissect_element_lsa_AuditLogInfo_percent_full(tvb
, offset
, pinfo
, tree
, di
, drep
);
3072 offset
= lsarpc_dissect_element_lsa_AuditLogInfo_maximum_log_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
3074 offset
= lsarpc_dissect_element_lsa_AuditLogInfo_retention_time(tvb
, offset
, pinfo
, tree
, di
, drep
);
3076 offset
= lsarpc_dissect_element_lsa_AuditLogInfo_shutdown_in_progress(tvb
, offset
, pinfo
, tree
, di
, drep
);
3078 offset
= lsarpc_dissect_element_lsa_AuditLogInfo_time_to_shutdown(tvb
, offset
, pinfo
, tree
, di
, drep
);
3080 offset
= lsarpc_dissect_element_lsa_AuditLogInfo_next_audit_record(tvb
, offset
, pinfo
, tree
, di
, drep
);
3083 proto_item_set_len(item
, offset
-old_offset
);
3086 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
3095 /* IDL: LSA_AUDIT_POLICY_NONE=0, */
3096 /* IDL: LSA_AUDIT_POLICY_SUCCESS=1, */
3097 /* IDL: LSA_AUDIT_POLICY_FAILURE=2, */
3098 /* IDL: LSA_AUDIT_POLICY_ALL=(LSA_AUDIT_POLICY_SUCCESS|LSA_AUDIT_POLICY_FAILURE), */
3099 /* IDL: LSA_AUDIT_POLICY_CLEAR=4, */
3103 lsarpc_dissect_enum_lsa_PolicyAuditPolicy(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
3105 uint32_t parameter
=0;
3109 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
3118 /* IDL: LSA_AUDIT_CATEGORY_SYSTEM=0, */
3119 /* IDL: LSA_AUDIT_CATEGORY_LOGON=1, */
3120 /* IDL: LSA_AUDIT_CATEGORY_FILE_AND_OBJECT_ACCESS=2, */
3121 /* IDL: LSA_AUDIT_CATEGORY_USE_OF_USER_RIGHTS=3, */
3122 /* IDL: LSA_AUDIT_CATEGORY_PROCESS_TRACKING=4, */
3123 /* IDL: LSA_AUDIT_CATEGORY_SECURITY_POLICY_CHANGES=5, */
3124 /* IDL: LSA_AUDIT_CATEGORY_ACCOUNT_MANAGEMENT=6, */
3125 /* IDL: LSA_AUDIT_CATEGORY_DIRECTORY_SERVICE_ACCESS=7, */
3126 /* IDL: LSA_AUDIT_CATEGORY_ACCOUNT_LOGON=8, */
3130 lsarpc_dissect_enum_lsa_PolicyAuditEventType(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
3132 uint32_t parameter
=0;
3136 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
3145 /* IDL: uint32 auditing_mode; */
3146 /* IDL: [size_is(count)] [unique(1)] lsa_PolicyAuditPolicy *settings; */
3147 /* IDL: uint32 count; */
3151 lsarpc_dissect_element_lsa_AuditEventsInfo_auditing_mode(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3153 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditEventsInfo_auditing_mode
, 0);
3159 lsarpc_dissect_element_lsa_AuditEventsInfo_settings(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3161 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AuditEventsInfo_settings_
, NDR_POINTER_UNIQUE
, "Pointer to Settings (lsa_PolicyAuditPolicy)",hf_lsarpc_lsa_AuditEventsInfo_settings
);
3167 lsarpc_dissect_element_lsa_AuditEventsInfo_settings_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3169 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AuditEventsInfo_settings__
);
3175 lsarpc_dissect_element_lsa_AuditEventsInfo_settings__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3177 offset
= lsarpc_dissect_enum_lsa_PolicyAuditPolicy(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditEventsInfo_settings
, 0);
3183 lsarpc_dissect_element_lsa_AuditEventsInfo_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3185 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditEventsInfo_count
, 0);
3191 lsarpc_dissect_struct_lsa_AuditEventsInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3193 proto_item
*item
= NULL
;
3194 proto_tree
*tree
= NULL
;
3199 old_offset
= offset
;
3202 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3203 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_AuditEventsInfo
);
3206 offset
= lsarpc_dissect_element_lsa_AuditEventsInfo_auditing_mode(tvb
, offset
, pinfo
, tree
, di
, drep
);
3208 offset
= lsarpc_dissect_element_lsa_AuditEventsInfo_settings(tvb
, offset
, pinfo
, tree
, di
, drep
);
3210 offset
= lsarpc_dissect_element_lsa_AuditEventsInfo_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
3213 proto_item_set_len(item
, offset
-old_offset
);
3216 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
3225 /* IDL: lsa_StringLarge name; */
3226 /* IDL: [unique(1)] dom_sid2 *sid; */
3230 lsarpc_dissect_element_lsa_DomainInfo_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3232 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DomainInfo_name
,0);
3238 lsarpc_dissect_element_lsa_DomainInfo_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3240 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DomainInfo_sid_
, NDR_POINTER_UNIQUE
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_DomainInfo_sid
);
3246 lsarpc_dissect_element_lsa_DomainInfo_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3248 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DomainInfo_sid
,0);
3254 lsarpc_dissect_struct_lsa_DomainInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3256 proto_item
*item
= NULL
;
3257 proto_tree
*tree
= NULL
;
3262 old_offset
= offset
;
3265 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3266 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DomainInfo
);
3269 offset
= lsarpc_dissect_element_lsa_DomainInfo_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
3271 offset
= lsarpc_dissect_element_lsa_DomainInfo_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
3274 proto_item_set_len(item
, offset
-old_offset
);
3277 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
3286 /* IDL: lsa_String name; */
3290 lsarpc_dissect_element_lsa_PDAccountInfo_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3292 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PDAccountInfo_name
,0);
3298 lsarpc_dissect_struct_lsa_PDAccountInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3300 proto_item
*item
= NULL
;
3301 proto_tree
*tree
= NULL
;
3306 old_offset
= offset
;
3309 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3310 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_PDAccountInfo
);
3313 offset
= lsarpc_dissect_element_lsa_PDAccountInfo_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
3316 proto_item_set_len(item
, offset
-old_offset
);
3319 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
3328 /* IDL: LSA_ROLE_BACKUP=2, */
3329 /* IDL: LSA_ROLE_PRIMARY=3, */
3333 lsarpc_dissect_enum_lsa_Role(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
3335 uint32_t parameter
=0;
3339 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
3348 /* IDL: lsa_Role role; */
3352 lsarpc_dissect_element_lsa_ServerRole_role(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3354 offset
= lsarpc_dissect_enum_lsa_Role(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ServerRole_role
, 0);
3360 lsarpc_dissect_struct_lsa_ServerRole(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3362 proto_item
*item
= NULL
;
3363 proto_tree
*tree
= NULL
;
3368 old_offset
= offset
;
3371 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3372 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ServerRole
);
3375 offset
= lsarpc_dissect_element_lsa_ServerRole_role(tvb
, offset
, pinfo
, tree
, di
, drep
);
3378 proto_item_set_len(item
, offset
-old_offset
);
3381 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
3390 /* IDL: lsa_String source; */
3391 /* IDL: lsa_String account; */
3395 lsarpc_dissect_element_lsa_ReplicaSourceInfo_source(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3397 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ReplicaSourceInfo_source
,0);
3403 lsarpc_dissect_element_lsa_ReplicaSourceInfo_account(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3405 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ReplicaSourceInfo_account
,0);
3411 lsarpc_dissect_struct_lsa_ReplicaSourceInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3413 proto_item
*item
= NULL
;
3414 proto_tree
*tree
= NULL
;
3419 old_offset
= offset
;
3422 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3423 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ReplicaSourceInfo
);
3426 offset
= lsarpc_dissect_element_lsa_ReplicaSourceInfo_source(tvb
, offset
, pinfo
, tree
, di
, drep
);
3428 offset
= lsarpc_dissect_element_lsa_ReplicaSourceInfo_account(tvb
, offset
, pinfo
, tree
, di
, drep
);
3431 proto_item_set_len(item
, offset
-old_offset
);
3434 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
3443 /* IDL: uint32 paged_pool; */
3444 /* IDL: uint32 non_paged_pool; */
3445 /* IDL: uint32 min_wss; */
3446 /* IDL: uint32 max_wss; */
3447 /* IDL: uint32 pagefile; */
3448 /* IDL: hyper unknown; */
3452 lsarpc_dissect_element_lsa_DefaultQuotaInfo_paged_pool(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3454 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DefaultQuotaInfo_paged_pool
, 0);
3460 lsarpc_dissect_element_lsa_DefaultQuotaInfo_non_paged_pool(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3462 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DefaultQuotaInfo_non_paged_pool
, 0);
3468 lsarpc_dissect_element_lsa_DefaultQuotaInfo_min_wss(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3470 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DefaultQuotaInfo_min_wss
, 0);
3476 lsarpc_dissect_element_lsa_DefaultQuotaInfo_max_wss(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3478 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DefaultQuotaInfo_max_wss
, 0);
3484 lsarpc_dissect_element_lsa_DefaultQuotaInfo_pagefile(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3486 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DefaultQuotaInfo_pagefile
, 0);
3492 lsarpc_dissect_element_lsa_DefaultQuotaInfo_unknown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3494 offset
=cnf_dissect_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, 0, hf_lsarpc_lsa_DefaultQuotaInfo_unknown
);
3500 lsarpc_dissect_struct_lsa_DefaultQuotaInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3502 proto_item
*item
= NULL
;
3503 proto_tree
*tree
= NULL
;
3508 old_offset
= offset
;
3511 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3512 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DefaultQuotaInfo
);
3515 offset
= lsarpc_dissect_element_lsa_DefaultQuotaInfo_paged_pool(tvb
, offset
, pinfo
, tree
, di
, drep
);
3517 offset
= lsarpc_dissect_element_lsa_DefaultQuotaInfo_non_paged_pool(tvb
, offset
, pinfo
, tree
, di
, drep
);
3519 offset
= lsarpc_dissect_element_lsa_DefaultQuotaInfo_min_wss(tvb
, offset
, pinfo
, tree
, di
, drep
);
3521 offset
= lsarpc_dissect_element_lsa_DefaultQuotaInfo_max_wss(tvb
, offset
, pinfo
, tree
, di
, drep
);
3523 offset
= lsarpc_dissect_element_lsa_DefaultQuotaInfo_pagefile(tvb
, offset
, pinfo
, tree
, di
, drep
);
3525 offset
= lsarpc_dissect_element_lsa_DefaultQuotaInfo_unknown(tvb
, offset
, pinfo
, tree
, di
, drep
);
3528 proto_item_set_len(item
, offset
-old_offset
);
3531 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
3540 /* IDL: hyper modified_id; */
3541 /* IDL: NTTIME_hyper db_create_time; */
3545 lsarpc_dissect_element_lsa_ModificationInfo_modified_id(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3547 offset
=cnf_dissect_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, 0, hf_lsarpc_lsa_ModificationInfo_modified_id
);
3553 lsarpc_dissect_element_lsa_ModificationInfo_db_create_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3555 offset
= dissect_ndr_nt_NTTIME_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ModificationInfo_db_create_time
);
3561 lsarpc_dissect_struct_lsa_ModificationInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3563 proto_item
*item
= NULL
;
3564 proto_tree
*tree
= NULL
;
3569 old_offset
= offset
;
3572 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3573 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ModificationInfo
);
3576 offset
= lsarpc_dissect_element_lsa_ModificationInfo_modified_id(tvb
, offset
, pinfo
, tree
, di
, drep
);
3578 offset
= lsarpc_dissect_element_lsa_ModificationInfo_db_create_time(tvb
, offset
, pinfo
, tree
, di
, drep
);
3581 proto_item_set_len(item
, offset
-old_offset
);
3584 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
3593 /* IDL: uint8 shutdown_on_full; */
3597 lsarpc_dissect_element_lsa_AuditFullSetInfo_shutdown_on_full(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3599 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditFullSetInfo_shutdown_on_full
, 0);
3605 lsarpc_dissect_struct_lsa_AuditFullSetInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3607 proto_item
*item
= NULL
;
3608 proto_tree
*tree
= NULL
;
3611 old_offset
= offset
;
3614 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3615 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_AuditFullSetInfo
);
3618 offset
= lsarpc_dissect_element_lsa_AuditFullSetInfo_shutdown_on_full(tvb
, offset
, pinfo
, tree
, di
, drep
);
3621 proto_item_set_len(item
, offset
-old_offset
);
3629 /* IDL: uint8 shutdown_on_full; */
3630 /* IDL: uint8 log_is_full; */
3634 lsarpc_dissect_element_lsa_AuditFullQueryInfo_shutdown_on_full(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3636 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditFullQueryInfo_shutdown_on_full
, 0);
3642 lsarpc_dissect_element_lsa_AuditFullQueryInfo_log_is_full(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3644 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AuditFullQueryInfo_log_is_full
, 0);
3650 lsarpc_dissect_struct_lsa_AuditFullQueryInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3652 proto_item
*item
= NULL
;
3653 proto_tree
*tree
= NULL
;
3656 old_offset
= offset
;
3659 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3660 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_AuditFullQueryInfo
);
3663 offset
= lsarpc_dissect_element_lsa_AuditFullQueryInfo_shutdown_on_full(tvb
, offset
, pinfo
, tree
, di
, drep
);
3665 offset
= lsarpc_dissect_element_lsa_AuditFullQueryInfo_log_is_full(tvb
, offset
, pinfo
, tree
, di
, drep
);
3668 proto_item_set_len(item
, offset
-old_offset
);
3676 /* IDL: lsa_StringLarge name; */
3677 /* IDL: lsa_StringLarge dns_domain; */
3678 /* IDL: lsa_StringLarge dns_forest; */
3679 /* IDL: GUID domain_guid; */
3680 /* IDL: [unique(1)] dom_sid2 *sid; */
3684 lsarpc_dissect_element_lsa_DnsDomainInfo_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3686 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DnsDomainInfo_name
,0);
3692 lsarpc_dissect_element_lsa_DnsDomainInfo_dns_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3694 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DnsDomainInfo_dns_domain
,0);
3700 lsarpc_dissect_element_lsa_DnsDomainInfo_dns_forest(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3702 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DnsDomainInfo_dns_forest
,0);
3708 lsarpc_dissect_element_lsa_DnsDomainInfo_domain_guid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3710 offset
= dissect_ndr_uuid_t(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DnsDomainInfo_domain_guid
, NULL
);
3716 lsarpc_dissect_element_lsa_DnsDomainInfo_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3718 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DnsDomainInfo_sid_
, NDR_POINTER_UNIQUE
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_DnsDomainInfo_sid
);
3724 lsarpc_dissect_element_lsa_DnsDomainInfo_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3726 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DnsDomainInfo_sid
,0);
3732 lsarpc_dissect_struct_lsa_DnsDomainInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3734 proto_item
*item
= NULL
;
3735 proto_tree
*tree
= NULL
;
3740 old_offset
= offset
;
3743 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
3744 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DnsDomainInfo
);
3747 offset
= lsarpc_dissect_element_lsa_DnsDomainInfo_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
3749 offset
= lsarpc_dissect_element_lsa_DnsDomainInfo_dns_domain(tvb
, offset
, pinfo
, tree
, di
, drep
);
3751 offset
= lsarpc_dissect_element_lsa_DnsDomainInfo_dns_forest(tvb
, offset
, pinfo
, tree
, di
, drep
);
3753 offset
= lsarpc_dissect_element_lsa_DnsDomainInfo_domain_guid(tvb
, offset
, pinfo
, tree
, di
, drep
);
3755 offset
= lsarpc_dissect_element_lsa_DnsDomainInfo_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
3758 proto_item_set_len(item
, offset
-old_offset
);
3761 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
3770 /* IDL: LSA_POLICY_INFO_AUDIT_LOG=1, */
3771 /* IDL: LSA_POLICY_INFO_AUDIT_EVENTS=2, */
3772 /* IDL: LSA_POLICY_INFO_DOMAIN=3, */
3773 /* IDL: LSA_POLICY_INFO_PD=4, */
3774 /* IDL: LSA_POLICY_INFO_ACCOUNT_DOMAIN=5, */
3775 /* IDL: LSA_POLICY_INFO_ROLE=6, */
3776 /* IDL: LSA_POLICY_INFO_REPLICA=7, */
3777 /* IDL: LSA_POLICY_INFO_QUOTA=8, */
3778 /* IDL: LSA_POLICY_INFO_MOD=9, */
3779 /* IDL: LSA_POLICY_INFO_AUDIT_FULL_SET=10, */
3780 /* IDL: LSA_POLICY_INFO_AUDIT_FULL_QUERY=11, */
3781 /* IDL: LSA_POLICY_INFO_DNS=12, */
3782 /* IDL: LSA_POLICY_INFO_DNS_INT=13, */
3783 /* IDL: LSA_POLICY_INFO_L_ACCOUNT_DOMAIN=14, */
3787 lsarpc_dissect_enum_lsa_PolicyInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
3789 uint32_t parameter
=0;
3793 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
3801 /* IDL: [switch_type(uint16)] union { */
3802 /* IDL: [case(LSA_POLICY_INFO_AUDIT_LOG)] [case(LSA_POLICY_INFO_AUDIT_LOG)] lsa_AuditLogInfo audit_log; */
3803 /* IDL: [case(LSA_POLICY_INFO_AUDIT_EVENTS)] [case(LSA_POLICY_INFO_AUDIT_EVENTS)] lsa_AuditEventsInfo audit_events; */
3804 /* IDL: [case(LSA_POLICY_INFO_DOMAIN)] [case(LSA_POLICY_INFO_DOMAIN)] lsa_DomainInfo domain; */
3805 /* IDL: [case(LSA_POLICY_INFO_PD)] [case(LSA_POLICY_INFO_PD)] lsa_PDAccountInfo pd; */
3806 /* IDL: [case(LSA_POLICY_INFO_ACCOUNT_DOMAIN)] [case(LSA_POLICY_INFO_ACCOUNT_DOMAIN)] lsa_DomainInfo account_domain; */
3807 /* IDL: [case(LSA_POLICY_INFO_ROLE)] [case(LSA_POLICY_INFO_ROLE)] lsa_ServerRole role; */
3808 /* IDL: [case(LSA_POLICY_INFO_REPLICA)] [case(LSA_POLICY_INFO_REPLICA)] lsa_ReplicaSourceInfo replica; */
3809 /* IDL: [case(LSA_POLICY_INFO_QUOTA)] [case(LSA_POLICY_INFO_QUOTA)] lsa_DefaultQuotaInfo quota; */
3810 /* IDL: [case(LSA_POLICY_INFO_MOD)] [case(LSA_POLICY_INFO_MOD)] lsa_ModificationInfo mod; */
3811 /* IDL: [case(LSA_POLICY_INFO_AUDIT_FULL_SET)] [case(LSA_POLICY_INFO_AUDIT_FULL_SET)] lsa_AuditFullSetInfo auditfullset; */
3812 /* IDL: [case(LSA_POLICY_INFO_AUDIT_FULL_QUERY)] [case(LSA_POLICY_INFO_AUDIT_FULL_QUERY)] lsa_AuditFullQueryInfo auditfullquery; */
3813 /* IDL: [case(LSA_POLICY_INFO_DNS)] [case(LSA_POLICY_INFO_DNS)] lsa_DnsDomainInfo dns; */
3814 /* IDL: [case(LSA_POLICY_INFO_DNS_INT)] [case(LSA_POLICY_INFO_DNS_INT)] lsa_DnsDomainInfo dns_int; */
3815 /* IDL: [case(LSA_POLICY_INFO_L_ACCOUNT_DOMAIN)] [case(LSA_POLICY_INFO_L_ACCOUNT_DOMAIN)] lsa_DomainInfo l_account_domain; */
3819 lsarpc_dissect_element_lsa_PolicyInformation_audit_log(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3821 offset
= lsarpc_dissect_struct_lsa_AuditLogInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_audit_log
,0);
3827 lsarpc_dissect_element_lsa_PolicyInformation_audit_events(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3829 offset
= lsarpc_dissect_struct_lsa_AuditEventsInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_audit_events
,0);
3835 lsarpc_dissect_element_lsa_PolicyInformation_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3837 offset
= lsarpc_dissect_struct_lsa_DomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_domain
,0);
3843 lsarpc_dissect_element_lsa_PolicyInformation_pd(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3845 offset
= lsarpc_dissect_struct_lsa_PDAccountInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_pd
,0);
3851 lsarpc_dissect_element_lsa_PolicyInformation_account_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3853 offset
= lsarpc_dissect_struct_lsa_DomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_account_domain
,0);
3859 lsarpc_dissect_element_lsa_PolicyInformation_role(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3861 offset
= lsarpc_dissect_struct_lsa_ServerRole(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_role
,0);
3867 lsarpc_dissect_element_lsa_PolicyInformation_replica(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3869 offset
= lsarpc_dissect_struct_lsa_ReplicaSourceInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_replica
,0);
3875 lsarpc_dissect_element_lsa_PolicyInformation_quota(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3877 offset
= lsarpc_dissect_struct_lsa_DefaultQuotaInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_quota
,0);
3883 lsarpc_dissect_element_lsa_PolicyInformation_mod(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3885 offset
= lsarpc_dissect_struct_lsa_ModificationInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_mod
,0);
3891 lsarpc_dissect_element_lsa_PolicyInformation_auditfullset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3893 offset
= lsarpc_dissect_struct_lsa_AuditFullSetInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_auditfullset
,0);
3899 lsarpc_dissect_element_lsa_PolicyInformation_auditfullquery(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3901 offset
= lsarpc_dissect_struct_lsa_AuditFullQueryInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_auditfullquery
,0);
3907 lsarpc_dissect_element_lsa_PolicyInformation_dns(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3909 offset
= lsarpc_dissect_struct_lsa_DnsDomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_dns
,0);
3915 lsarpc_dissect_element_lsa_PolicyInformation_dns_int(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3917 offset
= lsarpc_dissect_struct_lsa_DnsDomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_dns_int
,0);
3923 lsarpc_dissect_element_lsa_PolicyInformation_l_account_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
3925 offset
= lsarpc_dissect_struct_lsa_DomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PolicyInformation_l_account_domain
,0);
3931 lsarpc_dissect_lsa_PolicyInformation(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
3933 proto_item
*item
= NULL
;
3934 proto_tree
*tree
= NULL
;
3938 old_offset
= offset
;
3940 tree
= proto_tree_add_subtree(parent_tree
, tvb
, offset
, -1, ett_lsarpc_lsa_PolicyInformation
, &item
, "lsa_PolicyInformation");
3943 offset
= dissect_ndr_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, &level
);
3947 case LSA_POLICY_INFO_AUDIT_LOG
:
3948 offset
= lsarpc_dissect_element_lsa_PolicyInformation_audit_log(tvb
, offset
, pinfo
, tree
, di
, drep
);
3951 case LSA_POLICY_INFO_AUDIT_EVENTS
:
3952 offset
= lsarpc_dissect_element_lsa_PolicyInformation_audit_events(tvb
, offset
, pinfo
, tree
, di
, drep
);
3955 case LSA_POLICY_INFO_DOMAIN
:
3956 offset
= lsarpc_dissect_element_lsa_PolicyInformation_domain(tvb
, offset
, pinfo
, tree
, di
, drep
);
3959 case LSA_POLICY_INFO_PD
:
3960 offset
= lsarpc_dissect_element_lsa_PolicyInformation_pd(tvb
, offset
, pinfo
, tree
, di
, drep
);
3963 case LSA_POLICY_INFO_ACCOUNT_DOMAIN
:
3964 offset
= lsarpc_dissect_element_lsa_PolicyInformation_account_domain(tvb
, offset
, pinfo
, tree
, di
, drep
);
3967 case LSA_POLICY_INFO_ROLE
:
3968 offset
= lsarpc_dissect_element_lsa_PolicyInformation_role(tvb
, offset
, pinfo
, tree
, di
, drep
);
3971 case LSA_POLICY_INFO_REPLICA
:
3972 offset
= lsarpc_dissect_element_lsa_PolicyInformation_replica(tvb
, offset
, pinfo
, tree
, di
, drep
);
3975 case LSA_POLICY_INFO_QUOTA
:
3976 offset
= lsarpc_dissect_element_lsa_PolicyInformation_quota(tvb
, offset
, pinfo
, tree
, di
, drep
);
3979 case LSA_POLICY_INFO_MOD
:
3980 offset
= lsarpc_dissect_element_lsa_PolicyInformation_mod(tvb
, offset
, pinfo
, tree
, di
, drep
);
3983 case LSA_POLICY_INFO_AUDIT_FULL_SET
:
3984 offset
= lsarpc_dissect_element_lsa_PolicyInformation_auditfullset(tvb
, offset
, pinfo
, tree
, di
, drep
);
3987 case LSA_POLICY_INFO_AUDIT_FULL_QUERY
:
3988 offset
= lsarpc_dissect_element_lsa_PolicyInformation_auditfullquery(tvb
, offset
, pinfo
, tree
, di
, drep
);
3991 case LSA_POLICY_INFO_DNS
:
3992 offset
= lsarpc_dissect_element_lsa_PolicyInformation_dns(tvb
, offset
, pinfo
, tree
, di
, drep
);
3995 case LSA_POLICY_INFO_DNS_INT
:
3996 offset
= lsarpc_dissect_element_lsa_PolicyInformation_dns_int(tvb
, offset
, pinfo
, tree
, di
, drep
);
3999 case LSA_POLICY_INFO_L_ACCOUNT_DOMAIN
:
4000 offset
= lsarpc_dissect_element_lsa_PolicyInformation_l_account_domain(tvb
, offset
, pinfo
, tree
, di
, drep
);
4003 proto_item_set_len(item
, offset
-old_offset
);
4010 /* IDL: [unique(1)] dom_sid2 *sid; */
4014 lsarpc_dissect_element_lsa_SidPtr_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4016 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SidPtr_sid_
, NDR_POINTER_UNIQUE
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_SidPtr_sid
);
4022 lsarpc_dissect_element_lsa_SidPtr_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4024 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_SidPtr_sid
,0);
4030 lsarpc_dissect_struct_lsa_SidPtr(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4032 proto_item
*item
= NULL
;
4033 proto_tree
*tree
= NULL
;
4038 old_offset
= offset
;
4041 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4042 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_SidPtr
);
4045 offset
= lsarpc_dissect_element_lsa_SidPtr_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
4048 proto_item_set_len(item
, offset
-old_offset
);
4051 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4060 /* IDL: [range(0,20480)] uint32 num_sids; */
4061 /* IDL: [size_is(num_sids)] [unique(1)] lsa_SidPtr *sids; */
4065 lsarpc_dissect_element_lsa_SidArray_num_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4067 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SidArray_num_sids
, 0);
4073 lsarpc_dissect_element_lsa_SidArray_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4075 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SidArray_sids_
, NDR_POINTER_UNIQUE
, "Pointer to Sids (lsa_SidPtr)",hf_lsarpc_lsa_SidArray_sids
);
4081 lsarpc_dissect_element_lsa_SidArray_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4083 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SidArray_sids__
);
4089 lsarpc_dissect_element_lsa_SidArray_sids__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4091 offset
= lsarpc_dissect_struct_lsa_SidPtr(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_SidArray_sids
,0);
4097 lsarpc_dissect_struct_lsa_SidArray(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4099 proto_item
*item
= NULL
;
4100 proto_tree
*tree
= NULL
;
4105 old_offset
= offset
;
4108 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4109 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_SidArray
);
4112 offset
= lsarpc_dissect_element_lsa_SidArray_num_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
4114 offset
= lsarpc_dissect_element_lsa_SidArray_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
4117 proto_item_set_len(item
, offset
-old_offset
);
4120 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4129 /* IDL: uint32 count; */
4130 /* IDL: [size_is(count)] [unique(1)] lsa_DomainInfo *domains; */
4134 lsarpc_dissect_element_lsa_DomainList_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4136 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DomainList_count
, 0);
4142 lsarpc_dissect_element_lsa_DomainList_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4144 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DomainList_domains_
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_DomainInfo)",hf_lsarpc_lsa_DomainList_domains
);
4150 lsarpc_dissect_element_lsa_DomainList_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4152 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DomainList_domains__
);
4158 lsarpc_dissect_element_lsa_DomainList_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4160 offset
= lsarpc_dissect_struct_lsa_DomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DomainList_domains
,0);
4166 lsarpc_dissect_struct_lsa_DomainList(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4168 proto_item
*item
= NULL
;
4169 proto_tree
*tree
= NULL
;
4174 old_offset
= offset
;
4177 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4178 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DomainList
);
4181 offset
= lsarpc_dissect_element_lsa_DomainList_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
4183 offset
= lsarpc_dissect_element_lsa_DomainList_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
4186 proto_item_set_len(item
, offset
-old_offset
);
4189 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4198 /* IDL: SID_NAME_USE_NONE=0, */
4199 /* IDL: SID_NAME_USER=1, */
4200 /* IDL: SID_NAME_DOM_GRP=2, */
4201 /* IDL: SID_NAME_DOMAIN=3, */
4202 /* IDL: SID_NAME_ALIAS=4, */
4203 /* IDL: SID_NAME_WKN_GRP=5, */
4204 /* IDL: SID_NAME_DELETED=6, */
4205 /* IDL: SID_NAME_INVALID=7, */
4206 /* IDL: SID_NAME_UNKNOWN=8, */
4207 /* IDL: SID_NAME_COMPUTER=9, */
4208 /* IDL: SID_NAME_LABEL=10, */
4212 lsarpc_dissect_enum_lsa_SidType(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
4214 uint32_t parameter
=0;
4218 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
4227 /* IDL: lsa_SidType sid_type; */
4228 /* IDL: uint32 rid; */
4229 /* IDL: uint32 sid_index; */
4233 lsarpc_dissect_element_lsa_TranslatedSid_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4235 offset
= lsarpc_dissect_enum_lsa_SidType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid_sid_type
, 0);
4241 lsarpc_dissect_element_lsa_TranslatedSid_rid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4243 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid_rid
, 0);
4249 lsarpc_dissect_element_lsa_TranslatedSid_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4251 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid_sid_index
, 0);
4257 lsarpc_dissect_struct_lsa_TranslatedSid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4259 proto_item
*item
= NULL
;
4260 proto_tree
*tree
= NULL
;
4265 old_offset
= offset
;
4268 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4269 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TranslatedSid
);
4272 offset
= lsarpc_dissect_element_lsa_TranslatedSid_sid_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
4274 offset
= lsarpc_dissect_element_lsa_TranslatedSid_rid(tvb
, offset
, pinfo
, tree
, di
, drep
);
4276 offset
= lsarpc_dissect_element_lsa_TranslatedSid_sid_index(tvb
, offset
, pinfo
, tree
, di
, drep
);
4279 proto_item_set_len(item
, offset
-old_offset
);
4282 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4291 /* IDL: [range(0,1000)] uint32 count; */
4292 /* IDL: [size_is(count)] [unique(1)] lsa_TranslatedSid *sids; */
4296 lsarpc_dissect_element_lsa_TransSidArray_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4298 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TransSidArray_count
, 0);
4304 lsarpc_dissect_element_lsa_TransSidArray_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4306 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TransSidArray_sids_
, NDR_POINTER_UNIQUE
, "Pointer to Sids (lsa_TranslatedSid)",hf_lsarpc_lsa_TransSidArray_sids
);
4312 lsarpc_dissect_element_lsa_TransSidArray_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4314 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TransSidArray_sids__
);
4320 lsarpc_dissect_element_lsa_TransSidArray_sids__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4322 offset
= lsarpc_dissect_struct_lsa_TranslatedSid(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TransSidArray_sids
,0);
4328 lsarpc_dissect_struct_lsa_TransSidArray(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4330 proto_item
*item
= NULL
;
4331 proto_tree
*tree
= NULL
;
4336 old_offset
= offset
;
4339 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4340 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TransSidArray
);
4343 offset
= lsarpc_dissect_element_lsa_TransSidArray_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
4345 offset
= lsarpc_dissect_element_lsa_TransSidArray_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
4348 proto_item_set_len(item
, offset
-old_offset
);
4351 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4360 /* IDL: [range(0,1000)] uint32 count; */
4361 /* IDL: [size_is(count)] [unique(1)] lsa_DomainInfo *domains; */
4362 /* IDL: uint32 max_size; */
4366 lsarpc_dissect_element_lsa_RefDomainList_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4368 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_RefDomainList_count
, 0);
4374 lsarpc_dissect_element_lsa_RefDomainList_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4376 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RefDomainList_domains_
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_DomainInfo)",hf_lsarpc_lsa_RefDomainList_domains
);
4382 lsarpc_dissect_element_lsa_RefDomainList_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4384 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RefDomainList_domains__
);
4390 lsarpc_dissect_element_lsa_RefDomainList_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4392 offset
= lsarpc_dissect_struct_lsa_DomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_RefDomainList_domains
,0);
4398 lsarpc_dissect_element_lsa_RefDomainList_max_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4400 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_RefDomainList_max_size
, 0);
4406 lsarpc_dissect_struct_lsa_RefDomainList(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4408 proto_item
*item
= NULL
;
4409 proto_tree
*tree
= NULL
;
4414 old_offset
= offset
;
4417 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4418 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_RefDomainList
);
4421 offset
= lsarpc_dissect_element_lsa_RefDomainList_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
4423 offset
= lsarpc_dissect_element_lsa_RefDomainList_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
4425 offset
= lsarpc_dissect_element_lsa_RefDomainList_max_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
4428 proto_item_set_len(item
, offset
-old_offset
);
4431 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4440 /* IDL: LSA_LOOKUP_NAMES_ALL=1, */
4441 /* IDL: LSA_LOOKUP_NAMES_DOMAINS_ONLY=2, */
4442 /* IDL: LSA_LOOKUP_NAMES_PRIMARY_DOMAIN_ONLY=3, */
4443 /* IDL: LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY=4, */
4444 /* IDL: LSA_LOOKUP_NAMES_FOREST_TRUSTS_ONLY=5, */
4445 /* IDL: LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY2=6, */
4446 /* IDL: LSA_LOOKUP_NAMES_RODC_REFERRAL_TO_FULL_DC=7, */
4450 lsarpc_dissect_enum_lsa_LookupNamesLevel(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
4452 uint32_t parameter
=0;
4456 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
4465 /* IDL: lsa_SidType sid_type; */
4466 /* IDL: lsa_String name; */
4467 /* IDL: uint32 sid_index; */
4471 lsarpc_dissect_element_lsa_TranslatedName_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4473 offset
= lsarpc_dissect_enum_lsa_SidType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedName_sid_type
, 0);
4479 lsarpc_dissect_element_lsa_TranslatedName_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4481 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TranslatedName_name
,0);
4487 lsarpc_dissect_element_lsa_TranslatedName_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4489 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedName_sid_index
, 0);
4495 lsarpc_dissect_struct_lsa_TranslatedName(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4497 proto_item
*item
= NULL
;
4498 proto_tree
*tree
= NULL
;
4503 old_offset
= offset
;
4506 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4507 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TranslatedName
);
4510 offset
= lsarpc_dissect_element_lsa_TranslatedName_sid_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
4512 offset
= lsarpc_dissect_element_lsa_TranslatedName_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
4514 offset
= lsarpc_dissect_element_lsa_TranslatedName_sid_index(tvb
, offset
, pinfo
, tree
, di
, drep
);
4517 proto_item_set_len(item
, offset
-old_offset
);
4520 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4529 /* IDL: [range(0,20480)] uint32 count; */
4530 /* IDL: [size_is(count)] [unique(1)] lsa_TranslatedName *names; */
4534 lsarpc_dissect_element_lsa_TransNameArray_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4536 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TransNameArray_count
, 0);
4542 lsarpc_dissect_element_lsa_TransNameArray_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4544 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TransNameArray_names_
, NDR_POINTER_UNIQUE
, "Pointer to Names (lsa_TranslatedName)",hf_lsarpc_lsa_TransNameArray_names
);
4550 lsarpc_dissect_element_lsa_TransNameArray_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4552 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TransNameArray_names__
);
4558 lsarpc_dissect_element_lsa_TransNameArray_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4560 offset
= lsarpc_dissect_struct_lsa_TranslatedName(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TransNameArray_names
,0);
4566 lsarpc_dissect_struct_lsa_TransNameArray(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4568 proto_item
*item
= NULL
;
4569 proto_tree
*tree
= NULL
;
4574 old_offset
= offset
;
4577 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4578 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TransNameArray
);
4581 offset
= lsarpc_dissect_element_lsa_TransNameArray_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
4583 offset
= lsarpc_dissect_element_lsa_TransNameArray_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
4586 proto_item_set_len(item
, offset
-old_offset
);
4589 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4598 /* IDL: lsa_LUID luid; */
4599 /* IDL: uint32 attribute; */
4603 lsarpc_dissect_element_lsa_LUIDAttribute_luid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4605 offset
= lsarpc_dissect_struct_lsa_LUID(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LUIDAttribute_luid
,0);
4611 lsarpc_dissect_element_lsa_LUIDAttribute_attribute(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4613 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LUIDAttribute_attribute
, 0);
4619 lsarpc_dissect_struct_lsa_LUIDAttribute(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4621 proto_item
*item
= NULL
;
4622 proto_tree
*tree
= NULL
;
4627 old_offset
= offset
;
4630 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4631 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_LUIDAttribute
);
4634 offset
= lsarpc_dissect_element_lsa_LUIDAttribute_luid(tvb
, offset
, pinfo
, tree
, di
, drep
);
4636 offset
= lsarpc_dissect_element_lsa_LUIDAttribute_attribute(tvb
, offset
, pinfo
, tree
, di
, drep
);
4639 proto_item_set_len(item
, offset
-old_offset
);
4642 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4651 /* IDL: [range(0,1000)] uint32 count; */
4652 /* IDL: uint32 unknown; */
4653 /* IDL: [size_is(count)] lsa_LUIDAttribute set[*]; */
4657 lsarpc_dissect_element_lsa_PrivilegeSet_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4659 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_PrivilegeSet_count
, 0);
4665 lsarpc_dissect_element_lsa_PrivilegeSet_unknown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4667 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_PrivilegeSet_unknown
, 0);
4673 lsarpc_dissect_element_lsa_PrivilegeSet_set(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4675 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_PrivilegeSet_set_
);
4681 lsarpc_dissect_element_lsa_PrivilegeSet_set_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4683 offset
= lsarpc_dissect_struct_lsa_LUIDAttribute(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_PrivilegeSet_set
,0);
4689 lsarpc_dissect_struct_lsa_PrivilegeSet(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4691 proto_item
*item
= NULL
;
4692 proto_tree
*tree
= NULL
;
4697 old_offset
= offset
;
4700 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4701 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_PrivilegeSet
);
4704 offset
= lsarpc_dissect_element_lsa_PrivilegeSet_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
4706 offset
= lsarpc_dissect_element_lsa_PrivilegeSet_unknown(tvb
, offset
, pinfo
, tree
, di
, drep
);
4708 offset
= lsarpc_dissect_element_lsa_PrivilegeSet_set(tvb
, offset
, pinfo
, tree
, di
, drep
);
4711 proto_item_set_len(item
, offset
-old_offset
);
4714 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4723 /* IDL: uint3264 length; */
4724 /* IDL: uint3264 size; */
4725 /* IDL: [length_is(length)] [size_is(size)] [unique(1)] uint8 *data; */
4729 lsarpc_dissect_element_lsa_DATA_BUF_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4731 offset
= dissect_ndr_uint3264(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DATA_BUF_length
, NULL
);
4737 lsarpc_dissect_element_lsa_DATA_BUF_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4739 offset
= dissect_ndr_uint3264(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DATA_BUF_size
, NULL
);
4745 lsarpc_dissect_element_lsa_DATA_BUF_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4747 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DATA_BUF_data_
, NDR_POINTER_UNIQUE
, "Pointer to Data (uint8)",hf_lsarpc_lsa_DATA_BUF_data
);
4753 lsarpc_dissect_element_lsa_DATA_BUF_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4755 offset
= dissect_ndr_ucvarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DATA_BUF_data__
);
4761 lsarpc_dissect_element_lsa_DATA_BUF_data__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4763 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DATA_BUF_data
, 0);
4769 lsarpc_dissect_struct_lsa_DATA_BUF(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4771 proto_item
*item
= NULL
;
4772 proto_tree
*tree
= NULL
;
4777 old_offset
= offset
;
4780 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4781 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DATA_BUF
);
4784 offset
= lsarpc_dissect_element_lsa_DATA_BUF_length(tvb
, offset
, pinfo
, tree
, di
, drep
);
4786 offset
= lsarpc_dissect_element_lsa_DATA_BUF_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
4788 offset
= lsarpc_dissect_element_lsa_DATA_BUF_data(tvb
, offset
, pinfo
, tree
, di
, drep
);
4791 proto_item_set_len(item
, offset
-old_offset
);
4794 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4803 /* IDL: [range(0,65536)] uint32 size; */
4804 /* IDL: [size_is(size)] [unique(1)] uint8 *data; */
4808 lsarpc_dissect_element_lsa_DATA_BUF2_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4810 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DATA_BUF2_size
, 0);
4816 lsarpc_dissect_element_lsa_DATA_BUF2_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4818 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DATA_BUF2_data_
, NDR_POINTER_UNIQUE
, "Pointer to Data (uint8)",hf_lsarpc_lsa_DATA_BUF2_data
);
4824 lsarpc_dissect_element_lsa_DATA_BUF2_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4826 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DATA_BUF2_data__
);
4832 lsarpc_dissect_element_lsa_DATA_BUF2_data__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
4834 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DATA_BUF2_data
, 0);
4840 lsarpc_dissect_struct_lsa_DATA_BUF2(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4842 proto_item
*item
= NULL
;
4843 proto_tree
*tree
= NULL
;
4848 old_offset
= offset
;
4851 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
4852 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DATA_BUF2
);
4855 offset
= lsarpc_dissect_element_lsa_DATA_BUF2_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
4857 offset
= lsarpc_dissect_element_lsa_DATA_BUF2_data(tvb
, offset
, pinfo
, tree
, di
, drep
);
4860 proto_item_set_len(item
, offset
-old_offset
);
4863 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
4872 /* IDL: LSA_TRUSTED_DOMAIN_INFO_NAME=1, */
4873 /* IDL: LSA_TRUSTED_DOMAIN_INFO_CONTROLLERS=2, */
4874 /* IDL: LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET=3, */
4875 /* IDL: LSA_TRUSTED_DOMAIN_INFO_PASSWORD=4, */
4876 /* IDL: LSA_TRUSTED_DOMAIN_INFO_BASIC=5, */
4877 /* IDL: LSA_TRUSTED_DOMAIN_INFO_INFO_EX=6, */
4878 /* IDL: LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO=7, */
4879 /* IDL: LSA_TRUSTED_DOMAIN_INFO_FULL_INFO=8, */
4880 /* IDL: LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL=9, */
4881 /* IDL: LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL=10, */
4882 /* IDL: LSA_TRUSTED_DOMAIN_INFO_INFO_EX2_INTERNAL=11, */
4883 /* IDL: LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_2_INTERNAL=12, */
4884 /* IDL: LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES=13, */
4885 /* IDL: LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL_AES=14, */
4886 /* IDL: LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL_AES=15, */
4890 lsarpc_dissect_enum_lsa_TrustDomInfoEnum(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
4892 uint32_t parameter
=0;
4896 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
4905 /* IDL: LSA_TRUST_DIRECTION_INBOUND = 0x00000001 , */
4906 /* IDL: LSA_TRUST_DIRECTION_OUTBOUND = 0x00000002 , */
4910 lsarpc_dissect_bitmap_lsa_TrustDirection(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4913 static int * const lsarpc_lsa_TrustDirection_fields
[] = {
4914 &hf_lsarpc_lsa_TrustDirection_LSA_TRUST_DIRECTION_INBOUND
,
4915 &hf_lsarpc_lsa_TrustDirection_LSA_TRUST_DIRECTION_OUTBOUND
,
4921 item
= proto_tree_add_bitmask_with_flags(parent_tree
, tvb
, offset
, hf_index
,
4922 ett_lsarpc_lsa_TrustDirection
, lsarpc_lsa_TrustDirection_fields
, DREP_ENC_INTEGER(drep
), BMT_NO_FALSE
);
4924 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, parent_tree
, di
, drep
, -1, &flags
);
4927 proto_item_append_text(item
, ": (No values set)");
4929 if (flags
& (~0x00000003)) {
4930 flags
&= (~0x00000003);
4931 proto_item_append_text(item
, "Unknown bitmap value 0x%x", flags
);
4939 /* IDL: LSA_TRUST_TYPE_DOWNLEVEL=0x00000001, */
4940 /* IDL: LSA_TRUST_TYPE_UPLEVEL=0x00000002, */
4941 /* IDL: LSA_TRUST_TYPE_MIT=0x00000003, */
4942 /* IDL: LSA_TRUST_TYPE_DCE=0x00000004, */
4946 lsarpc_dissect_enum_lsa_TrustType(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
4948 uint32_t parameter
=0;
4952 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
4961 /* IDL: LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE = 0x00000001 , */
4962 /* IDL: LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY = 0x00000002 , */
4963 /* IDL: LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN = 0x00000004 , */
4964 /* IDL: LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE = 0x00000008 , */
4965 /* IDL: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION = 0x00000010 , */
4966 /* IDL: LSA_TRUST_ATTRIBUTE_WITHIN_FOREST = 0x00000020 , */
4967 /* IDL: LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL = 0x00000040 , */
4968 /* IDL: LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION = 0x00000080 , */
4969 /* IDL: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION = 0x00000200 , */
4970 /* IDL: LSA_TRUST_ATTRIBUTE_PIM_TRUST = 0x00000400 , */
4971 /* IDL: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION = 0x00000800 , */
4975 lsarpc_dissect_bitmap_lsa_TrustAttributes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
4978 static int * const lsarpc_lsa_TrustAttributes_fields
[] = {
4979 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE
,
4980 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY
,
4981 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN
,
4982 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE
,
4983 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION
,
4984 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_WITHIN_FOREST
,
4985 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL
,
4986 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION
,
4987 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION
,
4988 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_PIM_TRUST
,
4989 &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION
,
4995 item
= proto_tree_add_bitmask_with_flags(parent_tree
, tvb
, offset
, hf_index
,
4996 ett_lsarpc_lsa_TrustAttributes
, lsarpc_lsa_TrustAttributes_fields
, DREP_ENC_INTEGER(drep
), BMT_NO_FALSE
);
4998 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, parent_tree
, di
, drep
, -1, &flags
);
5001 proto_item_append_text(item
, ": (No values set)");
5003 if (flags
& (~0x00000eff)) {
5004 flags
&= (~0x00000eff);
5005 proto_item_append_text(item
, "Unknown bitmap value 0x%x", flags
);
5013 /* IDL: lsa_StringLarge netbios_name; */
5017 lsarpc_dissect_element_lsa_TrustDomainInfoName_netbios_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5019 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoName_netbios_name
,0);
5025 lsarpc_dissect_struct_lsa_TrustDomainInfoName(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5027 proto_item
*item
= NULL
;
5028 proto_tree
*tree
= NULL
;
5033 old_offset
= offset
;
5036 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5037 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoName
);
5040 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoName_netbios_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
5043 proto_item_set_len(item
, offset
-old_offset
);
5046 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5055 /* IDL: uint32 entries; */
5056 /* IDL: [size_is(entries)] [unique(1)] lsa_StringLarge *netbios_names; */
5060 lsarpc_dissect_element_lsa_TrustDomainInfoControllers_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5062 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoControllers_entries
, 0);
5068 lsarpc_dissect_element_lsa_TrustDomainInfoControllers_netbios_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5070 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoControllers_netbios_names_
, NDR_POINTER_UNIQUE
, "Pointer to Netbios Names (lsa_StringLarge)",hf_lsarpc_lsa_TrustDomainInfoControllers_netbios_names
);
5076 lsarpc_dissect_element_lsa_TrustDomainInfoControllers_netbios_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5078 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoControllers_netbios_names__
);
5084 lsarpc_dissect_element_lsa_TrustDomainInfoControllers_netbios_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5086 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoControllers_netbios_names
,0);
5092 lsarpc_dissect_struct_lsa_TrustDomainInfoControllers(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5094 proto_item
*item
= NULL
;
5095 proto_tree
*tree
= NULL
;
5100 old_offset
= offset
;
5103 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5104 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoControllers
);
5107 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoControllers_entries(tvb
, offset
, pinfo
, tree
, di
, drep
);
5109 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoControllers_netbios_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
5112 proto_item_set_len(item
, offset
-old_offset
);
5115 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5124 /* IDL: uint32 posix_offset; */
5128 lsarpc_dissect_element_lsa_TrustDomainInfoPosixOffset_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5130 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoPosixOffset_posix_offset
, 0);
5136 lsarpc_dissect_struct_lsa_TrustDomainInfoPosixOffset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5138 proto_item
*item
= NULL
;
5139 proto_tree
*tree
= NULL
;
5144 old_offset
= offset
;
5147 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5148 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoPosixOffset
);
5151 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoPosixOffset_posix_offset(tvb
, offset
, pinfo
, tree
, di
, drep
);
5154 proto_item_set_len(item
, offset
-old_offset
);
5157 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5166 /* IDL: [unique(1)] lsa_DATA_BUF *password; */
5167 /* IDL: [unique(1)] lsa_DATA_BUF *old_password; */
5171 lsarpc_dissect_element_lsa_TrustDomainInfoPassword_password(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5173 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoPassword_password_
, NDR_POINTER_UNIQUE
, "Pointer to Password (lsa_DATA_BUF)",hf_lsarpc_lsa_TrustDomainInfoPassword_password
);
5179 lsarpc_dissect_element_lsa_TrustDomainInfoPassword_password_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5181 offset
= lsarpc_dissect_struct_lsa_DATA_BUF(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoPassword_password
,0);
5187 lsarpc_dissect_element_lsa_TrustDomainInfoPassword_old_password(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5189 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoPassword_old_password_
, NDR_POINTER_UNIQUE
, "Pointer to Old Password (lsa_DATA_BUF)",hf_lsarpc_lsa_TrustDomainInfoPassword_old_password
);
5195 lsarpc_dissect_element_lsa_TrustDomainInfoPassword_old_password_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5197 offset
= lsarpc_dissect_struct_lsa_DATA_BUF(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoPassword_old_password
,0);
5203 lsarpc_dissect_struct_lsa_TrustDomainInfoPassword(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5205 proto_item
*item
= NULL
;
5206 proto_tree
*tree
= NULL
;
5211 old_offset
= offset
;
5214 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5215 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoPassword
);
5218 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoPassword_password(tvb
, offset
, pinfo
, tree
, di
, drep
);
5220 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoPassword_old_password(tvb
, offset
, pinfo
, tree
, di
, drep
);
5223 proto_item_set_len(item
, offset
-old_offset
);
5226 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5235 /* IDL: lsa_String netbios_name; */
5236 /* IDL: [unique(1)] dom_sid2 *sid; */
5240 lsarpc_dissect_element_lsa_TrustDomainInfoBasic_netbios_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5242 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoBasic_netbios_name
,0);
5248 lsarpc_dissect_element_lsa_TrustDomainInfoBasic_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5250 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoBasic_sid_
, NDR_POINTER_UNIQUE
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_TrustDomainInfoBasic_sid
);
5256 lsarpc_dissect_element_lsa_TrustDomainInfoBasic_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5258 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoBasic_sid
,0);
5264 lsarpc_dissect_struct_lsa_TrustDomainInfoBasic(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5266 proto_item
*item
= NULL
;
5267 proto_tree
*tree
= NULL
;
5272 old_offset
= offset
;
5275 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5276 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoBasic
);
5279 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoBasic_netbios_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
5281 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoBasic_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
5284 proto_item_set_len(item
, offset
-old_offset
);
5287 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5296 /* IDL: lsa_StringLarge domain_name; */
5297 /* IDL: lsa_StringLarge netbios_name; */
5298 /* IDL: [unique(1)] dom_sid2 *sid; */
5299 /* IDL: lsa_TrustDirection trust_direction; */
5300 /* IDL: lsa_TrustType trust_type; */
5301 /* IDL: lsa_TrustAttributes trust_attributes; */
5305 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5307 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoInfoEx_domain_name
,0);
5313 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_netbios_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5315 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoInfoEx_netbios_name
,0);
5321 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5323 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_sid_
, NDR_POINTER_UNIQUE
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_TrustDomainInfoInfoEx_sid
);
5329 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5331 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoInfoEx_sid
,0);
5337 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_trust_direction(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5339 offset
= lsarpc_dissect_bitmap_lsa_TrustDirection(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoInfoEx_trust_direction
, 0);
5345 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_trust_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5347 offset
= lsarpc_dissect_enum_lsa_TrustType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoInfoEx_trust_type
, 0);
5353 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_trust_attributes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5355 offset
= lsarpc_dissect_bitmap_lsa_TrustAttributes(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoInfoEx_trust_attributes
, 0);
5361 lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5363 proto_item
*item
= NULL
;
5364 proto_tree
*tree
= NULL
;
5369 old_offset
= offset
;
5372 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5373 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoInfoEx
);
5376 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_domain_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
5378 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_netbios_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
5380 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
5382 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_trust_direction(tvb
, offset
, pinfo
, tree
, di
, drep
);
5384 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_trust_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
5386 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx_trust_attributes(tvb
, offset
, pinfo
, tree
, di
, drep
);
5389 proto_item_set_len(item
, offset
-old_offset
);
5392 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5401 /* IDL: TRUST_AUTH_TYPE_NONE=0, */
5402 /* IDL: TRUST_AUTH_TYPE_NT4OWF=1, */
5403 /* IDL: TRUST_AUTH_TYPE_CLEAR=2, */
5404 /* IDL: TRUST_AUTH_TYPE_VERSION=3, */
5408 lsarpc_dissect_enum_lsa_TrustAuthType(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
5410 uint32_t parameter
=0;
5414 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
5423 /* IDL: NTTIME_hyper last_update_time; */
5424 /* IDL: lsa_TrustAuthType AuthType; */
5425 /* IDL: lsa_DATA_BUF2 data; */
5429 lsarpc_dissect_element_lsa_TrustDomainInfoBuffer_last_update_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5431 offset
= dissect_ndr_nt_NTTIME_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoBuffer_last_update_time
);
5437 lsarpc_dissect_element_lsa_TrustDomainInfoBuffer_AuthType(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5439 offset
= lsarpc_dissect_enum_lsa_TrustAuthType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoBuffer_AuthType
, 0);
5445 lsarpc_dissect_element_lsa_TrustDomainInfoBuffer_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5447 offset
= lsarpc_dissect_struct_lsa_DATA_BUF2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoBuffer_data
,0);
5453 lsarpc_dissect_struct_lsa_TrustDomainInfoBuffer(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5455 proto_item
*item
= NULL
;
5456 proto_tree
*tree
= NULL
;
5461 old_offset
= offset
;
5464 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5465 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoBuffer
);
5468 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoBuffer_last_update_time(tvb
, offset
, pinfo
, tree
, di
, drep
);
5470 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoBuffer_AuthType(tvb
, offset
, pinfo
, tree
, di
, drep
);
5472 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoBuffer_data(tvb
, offset
, pinfo
, tree
, di
, drep
);
5475 proto_item_set_len(item
, offset
-old_offset
);
5478 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5487 /* IDL: uint32 incoming_count; */
5488 /* IDL: [unique(1)] lsa_TrustDomainInfoBuffer *incoming_current_auth_info; */
5489 /* IDL: [unique(1)] lsa_TrustDomainInfoBuffer *incoming_previous_auth_info; */
5490 /* IDL: uint32 outgoing_count; */
5491 /* IDL: [unique(1)] lsa_TrustDomainInfoBuffer *outgoing_current_auth_info; */
5492 /* IDL: [unique(1)] lsa_TrustDomainInfoBuffer *outgoing_previous_auth_info; */
5496 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5498 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_count
, 0);
5504 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5506 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info_
, NDR_POINTER_UNIQUE
, "Pointer to Incoming Current Auth Info (lsa_TrustDomainInfoBuffer)",hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info
);
5512 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5514 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoBuffer(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info
,0);
5520 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5522 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info_
, NDR_POINTER_UNIQUE
, "Pointer to Incoming Previous Auth Info (lsa_TrustDomainInfoBuffer)",hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info
);
5528 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5530 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoBuffer(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info
,0);
5536 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5538 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_count
, 0);
5544 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5546 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info_
, NDR_POINTER_UNIQUE
, "Pointer to Outgoing Current Auth Info (lsa_TrustDomainInfoBuffer)",hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info
);
5552 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5554 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoBuffer(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info
,0);
5560 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5562 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info_
, NDR_POINTER_UNIQUE
, "Pointer to Outgoing Previous Auth Info (lsa_TrustDomainInfoBuffer)",hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info
);
5568 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5570 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoBuffer(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info
,0);
5576 lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5578 proto_item
*item
= NULL
;
5579 proto_tree
*tree
= NULL
;
5584 old_offset
= offset
;
5587 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5588 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoAuthInfo
);
5591 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
5593 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
5595 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
5597 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
5599 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
5601 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
5604 proto_item_set_len(item
, offset
-old_offset
);
5607 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5616 /* IDL: lsa_TrustDomainInfoInfoEx info_ex; */
5617 /* IDL: lsa_TrustDomainInfoPosixOffset posix_offset; */
5618 /* IDL: lsa_TrustDomainInfoAuthInfo auth_info; */
5622 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5624 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfo_info_ex
,0);
5630 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5632 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoPosixOffset(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfo_posix_offset
,0);
5638 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5640 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfo_auth_info
,0);
5646 lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5648 proto_item
*item
= NULL
;
5649 proto_tree
*tree
= NULL
;
5654 old_offset
= offset
;
5657 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5658 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoFullInfo
);
5661 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo_info_ex(tvb
, offset
, pinfo
, tree
, di
, drep
);
5663 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo_posix_offset(tvb
, offset
, pinfo
, tree
, di
, drep
);
5665 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
5668 proto_item_set_len(item
, offset
-old_offset
);
5671 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5680 /* IDL: lsa_DATA_BUF2 auth_blob; */
5684 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternal_auth_blob(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5686 offset
= lsarpc_dissect_struct_lsa_DATA_BUF2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternal_auth_blob
,0);
5692 lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5694 proto_item
*item
= NULL
;
5695 proto_tree
*tree
= NULL
;
5700 old_offset
= offset
;
5703 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5704 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoAuthInfoInternal
);
5707 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternal_auth_blob(tvb
, offset
, pinfo
, tree
, di
, drep
);
5710 proto_item_set_len(item
, offset
-old_offset
);
5713 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5722 /* IDL: lsa_TrustDomainInfoInfoEx info_ex; */
5723 /* IDL: lsa_TrustDomainInfoPosixOffset posix_offset; */
5724 /* IDL: lsa_TrustDomainInfoAuthInfoInternal auth_info; */
5728 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternal_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5730 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfoInternal_info_ex
,0);
5736 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternal_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5738 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoPosixOffset(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfoInternal_posix_offset
,0);
5744 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternal_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5746 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternal(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfoInternal_auth_info
,0);
5752 lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfoInternal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5754 proto_item
*item
= NULL
;
5755 proto_tree
*tree
= NULL
;
5760 old_offset
= offset
;
5763 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5764 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoFullInfoInternal
);
5767 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternal_info_ex(tvb
, offset
, pinfo
, tree
, di
, drep
);
5769 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternal_posix_offset(tvb
, offset
, pinfo
, tree
, di
, drep
);
5771 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternal_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
5774 proto_item_set_len(item
, offset
-old_offset
);
5777 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5786 /* IDL: uint8 auth_data[64]; */
5787 /* IDL: uint8 salt[16]; */
5788 /* IDL: lsa_DATA_BUF2 cipher; */
5792 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_auth_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5795 for (i
= 0; i
< 64; i
++)
5796 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_auth_data_(tvb
, offset
, pinfo
, tree
, di
, drep
);
5802 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_auth_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5804 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES_auth_data
, 0);
5810 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_salt(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5813 for (i
= 0; i
< 16; i
++)
5814 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_salt_(tvb
, offset
, pinfo
, tree
, di
, drep
);
5820 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_salt_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5822 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES_salt
, 0);
5828 lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_cipher(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5830 offset
= lsarpc_dissect_struct_lsa_DATA_BUF2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES_cipher
,0);
5836 lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternalAES(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5838 proto_item
*item
= NULL
;
5839 proto_tree
*tree
= NULL
;
5844 old_offset
= offset
;
5847 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5848 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES
);
5851 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_auth_data(tvb
, offset
, pinfo
, tree
, di
, drep
);
5853 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_salt(tvb
, offset
, pinfo
, tree
, di
, drep
);
5855 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoAuthInfoInternalAES_cipher(tvb
, offset
, pinfo
, tree
, di
, drep
);
5858 proto_item_set_len(item
, offset
-old_offset
);
5861 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5870 /* IDL: lsa_TrustDomainInfoInfoEx info_ex; */
5871 /* IDL: lsa_TrustDomainInfoPosixOffset posix_offset; */
5872 /* IDL: lsa_TrustDomainInfoAuthInfoInternalAES auth_info; */
5876 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternalAES_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5878 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES_info_ex
,0);
5884 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternalAES_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5886 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoPosixOffset(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES_posix_offset
,0);
5892 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternalAES_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5894 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternalAES(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES_auth_info
,0);
5900 lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfoInternalAES(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5902 proto_item
*item
= NULL
;
5903 proto_tree
*tree
= NULL
;
5908 old_offset
= offset
;
5911 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5912 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES
);
5915 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternalAES_info_ex(tvb
, offset
, pinfo
, tree
, di
, drep
);
5917 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternalAES_posix_offset(tvb
, offset
, pinfo
, tree
, di
, drep
);
5919 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfoInternalAES_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
5922 proto_item_set_len(item
, offset
-old_offset
);
5925 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
5934 /* IDL: lsa_TrustDomainInfoInfoEx info_ex; */
5935 /* IDL: uint32 forest_trust_length; */
5936 /* IDL: [size_is(forest_trust_length)] [unique(1)] uint8 *forest_trust_data; */
5940 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5942 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_info_ex
,0);
5948 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5950 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_length
, 0);
5956 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5958 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data_
, NDR_POINTER_UNIQUE
, "Pointer to Forest Trust Data (uint8)",hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data
);
5964 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5966 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data__
);
5972 lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
5974 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data
, 0);
5980 lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx2Internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
5982 proto_item
*item
= NULL
;
5983 proto_tree
*tree
= NULL
;
5988 old_offset
= offset
;
5991 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
5992 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoInfoEx2Internal
);
5995 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_info_ex(tvb
, offset
, pinfo
, tree
, di
, drep
);
5997 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_length(tvb
, offset
, pinfo
, tree
, di
, drep
);
5999 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data(tvb
, offset
, pinfo
, tree
, di
, drep
);
6002 proto_item_set_len(item
, offset
-old_offset
);
6005 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6014 /* IDL: lsa_TrustDomainInfoInfoEx2Internal info; */
6015 /* IDL: lsa_TrustDomainInfoPosixOffset posix_offset; */
6016 /* IDL: lsa_TrustDomainInfoAuthInfo auth_info; */
6020 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo2Internal_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6022 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx2Internal(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfo2Internal_info
,0);
6028 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo2Internal_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6030 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoPosixOffset(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfo2Internal_posix_offset
,0);
6036 lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo2Internal_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6038 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustDomainInfoFullInfo2Internal_auth_info
,0);
6044 lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfo2Internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6046 proto_item
*item
= NULL
;
6047 proto_tree
*tree
= NULL
;
6052 old_offset
= offset
;
6055 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6056 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoFullInfo2Internal
);
6059 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo2Internal_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
6061 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo2Internal_posix_offset(tvb
, offset
, pinfo
, tree
, di
, drep
);
6063 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoFullInfo2Internal_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
6066 proto_item_set_len(item
, offset
-old_offset
);
6069 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6078 /* IDL: kerb_EncTypes enc_types; */
6082 lsarpc_dissect_element_lsa_TrustDomainInfoSupportedEncTypes_enc_types(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6084 offset
= lsarpc_dissect_bitmap_kerb_EncTypes(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TrustDomainInfoSupportedEncTypes_enc_types
, 0);
6090 lsarpc_dissect_struct_lsa_TrustDomainInfoSupportedEncTypes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6092 proto_item
*item
= NULL
;
6093 proto_tree
*tree
= NULL
;
6098 old_offset
= offset
;
6101 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6102 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TrustDomainInfoSupportedEncTypes
);
6105 offset
= lsarpc_dissect_element_lsa_TrustDomainInfoSupportedEncTypes_enc_types(tvb
, offset
, pinfo
, tree
, di
, drep
);
6108 proto_item_set_len(item
, offset
-old_offset
);
6111 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6119 /* IDL: [switch_type(lsa_TrustDomInfoEnum)] union { */
6120 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_NAME)] [case(LSA_TRUSTED_DOMAIN_INFO_NAME)] lsa_TrustDomainInfoName name; */
6121 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_CONTROLLERS)] [case(LSA_TRUSTED_DOMAIN_INFO_CONTROLLERS)] lsa_TrustDomainInfoControllers controllers; */
6122 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET)] [case(LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET)] lsa_TrustDomainInfoPosixOffset posix_offset; */
6123 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_PASSWORD)] [case(LSA_TRUSTED_DOMAIN_INFO_PASSWORD)] lsa_TrustDomainInfoPassword password; */
6124 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_BASIC)] [case(LSA_TRUSTED_DOMAIN_INFO_BASIC)] lsa_TrustDomainInfoBasic info_basic; */
6125 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_INFO_EX)] [case(LSA_TRUSTED_DOMAIN_INFO_INFO_EX)] lsa_TrustDomainInfoInfoEx info_ex; */
6126 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO)] [case(LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO)] lsa_TrustDomainInfoAuthInfo auth_info; */
6127 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO)] [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO)] lsa_TrustDomainInfoFullInfo full_info; */
6128 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL)] [case(LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL)] lsa_TrustDomainInfoAuthInfoInternal auth_info_internal; */
6129 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL)] [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL)] lsa_TrustDomainInfoFullInfoInternal full_info_internal; */
6130 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_INFO_EX2_INTERNAL)] [case(LSA_TRUSTED_DOMAIN_INFO_INFO_EX2_INTERNAL)] lsa_TrustDomainInfoInfoEx2Internal info_ex2_internal; */
6131 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_2_INTERNAL)] [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_2_INTERNAL)] lsa_TrustDomainInfoFullInfo2Internal full_info2_internal; */
6132 /* IDL: [case(LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES)] [case(LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES)] lsa_TrustDomainInfoSupportedEncTypes enc_types; */
6133 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL_AES)] [case(LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL_AES)] lsa_TrustDomainInfoAuthInfoInternalAES auth_info_internal_aes; */
6134 /* IDL: [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL_AES)] [case(LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL_AES)] lsa_TrustDomainInfoFullInfoInternalAES full_info_internal_aes; */
6138 lsarpc_dissect_element_lsa_TrustedDomainInfo_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6140 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoName(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_name
,0);
6146 lsarpc_dissect_element_lsa_TrustedDomainInfo_controllers(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6148 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoControllers(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_controllers
,0);
6154 lsarpc_dissect_element_lsa_TrustedDomainInfo_posix_offset(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6156 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoPosixOffset(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_posix_offset
,0);
6162 lsarpc_dissect_element_lsa_TrustedDomainInfo_password(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6164 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoPassword(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_password
,0);
6170 lsarpc_dissect_element_lsa_TrustedDomainInfo_info_basic(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6172 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoBasic(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_info_basic
,0);
6178 lsarpc_dissect_element_lsa_TrustedDomainInfo_info_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6180 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_info_ex
,0);
6186 lsarpc_dissect_element_lsa_TrustedDomainInfo_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6188 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_auth_info
,0);
6194 lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6196 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_full_info
,0);
6202 lsarpc_dissect_element_lsa_TrustedDomainInfo_auth_info_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6204 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternal(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_auth_info_internal
,0);
6210 lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6212 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfoInternal(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_full_info_internal
,0);
6218 lsarpc_dissect_element_lsa_TrustedDomainInfo_info_ex2_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6220 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx2Internal(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_info_ex2_internal
,0);
6226 lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info2_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6228 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfo2Internal(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_full_info2_internal
,0);
6234 lsarpc_dissect_element_lsa_TrustedDomainInfo_enc_types(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6236 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoSupportedEncTypes(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_enc_types
,0);
6242 lsarpc_dissect_element_lsa_TrustedDomainInfo_auth_info_internal_aes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6244 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternalAES(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_auth_info_internal_aes
,0);
6250 lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info_internal_aes(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6252 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfoInternalAES(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TrustedDomainInfo_full_info_internal_aes
,0);
6258 lsarpc_dissect_lsa_TrustedDomainInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6260 proto_item
*item
= NULL
;
6261 proto_tree
*tree
= NULL
;
6265 old_offset
= offset
;
6267 tree
= proto_tree_add_subtree(parent_tree
, tvb
, offset
, -1, ett_lsarpc_lsa_TrustedDomainInfo
, &item
, "lsa_TrustedDomainInfo");
6270 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, &level
);
6274 case LSA_TRUSTED_DOMAIN_INFO_NAME
:
6275 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
6278 case LSA_TRUSTED_DOMAIN_INFO_CONTROLLERS
:
6279 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_controllers(tvb
, offset
, pinfo
, tree
, di
, drep
);
6282 case LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET
:
6283 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_posix_offset(tvb
, offset
, pinfo
, tree
, di
, drep
);
6286 case LSA_TRUSTED_DOMAIN_INFO_PASSWORD
:
6287 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_password(tvb
, offset
, pinfo
, tree
, di
, drep
);
6290 case LSA_TRUSTED_DOMAIN_INFO_BASIC
:
6291 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_info_basic(tvb
, offset
, pinfo
, tree
, di
, drep
);
6294 case LSA_TRUSTED_DOMAIN_INFO_INFO_EX
:
6295 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_info_ex(tvb
, offset
, pinfo
, tree
, di
, drep
);
6298 case LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO
:
6299 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
6302 case LSA_TRUSTED_DOMAIN_INFO_FULL_INFO
:
6303 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
6306 case LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL
:
6307 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_auth_info_internal(tvb
, offset
, pinfo
, tree
, di
, drep
);
6310 case LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL
:
6311 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info_internal(tvb
, offset
, pinfo
, tree
, di
, drep
);
6314 case LSA_TRUSTED_DOMAIN_INFO_INFO_EX2_INTERNAL
:
6315 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_info_ex2_internal(tvb
, offset
, pinfo
, tree
, di
, drep
);
6318 case LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_2_INTERNAL
:
6319 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info2_internal(tvb
, offset
, pinfo
, tree
, di
, drep
);
6322 case LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES
:
6323 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_enc_types(tvb
, offset
, pinfo
, tree
, di
, drep
);
6326 case LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL_AES
:
6327 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_auth_info_internal_aes(tvb
, offset
, pinfo
, tree
, di
, drep
);
6330 case LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL_AES
:
6331 offset
= lsarpc_dissect_element_lsa_TrustedDomainInfo_full_info_internal_aes(tvb
, offset
, pinfo
, tree
, di
, drep
);
6334 proto_item_set_len(item
, offset
-old_offset
);
6341 /* IDL: [unique(1)] lsa_DATA_BUF *buf; */
6345 lsarpc_dissect_element_lsa_DATA_BUF_PTR_buf(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6347 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DATA_BUF_PTR_buf_
, NDR_POINTER_UNIQUE
, "Pointer to Buf (lsa_DATA_BUF)",hf_lsarpc_lsa_DATA_BUF_PTR_buf
);
6353 lsarpc_dissect_element_lsa_DATA_BUF_PTR_buf_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6355 offset
= lsarpc_dissect_struct_lsa_DATA_BUF(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DATA_BUF_PTR_buf
,0);
6361 lsarpc_dissect_struct_lsa_DATA_BUF_PTR(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6363 proto_item
*item
= NULL
;
6364 proto_tree
*tree
= NULL
;
6369 old_offset
= offset
;
6372 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6373 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DATA_BUF_PTR
);
6376 offset
= lsarpc_dissect_element_lsa_DATA_BUF_PTR_buf(tvb
, offset
, pinfo
, tree
, di
, drep
);
6379 proto_item_set_len(item
, offset
-old_offset
);
6382 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6391 /* IDL: [charset(UTF16)] [unique(1)] uint16 *name; */
6395 lsarpc_dissect_element_lsa_RightAttribute_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6397 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RightAttribute_name_
, NDR_POINTER_UNIQUE
, "Pointer to Name (uint16)",hf_lsarpc_lsa_RightAttribute_name
);
6403 lsarpc_dissect_element_lsa_RightAttribute_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6407 offset
= dissect_ndr_cvstring(tvb
, offset
, pinfo
, tree
, di
, drep
, sizeof(uint16_t), hf_lsarpc_lsa_RightAttribute_name
, false, &data
);
6408 proto_item_append_text(tree
, ": %s", data
);
6414 lsarpc_dissect_struct_lsa_RightAttribute(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6416 proto_item
*item
= NULL
;
6417 proto_tree
*tree
= NULL
;
6422 old_offset
= offset
;
6425 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6426 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_RightAttribute
);
6429 offset
= lsarpc_dissect_element_lsa_RightAttribute_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
6432 proto_item_set_len(item
, offset
-old_offset
);
6435 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6444 /* IDL: [range(0,256)] uint32 count; */
6445 /* IDL: [size_is(count)] [unique(1)] lsa_StringLarge *names; */
6449 lsarpc_dissect_element_lsa_RightSet_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6451 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_RightSet_count
, 0);
6457 lsarpc_dissect_element_lsa_RightSet_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6459 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RightSet_names_
, NDR_POINTER_UNIQUE
, "Pointer to Names (lsa_StringLarge)",hf_lsarpc_lsa_RightSet_names
);
6465 lsarpc_dissect_element_lsa_RightSet_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6467 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RightSet_names__
);
6473 lsarpc_dissect_element_lsa_RightSet_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6475 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_RightSet_names
,0);
6481 lsarpc_dissect_struct_lsa_RightSet(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6483 proto_item
*item
= NULL
;
6484 proto_tree
*tree
= NULL
;
6489 old_offset
= offset
;
6492 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6493 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_RightSet
);
6496 offset
= lsarpc_dissect_element_lsa_RightSet_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
6498 offset
= lsarpc_dissect_element_lsa_RightSet_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
6501 proto_item_set_len(item
, offset
-old_offset
);
6504 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6513 /* IDL: uint32 count; */
6514 /* IDL: [size_is(count)] [unique(1)] lsa_TrustDomainInfoInfoEx *domains; */
6518 lsarpc_dissect_element_lsa_DomainListEx_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6520 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DomainListEx_count
, 0);
6526 lsarpc_dissect_element_lsa_DomainListEx_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6528 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DomainListEx_domains_
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_TrustDomainInfoInfoEx)",hf_lsarpc_lsa_DomainListEx_domains
);
6534 lsarpc_dissect_element_lsa_DomainListEx_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6536 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DomainListEx_domains__
);
6542 lsarpc_dissect_element_lsa_DomainListEx_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6544 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DomainListEx_domains
,0);
6550 lsarpc_dissect_struct_lsa_DomainListEx(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6552 proto_item
*item
= NULL
;
6553 proto_tree
*tree
= NULL
;
6558 old_offset
= offset
;
6561 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6562 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DomainListEx
);
6565 offset
= lsarpc_dissect_element_lsa_DomainListEx_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
6567 offset
= lsarpc_dissect_element_lsa_DomainListEx_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
6570 proto_item_set_len(item
, offset
-old_offset
);
6573 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6582 /* IDL: uint32 quality_of_service; */
6586 lsarpc_dissect_element_lsa_DomainInfoQoS_quality_of_service(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6588 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DomainInfoQoS_quality_of_service
, 0);
6594 lsarpc_dissect_struct_lsa_DomainInfoQoS(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6596 proto_item
*item
= NULL
;
6597 proto_tree
*tree
= NULL
;
6602 old_offset
= offset
;
6605 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6606 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DomainInfoQoS
);
6609 offset
= lsarpc_dissect_element_lsa_DomainInfoQoS_quality_of_service(tvb
, offset
, pinfo
, tree
, di
, drep
);
6612 proto_item_set_len(item
, offset
-old_offset
);
6615 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6624 /* IDL: LSA_POLICY_KERBEROS_VALIDATE_CLIENT = 0x00000080 , */
6628 lsarpc_dissect_bitmap_lsa_krbAuthenticationOptions(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6631 static int * const lsarpc_lsa_krbAuthenticationOptions_fields
[] = {
6632 &hf_lsarpc_lsa_krbAuthenticationOptions_LSA_POLICY_KERBEROS_VALIDATE_CLIENT
,
6638 item
= proto_tree_add_bitmask_with_flags(parent_tree
, tvb
, offset
, hf_index
,
6639 ett_lsarpc_lsa_krbAuthenticationOptions
, lsarpc_lsa_krbAuthenticationOptions_fields
, DREP_ENC_INTEGER(drep
), BMT_NO_FALSE
);
6641 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, parent_tree
, di
, drep
, -1, &flags
);
6644 proto_item_append_text(item
, ": (No values set)");
6646 if (flags
& (~0x00000080)) {
6647 flags
&= (~0x00000080);
6648 proto_item_append_text(item
, "Unknown bitmap value 0x%x", flags
);
6656 /* IDL: lsa_krbAuthenticationOptions authentication_options; */
6657 /* IDL: hyper service_tkt_lifetime; */
6658 /* IDL: hyper user_tkt_lifetime; */
6659 /* IDL: hyper user_tkt_renewaltime; */
6660 /* IDL: hyper clock_skew; */
6661 /* IDL: hyper reserved; */
6665 lsarpc_dissect_element_lsa_DomainInfoKerberos_authentication_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6667 offset
= lsarpc_dissect_bitmap_lsa_krbAuthenticationOptions(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DomainInfoKerberos_authentication_options
, 0);
6673 lsarpc_dissect_element_lsa_DomainInfoKerberos_service_tkt_lifetime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6675 offset
=cnf_dissect_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, 0, hf_lsarpc_lsa_DomainInfoKerberos_service_tkt_lifetime
);
6681 lsarpc_dissect_element_lsa_DomainInfoKerberos_user_tkt_lifetime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6683 offset
=cnf_dissect_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, 0, hf_lsarpc_lsa_DomainInfoKerberos_user_tkt_lifetime
);
6689 lsarpc_dissect_element_lsa_DomainInfoKerberos_user_tkt_renewaltime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6691 offset
=cnf_dissect_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, 0, hf_lsarpc_lsa_DomainInfoKerberos_user_tkt_renewaltime
);
6697 lsarpc_dissect_element_lsa_DomainInfoKerberos_clock_skew(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6699 offset
=cnf_dissect_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, 0, hf_lsarpc_lsa_DomainInfoKerberos_clock_skew
);
6705 lsarpc_dissect_element_lsa_DomainInfoKerberos_reserved(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6707 offset
=cnf_dissect_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, 0, hf_lsarpc_lsa_DomainInfoKerberos_reserved
);
6713 lsarpc_dissect_struct_lsa_DomainInfoKerberos(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6715 proto_item
*item
= NULL
;
6716 proto_tree
*tree
= NULL
;
6721 old_offset
= offset
;
6724 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6725 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DomainInfoKerberos
);
6728 offset
= lsarpc_dissect_element_lsa_DomainInfoKerberos_authentication_options(tvb
, offset
, pinfo
, tree
, di
, drep
);
6730 offset
= lsarpc_dissect_element_lsa_DomainInfoKerberos_service_tkt_lifetime(tvb
, offset
, pinfo
, tree
, di
, drep
);
6732 offset
= lsarpc_dissect_element_lsa_DomainInfoKerberos_user_tkt_lifetime(tvb
, offset
, pinfo
, tree
, di
, drep
);
6734 offset
= lsarpc_dissect_element_lsa_DomainInfoKerberos_user_tkt_renewaltime(tvb
, offset
, pinfo
, tree
, di
, drep
);
6736 offset
= lsarpc_dissect_element_lsa_DomainInfoKerberos_clock_skew(tvb
, offset
, pinfo
, tree
, di
, drep
);
6738 offset
= lsarpc_dissect_element_lsa_DomainInfoKerberos_reserved(tvb
, offset
, pinfo
, tree
, di
, drep
);
6741 proto_item_set_len(item
, offset
-old_offset
);
6744 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6753 /* IDL: uint32 blob_size; */
6754 /* IDL: [size_is(blob_size)] [unique(1)] uint8 *efs_blob; */
6758 lsarpc_dissect_element_lsa_DomainInfoEfs_blob_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6760 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DomainInfoEfs_blob_size
, 0);
6766 lsarpc_dissect_element_lsa_DomainInfoEfs_efs_blob(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6768 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DomainInfoEfs_efs_blob_
, NDR_POINTER_UNIQUE
, "Pointer to Efs Blob (uint8)",hf_lsarpc_lsa_DomainInfoEfs_efs_blob
);
6774 lsarpc_dissect_struct_lsa_DomainInfoEfs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6776 proto_item
*item
= NULL
;
6777 proto_tree
*tree
= NULL
;
6782 old_offset
= offset
;
6785 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6786 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_DomainInfoEfs
);
6789 offset
= lsarpc_dissect_element_lsa_DomainInfoEfs_blob_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
6791 offset
= lsarpc_dissect_element_lsa_DomainInfoEfs_efs_blob(tvb
, offset
, pinfo
, tree
, di
, drep
);
6794 proto_item_set_len(item
, offset
-old_offset
);
6797 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6806 /* IDL: LSA_DOMAIN_INFO_POLICY_QOS=1, */
6807 /* IDL: LSA_DOMAIN_INFO_POLICY_EFS=2, */
6808 /* IDL: LSA_DOMAIN_INFO_POLICY_KERBEROS=3, */
6812 lsarpc_dissect_enum_lsa_DomainInfoEnum(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
6814 uint32_t parameter
=0;
6818 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
6826 /* IDL: [switch_type(lsa_DomainInfoEnum)] union { */
6827 /* IDL: [case(LSA_DOMAIN_INFO_POLICY_QOS)] [case(LSA_DOMAIN_INFO_POLICY_QOS)] lsa_DomainInfoQoS qos_info; */
6828 /* IDL: [case(LSA_DOMAIN_INFO_POLICY_EFS)] [case(LSA_DOMAIN_INFO_POLICY_EFS)] lsa_DomainInfoEfs efs_info; */
6829 /* IDL: [case(LSA_DOMAIN_INFO_POLICY_KERBEROS)] [case(LSA_DOMAIN_INFO_POLICY_KERBEROS)] lsa_DomainInfoKerberos kerberos_info; */
6833 lsarpc_dissect_element_lsa_DomainInformationPolicy_qos_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6835 offset
= lsarpc_dissect_struct_lsa_DomainInfoQoS(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DomainInformationPolicy_qos_info
,0);
6841 lsarpc_dissect_element_lsa_DomainInformationPolicy_efs_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6843 offset
= lsarpc_dissect_struct_lsa_DomainInfoEfs(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DomainInformationPolicy_efs_info
,0);
6849 lsarpc_dissect_element_lsa_DomainInformationPolicy_kerberos_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6851 offset
= lsarpc_dissect_struct_lsa_DomainInfoKerberos(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DomainInformationPolicy_kerberos_info
,0);
6857 lsarpc_dissect_lsa_DomainInformationPolicy(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6859 proto_item
*item
= NULL
;
6860 proto_tree
*tree
= NULL
;
6864 old_offset
= offset
;
6866 tree
= proto_tree_add_subtree(parent_tree
, tvb
, offset
, -1, ett_lsarpc_lsa_DomainInformationPolicy
, &item
, "lsa_DomainInformationPolicy");
6869 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, &level
);
6873 case LSA_DOMAIN_INFO_POLICY_QOS
:
6874 offset
= lsarpc_dissect_element_lsa_DomainInformationPolicy_qos_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
6877 case LSA_DOMAIN_INFO_POLICY_EFS
:
6878 offset
= lsarpc_dissect_element_lsa_DomainInformationPolicy_efs_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
6881 case LSA_DOMAIN_INFO_POLICY_KERBEROS
:
6882 offset
= lsarpc_dissect_element_lsa_DomainInformationPolicy_kerberos_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
6885 proto_item_set_len(item
, offset
-old_offset
);
6892 /* IDL: lsa_SidType sid_type; */
6893 /* IDL: lsa_String name; */
6894 /* IDL: uint32 sid_index; */
6895 /* IDL: uint32 unknown; */
6899 lsarpc_dissect_element_lsa_TranslatedName2_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6901 offset
= lsarpc_dissect_enum_lsa_SidType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedName2_sid_type
, 0);
6907 lsarpc_dissect_element_lsa_TranslatedName2_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6909 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TranslatedName2_name
,0);
6915 lsarpc_dissect_element_lsa_TranslatedName2_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6917 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedName2_sid_index
, 0);
6923 lsarpc_dissect_element_lsa_TranslatedName2_unknown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6925 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedName2_unknown
, 0);
6931 lsarpc_dissect_struct_lsa_TranslatedName2(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
6933 proto_item
*item
= NULL
;
6934 proto_tree
*tree
= NULL
;
6939 old_offset
= offset
;
6942 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
6943 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TranslatedName2
);
6946 offset
= lsarpc_dissect_element_lsa_TranslatedName2_sid_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
6948 offset
= lsarpc_dissect_element_lsa_TranslatedName2_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
6950 offset
= lsarpc_dissect_element_lsa_TranslatedName2_sid_index(tvb
, offset
, pinfo
, tree
, di
, drep
);
6952 offset
= lsarpc_dissect_element_lsa_TranslatedName2_unknown(tvb
, offset
, pinfo
, tree
, di
, drep
);
6955 proto_item_set_len(item
, offset
-old_offset
);
6958 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
6967 /* IDL: [range(0,1000)] uint32 count; */
6968 /* IDL: [size_is(count)] [unique(1)] lsa_TranslatedName2 *names; */
6972 lsarpc_dissect_element_lsa_TransNameArray2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6974 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TransNameArray2_count
, 0);
6980 lsarpc_dissect_element_lsa_TransNameArray2_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6982 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TransNameArray2_names_
, NDR_POINTER_UNIQUE
, "Pointer to Names (lsa_TranslatedName2)",hf_lsarpc_lsa_TransNameArray2_names
);
6988 lsarpc_dissect_element_lsa_TransNameArray2_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6990 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TransNameArray2_names__
);
6996 lsarpc_dissect_element_lsa_TransNameArray2_names__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
6998 offset
= lsarpc_dissect_struct_lsa_TranslatedName2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TransNameArray2_names
,0);
7004 lsarpc_dissect_struct_lsa_TransNameArray2(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7006 proto_item
*item
= NULL
;
7007 proto_tree
*tree
= NULL
;
7012 old_offset
= offset
;
7015 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7016 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TransNameArray2
);
7019 offset
= lsarpc_dissect_element_lsa_TransNameArray2_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
7021 offset
= lsarpc_dissect_element_lsa_TransNameArray2_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
7024 proto_item_set_len(item
, offset
-old_offset
);
7027 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7036 /* IDL: LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES=0x00000000, */
7037 /* IDL: LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES_LOCAL=0x80000000, */
7041 lsarpc_dissect_enum_lsa_LookupOptions(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
7043 uint32_t parameter
=0;
7047 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
7056 /* IDL: LSA_CLIENT_REVISION_1=0x00000001, */
7057 /* IDL: LSA_CLIENT_REVISION_2=0x00000002, */
7061 lsarpc_dissect_enum_lsa_ClientRevision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
7063 uint32_t parameter
=0;
7067 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
7076 /* IDL: lsa_SidType sid_type; */
7077 /* IDL: uint32 rid; */
7078 /* IDL: uint32 sid_index; */
7079 /* IDL: uint32 unknown; */
7083 lsarpc_dissect_element_lsa_TranslatedSid2_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7085 offset
= lsarpc_dissect_enum_lsa_SidType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid2_sid_type
, 0);
7091 lsarpc_dissect_element_lsa_TranslatedSid2_rid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7093 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid2_rid
, 0);
7099 lsarpc_dissect_element_lsa_TranslatedSid2_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7101 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid2_sid_index
, 0);
7107 lsarpc_dissect_element_lsa_TranslatedSid2_unknown(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7109 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid2_unknown
, 0);
7115 lsarpc_dissect_struct_lsa_TranslatedSid2(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7117 proto_item
*item
= NULL
;
7118 proto_tree
*tree
= NULL
;
7123 old_offset
= offset
;
7126 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7127 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TranslatedSid2
);
7130 offset
= lsarpc_dissect_element_lsa_TranslatedSid2_sid_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
7132 offset
= lsarpc_dissect_element_lsa_TranslatedSid2_rid(tvb
, offset
, pinfo
, tree
, di
, drep
);
7134 offset
= lsarpc_dissect_element_lsa_TranslatedSid2_sid_index(tvb
, offset
, pinfo
, tree
, di
, drep
);
7136 offset
= lsarpc_dissect_element_lsa_TranslatedSid2_unknown(tvb
, offset
, pinfo
, tree
, di
, drep
);
7139 proto_item_set_len(item
, offset
-old_offset
);
7142 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7151 /* IDL: [range(0,1000)] uint32 count; */
7152 /* IDL: [size_is(count)] [unique(1)] lsa_TranslatedSid2 *sids; */
7156 lsarpc_dissect_element_lsa_TransSidArray2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7158 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TransSidArray2_count
, 0);
7164 lsarpc_dissect_element_lsa_TransSidArray2_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7166 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TransSidArray2_sids_
, NDR_POINTER_UNIQUE
, "Pointer to Sids (lsa_TranslatedSid2)",hf_lsarpc_lsa_TransSidArray2_sids
);
7172 lsarpc_dissect_element_lsa_TransSidArray2_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7174 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TransSidArray2_sids__
);
7180 lsarpc_dissect_element_lsa_TransSidArray2_sids__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7182 offset
= lsarpc_dissect_struct_lsa_TranslatedSid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TransSidArray2_sids
,0);
7188 lsarpc_dissect_struct_lsa_TransSidArray2(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7190 proto_item
*item
= NULL
;
7191 proto_tree
*tree
= NULL
;
7196 old_offset
= offset
;
7199 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7200 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TransSidArray2
);
7203 offset
= lsarpc_dissect_element_lsa_TransSidArray2_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
7205 offset
= lsarpc_dissect_element_lsa_TransSidArray2_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
7208 proto_item_set_len(item
, offset
-old_offset
);
7211 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7220 /* IDL: lsa_SidType sid_type; */
7221 /* IDL: [unique(1)] dom_sid2 *sid; */
7222 /* IDL: uint32 sid_index; */
7223 /* IDL: uint32 flags; */
7227 lsarpc_dissect_element_lsa_TranslatedSid3_sid_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7229 offset
= lsarpc_dissect_enum_lsa_SidType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid3_sid_type
, 0);
7235 lsarpc_dissect_element_lsa_TranslatedSid3_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7237 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TranslatedSid3_sid_
, NDR_POINTER_UNIQUE
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_TranslatedSid3_sid
);
7243 lsarpc_dissect_element_lsa_TranslatedSid3_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7245 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TranslatedSid3_sid
,0);
7251 lsarpc_dissect_element_lsa_TranslatedSid3_sid_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7253 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid3_sid_index
, 0);
7259 lsarpc_dissect_element_lsa_TranslatedSid3_flags(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7261 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TranslatedSid3_flags
, 0);
7267 lsarpc_dissect_struct_lsa_TranslatedSid3(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7269 proto_item
*item
= NULL
;
7270 proto_tree
*tree
= NULL
;
7275 old_offset
= offset
;
7278 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7279 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TranslatedSid3
);
7282 offset
= lsarpc_dissect_element_lsa_TranslatedSid3_sid_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
7284 offset
= lsarpc_dissect_element_lsa_TranslatedSid3_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
7286 offset
= lsarpc_dissect_element_lsa_TranslatedSid3_sid_index(tvb
, offset
, pinfo
, tree
, di
, drep
);
7288 offset
= lsarpc_dissect_element_lsa_TranslatedSid3_flags(tvb
, offset
, pinfo
, tree
, di
, drep
);
7291 proto_item_set_len(item
, offset
-old_offset
);
7294 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7303 /* IDL: [range(0,1000)] uint32 count; */
7304 /* IDL: [size_is(count)] [unique(1)] lsa_TranslatedSid3 *sids; */
7308 lsarpc_dissect_element_lsa_TransSidArray3_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7310 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_TransSidArray3_count
, 0);
7316 lsarpc_dissect_element_lsa_TransSidArray3_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7318 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TransSidArray3_sids_
, NDR_POINTER_UNIQUE
, "Pointer to Sids (lsa_TranslatedSid3)",hf_lsarpc_lsa_TransSidArray3_sids
);
7324 lsarpc_dissect_element_lsa_TransSidArray3_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7326 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_TransSidArray3_sids__
);
7332 lsarpc_dissect_element_lsa_TransSidArray3_sids__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7334 offset
= lsarpc_dissect_struct_lsa_TranslatedSid3(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_TransSidArray3_sids
,0);
7340 lsarpc_dissect_struct_lsa_TransSidArray3(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7342 proto_item
*item
= NULL
;
7343 proto_tree
*tree
= NULL
;
7348 old_offset
= offset
;
7351 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7352 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_TransSidArray3
);
7355 offset
= lsarpc_dissect_element_lsa_TransSidArray3_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
7357 offset
= lsarpc_dissect_element_lsa_TransSidArray3_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
7360 proto_item_set_len(item
, offset
-old_offset
);
7363 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7372 /* IDL: LSA_TLN_DISABLED_NEW = 0x00000001 , */
7373 /* IDL: LSA_TLN_DISABLED_ADMIN = 0x00000002 , */
7374 /* IDL: LSA_TLN_DISABLED_CONFLICT = 0x00000004 , */
7375 /* IDL: LSA_SID_DISABLED_ADMIN = 0x00000001 , */
7376 /* IDL: LSA_SID_DISABLED_CONFLICT = 0x00000002 , */
7377 /* IDL: LSA_NB_DISABLED_ADMIN = 0x00000004 , */
7378 /* IDL: LSA_NB_DISABLED_CONFLICT = 0x00000008 , */
7382 lsarpc_dissect_bitmap_lsa_ForestTrustRecordFlags(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7385 static int * const lsarpc_lsa_ForestTrustRecordFlags_fields
[] = {
7386 &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_NEW
,
7387 &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_ADMIN
,
7388 &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_CONFLICT
,
7389 &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_ADMIN
,
7390 &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_CONFLICT
,
7391 &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_ADMIN
,
7392 &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_CONFLICT
,
7398 item
= proto_tree_add_bitmask_with_flags(parent_tree
, tvb
, offset
, hf_index
,
7399 ett_lsarpc_lsa_ForestTrustRecordFlags
, lsarpc_lsa_ForestTrustRecordFlags_fields
, DREP_ENC_INTEGER(drep
), BMT_NO_FALSE
);
7401 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, parent_tree
, di
, drep
, -1, &flags
);
7404 proto_item_append_text(item
, ": (No values set)");
7406 if (flags
& (~0x00000016)) {
7407 flags
&= (~0x00000016);
7408 proto_item_append_text(item
, "Unknown bitmap value 0x%x", flags
);
7416 /* IDL: LSA_FOREST_TRUST_TOP_LEVEL_NAME=0, */
7417 /* IDL: LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX=1, */
7418 /* IDL: LSA_FOREST_TRUST_DOMAIN_INFO=2, */
7419 /* IDL: LSA_FOREST_TRUST_BINARY_DATA=3, */
7420 /* IDL: LSA_FOREST_TRUST_SCANNER_INFO=4, */
7424 lsarpc_dissect_enum_lsa_ForestTrustRecordType(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
7426 uint32_t parameter
=0;
7430 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
7439 /* IDL: [range(0,131072)] uint3264 length; */
7440 /* IDL: [size_is(length)] [unique(1)] uint8 *data; */
7444 lsarpc_dissect_element_lsa_ForestTrustBinaryData_length(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7446 offset
= dissect_ndr_uint3264(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustBinaryData_length
, NULL
);
7452 lsarpc_dissect_element_lsa_ForestTrustBinaryData_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7454 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustBinaryData_data_
, NDR_POINTER_UNIQUE
, "Pointer to Data (uint8)",hf_lsarpc_lsa_ForestTrustBinaryData_data
);
7460 lsarpc_dissect_element_lsa_ForestTrustBinaryData_data_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7462 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustBinaryData_data__
);
7468 lsarpc_dissect_element_lsa_ForestTrustBinaryData_data__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7470 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustBinaryData_data
, 0);
7476 lsarpc_dissect_struct_lsa_ForestTrustBinaryData(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7478 proto_item
*item
= NULL
;
7479 proto_tree
*tree
= NULL
;
7484 old_offset
= offset
;
7487 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7488 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ForestTrustBinaryData
);
7491 offset
= lsarpc_dissect_element_lsa_ForestTrustBinaryData_length(tvb
, offset
, pinfo
, tree
, di
, drep
);
7493 offset
= lsarpc_dissect_element_lsa_ForestTrustBinaryData_data(tvb
, offset
, pinfo
, tree
, di
, drep
);
7496 proto_item_set_len(item
, offset
-old_offset
);
7499 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7508 /* IDL: [unique(1)] dom_sid2 *domain_sid; */
7509 /* IDL: lsa_StringLarge dns_domain_name; */
7510 /* IDL: lsa_StringLarge netbios_domain_name; */
7514 lsarpc_dissect_element_lsa_ForestTrustDomainInfo_domain_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7516 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustDomainInfo_domain_sid_
, NDR_POINTER_UNIQUE
, "Pointer to Domain Sid (dom_sid2)",hf_lsarpc_lsa_ForestTrustDomainInfo_domain_sid
);
7522 lsarpc_dissect_element_lsa_ForestTrustDomainInfo_domain_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7524 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustDomainInfo_domain_sid
,0);
7530 lsarpc_dissect_element_lsa_ForestTrustDomainInfo_dns_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7532 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustDomainInfo_dns_domain_name
,0);
7538 lsarpc_dissect_element_lsa_ForestTrustDomainInfo_netbios_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7540 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustDomainInfo_netbios_domain_name
,0);
7546 lsarpc_dissect_struct_lsa_ForestTrustDomainInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7548 proto_item
*item
= NULL
;
7549 proto_tree
*tree
= NULL
;
7554 old_offset
= offset
;
7557 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7558 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ForestTrustDomainInfo
);
7561 offset
= lsarpc_dissect_element_lsa_ForestTrustDomainInfo_domain_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
7563 offset
= lsarpc_dissect_element_lsa_ForestTrustDomainInfo_dns_domain_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
7565 offset
= lsarpc_dissect_element_lsa_ForestTrustDomainInfo_netbios_domain_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
7568 proto_item_set_len(item
, offset
-old_offset
);
7571 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7579 /* IDL: [switch_type(lsa_ForestTrustRecordType)] union { */
7580 /* IDL: [case(LSA_FOREST_TRUST_TOP_LEVEL_NAME)] [case(LSA_FOREST_TRUST_TOP_LEVEL_NAME)] lsa_StringLarge top_level_name; */
7581 /* IDL: [case(LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX)] [case(LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX)] lsa_StringLarge top_level_name_ex; */
7582 /* IDL: [case(LSA_FOREST_TRUST_DOMAIN_INFO)] [case(LSA_FOREST_TRUST_DOMAIN_INFO)] lsa_ForestTrustDomainInfo domain_info; */
7583 /* IDL: [default] ; */
7587 lsarpc_dissect_element_lsa_ForestTrustData_top_level_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7589 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustData_top_level_name
,0);
7595 lsarpc_dissect_element_lsa_ForestTrustData_top_level_name_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7597 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustData_top_level_name_ex
,0);
7603 lsarpc_dissect_element_lsa_ForestTrustData_domain_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7605 offset
= lsarpc_dissect_struct_lsa_ForestTrustDomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustData_domain_info
,0);
7611 lsarpc_dissect_element_lsa_ForestTrustData_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7613 offset
= lsarpc_dissect_struct_lsa_ForestTrustBinaryData(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustData_data
,0);
7619 lsarpc_dissect_lsa_ForestTrustData(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7621 proto_item
*item
= NULL
;
7622 proto_tree
*tree
= NULL
;
7626 old_offset
= offset
;
7628 tree
= proto_tree_add_subtree(parent_tree
, tvb
, offset
, -1, ett_lsarpc_lsa_ForestTrustData
, &item
, "lsa_ForestTrustData");
7631 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, &level
);
7635 case LSA_FOREST_TRUST_TOP_LEVEL_NAME
:
7636 offset
= lsarpc_dissect_element_lsa_ForestTrustData_top_level_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
7639 case LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX
:
7640 offset
= lsarpc_dissect_element_lsa_ForestTrustData_top_level_name_ex(tvb
, offset
, pinfo
, tree
, di
, drep
);
7643 case LSA_FOREST_TRUST_DOMAIN_INFO
:
7644 offset
= lsarpc_dissect_element_lsa_ForestTrustData_domain_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
7648 offset
= lsarpc_dissect_element_lsa_ForestTrustData_data(tvb
, offset
, pinfo
, tree
, di
, drep
);
7651 proto_item_set_len(item
, offset
-old_offset
);
7658 /* IDL: lsa_ForestTrustRecordFlags flags; */
7659 /* IDL: lsa_ForestTrustRecordType type; */
7660 /* IDL: NTTIME_hyper time; */
7661 /* IDL: [switch_is(type)] lsa_ForestTrustData forest_trust_data; */
7665 lsarpc_dissect_element_lsa_ForestTrustRecord_flags(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7667 offset
= lsarpc_dissect_bitmap_lsa_ForestTrustRecordFlags(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustRecord_flags
, 0);
7673 lsarpc_dissect_element_lsa_ForestTrustRecord_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, uint32_t *type
)
7675 offset
= lsarpc_dissect_enum_lsa_ForestTrustRecordType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustRecord_type
, type
);
7681 lsarpc_dissect_element_lsa_ForestTrustRecord_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7683 offset
= dissect_ndr_nt_NTTIME_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustRecord_time
);
7689 lsarpc_dissect_element_lsa_ForestTrustRecord_forest_trust_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, uint32_t *type
)
7691 offset
= lsarpc_dissect_lsa_ForestTrustData(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustRecord_forest_trust_data
, *type
);
7697 lsarpc_dissect_struct_lsa_ForestTrustRecord(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7700 proto_item
*item
= NULL
;
7701 proto_tree
*tree
= NULL
;
7706 old_offset
= offset
;
7709 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7710 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ForestTrustRecord
);
7713 offset
= lsarpc_dissect_element_lsa_ForestTrustRecord_flags(tvb
, offset
, pinfo
, tree
, di
, drep
);
7715 offset
= lsarpc_dissect_element_lsa_ForestTrustRecord_type(tvb
, offset
, pinfo
, tree
, di
, drep
, &type
);
7717 offset
= lsarpc_dissect_element_lsa_ForestTrustRecord_time(tvb
, offset
, pinfo
, tree
, di
, drep
);
7719 offset
= lsarpc_dissect_element_lsa_ForestTrustRecord_forest_trust_data(tvb
, offset
, pinfo
, tree
, di
, drep
, &type
);
7722 proto_item_set_len(item
, offset
-old_offset
);
7725 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7734 /* IDL: [range(0,4000)] uint32 count; */
7735 /* IDL: [size_is(count)] [unique(1)] lsa_ForestTrustRecord **entries; */
7739 lsarpc_dissect_element_lsa_ForestTrustInformation_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7741 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustInformation_count
, 0);
7747 lsarpc_dissect_element_lsa_ForestTrustInformation_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7749 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustInformation_entries_
, NDR_POINTER_UNIQUE
, "Pointer to Entries (lsa_ForestTrustRecord)",hf_lsarpc_lsa_ForestTrustInformation_entries
);
7755 lsarpc_dissect_element_lsa_ForestTrustInformation_entries_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7757 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustInformation_entries__
);
7763 lsarpc_dissect_element_lsa_ForestTrustInformation_entries__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7765 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustInformation_entries___
, NDR_POINTER_UNIQUE
, "Pointer to Entries (lsa_ForestTrustRecord)",hf_lsarpc_lsa_ForestTrustInformation_entries
);
7771 lsarpc_dissect_element_lsa_ForestTrustInformation_entries___(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7773 offset
= lsarpc_dissect_struct_lsa_ForestTrustRecord(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustInformation_entries
,0);
7779 lsarpc_dissect_struct_lsa_ForestTrustInformation(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7781 proto_item
*item
= NULL
;
7782 proto_tree
*tree
= NULL
;
7787 old_offset
= offset
;
7790 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7791 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ForestTrustInformation
);
7794 offset
= lsarpc_dissect_element_lsa_ForestTrustInformation_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
7796 offset
= lsarpc_dissect_element_lsa_ForestTrustInformation_entries(tvb
, offset
, pinfo
, tree
, di
, drep
);
7799 proto_item_set_len(item
, offset
-old_offset
);
7802 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7811 /* IDL: LSA_FOREST_TRUST_COLLISION_TDO=0, */
7812 /* IDL: LSA_FOREST_TRUST_COLLISION_XREF=1, */
7813 /* IDL: LSA_FOREST_TRUST_COLLISION_OTHER=2, */
7817 lsarpc_dissect_enum_lsa_ForestTrustCollisionRecordType(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t *param _U_
)
7819 uint32_t parameter
=0;
7823 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, ¶meter
);
7832 /* IDL: uint32 index; */
7833 /* IDL: lsa_ForestTrustCollisionRecordType type; */
7834 /* IDL: lsa_ForestTrustRecordFlags flags; */
7835 /* IDL: lsa_String name; */
7839 lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_index(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7841 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustCollisionRecord_index
, 0);
7847 lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7849 offset
= lsarpc_dissect_enum_lsa_ForestTrustCollisionRecordType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustCollisionRecord_type
, 0);
7855 lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_flags(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7857 offset
= lsarpc_dissect_bitmap_lsa_ForestTrustRecordFlags(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustCollisionRecord_flags
, 0);
7863 lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7865 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustCollisionRecord_name
,0);
7871 lsarpc_dissect_struct_lsa_ForestTrustCollisionRecord(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7873 proto_item
*item
= NULL
;
7874 proto_tree
*tree
= NULL
;
7879 old_offset
= offset
;
7882 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7883 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ForestTrustCollisionRecord
);
7886 offset
= lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_index(tvb
, offset
, pinfo
, tree
, di
, drep
);
7888 offset
= lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
7890 offset
= lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_flags(tvb
, offset
, pinfo
, tree
, di
, drep
);
7892 offset
= lsarpc_dissect_element_lsa_ForestTrustCollisionRecord_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
7895 proto_item_set_len(item
, offset
-old_offset
);
7898 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7907 /* IDL: uint32 count; */
7908 /* IDL: [size_is(count)] [unique(1)] lsa_ForestTrustCollisionRecord **entries; */
7912 lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7914 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustCollisionInfo_count
, 0);
7920 lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7922 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries_
, NDR_POINTER_UNIQUE
, "Pointer to Entries (lsa_ForestTrustCollisionRecord)",hf_lsarpc_lsa_ForestTrustCollisionInfo_entries
);
7928 lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7930 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries__
);
7936 lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7938 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries___
, NDR_POINTER_UNIQUE
, "Pointer to Entries (lsa_ForestTrustCollisionRecord)",hf_lsarpc_lsa_ForestTrustCollisionInfo_entries
);
7944 lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries___(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
7946 offset
= lsarpc_dissect_struct_lsa_ForestTrustCollisionRecord(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustCollisionInfo_entries
,0);
7952 lsarpc_dissect_struct_lsa_ForestTrustCollisionInfo(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7954 proto_item
*item
= NULL
;
7955 proto_tree
*tree
= NULL
;
7960 old_offset
= offset
;
7963 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
7964 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ForestTrustCollisionInfo
);
7967 offset
= lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
7969 offset
= lsarpc_dissect_element_lsa_ForestTrustCollisionInfo_entries(tvb
, offset
, pinfo
, tree
, di
, drep
);
7972 proto_item_set_len(item
, offset
-old_offset
);
7975 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
7984 /* IDL: LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER = 0x00000001 , */
7988 lsarpc_dissect_bitmap_lsa_RevisionSupportedFeature(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
7991 static int * const lsarpc_lsa_RevisionSupportedFeature_fields
[] = {
7992 &hf_lsarpc_lsa_RevisionSupportedFeature_LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER
,
7998 item
= proto_tree_add_bitmask_with_flags(parent_tree
, tvb
, offset
, hf_index
,
7999 ett_lsarpc_lsa_RevisionSupportedFeature
, lsarpc_lsa_RevisionSupportedFeature_fields
, DREP_ENC_INTEGER(drep
), BMT_NO_FALSE
);
8001 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, parent_tree
, di
, drep
, -1, &flags
);
8004 proto_item_append_text(item
, ": (No values set)");
8006 if (flags
& (~0x00000001)) {
8007 flags
&= (~0x00000001);
8008 proto_item_append_text(item
, "Unknown bitmap value 0x%x", flags
);
8016 /* IDL: uint32 revision; */
8017 /* IDL: lsa_RevisionSupportedFeature supported_features; */
8021 lsarpc_dissect_element_lsa_revision_info1_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8023 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_revision_info1_revision
, 0);
8029 lsarpc_dissect_element_lsa_revision_info1_supported_features(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8031 offset
= lsarpc_dissect_bitmap_lsa_RevisionSupportedFeature(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_revision_info1_supported_features
, 0);
8037 lsarpc_dissect_struct_lsa_revision_info1(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
8039 proto_item
*item
= NULL
;
8040 proto_tree
*tree
= NULL
;
8045 old_offset
= offset
;
8048 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
8049 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_revision_info1
);
8052 offset
= lsarpc_dissect_element_lsa_revision_info1_revision(tvb
, offset
, pinfo
, tree
, di
, drep
);
8054 offset
= lsarpc_dissect_element_lsa_revision_info1_supported_features(tvb
, offset
, pinfo
, tree
, di
, drep
);
8057 proto_item_set_len(item
, offset
-old_offset
);
8060 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
8068 /* IDL: [switch_type(uint32)] union { */
8069 /* IDL: [case(1)] [case(1)] lsa_revision_info1 info1; */
8073 lsarpc_dissect_element_lsa_revision_info_info1(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8075 offset
= lsarpc_dissect_struct_lsa_revision_info1(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_revision_info_info1
,0);
8081 lsarpc_dissect_lsa_revision_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
8083 proto_item
*item
= NULL
;
8084 proto_tree
*tree
= NULL
;
8088 old_offset
= offset
;
8090 tree
= proto_tree_add_subtree(parent_tree
, tvb
, offset
, -1, ett_lsarpc_lsa_revision_info
, &item
, "lsa_revision_info");
8093 offset
= dissect_ndr_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, &level
);
8098 offset
= lsarpc_dissect_element_lsa_revision_info_info1(tvb
, offset
, pinfo
, tree
, di
, drep
);
8101 proto_item_set_len(item
, offset
-old_offset
);
8107 /* IDL: [switch_type(lsa_ForestTrustRecordType)] union { */
8108 /* IDL: [case(LSA_FOREST_TRUST_TOP_LEVEL_NAME)] [case(LSA_FOREST_TRUST_TOP_LEVEL_NAME)] lsa_StringLarge top_level_name; */
8109 /* IDL: [case(LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX)] [case(LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX)] lsa_StringLarge top_level_name_ex; */
8110 /* IDL: [case(LSA_FOREST_TRUST_DOMAIN_INFO)] [case(LSA_FOREST_TRUST_DOMAIN_INFO)] lsa_ForestTrustDomainInfo domain_info; */
8111 /* IDL: [case(LSA_FOREST_TRUST_BINARY_DATA)] [case(LSA_FOREST_TRUST_BINARY_DATA)] lsa_ForestTrustBinaryData data; */
8112 /* IDL: [case(LSA_FOREST_TRUST_SCANNER_INFO)] [case(LSA_FOREST_TRUST_SCANNER_INFO)] lsa_ForestTrustDomainInfo scanner_info; */
8116 lsarpc_dissect_element_lsa_ForestTrustData2_top_level_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8118 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustData2_top_level_name
,0);
8124 lsarpc_dissect_element_lsa_ForestTrustData2_top_level_name_ex(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8126 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustData2_top_level_name_ex
,0);
8132 lsarpc_dissect_element_lsa_ForestTrustData2_domain_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8134 offset
= lsarpc_dissect_struct_lsa_ForestTrustDomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustData2_domain_info
,0);
8140 lsarpc_dissect_element_lsa_ForestTrustData2_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8142 offset
= lsarpc_dissect_struct_lsa_ForestTrustBinaryData(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustData2_data
,0);
8148 lsarpc_dissect_element_lsa_ForestTrustData2_scanner_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8150 offset
= lsarpc_dissect_struct_lsa_ForestTrustDomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustData2_scanner_info
,0);
8156 lsarpc_dissect_lsa_ForestTrustData2(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
8158 proto_item
*item
= NULL
;
8159 proto_tree
*tree
= NULL
;
8163 old_offset
= offset
;
8165 tree
= proto_tree_add_subtree(parent_tree
, tvb
, offset
, -1, ett_lsarpc_lsa_ForestTrustData2
, &item
, "lsa_ForestTrustData2");
8168 offset
= dissect_ndr_uint1632(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_index
, &level
);
8172 case LSA_FOREST_TRUST_TOP_LEVEL_NAME
:
8173 offset
= lsarpc_dissect_element_lsa_ForestTrustData2_top_level_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
8176 case LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX
:
8177 offset
= lsarpc_dissect_element_lsa_ForestTrustData2_top_level_name_ex(tvb
, offset
, pinfo
, tree
, di
, drep
);
8180 case LSA_FOREST_TRUST_DOMAIN_INFO
:
8181 offset
= lsarpc_dissect_element_lsa_ForestTrustData2_domain_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
8184 case LSA_FOREST_TRUST_BINARY_DATA
:
8185 offset
= lsarpc_dissect_element_lsa_ForestTrustData2_data(tvb
, offset
, pinfo
, tree
, di
, drep
);
8188 case LSA_FOREST_TRUST_SCANNER_INFO
:
8189 offset
= lsarpc_dissect_element_lsa_ForestTrustData2_scanner_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
8192 proto_item_set_len(item
, offset
-old_offset
);
8199 /* IDL: lsa_ForestTrustRecordFlags flags; */
8200 /* IDL: lsa_ForestTrustRecordType type; */
8201 /* IDL: NTTIME_hyper time; */
8202 /* IDL: [switch_is(type)] lsa_ForestTrustData2 forest_trust_data; */
8206 lsarpc_dissect_element_lsa_ForestTrustRecord2_flags(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8208 offset
= lsarpc_dissect_bitmap_lsa_ForestTrustRecordFlags(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustRecord2_flags
, 0);
8214 lsarpc_dissect_element_lsa_ForestTrustRecord2_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, uint32_t *type
)
8216 offset
= lsarpc_dissect_enum_lsa_ForestTrustRecordType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustRecord2_type
, type
);
8222 lsarpc_dissect_element_lsa_ForestTrustRecord2_time(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8224 offset
= dissect_ndr_nt_NTTIME_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustRecord2_time
);
8230 lsarpc_dissect_element_lsa_ForestTrustRecord2_forest_trust_data(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, uint32_t *type
)
8232 offset
= lsarpc_dissect_lsa_ForestTrustData2(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustRecord2_forest_trust_data
, *type
);
8238 lsarpc_dissect_struct_lsa_ForestTrustRecord2(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
8241 proto_item
*item
= NULL
;
8242 proto_tree
*tree
= NULL
;
8247 old_offset
= offset
;
8250 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
8251 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ForestTrustRecord2
);
8254 offset
= lsarpc_dissect_element_lsa_ForestTrustRecord2_flags(tvb
, offset
, pinfo
, tree
, di
, drep
);
8256 offset
= lsarpc_dissect_element_lsa_ForestTrustRecord2_type(tvb
, offset
, pinfo
, tree
, di
, drep
, &type
);
8258 offset
= lsarpc_dissect_element_lsa_ForestTrustRecord2_time(tvb
, offset
, pinfo
, tree
, di
, drep
);
8260 offset
= lsarpc_dissect_element_lsa_ForestTrustRecord2_forest_trust_data(tvb
, offset
, pinfo
, tree
, di
, drep
, &type
);
8263 proto_item_set_len(item
, offset
-old_offset
);
8266 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
8275 /* IDL: [range(0,4000)] uint32 count; */
8276 /* IDL: [size_is(count)] [unique(1)] lsa_ForestTrustRecord2 **entries; */
8280 lsarpc_dissect_element_lsa_ForestTrustInformation2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8282 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_ForestTrustInformation2_count
, 0);
8288 lsarpc_dissect_element_lsa_ForestTrustInformation2_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8290 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustInformation2_entries_
, NDR_POINTER_UNIQUE
, "Pointer to Entries (lsa_ForestTrustRecord2)",hf_lsarpc_lsa_ForestTrustInformation2_entries
);
8296 lsarpc_dissect_element_lsa_ForestTrustInformation2_entries_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8298 offset
= dissect_ndr_ucarray(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustInformation2_entries__
);
8304 lsarpc_dissect_element_lsa_ForestTrustInformation2_entries__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8306 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_ForestTrustInformation2_entries___
, NDR_POINTER_UNIQUE
, "Pointer to Entries (lsa_ForestTrustRecord2)",hf_lsarpc_lsa_ForestTrustInformation2_entries
);
8312 lsarpc_dissect_element_lsa_ForestTrustInformation2_entries___(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8314 offset
= lsarpc_dissect_struct_lsa_ForestTrustRecord2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_ForestTrustInformation2_entries
,0);
8320 lsarpc_dissect_struct_lsa_ForestTrustInformation2(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*parent_tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
, int hf_index _U_
, uint32_t param _U_
)
8322 proto_item
*item
= NULL
;
8323 proto_tree
*tree
= NULL
;
8328 old_offset
= offset
;
8331 item
= proto_tree_add_item(parent_tree
, hf_index
, tvb
, offset
, -1, ENC_NA
);
8332 tree
= proto_item_add_subtree(item
, ett_lsarpc_lsa_ForestTrustInformation2
);
8335 offset
= lsarpc_dissect_element_lsa_ForestTrustInformation2_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
8337 offset
= lsarpc_dissect_element_lsa_ForestTrustInformation2_entries(tvb
, offset
, pinfo
, tree
, di
, drep
);
8340 proto_item_set_len(item
, offset
-old_offset
);
8343 if (di
->call_data
->flags
& DCERPC_IS_NDR64
) {
8351 lsarpc_dissect_element_lsa_Close_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8353 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_Close_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_Close_handle
);
8359 lsarpc_dissect_element_lsa_Close_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8361 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_Close_handle
, PIDL_POLHND_CLOSE
);
8366 /* IDL: NTSTATUS lsa_Close( */
8367 /* IDL: [in] [out] [ref] policy_handle *handle */
8371 lsarpc_dissect_lsa_Close_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8375 di
->dcerpc_procedure_name
="lsa_Close";
8376 offset
= lsarpc_dissect_element_lsa_Close_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8377 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8379 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
8382 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
8388 lsarpc_dissect_lsa_Close_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8390 di
->dcerpc_procedure_name
="lsa_Close";
8391 offset
= lsarpc_dissect_element_lsa_Close_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8392 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8397 lsarpc_dissect_element_lsa_Delete_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8399 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_Delete_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_Delete_handle
);
8405 lsarpc_dissect_element_lsa_Delete_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8407 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_Delete_handle
, PIDL_POLHND_CLOSE
);
8412 /* IDL: NTSTATUS lsa_Delete( */
8413 /* IDL: [in] [ref] policy_handle *handle */
8417 lsarpc_dissect_lsa_Delete_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8421 di
->dcerpc_procedure_name
="lsa_Delete";
8422 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
8425 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
8431 lsarpc_dissect_lsa_Delete_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8433 di
->dcerpc_procedure_name
="lsa_Delete";
8434 offset
= lsarpc_dissect_element_lsa_Delete_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8435 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8440 lsarpc_dissect_element_lsa_EnumPrivs_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8442 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumPrivs_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_EnumPrivs_handle
);
8448 lsarpc_dissect_element_lsa_EnumPrivs_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8450 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumPrivs_handle
, 0);
8456 lsarpc_dissect_element_lsa_EnumPrivs_resume_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8458 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumPrivs_resume_handle_
, NDR_POINTER_REF
, "Pointer to Resume Handle (uint32)",hf_lsarpc_lsa_EnumPrivs_resume_handle
);
8464 lsarpc_dissect_element_lsa_EnumPrivs_resume_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8466 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumPrivs_resume_handle
, 0);
8472 lsarpc_dissect_element_lsa_EnumPrivs_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8474 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumPrivs_privs_
, NDR_POINTER_REF
, "Pointer to Privs (lsa_PrivArray)",hf_lsarpc_lsa_EnumPrivs_privs
);
8480 lsarpc_dissect_element_lsa_EnumPrivs_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8482 offset
= lsarpc_dissect_struct_lsa_PrivArray(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_EnumPrivs_privs
,0);
8488 lsarpc_dissect_element_lsa_EnumPrivs_max_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8490 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumPrivs_max_count
, 0);
8495 /* IDL: NTSTATUS lsa_EnumPrivs( */
8496 /* IDL: [in] [ref] policy_handle *handle, */
8497 /* IDL: [in] [out] [ref] uint32 *resume_handle, */
8498 /* IDL: [out] [ref] lsa_PrivArray *privs, */
8499 /* IDL: [in] uint32 max_count */
8503 lsarpc_dissect_lsa_EnumPrivs_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8507 di
->dcerpc_procedure_name
="lsa_EnumPrivs";
8508 offset
= lsarpc_dissect_element_lsa_EnumPrivs_resume_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8509 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8511 offset
= lsarpc_dissect_element_lsa_EnumPrivs_privs(tvb
, offset
, pinfo
, tree
, di
, drep
);
8512 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8514 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
8517 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
8523 lsarpc_dissect_lsa_EnumPrivs_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8525 di
->dcerpc_procedure_name
="lsa_EnumPrivs";
8526 offset
= lsarpc_dissect_element_lsa_EnumPrivs_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8527 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8528 offset
= lsarpc_dissect_element_lsa_EnumPrivs_resume_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8529 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8530 offset
= lsarpc_dissect_element_lsa_EnumPrivs_max_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
8531 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8536 lsarpc_dissect_element_lsa_QuerySecurity_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8538 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QuerySecurity_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_QuerySecurity_handle
);
8544 lsarpc_dissect_element_lsa_QuerySecurity_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8546 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QuerySecurity_handle
, 0);
8552 lsarpc_dissect_element_lsa_QuerySecurity_sec_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8554 offset
= lsarpc_dissect_bitmap_security_secinfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QuerySecurity_sec_info
, 0);
8560 lsarpc_dissect_element_lsa_QuerySecurity_sdbuf(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8562 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QuerySecurity_sdbuf_
, NDR_POINTER_REF
, "Pointer to Sdbuf (sec_desc_buf)",hf_lsarpc_lsa_QuerySecurity_sdbuf
);
8568 lsarpc_dissect_element_lsa_QuerySecurity_sdbuf_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8570 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QuerySecurity_sdbuf__
, NDR_POINTER_UNIQUE
, "Pointer to Sdbuf (sec_desc_buf)",hf_lsarpc_lsa_QuerySecurity_sdbuf
);
8576 lsarpc_dissect_element_lsa_QuerySecurity_sdbuf__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8578 offset
=cnf_dissect_sec_desc_buf(tvb
, offset
, pinfo
, tree
, di
, drep
);
8583 /* IDL: NTSTATUS lsa_QuerySecurity( */
8584 /* IDL: [in] [ref] policy_handle *handle, */
8585 /* IDL: [in] security_secinfo sec_info, */
8586 /* IDL: [out] [ref] sec_desc_buf **sdbuf */
8590 lsarpc_dissect_lsa_QuerySecurity_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8594 di
->dcerpc_procedure_name
="lsa_QuerySecurity";
8595 offset
= lsarpc_dissect_element_lsa_QuerySecurity_sdbuf(tvb
, offset
, pinfo
, tree
, di
, drep
);
8596 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8598 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
8601 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
8607 lsarpc_dissect_lsa_QuerySecurity_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8609 di
->dcerpc_procedure_name
="lsa_QuerySecurity";
8610 offset
= lsarpc_dissect_element_lsa_QuerySecurity_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8611 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8612 offset
= lsarpc_dissect_element_lsa_QuerySecurity_sec_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
8613 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8618 lsarpc_dissect_element_lsa_SetSecObj_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8620 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetSecObj_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_SetSecObj_handle
);
8626 lsarpc_dissect_element_lsa_SetSecObj_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8628 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetSecObj_handle
, 0);
8634 lsarpc_dissect_element_lsa_SetSecObj_sec_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8636 offset
= lsarpc_dissect_bitmap_security_secinfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetSecObj_sec_info
, 0);
8642 lsarpc_dissect_element_lsa_SetSecObj_sdbuf(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8644 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetSecObj_sdbuf_
, NDR_POINTER_REF
, "Pointer to Sdbuf (sec_desc_buf)",hf_lsarpc_lsa_SetSecObj_sdbuf
);
8650 lsarpc_dissect_element_lsa_SetSecObj_sdbuf_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8652 offset
=cnf_dissect_sec_desc_buf(tvb
, offset
, pinfo
, tree
, di
, drep
);
8657 /* IDL: NTSTATUS lsa_SetSecObj( */
8658 /* IDL: [in] [ref] policy_handle *handle, */
8659 /* IDL: [in] security_secinfo sec_info, */
8660 /* IDL: [in] [ref] sec_desc_buf *sdbuf */
8664 lsarpc_dissect_lsa_SetSecObj_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8668 di
->dcerpc_procedure_name
="lsa_SetSecObj";
8669 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
8672 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
8678 lsarpc_dissect_lsa_SetSecObj_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8680 di
->dcerpc_procedure_name
="lsa_SetSecObj";
8681 offset
= lsarpc_dissect_element_lsa_SetSecObj_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8682 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8683 offset
= lsarpc_dissect_element_lsa_SetSecObj_sec_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
8684 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8685 offset
= lsarpc_dissect_element_lsa_SetSecObj_sdbuf(tvb
, offset
, pinfo
, tree
, di
, drep
);
8686 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8690 /* IDL: NTSTATUS lsa_ChangePassword( */
8695 lsarpc_dissect_lsa_ChangePassword_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8699 di
->dcerpc_procedure_name
="lsa_ChangePassword";
8700 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
8703 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
8709 lsarpc_dissect_lsa_ChangePassword_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8711 di
->dcerpc_procedure_name
="lsa_ChangePassword";
8716 lsarpc_dissect_element_lsa_OpenPolicy_system_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8718 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy_system_name_
, NDR_POINTER_UNIQUE
, "Pointer to System Name (uint16)",hf_lsarpc_lsa_OpenPolicy_system_name
);
8724 lsarpc_dissect_element_lsa_OpenPolicy_system_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8726 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy_system_name
, 0);
8732 lsarpc_dissect_element_lsa_OpenPolicy_attr(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8734 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy_attr_
, NDR_POINTER_REF
, "Pointer to Attr (lsa_ObjectAttribute)",hf_lsarpc_lsa_OpenPolicy_attr
);
8740 lsarpc_dissect_element_lsa_OpenPolicy_attr_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8742 offset
= lsarpc_dissect_struct_lsa_ObjectAttribute(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_OpenPolicy_attr
,0);
8748 lsarpc_dissect_element_lsa_OpenPolicy_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8750 offset
= lsarpc_dissect_bitmap_lsa_PolicyAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy_access_mask
, 0);
8756 lsarpc_dissect_element_lsa_OpenPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8758 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_OpenPolicy_handle
);
8764 lsarpc_dissect_element_lsa_OpenPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8766 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy_handle
, PIDL_POLHND_OPEN
|PIDL_POLHND_TYPE_LSA_POLICY
);
8771 /* IDL: NTSTATUS lsa_OpenPolicy( */
8772 /* IDL: [in] [unique(1)] uint16 *system_name, */
8773 /* IDL: [in] [ref] lsa_ObjectAttribute *attr, */
8774 /* IDL: [in] lsa_PolicyAccessMask access_mask, */
8775 /* IDL: [out] [ref] policy_handle *handle */
8779 lsarpc_dissect_lsa_OpenPolicy_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8783 di
->dcerpc_procedure_name
="lsa_OpenPolicy";
8784 offset
= lsarpc_dissect_element_lsa_OpenPolicy_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8785 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8787 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
8790 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
8796 lsarpc_dissect_lsa_OpenPolicy_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8798 di
->dcerpc_procedure_name
="lsa_OpenPolicy";
8799 offset
= lsarpc_dissect_element_lsa_OpenPolicy_system_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
8800 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8801 offset
= lsarpc_dissect_element_lsa_OpenPolicy_attr(tvb
, offset
, pinfo
, tree
, di
, drep
);
8802 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8803 offset
= lsarpc_dissect_element_lsa_OpenPolicy_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
8804 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8809 lsarpc_dissect_element_lsa_QueryInfoPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8811 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryInfoPolicy_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_QueryInfoPolicy_handle
);
8817 lsarpc_dissect_element_lsa_QueryInfoPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8819 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryInfoPolicy_handle
, 0);
8825 lsarpc_dissect_element_lsa_QueryInfoPolicy_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8827 offset
= lsarpc_dissect_enum_lsa_PolicyInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryInfoPolicy_level
, 0);
8833 lsarpc_dissect_element_lsa_QueryInfoPolicy_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8835 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryInfoPolicy_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_PolicyInformation)",hf_lsarpc_lsa_QueryInfoPolicy_info
);
8841 lsarpc_dissect_element_lsa_QueryInfoPolicy_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8843 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryInfoPolicy_info__
, NDR_POINTER_UNIQUE
, "Pointer to Info (lsa_PolicyInformation)",hf_lsarpc_lsa_QueryInfoPolicy_info
);
8849 lsarpc_dissect_element_lsa_QueryInfoPolicy_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8851 offset
= lsarpc_dissect_lsa_PolicyInformation(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryInfoPolicy_info
, 0);
8856 /* IDL: NTSTATUS lsa_QueryInfoPolicy( */
8857 /* IDL: [in] [ref] policy_handle *handle, */
8858 /* IDL: [in] lsa_PolicyInfo level, */
8859 /* IDL: [out] [ref] [switch_is(level)] lsa_PolicyInformation **info */
8863 lsarpc_dissect_lsa_QueryInfoPolicy_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8867 di
->dcerpc_procedure_name
="lsa_QueryInfoPolicy";
8868 offset
= lsarpc_dissect_element_lsa_QueryInfoPolicy_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
8869 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8871 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
8874 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
8880 lsarpc_dissect_lsa_QueryInfoPolicy_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8882 di
->dcerpc_procedure_name
="lsa_QueryInfoPolicy";
8883 offset
= lsarpc_dissect_element_lsa_QueryInfoPolicy_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8884 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8885 offset
= lsarpc_dissect_element_lsa_QueryInfoPolicy_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
8886 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8891 lsarpc_dissect_element_lsa_SetInfoPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8893 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetInfoPolicy_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_SetInfoPolicy_handle
);
8899 lsarpc_dissect_element_lsa_SetInfoPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8901 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetInfoPolicy_handle
, 0);
8907 lsarpc_dissect_element_lsa_SetInfoPolicy_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8909 offset
= lsarpc_dissect_enum_lsa_PolicyInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetInfoPolicy_level
, 0);
8915 lsarpc_dissect_element_lsa_SetInfoPolicy_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8917 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetInfoPolicy_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_PolicyInformation)",hf_lsarpc_lsa_SetInfoPolicy_info
);
8923 lsarpc_dissect_element_lsa_SetInfoPolicy_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8925 offset
= lsarpc_dissect_lsa_PolicyInformation(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetInfoPolicy_info
, 0);
8930 /* IDL: NTSTATUS lsa_SetInfoPolicy( */
8931 /* IDL: [in] [ref] policy_handle *handle, */
8932 /* IDL: [in] lsa_PolicyInfo level, */
8933 /* IDL: [in] [ref] [switch_is(level)] lsa_PolicyInformation *info */
8937 lsarpc_dissect_lsa_SetInfoPolicy_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8941 di
->dcerpc_procedure_name
="lsa_SetInfoPolicy";
8942 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
8945 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
8951 lsarpc_dissect_lsa_SetInfoPolicy_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8953 di
->dcerpc_procedure_name
="lsa_SetInfoPolicy";
8954 offset
= lsarpc_dissect_element_lsa_SetInfoPolicy_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
8955 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8956 offset
= lsarpc_dissect_element_lsa_SetInfoPolicy_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
8957 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8958 offset
= lsarpc_dissect_element_lsa_SetInfoPolicy_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
8959 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
8963 /* IDL: NTSTATUS lsa_ClearAuditLog( */
8968 lsarpc_dissect_lsa_ClearAuditLog_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8972 di
->dcerpc_procedure_name
="lsa_ClearAuditLog";
8973 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
8976 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
8982 lsarpc_dissect_lsa_ClearAuditLog_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8984 di
->dcerpc_procedure_name
="lsa_ClearAuditLog";
8989 lsarpc_dissect_element_lsa_CreateAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8991 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateAccount_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_CreateAccount_handle
);
8997 lsarpc_dissect_element_lsa_CreateAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
8999 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateAccount_handle
, 0);
9005 lsarpc_dissect_element_lsa_CreateAccount_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9007 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateAccount_sid_
, NDR_POINTER_REF
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_CreateAccount_sid
);
9013 lsarpc_dissect_element_lsa_CreateAccount_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9015 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_CreateAccount_sid
,0);
9021 lsarpc_dissect_element_lsa_CreateAccount_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9023 offset
= lsarpc_dissect_bitmap_lsa_AccountAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateAccount_access_mask
, 0);
9029 lsarpc_dissect_element_lsa_CreateAccount_acct_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9031 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateAccount_acct_handle_
, NDR_POINTER_REF
, "Pointer to Acct Handle (policy_handle)",hf_lsarpc_lsa_CreateAccount_acct_handle
);
9037 lsarpc_dissect_element_lsa_CreateAccount_acct_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9039 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateAccount_acct_handle
, PIDL_POLHND_OPEN
|PIDL_POLHND_TYPE_LSA_ACCOUNT
);
9044 /* IDL: NTSTATUS lsa_CreateAccount( */
9045 /* IDL: [in] [ref] policy_handle *handle, */
9046 /* IDL: [in] [ref] dom_sid2 *sid, */
9047 /* IDL: [in] lsa_AccountAccessMask access_mask, */
9048 /* IDL: [out] [ref] policy_handle *acct_handle */
9052 lsarpc_dissect_lsa_CreateAccount_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9056 di
->dcerpc_procedure_name
="lsa_CreateAccount";
9057 offset
= lsarpc_dissect_element_lsa_CreateAccount_acct_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9058 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9060 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9063 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9069 lsarpc_dissect_lsa_CreateAccount_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9071 di
->dcerpc_procedure_name
="lsa_CreateAccount";
9072 offset
= lsarpc_dissect_element_lsa_CreateAccount_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9073 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9074 offset
= lsarpc_dissect_element_lsa_CreateAccount_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
9075 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9076 offset
= lsarpc_dissect_element_lsa_CreateAccount_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
9077 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9082 lsarpc_dissect_element_lsa_EnumAccounts_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9084 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumAccounts_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_EnumAccounts_handle
);
9090 lsarpc_dissect_element_lsa_EnumAccounts_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9092 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumAccounts_handle
, 0);
9098 lsarpc_dissect_element_lsa_EnumAccounts_resume_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9100 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumAccounts_resume_handle_
, NDR_POINTER_REF
, "Pointer to Resume Handle (uint32)",hf_lsarpc_lsa_EnumAccounts_resume_handle
);
9106 lsarpc_dissect_element_lsa_EnumAccounts_resume_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9108 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumAccounts_resume_handle
, 0);
9114 lsarpc_dissect_element_lsa_EnumAccounts_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9116 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumAccounts_sids_
, NDR_POINTER_REF
, "Pointer to Sids (lsa_SidArray)",hf_lsarpc_lsa_EnumAccounts_sids
);
9122 lsarpc_dissect_element_lsa_EnumAccounts_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9124 offset
= lsarpc_dissect_struct_lsa_SidArray(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_EnumAccounts_sids
,0);
9130 lsarpc_dissect_element_lsa_EnumAccounts_num_entries(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9132 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumAccounts_num_entries
, 0);
9137 /* IDL: NTSTATUS lsa_EnumAccounts( */
9138 /* IDL: [in] [ref] policy_handle *handle, */
9139 /* IDL: [in] [out] [ref] uint32 *resume_handle, */
9140 /* IDL: [out] [ref] lsa_SidArray *sids, */
9141 /* IDL: [in] [range(0,8192)] uint32 num_entries */
9145 lsarpc_dissect_lsa_EnumAccounts_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9149 di
->dcerpc_procedure_name
="lsa_EnumAccounts";
9150 offset
= lsarpc_dissect_element_lsa_EnumAccounts_resume_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9151 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9153 offset
= lsarpc_dissect_element_lsa_EnumAccounts_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
9154 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9156 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9159 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9165 lsarpc_dissect_lsa_EnumAccounts_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9167 di
->dcerpc_procedure_name
="lsa_EnumAccounts";
9168 offset
= lsarpc_dissect_element_lsa_EnumAccounts_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9169 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9170 offset
= lsarpc_dissect_element_lsa_EnumAccounts_resume_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9171 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9172 offset
= lsarpc_dissect_element_lsa_EnumAccounts_num_entries(tvb
, offset
, pinfo
, tree
, di
, drep
);
9173 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9178 lsarpc_dissect_element_lsa_CreateTrustedDomain_policy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9180 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomain_policy_handle_
, NDR_POINTER_REF
, "Pointer to Policy Handle (policy_handle)",hf_lsarpc_lsa_CreateTrustedDomain_policy_handle
);
9186 lsarpc_dissect_element_lsa_CreateTrustedDomain_policy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9188 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomain_policy_handle
, 0);
9194 lsarpc_dissect_element_lsa_CreateTrustedDomain_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9196 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomain_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_DomainInfo)",hf_lsarpc_lsa_CreateTrustedDomain_info
);
9202 lsarpc_dissect_element_lsa_CreateTrustedDomain_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9204 offset
= lsarpc_dissect_struct_lsa_DomainInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_CreateTrustedDomain_info
,0);
9210 lsarpc_dissect_element_lsa_CreateTrustedDomain_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9212 offset
= lsarpc_dissect_bitmap_lsa_TrustedAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomain_access_mask
, 0);
9218 lsarpc_dissect_element_lsa_CreateTrustedDomain_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9220 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomain_trustdom_handle_
, NDR_POINTER_REF
, "Pointer to Trustdom Handle (policy_handle)",hf_lsarpc_lsa_CreateTrustedDomain_trustdom_handle
);
9226 lsarpc_dissect_element_lsa_CreateTrustedDomain_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9228 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomain_trustdom_handle
, PIDL_POLHND_OPEN
|PIDL_POLHND_TYPE_LSA_DOMAIN
);
9233 /* IDL: NTSTATUS lsa_CreateTrustedDomain( */
9234 /* IDL: [in] [ref] policy_handle *policy_handle, */
9235 /* IDL: [in] [ref] lsa_DomainInfo *info, */
9236 /* IDL: [in] lsa_TrustedAccessMask access_mask, */
9237 /* IDL: [out] [ref] policy_handle *trustdom_handle */
9241 lsarpc_dissect_lsa_CreateTrustedDomain_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9245 di
->dcerpc_procedure_name
="lsa_CreateTrustedDomain";
9246 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomain_trustdom_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9247 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9249 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9252 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9258 lsarpc_dissect_lsa_CreateTrustedDomain_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9260 di
->dcerpc_procedure_name
="lsa_CreateTrustedDomain";
9261 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomain_policy_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9262 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9263 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomain_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
9264 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9265 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomain_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
9266 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9271 lsarpc_dissect_element_lsa_EnumTrustDom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9273 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumTrustDom_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_EnumTrustDom_handle
);
9279 lsarpc_dissect_element_lsa_EnumTrustDom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9281 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumTrustDom_handle
, 0);
9287 lsarpc_dissect_element_lsa_EnumTrustDom_resume_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9289 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumTrustDom_resume_handle_
, NDR_POINTER_REF
, "Pointer to Resume Handle (uint32)",hf_lsarpc_lsa_EnumTrustDom_resume_handle
);
9295 lsarpc_dissect_element_lsa_EnumTrustDom_resume_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9297 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumTrustDom_resume_handle
, 0);
9303 lsarpc_dissect_element_lsa_EnumTrustDom_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9305 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumTrustDom_domains_
, NDR_POINTER_REF
, "Pointer to Domains (lsa_DomainList)",hf_lsarpc_lsa_EnumTrustDom_domains
);
9311 lsarpc_dissect_element_lsa_EnumTrustDom_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9313 offset
= lsarpc_dissect_struct_lsa_DomainList(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_EnumTrustDom_domains
,0);
9319 lsarpc_dissect_element_lsa_EnumTrustDom_max_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9321 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumTrustDom_max_size
, 0);
9326 /* IDL: NTSTATUS lsa_EnumTrustDom( */
9327 /* IDL: [in] [ref] policy_handle *handle, */
9328 /* IDL: [in] [out] [ref] uint32 *resume_handle, */
9329 /* IDL: [out] [ref] lsa_DomainList *domains, */
9330 /* IDL: [in] uint32 max_size */
9334 lsarpc_dissect_lsa_EnumTrustDom_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9338 di
->dcerpc_procedure_name
="lsa_EnumTrustDom";
9339 offset
= lsarpc_dissect_element_lsa_EnumTrustDom_resume_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9340 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9342 offset
= lsarpc_dissect_element_lsa_EnumTrustDom_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
9343 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9345 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9348 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9354 lsarpc_dissect_lsa_EnumTrustDom_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9356 di
->dcerpc_procedure_name
="lsa_EnumTrustDom";
9357 offset
= lsarpc_dissect_element_lsa_EnumTrustDom_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9358 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9359 offset
= lsarpc_dissect_element_lsa_EnumTrustDom_resume_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9360 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9361 offset
= lsarpc_dissect_element_lsa_EnumTrustDom_max_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
9362 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9367 lsarpc_dissect_element_lsa_LookupNames_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9369 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_LookupNames_handle
);
9375 lsarpc_dissect_element_lsa_LookupNames_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9377 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames_handle
, 0);
9383 lsarpc_dissect_element_lsa_LookupNames_num_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9385 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames_num_names
, 0);
9391 lsarpc_dissect_element_lsa_LookupNames_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9393 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames_domains_
, NDR_POINTER_REF
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupNames_domains
);
9399 lsarpc_dissect_element_lsa_LookupNames_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9401 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames_domains__
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupNames_domains
);
9407 lsarpc_dissect_element_lsa_LookupNames_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9409 offset
= lsarpc_dissect_struct_lsa_RefDomainList(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupNames_domains
,0);
9415 lsarpc_dissect_element_lsa_LookupNames_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9417 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames_sids_
, NDR_POINTER_REF
, "Pointer to Sids (lsa_TransSidArray)",hf_lsarpc_lsa_LookupNames_sids
);
9423 lsarpc_dissect_element_lsa_LookupNames_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9425 offset
= lsarpc_dissect_struct_lsa_TransSidArray(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupNames_sids
,0);
9431 lsarpc_dissect_element_lsa_LookupNames_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9433 offset
= lsarpc_dissect_enum_lsa_LookupNamesLevel(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames_level
, 0);
9439 lsarpc_dissect_element_lsa_LookupNames_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9441 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames_count_
, NDR_POINTER_REF
, "Pointer to Count (uint32)",hf_lsarpc_lsa_LookupNames_count
);
9447 lsarpc_dissect_element_lsa_LookupNames_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9449 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames_count
, 0);
9454 /* IDL: NTSTATUS lsa_LookupNames( */
9455 /* IDL: [in] [ref] policy_handle *handle, */
9456 /* IDL: [in] [range(0,1000)] uint32 num_names, */
9457 /* IDL: [in] [size_is(num_names)] lsa_String names[*], */
9458 /* IDL: [out] [ref] lsa_RefDomainList **domains, */
9459 /* IDL: [in] [out] [ref] lsa_TransSidArray *sids, */
9460 /* IDL: [in] lsa_LookupNamesLevel level, */
9461 /* IDL: [in] [out] [ref] uint32 *count */
9465 lsarpc_dissect_lsa_LookupNames_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9469 di
->dcerpc_procedure_name
="lsa_LookupNames";
9470 offset
= lsarpc_dissect_element_lsa_LookupNames_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
9471 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9473 offset
= lsarpc_dissect_element_lsa_LookupNames_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
9474 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9476 offset
= lsarpc_dissect_element_lsa_LookupNames_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
9477 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9479 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9482 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9488 lsarpc_dissect_lsa_LookupNames_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9490 di
->dcerpc_procedure_name
="lsa_LookupNames";
9491 offset
= lsarpc_dissect_element_lsa_LookupNames_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9492 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9493 offset
= lsarpc_dissect_element_lsa_LookupNames_num_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
9494 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9495 offset
= lsarpc_dissect_element_lsa_LookupNames_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
9496 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9497 offset
= lsarpc_dissect_element_lsa_LookupNames_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
9498 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9499 offset
= lsarpc_dissect_element_lsa_LookupNames_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
9500 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9501 offset
= lsarpc_dissect_element_lsa_LookupNames_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
9502 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9507 lsarpc_dissect_element_lsa_LookupSids_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9509 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_LookupSids_handle
);
9515 lsarpc_dissect_element_lsa_LookupSids_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9517 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids_handle
, 0);
9523 lsarpc_dissect_element_lsa_LookupSids_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9525 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids_sids_
, NDR_POINTER_REF
, "Pointer to Sids (lsa_SidArray)",hf_lsarpc_lsa_LookupSids_sids
);
9531 lsarpc_dissect_element_lsa_LookupSids_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9533 offset
= lsarpc_dissect_struct_lsa_SidArray(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupSids_sids
,0);
9539 lsarpc_dissect_element_lsa_LookupSids_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9541 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids_domains_
, NDR_POINTER_REF
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupSids_domains
);
9547 lsarpc_dissect_element_lsa_LookupSids_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9549 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids_domains__
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupSids_domains
);
9555 lsarpc_dissect_element_lsa_LookupSids_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9557 offset
= lsarpc_dissect_struct_lsa_RefDomainList(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupSids_domains
,0);
9563 lsarpc_dissect_element_lsa_LookupSids_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9565 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids_names_
, NDR_POINTER_REF
, "Pointer to Names (lsa_TransNameArray)",hf_lsarpc_lsa_LookupSids_names
);
9571 lsarpc_dissect_element_lsa_LookupSids_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9573 offset
= lsarpc_dissect_struct_lsa_TransNameArray(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupSids_names
,0);
9579 lsarpc_dissect_element_lsa_LookupSids_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9581 offset
= lsarpc_dissect_enum_lsa_LookupNamesLevel(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids_level
, 0);
9587 lsarpc_dissect_element_lsa_LookupSids_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9589 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids_count_
, NDR_POINTER_REF
, "Pointer to Count (uint32)",hf_lsarpc_lsa_LookupSids_count
);
9595 lsarpc_dissect_element_lsa_LookupSids_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9597 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids_count
, 0);
9602 /* IDL: NTSTATUS lsa_LookupSids( */
9603 /* IDL: [in] [ref] policy_handle *handle, */
9604 /* IDL: [in] [ref] lsa_SidArray *sids, */
9605 /* IDL: [out] [ref] lsa_RefDomainList **domains, */
9606 /* IDL: [in] [out] [ref] lsa_TransNameArray *names, */
9607 /* IDL: [in] lsa_LookupNamesLevel level, */
9608 /* IDL: [in] [out] [ref] uint32 *count */
9612 lsarpc_dissect_lsa_LookupSids_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9616 di
->dcerpc_procedure_name
="lsa_LookupSids";
9617 offset
= lsarpc_dissect_element_lsa_LookupSids_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
9618 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9620 offset
= lsarpc_dissect_element_lsa_LookupSids_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
9621 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9623 offset
= lsarpc_dissect_element_lsa_LookupSids_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
9624 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9626 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9629 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9635 lsarpc_dissect_lsa_LookupSids_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9637 di
->dcerpc_procedure_name
="lsa_LookupSids";
9638 offset
= lsarpc_dissect_element_lsa_LookupSids_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9639 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9640 offset
= lsarpc_dissect_element_lsa_LookupSids_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
9641 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9642 offset
= lsarpc_dissect_element_lsa_LookupSids_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
9643 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9644 offset
= lsarpc_dissect_element_lsa_LookupSids_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
9645 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9646 offset
= lsarpc_dissect_element_lsa_LookupSids_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
9647 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9652 lsarpc_dissect_element_lsa_CreateSecret_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9654 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateSecret_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_CreateSecret_handle
);
9660 lsarpc_dissect_element_lsa_CreateSecret_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9662 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateSecret_handle
, 0);
9668 lsarpc_dissect_element_lsa_CreateSecret_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9670 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_CreateSecret_name
,0);
9676 lsarpc_dissect_element_lsa_CreateSecret_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9678 offset
= lsarpc_dissect_bitmap_lsa_SecretAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateSecret_access_mask
, 0);
9684 lsarpc_dissect_element_lsa_CreateSecret_sec_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9686 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateSecret_sec_handle_
, NDR_POINTER_REF
, "Pointer to Sec Handle (policy_handle)",hf_lsarpc_lsa_CreateSecret_sec_handle
);
9692 lsarpc_dissect_element_lsa_CreateSecret_sec_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9694 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateSecret_sec_handle
, PIDL_POLHND_OPEN
|PIDL_POLHND_TYPE_LSA_SECRET
);
9699 /* IDL: NTSTATUS lsa_CreateSecret( */
9700 /* IDL: [in] [ref] policy_handle *handle, */
9701 /* IDL: [in] lsa_String name, */
9702 /* IDL: [in] lsa_SecretAccessMask access_mask, */
9703 /* IDL: [out] [ref] policy_handle *sec_handle */
9707 lsarpc_dissect_lsa_CreateSecret_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9711 di
->dcerpc_procedure_name
="lsa_CreateSecret";
9712 offset
= lsarpc_dissect_element_lsa_CreateSecret_sec_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9713 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9715 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9718 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9724 lsarpc_dissect_lsa_CreateSecret_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9726 di
->dcerpc_procedure_name
="lsa_CreateSecret";
9727 offset
= lsarpc_dissect_element_lsa_CreateSecret_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9728 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9729 offset
= lsarpc_dissect_element_lsa_CreateSecret_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
9730 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9731 offset
= lsarpc_dissect_element_lsa_CreateSecret_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
9732 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9737 lsarpc_dissect_element_lsa_OpenAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9739 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenAccount_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_OpenAccount_handle
);
9745 lsarpc_dissect_element_lsa_OpenAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9747 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenAccount_handle
, 0);
9753 lsarpc_dissect_element_lsa_OpenAccount_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9755 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenAccount_sid_
, NDR_POINTER_REF
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_OpenAccount_sid
);
9761 lsarpc_dissect_element_lsa_OpenAccount_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9763 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_OpenAccount_sid
,0);
9769 lsarpc_dissect_element_lsa_OpenAccount_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9771 offset
= lsarpc_dissect_bitmap_lsa_AccountAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenAccount_access_mask
, 0);
9777 lsarpc_dissect_element_lsa_OpenAccount_acct_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9779 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenAccount_acct_handle_
, NDR_POINTER_REF
, "Pointer to Acct Handle (policy_handle)",hf_lsarpc_lsa_OpenAccount_acct_handle
);
9785 lsarpc_dissect_element_lsa_OpenAccount_acct_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9787 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenAccount_acct_handle
, PIDL_POLHND_OPEN
|PIDL_POLHND_TYPE_LSA_ACCOUNT
);
9792 /* IDL: NTSTATUS lsa_OpenAccount( */
9793 /* IDL: [in] [ref] policy_handle *handle, */
9794 /* IDL: [in] [ref] dom_sid2 *sid, */
9795 /* IDL: [in] lsa_AccountAccessMask access_mask, */
9796 /* IDL: [out] [ref] policy_handle *acct_handle */
9800 lsarpc_dissect_lsa_OpenAccount_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9804 di
->dcerpc_procedure_name
="lsa_OpenAccount";
9805 offset
= lsarpc_dissect_element_lsa_OpenAccount_acct_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9806 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9808 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9811 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9817 lsarpc_dissect_lsa_OpenAccount_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9819 di
->dcerpc_procedure_name
="lsa_OpenAccount";
9820 offset
= lsarpc_dissect_element_lsa_OpenAccount_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9821 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9822 offset
= lsarpc_dissect_element_lsa_OpenAccount_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
9823 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9824 offset
= lsarpc_dissect_element_lsa_OpenAccount_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
9825 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9830 lsarpc_dissect_element_lsa_EnumPrivsAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9832 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumPrivsAccount_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_EnumPrivsAccount_handle
);
9838 lsarpc_dissect_element_lsa_EnumPrivsAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9840 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumPrivsAccount_handle
, 0);
9846 lsarpc_dissect_element_lsa_EnumPrivsAccount_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9848 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumPrivsAccount_privs_
, NDR_POINTER_REF
, "Pointer to Privs (lsa_PrivilegeSet)",hf_lsarpc_lsa_EnumPrivsAccount_privs
);
9854 lsarpc_dissect_element_lsa_EnumPrivsAccount_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9856 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumPrivsAccount_privs__
, NDR_POINTER_UNIQUE
, "Pointer to Privs (lsa_PrivilegeSet)",hf_lsarpc_lsa_EnumPrivsAccount_privs
);
9862 lsarpc_dissect_element_lsa_EnumPrivsAccount_privs__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9864 offset
= lsarpc_dissect_struct_lsa_PrivilegeSet(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_EnumPrivsAccount_privs
,0);
9869 /* IDL: NTSTATUS lsa_EnumPrivsAccount( */
9870 /* IDL: [in] [ref] policy_handle *handle, */
9871 /* IDL: [out] [ref] lsa_PrivilegeSet **privs */
9875 lsarpc_dissect_lsa_EnumPrivsAccount_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9879 di
->dcerpc_procedure_name
="lsa_EnumPrivsAccount";
9880 offset
= lsarpc_dissect_element_lsa_EnumPrivsAccount_privs(tvb
, offset
, pinfo
, tree
, di
, drep
);
9881 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9883 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9886 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9892 lsarpc_dissect_lsa_EnumPrivsAccount_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9894 di
->dcerpc_procedure_name
="lsa_EnumPrivsAccount";
9895 offset
= lsarpc_dissect_element_lsa_EnumPrivsAccount_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9896 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9901 lsarpc_dissect_element_lsa_AddPrivilegesToAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9903 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AddPrivilegesToAccount_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_AddPrivilegesToAccount_handle
);
9909 lsarpc_dissect_element_lsa_AddPrivilegesToAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9911 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AddPrivilegesToAccount_handle
, 0);
9917 lsarpc_dissect_element_lsa_AddPrivilegesToAccount_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9919 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AddPrivilegesToAccount_privs_
, NDR_POINTER_REF
, "Pointer to Privs (lsa_PrivilegeSet)",hf_lsarpc_lsa_AddPrivilegesToAccount_privs
);
9925 lsarpc_dissect_element_lsa_AddPrivilegesToAccount_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9927 offset
= lsarpc_dissect_struct_lsa_PrivilegeSet(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_AddPrivilegesToAccount_privs
,0);
9932 /* IDL: NTSTATUS lsa_AddPrivilegesToAccount( */
9933 /* IDL: [in] [ref] policy_handle *handle, */
9934 /* IDL: [in] [ref] lsa_PrivilegeSet *privs */
9938 lsarpc_dissect_lsa_AddPrivilegesToAccount_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9942 di
->dcerpc_procedure_name
="lsa_AddPrivilegesToAccount";
9943 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
9946 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
9952 lsarpc_dissect_lsa_AddPrivilegesToAccount_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9954 di
->dcerpc_procedure_name
="lsa_AddPrivilegesToAccount";
9955 offset
= lsarpc_dissect_element_lsa_AddPrivilegesToAccount_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
9956 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9957 offset
= lsarpc_dissect_element_lsa_AddPrivilegesToAccount_privs(tvb
, offset
, pinfo
, tree
, di
, drep
);
9958 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
9963 lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9965 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_RemovePrivilegesFromAccount_handle
);
9971 lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9973 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_RemovePrivilegesFromAccount_handle
, 0);
9979 lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_remove_all(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9981 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_RemovePrivilegesFromAccount_remove_all
, 0);
9987 lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_privs(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9989 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_privs_
, NDR_POINTER_UNIQUE
, "Pointer to Privs (lsa_PrivilegeSet)",hf_lsarpc_lsa_RemovePrivilegesFromAccount_privs
);
9995 lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_privs_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
9997 offset
= lsarpc_dissect_struct_lsa_PrivilegeSet(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_RemovePrivilegesFromAccount_privs
,0);
10002 /* IDL: NTSTATUS lsa_RemovePrivilegesFromAccount( */
10003 /* IDL: [in] [ref] policy_handle *handle, */
10004 /* IDL: [in] uint8 remove_all, */
10005 /* IDL: [in] [unique(1)] lsa_PrivilegeSet *privs */
10009 lsarpc_dissect_lsa_RemovePrivilegesFromAccount_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10013 di
->dcerpc_procedure_name
="lsa_RemovePrivilegesFromAccount";
10014 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10017 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10023 lsarpc_dissect_lsa_RemovePrivilegesFromAccount_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10025 di
->dcerpc_procedure_name
="lsa_RemovePrivilegesFromAccount";
10026 offset
= lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10027 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10028 offset
= lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_remove_all(tvb
, offset
, pinfo
, tree
, di
, drep
);
10029 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10030 offset
= lsarpc_dissect_element_lsa_RemovePrivilegesFromAccount_privs(tvb
, offset
, pinfo
, tree
, di
, drep
);
10031 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10035 /* IDL: NTSTATUS lsa_GetQuotasForAccount( */
10040 lsarpc_dissect_lsa_GetQuotasForAccount_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10044 di
->dcerpc_procedure_name
="lsa_GetQuotasForAccount";
10045 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10048 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10054 lsarpc_dissect_lsa_GetQuotasForAccount_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10056 di
->dcerpc_procedure_name
="lsa_GetQuotasForAccount";
10060 /* IDL: NTSTATUS lsa_SetQuotasForAccount( */
10065 lsarpc_dissect_lsa_SetQuotasForAccount_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10069 di
->dcerpc_procedure_name
="lsa_SetQuotasForAccount";
10070 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10073 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10079 lsarpc_dissect_lsa_SetQuotasForAccount_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10081 di
->dcerpc_procedure_name
="lsa_SetQuotasForAccount";
10086 lsarpc_dissect_element_lsa_GetSystemAccessAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10088 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_GetSystemAccessAccount_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_GetSystemAccessAccount_handle
);
10094 lsarpc_dissect_element_lsa_GetSystemAccessAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10096 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_GetSystemAccessAccount_handle
, 0);
10102 lsarpc_dissect_element_lsa_GetSystemAccessAccount_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10104 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_GetSystemAccessAccount_access_mask_
, NDR_POINTER_REF
, "Pointer to Access Mask (lsa_AccountAccessMask)",hf_lsarpc_lsa_GetSystemAccessAccount_access_mask
);
10110 lsarpc_dissect_element_lsa_GetSystemAccessAccount_access_mask_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10112 offset
= lsarpc_dissect_bitmap_lsa_AccountAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_GetSystemAccessAccount_access_mask
, 0);
10117 /* IDL: NTSTATUS lsa_GetSystemAccessAccount( */
10118 /* IDL: [in] [ref] policy_handle *handle, */
10119 /* IDL: [out] [ref] lsa_AccountAccessMask *access_mask */
10123 lsarpc_dissect_lsa_GetSystemAccessAccount_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10127 di
->dcerpc_procedure_name
="lsa_GetSystemAccessAccount";
10128 offset
= lsarpc_dissect_element_lsa_GetSystemAccessAccount_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
10129 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10131 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10134 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10140 lsarpc_dissect_lsa_GetSystemAccessAccount_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10142 di
->dcerpc_procedure_name
="lsa_GetSystemAccessAccount";
10143 offset
= lsarpc_dissect_element_lsa_GetSystemAccessAccount_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10144 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10149 lsarpc_dissect_element_lsa_SetSystemAccessAccount_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10151 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetSystemAccessAccount_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_SetSystemAccessAccount_handle
);
10157 lsarpc_dissect_element_lsa_SetSystemAccessAccount_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10159 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetSystemAccessAccount_handle
, 0);
10165 lsarpc_dissect_element_lsa_SetSystemAccessAccount_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10167 offset
= lsarpc_dissect_bitmap_lsa_AccountAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetSystemAccessAccount_access_mask
, 0);
10172 /* IDL: NTSTATUS lsa_SetSystemAccessAccount( */
10173 /* IDL: [in] [ref] policy_handle *handle, */
10174 /* IDL: [in] lsa_AccountAccessMask access_mask */
10178 lsarpc_dissect_lsa_SetSystemAccessAccount_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10182 di
->dcerpc_procedure_name
="lsa_SetSystemAccessAccount";
10183 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10186 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10192 lsarpc_dissect_lsa_SetSystemAccessAccount_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10194 di
->dcerpc_procedure_name
="lsa_SetSystemAccessAccount";
10195 offset
= lsarpc_dissect_element_lsa_SetSystemAccessAccount_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10196 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10197 offset
= lsarpc_dissect_element_lsa_SetSystemAccessAccount_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
10198 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10203 lsarpc_dissect_element_lsa_OpenTrustedDomain_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10205 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenTrustedDomain_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_OpenTrustedDomain_handle
);
10211 lsarpc_dissect_element_lsa_OpenTrustedDomain_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10213 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenTrustedDomain_handle
, 0);
10219 lsarpc_dissect_element_lsa_OpenTrustedDomain_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10221 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenTrustedDomain_sid_
, NDR_POINTER_REF
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_OpenTrustedDomain_sid
);
10227 lsarpc_dissect_element_lsa_OpenTrustedDomain_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10229 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_OpenTrustedDomain_sid
,0);
10235 lsarpc_dissect_element_lsa_OpenTrustedDomain_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10237 offset
= lsarpc_dissect_bitmap_lsa_TrustedAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenTrustedDomain_access_mask
, 0);
10243 lsarpc_dissect_element_lsa_OpenTrustedDomain_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10245 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenTrustedDomain_trustdom_handle_
, NDR_POINTER_REF
, "Pointer to Trustdom Handle (policy_handle)",hf_lsarpc_lsa_OpenTrustedDomain_trustdom_handle
);
10251 lsarpc_dissect_element_lsa_OpenTrustedDomain_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10253 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenTrustedDomain_trustdom_handle
, PIDL_POLHND_OPEN
|PIDL_POLHND_TYPE_LSA_DOMAIN
);
10258 /* IDL: NTSTATUS lsa_OpenTrustedDomain( */
10259 /* IDL: [in] [ref] policy_handle *handle, */
10260 /* IDL: [in] [ref] dom_sid2 *sid, */
10261 /* IDL: [in] lsa_TrustedAccessMask access_mask, */
10262 /* IDL: [out] [ref] policy_handle *trustdom_handle */
10266 lsarpc_dissect_lsa_OpenTrustedDomain_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10270 di
->dcerpc_procedure_name
="lsa_OpenTrustedDomain";
10271 offset
= lsarpc_dissect_element_lsa_OpenTrustedDomain_trustdom_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10272 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10274 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10277 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10283 lsarpc_dissect_lsa_OpenTrustedDomain_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10285 di
->dcerpc_procedure_name
="lsa_OpenTrustedDomain";
10286 offset
= lsarpc_dissect_element_lsa_OpenTrustedDomain_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10287 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10288 offset
= lsarpc_dissect_element_lsa_OpenTrustedDomain_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
10289 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10290 offset
= lsarpc_dissect_element_lsa_OpenTrustedDomain_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
10291 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10296 lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10298 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_trustdom_handle_
, NDR_POINTER_REF
, "Pointer to Trustdom Handle (policy_handle)",hf_lsarpc_lsa_QueryTrustedDomainInfo_trustdom_handle
);
10304 lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10306 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryTrustedDomainInfo_trustdom_handle
, 0);
10312 lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10314 offset
= lsarpc_dissect_enum_lsa_TrustDomInfoEnum(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryTrustedDomainInfo_level
, 0);
10320 lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10322 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_TrustedDomainInfo)",hf_lsarpc_lsa_QueryTrustedDomainInfo_info
);
10328 lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10330 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_info__
, NDR_POINTER_UNIQUE
, "Pointer to Info (lsa_TrustedDomainInfo)",hf_lsarpc_lsa_QueryTrustedDomainInfo_info
);
10336 lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10338 offset
= lsarpc_dissect_lsa_TrustedDomainInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryTrustedDomainInfo_info
, 0);
10343 /* IDL: NTSTATUS lsa_QueryTrustedDomainInfo( */
10344 /* IDL: [in] [ref] policy_handle *trustdom_handle, */
10345 /* IDL: [in] lsa_TrustDomInfoEnum level, */
10346 /* IDL: [out] [ref] [switch_is(level)] lsa_TrustedDomainInfo **info */
10350 lsarpc_dissect_lsa_QueryTrustedDomainInfo_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10354 di
->dcerpc_procedure_name
="lsa_QueryTrustedDomainInfo";
10355 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
10356 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10358 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10361 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10367 lsarpc_dissect_lsa_QueryTrustedDomainInfo_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10369 di
->dcerpc_procedure_name
="lsa_QueryTrustedDomainInfo";
10370 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_trustdom_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10371 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10372 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfo_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
10373 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10378 lsarpc_dissect_element_lsa_SetInformationTrustedDomain_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10380 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetInformationTrustedDomain_trustdom_handle_
, NDR_POINTER_REF
, "Pointer to Trustdom Handle (policy_handle)",hf_lsarpc_lsa_SetInformationTrustedDomain_trustdom_handle
);
10386 lsarpc_dissect_element_lsa_SetInformationTrustedDomain_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10388 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetInformationTrustedDomain_trustdom_handle
, 0);
10394 lsarpc_dissect_element_lsa_SetInformationTrustedDomain_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10396 offset
= lsarpc_dissect_enum_lsa_TrustDomInfoEnum(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetInformationTrustedDomain_level
, 0);
10402 lsarpc_dissect_element_lsa_SetInformationTrustedDomain_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10404 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetInformationTrustedDomain_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_TrustedDomainInfo)",hf_lsarpc_lsa_SetInformationTrustedDomain_info
);
10410 lsarpc_dissect_element_lsa_SetInformationTrustedDomain_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10412 offset
= lsarpc_dissect_lsa_TrustedDomainInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetInformationTrustedDomain_info
, 0);
10417 /* IDL: NTSTATUS lsa_SetInformationTrustedDomain( */
10418 /* IDL: [in] [ref] policy_handle *trustdom_handle, */
10419 /* IDL: [in] lsa_TrustDomInfoEnum level, */
10420 /* IDL: [in] [ref] [switch_is(level)] lsa_TrustedDomainInfo *info */
10424 lsarpc_dissect_lsa_SetInformationTrustedDomain_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10428 di
->dcerpc_procedure_name
="lsa_SetInformationTrustedDomain";
10429 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10432 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10438 lsarpc_dissect_lsa_SetInformationTrustedDomain_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10440 di
->dcerpc_procedure_name
="lsa_SetInformationTrustedDomain";
10441 offset
= lsarpc_dissect_element_lsa_SetInformationTrustedDomain_trustdom_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10442 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10443 offset
= lsarpc_dissect_element_lsa_SetInformationTrustedDomain_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
10444 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10445 offset
= lsarpc_dissect_element_lsa_SetInformationTrustedDomain_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
10446 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10451 lsarpc_dissect_element_lsa_OpenSecret_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10453 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenSecret_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_OpenSecret_handle
);
10459 lsarpc_dissect_element_lsa_OpenSecret_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10461 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenSecret_handle
, 0);
10467 lsarpc_dissect_element_lsa_OpenSecret_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10469 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_OpenSecret_name
,0);
10475 lsarpc_dissect_element_lsa_OpenSecret_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10477 offset
= lsarpc_dissect_bitmap_lsa_SecretAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenSecret_access_mask
, 0);
10483 lsarpc_dissect_element_lsa_OpenSecret_sec_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10485 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenSecret_sec_handle_
, NDR_POINTER_REF
, "Pointer to Sec Handle (policy_handle)",hf_lsarpc_lsa_OpenSecret_sec_handle
);
10491 lsarpc_dissect_element_lsa_OpenSecret_sec_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10493 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenSecret_sec_handle
, PIDL_POLHND_OPEN
|PIDL_POLHND_TYPE_LSA_SECRET
);
10498 /* IDL: NTSTATUS lsa_OpenSecret( */
10499 /* IDL: [in] [ref] policy_handle *handle, */
10500 /* IDL: [in] lsa_String name, */
10501 /* IDL: [in] lsa_SecretAccessMask access_mask, */
10502 /* IDL: [out] [ref] policy_handle *sec_handle */
10506 lsarpc_dissect_lsa_OpenSecret_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10510 di
->dcerpc_procedure_name
="lsa_OpenSecret";
10511 offset
= lsarpc_dissect_element_lsa_OpenSecret_sec_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10512 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10514 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10517 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10523 lsarpc_dissect_lsa_OpenSecret_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10525 di
->dcerpc_procedure_name
="lsa_OpenSecret";
10526 offset
= lsarpc_dissect_element_lsa_OpenSecret_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10527 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10528 offset
= lsarpc_dissect_element_lsa_OpenSecret_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
10529 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10530 offset
= lsarpc_dissect_element_lsa_OpenSecret_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
10531 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10536 lsarpc_dissect_element_lsa_SetSecret_sec_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10538 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetSecret_sec_handle_
, NDR_POINTER_REF
, "Pointer to Sec Handle (policy_handle)",hf_lsarpc_lsa_SetSecret_sec_handle
);
10544 lsarpc_dissect_element_lsa_SetSecret_sec_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10546 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetSecret_sec_handle
, 0);
10552 lsarpc_dissect_element_lsa_SetSecret_new_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10554 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetSecret_new_val_
, NDR_POINTER_UNIQUE
, "Pointer to New Val (lsa_DATA_BUF)",hf_lsarpc_lsa_SetSecret_new_val
);
10560 lsarpc_dissect_element_lsa_SetSecret_new_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10562 offset
= lsarpc_dissect_struct_lsa_DATA_BUF(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_SetSecret_new_val
,0);
10568 lsarpc_dissect_element_lsa_SetSecret_old_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10570 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetSecret_old_val_
, NDR_POINTER_UNIQUE
, "Pointer to Old Val (lsa_DATA_BUF)",hf_lsarpc_lsa_SetSecret_old_val
);
10576 lsarpc_dissect_element_lsa_SetSecret_old_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10578 offset
= lsarpc_dissect_struct_lsa_DATA_BUF(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_SetSecret_old_val
,0);
10583 /* IDL: NTSTATUS lsa_SetSecret( */
10584 /* IDL: [in] [ref] policy_handle *sec_handle, */
10585 /* IDL: [in] [unique(1)] lsa_DATA_BUF *new_val, */
10586 /* IDL: [in] [unique(1)] lsa_DATA_BUF *old_val */
10590 lsarpc_dissect_lsa_SetSecret_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10594 di
->dcerpc_procedure_name
="lsa_SetSecret";
10595 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10598 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10604 lsarpc_dissect_lsa_SetSecret_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10606 di
->dcerpc_procedure_name
="lsa_SetSecret";
10607 offset
= lsarpc_dissect_element_lsa_SetSecret_sec_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10608 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10609 offset
= lsarpc_dissect_element_lsa_SetSecret_new_val(tvb
, offset
, pinfo
, tree
, di
, drep
);
10610 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10611 offset
= lsarpc_dissect_element_lsa_SetSecret_old_val(tvb
, offset
, pinfo
, tree
, di
, drep
);
10612 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10617 lsarpc_dissect_element_lsa_QuerySecret_sec_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10619 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QuerySecret_sec_handle_
, NDR_POINTER_REF
, "Pointer to Sec Handle (policy_handle)",hf_lsarpc_lsa_QuerySecret_sec_handle
);
10625 lsarpc_dissect_element_lsa_QuerySecret_sec_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10627 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QuerySecret_sec_handle
, 0);
10633 lsarpc_dissect_element_lsa_QuerySecret_new_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10635 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QuerySecret_new_val_
, NDR_POINTER_UNIQUE
, "Pointer to New Val (lsa_DATA_BUF_PTR)",hf_lsarpc_lsa_QuerySecret_new_val
);
10641 lsarpc_dissect_element_lsa_QuerySecret_new_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10643 offset
= lsarpc_dissect_struct_lsa_DATA_BUF_PTR(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_QuerySecret_new_val
,0);
10649 lsarpc_dissect_element_lsa_QuerySecret_new_mtime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10651 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QuerySecret_new_mtime_
, NDR_POINTER_UNIQUE
, "Pointer to New Mtime (NTTIME_hyper)",hf_lsarpc_lsa_QuerySecret_new_mtime
);
10657 lsarpc_dissect_element_lsa_QuerySecret_new_mtime_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10659 offset
= dissect_ndr_nt_NTTIME_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QuerySecret_new_mtime
);
10665 lsarpc_dissect_element_lsa_QuerySecret_old_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10667 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QuerySecret_old_val_
, NDR_POINTER_UNIQUE
, "Pointer to Old Val (lsa_DATA_BUF_PTR)",hf_lsarpc_lsa_QuerySecret_old_val
);
10673 lsarpc_dissect_element_lsa_QuerySecret_old_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10675 offset
= lsarpc_dissect_struct_lsa_DATA_BUF_PTR(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_QuerySecret_old_val
,0);
10681 lsarpc_dissect_element_lsa_QuerySecret_old_mtime(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10683 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QuerySecret_old_mtime_
, NDR_POINTER_UNIQUE
, "Pointer to Old Mtime (NTTIME_hyper)",hf_lsarpc_lsa_QuerySecret_old_mtime
);
10689 lsarpc_dissect_element_lsa_QuerySecret_old_mtime_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10691 offset
= dissect_ndr_nt_NTTIME_hyper(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QuerySecret_old_mtime
);
10696 /* IDL: NTSTATUS lsa_QuerySecret( */
10697 /* IDL: [in] [ref] policy_handle *sec_handle, */
10698 /* IDL: [in] [out] [unique(1)] lsa_DATA_BUF_PTR *new_val, */
10699 /* IDL: [in] [out] [unique(1)] NTTIME_hyper *new_mtime, */
10700 /* IDL: [in] [out] [unique(1)] lsa_DATA_BUF_PTR *old_val, */
10701 /* IDL: [in] [out] [unique(1)] NTTIME_hyper *old_mtime */
10705 lsarpc_dissect_lsa_QuerySecret_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10709 di
->dcerpc_procedure_name
="lsa_QuerySecret";
10710 offset
= lsarpc_dissect_element_lsa_QuerySecret_new_val(tvb
, offset
, pinfo
, tree
, di
, drep
);
10711 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10713 offset
= lsarpc_dissect_element_lsa_QuerySecret_new_mtime(tvb
, offset
, pinfo
, tree
, di
, drep
);
10714 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10716 offset
= lsarpc_dissect_element_lsa_QuerySecret_old_val(tvb
, offset
, pinfo
, tree
, di
, drep
);
10717 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10719 offset
= lsarpc_dissect_element_lsa_QuerySecret_old_mtime(tvb
, offset
, pinfo
, tree
, di
, drep
);
10720 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10722 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10725 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10731 lsarpc_dissect_lsa_QuerySecret_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10733 di
->dcerpc_procedure_name
="lsa_QuerySecret";
10734 offset
= lsarpc_dissect_element_lsa_QuerySecret_sec_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10735 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10736 offset
= lsarpc_dissect_element_lsa_QuerySecret_new_val(tvb
, offset
, pinfo
, tree
, di
, drep
);
10737 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10738 offset
= lsarpc_dissect_element_lsa_QuerySecret_new_mtime(tvb
, offset
, pinfo
, tree
, di
, drep
);
10739 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10740 offset
= lsarpc_dissect_element_lsa_QuerySecret_old_val(tvb
, offset
, pinfo
, tree
, di
, drep
);
10741 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10742 offset
= lsarpc_dissect_element_lsa_QuerySecret_old_mtime(tvb
, offset
, pinfo
, tree
, di
, drep
);
10743 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10748 lsarpc_dissect_element_lsa_LookupPrivValue_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10750 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivValue_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_LookupPrivValue_handle
);
10756 lsarpc_dissect_element_lsa_LookupPrivValue_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10758 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupPrivValue_handle
, 0);
10764 lsarpc_dissect_element_lsa_LookupPrivValue_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10766 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivValue_name_
, NDR_POINTER_REF
, "Pointer to Name (lsa_String)",hf_lsarpc_lsa_LookupPrivValue_name
);
10772 lsarpc_dissect_element_lsa_LookupPrivValue_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10774 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupPrivValue_name
,0);
10780 lsarpc_dissect_element_lsa_LookupPrivValue_luid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10782 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivValue_luid_
, NDR_POINTER_REF
, "Pointer to Luid (lsa_LUID)",hf_lsarpc_lsa_LookupPrivValue_luid
);
10788 lsarpc_dissect_element_lsa_LookupPrivValue_luid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10790 offset
= lsarpc_dissect_struct_lsa_LUID(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupPrivValue_luid
,0);
10795 /* IDL: NTSTATUS lsa_LookupPrivValue( */
10796 /* IDL: [in] [ref] policy_handle *handle, */
10797 /* IDL: [in] [ref] lsa_String *name, */
10798 /* IDL: [out] [ref] lsa_LUID *luid */
10802 lsarpc_dissect_lsa_LookupPrivValue_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10806 di
->dcerpc_procedure_name
="lsa_LookupPrivValue";
10807 offset
= lsarpc_dissect_element_lsa_LookupPrivValue_luid(tvb
, offset
, pinfo
, tree
, di
, drep
);
10808 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10810 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10813 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10819 lsarpc_dissect_lsa_LookupPrivValue_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10821 di
->dcerpc_procedure_name
="lsa_LookupPrivValue";
10822 offset
= lsarpc_dissect_element_lsa_LookupPrivValue_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10823 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10824 offset
= lsarpc_dissect_element_lsa_LookupPrivValue_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
10825 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10830 lsarpc_dissect_element_lsa_LookupPrivName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10832 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivName_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_LookupPrivName_handle
);
10838 lsarpc_dissect_element_lsa_LookupPrivName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10840 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupPrivName_handle
, 0);
10846 lsarpc_dissect_element_lsa_LookupPrivName_luid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10848 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivName_luid_
, NDR_POINTER_REF
, "Pointer to Luid (lsa_LUID)",hf_lsarpc_lsa_LookupPrivName_luid
);
10854 lsarpc_dissect_element_lsa_LookupPrivName_luid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10856 offset
= lsarpc_dissect_struct_lsa_LUID(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupPrivName_luid
,0);
10862 lsarpc_dissect_element_lsa_LookupPrivName_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10864 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivName_name_
, NDR_POINTER_REF
, "Pointer to Name (lsa_StringLarge)",hf_lsarpc_lsa_LookupPrivName_name
);
10870 lsarpc_dissect_element_lsa_LookupPrivName_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10872 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivName_name__
, NDR_POINTER_UNIQUE
, "Pointer to Name (lsa_StringLarge)",hf_lsarpc_lsa_LookupPrivName_name
);
10878 lsarpc_dissect_element_lsa_LookupPrivName_name__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10880 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupPrivName_name
,0);
10885 /* IDL: NTSTATUS lsa_LookupPrivName( */
10886 /* IDL: [in] [ref] policy_handle *handle, */
10887 /* IDL: [in] [ref] lsa_LUID *luid, */
10888 /* IDL: [out] [ref] lsa_StringLarge **name */
10892 lsarpc_dissect_lsa_LookupPrivName_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10896 di
->dcerpc_procedure_name
="lsa_LookupPrivName";
10897 offset
= lsarpc_dissect_element_lsa_LookupPrivName_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
10898 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10900 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
10903 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
10909 lsarpc_dissect_lsa_LookupPrivName_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10911 di
->dcerpc_procedure_name
="lsa_LookupPrivName";
10912 offset
= lsarpc_dissect_element_lsa_LookupPrivName_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
10913 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10914 offset
= lsarpc_dissect_element_lsa_LookupPrivName_luid(tvb
, offset
, pinfo
, tree
, di
, drep
);
10915 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
10920 lsarpc_dissect_element_lsa_LookupPrivDisplayName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10922 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivDisplayName_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_LookupPrivDisplayName_handle
);
10928 lsarpc_dissect_element_lsa_LookupPrivDisplayName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10930 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupPrivDisplayName_handle
, 0);
10936 lsarpc_dissect_element_lsa_LookupPrivDisplayName_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10938 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivDisplayName_name_
, NDR_POINTER_REF
, "Pointer to Name (lsa_String)",hf_lsarpc_lsa_LookupPrivDisplayName_name
);
10944 lsarpc_dissect_element_lsa_LookupPrivDisplayName_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10946 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupPrivDisplayName_name
,0);
10952 lsarpc_dissect_element_lsa_LookupPrivDisplayName_language_id(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10954 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupPrivDisplayName_language_id
, 0);
10960 lsarpc_dissect_element_lsa_LookupPrivDisplayName_language_id_sys(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10962 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupPrivDisplayName_language_id_sys
, 0);
10968 lsarpc_dissect_element_lsa_LookupPrivDisplayName_disp_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10970 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivDisplayName_disp_name_
, NDR_POINTER_REF
, "Pointer to Disp Name (lsa_StringLarge)",hf_lsarpc_lsa_LookupPrivDisplayName_disp_name
);
10976 lsarpc_dissect_element_lsa_LookupPrivDisplayName_disp_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10978 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivDisplayName_disp_name__
, NDR_POINTER_UNIQUE
, "Pointer to Disp Name (lsa_StringLarge)",hf_lsarpc_lsa_LookupPrivDisplayName_disp_name
);
10984 lsarpc_dissect_element_lsa_LookupPrivDisplayName_disp_name__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10986 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupPrivDisplayName_disp_name
,0);
10992 lsarpc_dissect_element_lsa_LookupPrivDisplayName_returned_language_id(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
10994 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupPrivDisplayName_returned_language_id_
, NDR_POINTER_REF
, "Pointer to Returned Language Id (uint16)",hf_lsarpc_lsa_LookupPrivDisplayName_returned_language_id
);
11000 lsarpc_dissect_element_lsa_LookupPrivDisplayName_returned_language_id_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11002 offset
= PIDL_dissect_uint16(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupPrivDisplayName_returned_language_id
, 0);
11007 /* IDL: NTSTATUS lsa_LookupPrivDisplayName( */
11008 /* IDL: [in] [ref] policy_handle *handle, */
11009 /* IDL: [in] [ref] lsa_String *name, */
11010 /* IDL: [in] uint16 language_id, */
11011 /* IDL: [in] uint16 language_id_sys, */
11012 /* IDL: [out] [ref] lsa_StringLarge **disp_name, */
11013 /* IDL: [out] [ref] uint16 *returned_language_id */
11017 lsarpc_dissect_lsa_LookupPrivDisplayName_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11021 di
->dcerpc_procedure_name
="lsa_LookupPrivDisplayName";
11022 offset
= lsarpc_dissect_element_lsa_LookupPrivDisplayName_disp_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
11023 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11025 offset
= lsarpc_dissect_element_lsa_LookupPrivDisplayName_returned_language_id(tvb
, offset
, pinfo
, tree
, di
, drep
);
11026 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11028 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11031 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11037 lsarpc_dissect_lsa_LookupPrivDisplayName_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11039 di
->dcerpc_procedure_name
="lsa_LookupPrivDisplayName";
11040 offset
= lsarpc_dissect_element_lsa_LookupPrivDisplayName_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11041 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11042 offset
= lsarpc_dissect_element_lsa_LookupPrivDisplayName_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
11043 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11044 offset
= lsarpc_dissect_element_lsa_LookupPrivDisplayName_language_id(tvb
, offset
, pinfo
, tree
, di
, drep
);
11045 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11046 offset
= lsarpc_dissect_element_lsa_LookupPrivDisplayName_language_id_sys(tvb
, offset
, pinfo
, tree
, di
, drep
);
11047 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11052 lsarpc_dissect_element_lsa_DeleteObject_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11054 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DeleteObject_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_DeleteObject_handle
);
11060 lsarpc_dissect_element_lsa_DeleteObject_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11062 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DeleteObject_handle
, 0);
11067 /* IDL: NTSTATUS lsa_DeleteObject( */
11068 /* IDL: [in] [out] [ref] policy_handle *handle */
11072 lsarpc_dissect_lsa_DeleteObject_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11076 di
->dcerpc_procedure_name
="lsa_DeleteObject";
11077 offset
= lsarpc_dissect_element_lsa_DeleteObject_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11078 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11080 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11083 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11089 lsarpc_dissect_lsa_DeleteObject_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11091 di
->dcerpc_procedure_name
="lsa_DeleteObject";
11092 offset
= lsarpc_dissect_element_lsa_DeleteObject_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11093 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11098 lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11100 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_EnumAccountsWithUserRight_handle
);
11106 lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11108 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumAccountsWithUserRight_handle
, 0);
11114 lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11116 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_name_
, NDR_POINTER_UNIQUE
, "Pointer to Name (lsa_String)",hf_lsarpc_lsa_EnumAccountsWithUserRight_name
);
11122 lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11124 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_EnumAccountsWithUserRight_name
,0);
11130 lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11132 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_sids_
, NDR_POINTER_REF
, "Pointer to Sids (lsa_SidArray)",hf_lsarpc_lsa_EnumAccountsWithUserRight_sids
);
11138 lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11140 offset
= lsarpc_dissect_struct_lsa_SidArray(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_EnumAccountsWithUserRight_sids
,0);
11145 /* IDL: NTSTATUS lsa_EnumAccountsWithUserRight( */
11146 /* IDL: [in] [ref] policy_handle *handle, */
11147 /* IDL: [in] [unique(1)] lsa_String *name, */
11148 /* IDL: [out] [ref] lsa_SidArray *sids */
11152 lsarpc_dissect_lsa_EnumAccountsWithUserRight_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11156 di
->dcerpc_procedure_name
="lsa_EnumAccountsWithUserRight";
11157 offset
= lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
11158 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11160 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11163 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11169 lsarpc_dissect_lsa_EnumAccountsWithUserRight_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11171 di
->dcerpc_procedure_name
="lsa_EnumAccountsWithUserRight";
11172 offset
= lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11173 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11174 offset
= lsarpc_dissect_element_lsa_EnumAccountsWithUserRight_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
11175 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11180 lsarpc_dissect_element_lsa_EnumAccountRights_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11182 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumAccountRights_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_EnumAccountRights_handle
);
11188 lsarpc_dissect_element_lsa_EnumAccountRights_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11190 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumAccountRights_handle
, 0);
11196 lsarpc_dissect_element_lsa_EnumAccountRights_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11198 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumAccountRights_sid_
, NDR_POINTER_REF
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_EnumAccountRights_sid
);
11204 lsarpc_dissect_element_lsa_EnumAccountRights_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11206 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_EnumAccountRights_sid
,0);
11212 lsarpc_dissect_element_lsa_EnumAccountRights_rights(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11214 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumAccountRights_rights_
, NDR_POINTER_REF
, "Pointer to Rights (lsa_RightSet)",hf_lsarpc_lsa_EnumAccountRights_rights
);
11220 lsarpc_dissect_element_lsa_EnumAccountRights_rights_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11222 offset
= lsarpc_dissect_struct_lsa_RightSet(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_EnumAccountRights_rights
,0);
11227 /* IDL: NTSTATUS lsa_EnumAccountRights( */
11228 /* IDL: [in] [ref] policy_handle *handle, */
11229 /* IDL: [in] [ref] dom_sid2 *sid, */
11230 /* IDL: [out] [ref] lsa_RightSet *rights */
11234 lsarpc_dissect_lsa_EnumAccountRights_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11238 di
->dcerpc_procedure_name
="lsa_EnumAccountRights";
11239 offset
= lsarpc_dissect_element_lsa_EnumAccountRights_rights(tvb
, offset
, pinfo
, tree
, di
, drep
);
11240 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11242 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11245 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11251 lsarpc_dissect_lsa_EnumAccountRights_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11253 di
->dcerpc_procedure_name
="lsa_EnumAccountRights";
11254 offset
= lsarpc_dissect_element_lsa_EnumAccountRights_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11255 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11256 offset
= lsarpc_dissect_element_lsa_EnumAccountRights_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
11257 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11262 lsarpc_dissect_element_lsa_AddAccountRights_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11264 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AddAccountRights_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_AddAccountRights_handle
);
11270 lsarpc_dissect_element_lsa_AddAccountRights_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11272 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_AddAccountRights_handle
, 0);
11278 lsarpc_dissect_element_lsa_AddAccountRights_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11280 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AddAccountRights_sid_
, NDR_POINTER_REF
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_AddAccountRights_sid
);
11286 lsarpc_dissect_element_lsa_AddAccountRights_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11288 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_AddAccountRights_sid
,0);
11294 lsarpc_dissect_element_lsa_AddAccountRights_rights(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11296 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_AddAccountRights_rights_
, NDR_POINTER_REF
, "Pointer to Rights (lsa_RightSet)",hf_lsarpc_lsa_AddAccountRights_rights
);
11302 lsarpc_dissect_element_lsa_AddAccountRights_rights_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11304 offset
= lsarpc_dissect_struct_lsa_RightSet(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_AddAccountRights_rights
,0);
11309 /* IDL: NTSTATUS lsa_AddAccountRights( */
11310 /* IDL: [in] [ref] policy_handle *handle, */
11311 /* IDL: [in] [ref] dom_sid2 *sid, */
11312 /* IDL: [in] [ref] lsa_RightSet *rights */
11316 lsarpc_dissect_lsa_AddAccountRights_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11320 di
->dcerpc_procedure_name
="lsa_AddAccountRights";
11321 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11324 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11330 lsarpc_dissect_lsa_AddAccountRights_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11332 di
->dcerpc_procedure_name
="lsa_AddAccountRights";
11333 offset
= lsarpc_dissect_element_lsa_AddAccountRights_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11334 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11335 offset
= lsarpc_dissect_element_lsa_AddAccountRights_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
11336 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11337 offset
= lsarpc_dissect_element_lsa_AddAccountRights_rights(tvb
, offset
, pinfo
, tree
, di
, drep
);
11338 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11343 lsarpc_dissect_element_lsa_RemoveAccountRights_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11345 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RemoveAccountRights_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_RemoveAccountRights_handle
);
11351 lsarpc_dissect_element_lsa_RemoveAccountRights_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11353 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_RemoveAccountRights_handle
, 0);
11359 lsarpc_dissect_element_lsa_RemoveAccountRights_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11361 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RemoveAccountRights_sid_
, NDR_POINTER_REF
, "Pointer to Sid (dom_sid2)",hf_lsarpc_lsa_RemoveAccountRights_sid
);
11367 lsarpc_dissect_element_lsa_RemoveAccountRights_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11369 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_RemoveAccountRights_sid
,0);
11375 lsarpc_dissect_element_lsa_RemoveAccountRights_remove_all(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11377 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_RemoveAccountRights_remove_all
, 0);
11383 lsarpc_dissect_element_lsa_RemoveAccountRights_rights(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11385 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RemoveAccountRights_rights_
, NDR_POINTER_REF
, "Pointer to Rights (lsa_RightSet)",hf_lsarpc_lsa_RemoveAccountRights_rights
);
11391 lsarpc_dissect_element_lsa_RemoveAccountRights_rights_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11393 offset
= lsarpc_dissect_struct_lsa_RightSet(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_RemoveAccountRights_rights
,0);
11398 /* IDL: NTSTATUS lsa_RemoveAccountRights( */
11399 /* IDL: [in] [ref] policy_handle *handle, */
11400 /* IDL: [in] [ref] dom_sid2 *sid, */
11401 /* IDL: [in] uint8 remove_all, */
11402 /* IDL: [in] [ref] lsa_RightSet *rights */
11406 lsarpc_dissect_lsa_RemoveAccountRights_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11410 di
->dcerpc_procedure_name
="lsa_RemoveAccountRights";
11411 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11414 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11420 lsarpc_dissect_lsa_RemoveAccountRights_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11422 di
->dcerpc_procedure_name
="lsa_RemoveAccountRights";
11423 offset
= lsarpc_dissect_element_lsa_RemoveAccountRights_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11424 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11425 offset
= lsarpc_dissect_element_lsa_RemoveAccountRights_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
11426 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11427 offset
= lsarpc_dissect_element_lsa_RemoveAccountRights_remove_all(tvb
, offset
, pinfo
, tree
, di
, drep
);
11428 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11429 offset
= lsarpc_dissect_element_lsa_RemoveAccountRights_rights(tvb
, offset
, pinfo
, tree
, di
, drep
);
11430 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11435 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11437 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_handle
);
11443 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11445 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_handle
, 0);
11451 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_dom_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11453 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_dom_sid_
, NDR_POINTER_REF
, "Pointer to Dom Sid (dom_sid2)",hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_dom_sid
);
11459 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_dom_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11461 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_dom_sid
,0);
11467 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11469 offset
= lsarpc_dissect_enum_lsa_TrustDomInfoEnum(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_level
, 0);
11475 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11477 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_TrustedDomainInfo)",hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_info
);
11483 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11485 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_info__
, NDR_POINTER_UNIQUE
, "Pointer to Info (lsa_TrustedDomainInfo)",hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_info
);
11491 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11493 offset
= lsarpc_dissect_lsa_TrustedDomainInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_info
, 0);
11498 /* IDL: NTSTATUS lsa_QueryTrustedDomainInfoBySid( */
11499 /* IDL: [in] [ref] policy_handle *handle, */
11500 /* IDL: [in] [ref] dom_sid2 *dom_sid, */
11501 /* IDL: [in] lsa_TrustDomInfoEnum level, */
11502 /* IDL: [out] [ref] [switch_is(level)] lsa_TrustedDomainInfo **info */
11506 lsarpc_dissect_lsa_QueryTrustedDomainInfoBySid_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11510 di
->dcerpc_procedure_name
="lsa_QueryTrustedDomainInfoBySid";
11511 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
11512 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11514 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11517 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11523 lsarpc_dissect_lsa_QueryTrustedDomainInfoBySid_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11525 di
->dcerpc_procedure_name
="lsa_QueryTrustedDomainInfoBySid";
11526 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11527 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11528 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_dom_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
11529 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11530 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfoBySid_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
11531 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11536 lsarpc_dissect_element_lsa_SetTrustedDomainInfo_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11538 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetTrustedDomainInfo_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_SetTrustedDomainInfo_handle
);
11544 lsarpc_dissect_element_lsa_SetTrustedDomainInfo_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11546 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetTrustedDomainInfo_handle
, 0);
11552 lsarpc_dissect_element_lsa_SetTrustedDomainInfo_dom_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11554 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetTrustedDomainInfo_dom_sid_
, NDR_POINTER_REF
, "Pointer to Dom Sid (dom_sid2)",hf_lsarpc_lsa_SetTrustedDomainInfo_dom_sid
);
11560 lsarpc_dissect_element_lsa_SetTrustedDomainInfo_dom_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11562 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_SetTrustedDomainInfo_dom_sid
,0);
11568 lsarpc_dissect_element_lsa_SetTrustedDomainInfo_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11570 offset
= lsarpc_dissect_enum_lsa_TrustDomInfoEnum(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetTrustedDomainInfo_level
, 0);
11576 lsarpc_dissect_element_lsa_SetTrustedDomainInfo_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11578 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetTrustedDomainInfo_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_TrustedDomainInfo)",hf_lsarpc_lsa_SetTrustedDomainInfo_info
);
11584 lsarpc_dissect_element_lsa_SetTrustedDomainInfo_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11586 offset
= lsarpc_dissect_lsa_TrustedDomainInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetTrustedDomainInfo_info
, 0);
11591 /* IDL: NTSTATUS lsa_SetTrustedDomainInfo( */
11592 /* IDL: [in] [ref] policy_handle *handle, */
11593 /* IDL: [in] [ref] dom_sid2 *dom_sid, */
11594 /* IDL: [in] lsa_TrustDomInfoEnum level, */
11595 /* IDL: [in] [ref] [switch_is(level)] lsa_TrustedDomainInfo *info */
11599 lsarpc_dissect_lsa_SetTrustedDomainInfo_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11603 di
->dcerpc_procedure_name
="lsa_SetTrustedDomainInfo";
11604 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11607 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11613 lsarpc_dissect_lsa_SetTrustedDomainInfo_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11615 di
->dcerpc_procedure_name
="lsa_SetTrustedDomainInfo";
11616 offset
= lsarpc_dissect_element_lsa_SetTrustedDomainInfo_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11617 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11618 offset
= lsarpc_dissect_element_lsa_SetTrustedDomainInfo_dom_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
11619 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11620 offset
= lsarpc_dissect_element_lsa_SetTrustedDomainInfo_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
11621 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11622 offset
= lsarpc_dissect_element_lsa_SetTrustedDomainInfo_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
11623 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11628 lsarpc_dissect_element_lsa_DeleteTrustedDomain_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11630 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DeleteTrustedDomain_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_DeleteTrustedDomain_handle
);
11636 lsarpc_dissect_element_lsa_DeleteTrustedDomain_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11638 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_DeleteTrustedDomain_handle
, 0);
11644 lsarpc_dissect_element_lsa_DeleteTrustedDomain_dom_sid(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11646 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_DeleteTrustedDomain_dom_sid_
, NDR_POINTER_REF
, "Pointer to Dom Sid (dom_sid2)",hf_lsarpc_lsa_DeleteTrustedDomain_dom_sid
);
11652 lsarpc_dissect_element_lsa_DeleteTrustedDomain_dom_sid_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11654 offset
= lsarpc_dissect_struct_dom_sid2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_DeleteTrustedDomain_dom_sid
,0);
11659 /* IDL: NTSTATUS lsa_DeleteTrustedDomain( */
11660 /* IDL: [in] [ref] policy_handle *handle, */
11661 /* IDL: [in] [ref] dom_sid2 *dom_sid */
11665 lsarpc_dissect_lsa_DeleteTrustedDomain_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11669 di
->dcerpc_procedure_name
="lsa_DeleteTrustedDomain";
11670 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11673 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11679 lsarpc_dissect_lsa_DeleteTrustedDomain_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11681 di
->dcerpc_procedure_name
="lsa_DeleteTrustedDomain";
11682 offset
= lsarpc_dissect_element_lsa_DeleteTrustedDomain_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11683 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11684 offset
= lsarpc_dissect_element_lsa_DeleteTrustedDomain_dom_sid(tvb
, offset
, pinfo
, tree
, di
, drep
);
11685 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11690 lsarpc_dissect_element_lsa_StorePrivateData_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11692 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_StorePrivateData_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_StorePrivateData_handle
);
11698 lsarpc_dissect_element_lsa_StorePrivateData_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11700 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_StorePrivateData_handle
, 0);
11706 lsarpc_dissect_element_lsa_StorePrivateData_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11708 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_StorePrivateData_name_
, NDR_POINTER_REF
, "Pointer to Name (lsa_String)",hf_lsarpc_lsa_StorePrivateData_name
);
11714 lsarpc_dissect_element_lsa_StorePrivateData_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11716 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_StorePrivateData_name
,0);
11722 lsarpc_dissect_element_lsa_StorePrivateData_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11724 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_StorePrivateData_val_
, NDR_POINTER_UNIQUE
, "Pointer to Val (lsa_DATA_BUF)",hf_lsarpc_lsa_StorePrivateData_val
);
11730 lsarpc_dissect_element_lsa_StorePrivateData_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11732 offset
= lsarpc_dissect_struct_lsa_DATA_BUF(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_StorePrivateData_val
,0);
11737 /* IDL: NTSTATUS lsa_StorePrivateData( */
11738 /* IDL: [in] [ref] policy_handle *handle, */
11739 /* IDL: [in] [ref] lsa_String *name, */
11740 /* IDL: [in] [unique(1)] lsa_DATA_BUF *val */
11744 lsarpc_dissect_lsa_StorePrivateData_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11748 di
->dcerpc_procedure_name
="lsa_StorePrivateData";
11749 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11752 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11758 lsarpc_dissect_lsa_StorePrivateData_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11760 di
->dcerpc_procedure_name
="lsa_StorePrivateData";
11761 offset
= lsarpc_dissect_element_lsa_StorePrivateData_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11762 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11763 offset
= lsarpc_dissect_element_lsa_StorePrivateData_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
11764 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11765 offset
= lsarpc_dissect_element_lsa_StorePrivateData_val(tvb
, offset
, pinfo
, tree
, di
, drep
);
11766 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11771 lsarpc_dissect_element_lsa_RetrievePrivateData_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11773 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RetrievePrivateData_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_RetrievePrivateData_handle
);
11779 lsarpc_dissect_element_lsa_RetrievePrivateData_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11781 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_RetrievePrivateData_handle
, 0);
11787 lsarpc_dissect_element_lsa_RetrievePrivateData_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11789 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RetrievePrivateData_name_
, NDR_POINTER_REF
, "Pointer to Name (lsa_String)",hf_lsarpc_lsa_RetrievePrivateData_name
);
11795 lsarpc_dissect_element_lsa_RetrievePrivateData_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11797 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_RetrievePrivateData_name
,0);
11803 lsarpc_dissect_element_lsa_RetrievePrivateData_val(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11805 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RetrievePrivateData_val_
, NDR_POINTER_REF
, "Pointer to Val (lsa_DATA_BUF)",hf_lsarpc_lsa_RetrievePrivateData_val
);
11811 lsarpc_dissect_element_lsa_RetrievePrivateData_val_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11813 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_RetrievePrivateData_val__
, NDR_POINTER_UNIQUE
, "Pointer to Val (lsa_DATA_BUF)",hf_lsarpc_lsa_RetrievePrivateData_val
);
11819 lsarpc_dissect_element_lsa_RetrievePrivateData_val__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11821 offset
= lsarpc_dissect_struct_lsa_DATA_BUF(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_RetrievePrivateData_val
,0);
11826 /* IDL: NTSTATUS lsa_RetrievePrivateData( */
11827 /* IDL: [in] [ref] policy_handle *handle, */
11828 /* IDL: [in] [ref] lsa_String *name, */
11829 /* IDL: [in] [out] [ref] lsa_DATA_BUF **val */
11833 lsarpc_dissect_lsa_RetrievePrivateData_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11837 di
->dcerpc_procedure_name
="lsa_RetrievePrivateData";
11838 offset
= lsarpc_dissect_element_lsa_RetrievePrivateData_val(tvb
, offset
, pinfo
, tree
, di
, drep
);
11839 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11841 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11844 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11850 lsarpc_dissect_lsa_RetrievePrivateData_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11852 di
->dcerpc_procedure_name
="lsa_RetrievePrivateData";
11853 offset
= lsarpc_dissect_element_lsa_RetrievePrivateData_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11854 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11855 offset
= lsarpc_dissect_element_lsa_RetrievePrivateData_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
11856 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11857 offset
= lsarpc_dissect_element_lsa_RetrievePrivateData_val(tvb
, offset
, pinfo
, tree
, di
, drep
);
11858 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11863 lsarpc_dissect_element_lsa_OpenPolicy2_system_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11865 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy2_system_name_
, NDR_POINTER_UNIQUE
, "Pointer to System Name (uint16)",hf_lsarpc_lsa_OpenPolicy2_system_name
);
11871 lsarpc_dissect_element_lsa_OpenPolicy2_system_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11875 offset
= dissect_ndr_cvstring(tvb
, offset
, pinfo
, tree
, di
, drep
, sizeof(uint16_t), hf_lsarpc_lsa_OpenPolicy2_system_name
, false, &data
);
11876 proto_item_append_text(tree
, ": %s", data
);
11882 lsarpc_dissect_element_lsa_OpenPolicy2_attr(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11884 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy2_attr_
, NDR_POINTER_REF
, "Pointer to Attr (lsa_ObjectAttribute)",hf_lsarpc_lsa_OpenPolicy2_attr
);
11890 lsarpc_dissect_element_lsa_OpenPolicy2_attr_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11892 offset
= lsarpc_dissect_struct_lsa_ObjectAttribute(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_OpenPolicy2_attr
,0);
11898 lsarpc_dissect_element_lsa_OpenPolicy2_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11900 offset
= lsarpc_dissect_bitmap_lsa_PolicyAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy2_access_mask
, 0);
11906 lsarpc_dissect_element_lsa_OpenPolicy2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11908 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy2_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_OpenPolicy2_handle
);
11914 lsarpc_dissect_element_lsa_OpenPolicy2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11916 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy2_handle
, PIDL_POLHND_OPEN
|PIDL_POLHND_TYPE_LSA_POLICY
);
11921 /* IDL: NTSTATUS lsa_OpenPolicy2( */
11922 /* IDL: [charset(UTF16)] [in] [unique(1)] uint16 *system_name, */
11923 /* IDL: [in] [ref] lsa_ObjectAttribute *attr, */
11924 /* IDL: [in] lsa_PolicyAccessMask access_mask, */
11925 /* IDL: [out] [ref] policy_handle *handle */
11929 lsarpc_dissect_lsa_OpenPolicy2_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11933 di
->dcerpc_procedure_name
="lsa_OpenPolicy2";
11934 offset
= lsarpc_dissect_element_lsa_OpenPolicy2_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
11935 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11937 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
11940 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
11946 lsarpc_dissect_lsa_OpenPolicy2_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11948 di
->dcerpc_procedure_name
="lsa_OpenPolicy2";
11949 offset
= lsarpc_dissect_element_lsa_OpenPolicy2_system_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
11950 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11951 offset
= lsarpc_dissect_element_lsa_OpenPolicy2_attr(tvb
, offset
, pinfo
, tree
, di
, drep
);
11952 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11953 offset
= lsarpc_dissect_element_lsa_OpenPolicy2_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
11954 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
11959 lsarpc_dissect_element_lsa_GetUserName_system_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11961 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_GetUserName_system_name_
, NDR_POINTER_UNIQUE
, "Pointer to System Name (uint16)",hf_lsarpc_lsa_GetUserName_system_name
);
11967 lsarpc_dissect_element_lsa_GetUserName_system_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11971 offset
= dissect_ndr_cvstring(tvb
, offset
, pinfo
, tree
, di
, drep
, sizeof(uint16_t), hf_lsarpc_lsa_GetUserName_system_name
, false, &data
);
11972 proto_item_append_text(tree
, ": %s", data
);
11978 lsarpc_dissect_element_lsa_GetUserName_account_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11980 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_GetUserName_account_name_
, NDR_POINTER_REF
, "Pointer to Account Name (lsa_String)",hf_lsarpc_lsa_GetUserName_account_name
);
11986 lsarpc_dissect_element_lsa_GetUserName_account_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11988 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_GetUserName_account_name__
, NDR_POINTER_UNIQUE
, "Pointer to Account Name (lsa_String)",hf_lsarpc_lsa_GetUserName_account_name
);
11994 lsarpc_dissect_element_lsa_GetUserName_account_name__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
11996 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_GetUserName_account_name
,0);
12002 lsarpc_dissect_element_lsa_GetUserName_authority_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12004 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_GetUserName_authority_name_
, NDR_POINTER_UNIQUE
, "Pointer to Authority Name (lsa_String)",hf_lsarpc_lsa_GetUserName_authority_name
);
12010 lsarpc_dissect_element_lsa_GetUserName_authority_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12012 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_GetUserName_authority_name__
, NDR_POINTER_UNIQUE
, "Pointer to Authority Name (lsa_String)",hf_lsarpc_lsa_GetUserName_authority_name
);
12018 lsarpc_dissect_element_lsa_GetUserName_authority_name__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12020 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_GetUserName_authority_name
,0);
12025 /* IDL: NTSTATUS lsa_GetUserName( */
12026 /* IDL: [charset(UTF16)] [in] [unique(1)] uint16 *system_name, */
12027 /* IDL: [in] [out] [ref] lsa_String **account_name, */
12028 /* IDL: [in] [out] [unique(1)] lsa_String **authority_name */
12032 lsarpc_dissect_lsa_GetUserName_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12036 di
->dcerpc_procedure_name
="lsa_GetUserName";
12037 offset
= lsarpc_dissect_element_lsa_GetUserName_account_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
12038 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12040 offset
= lsarpc_dissect_element_lsa_GetUserName_authority_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
12041 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12043 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12046 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12052 lsarpc_dissect_lsa_GetUserName_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12054 di
->dcerpc_procedure_name
="lsa_GetUserName";
12055 offset
= lsarpc_dissect_element_lsa_GetUserName_system_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
12056 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12057 offset
= lsarpc_dissect_element_lsa_GetUserName_account_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
12058 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12059 offset
= lsarpc_dissect_element_lsa_GetUserName_authority_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
12060 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12065 lsarpc_dissect_element_lsa_QueryInfoPolicy2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12067 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryInfoPolicy2_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_QueryInfoPolicy2_handle
);
12073 lsarpc_dissect_element_lsa_QueryInfoPolicy2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12075 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryInfoPolicy2_handle
, 0);
12081 lsarpc_dissect_element_lsa_QueryInfoPolicy2_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12083 offset
= lsarpc_dissect_enum_lsa_PolicyInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryInfoPolicy2_level
, 0);
12089 lsarpc_dissect_element_lsa_QueryInfoPolicy2_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12091 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryInfoPolicy2_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_PolicyInformation)",hf_lsarpc_lsa_QueryInfoPolicy2_info
);
12097 lsarpc_dissect_element_lsa_QueryInfoPolicy2_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12099 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryInfoPolicy2_info__
, NDR_POINTER_UNIQUE
, "Pointer to Info (lsa_PolicyInformation)",hf_lsarpc_lsa_QueryInfoPolicy2_info
);
12105 lsarpc_dissect_element_lsa_QueryInfoPolicy2_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12107 offset
= lsarpc_dissect_lsa_PolicyInformation(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryInfoPolicy2_info
, 0);
12112 /* IDL: NTSTATUS lsa_QueryInfoPolicy2( */
12113 /* IDL: [in] [ref] policy_handle *handle, */
12114 /* IDL: [in] lsa_PolicyInfo level, */
12115 /* IDL: [out] [ref] [switch_is(level)] lsa_PolicyInformation **info */
12119 lsarpc_dissect_lsa_QueryInfoPolicy2_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12123 di
->dcerpc_procedure_name
="lsa_QueryInfoPolicy2";
12124 offset
= lsarpc_dissect_element_lsa_QueryInfoPolicy2_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
12125 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12127 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12130 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12136 lsarpc_dissect_lsa_QueryInfoPolicy2_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12138 di
->dcerpc_procedure_name
="lsa_QueryInfoPolicy2";
12139 offset
= lsarpc_dissect_element_lsa_QueryInfoPolicy2_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12140 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12141 offset
= lsarpc_dissect_element_lsa_QueryInfoPolicy2_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
12142 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12147 lsarpc_dissect_element_lsa_SetInfoPolicy2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12149 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetInfoPolicy2_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_SetInfoPolicy2_handle
);
12155 lsarpc_dissect_element_lsa_SetInfoPolicy2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12157 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetInfoPolicy2_handle
, 0);
12163 lsarpc_dissect_element_lsa_SetInfoPolicy2_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12165 offset
= lsarpc_dissect_enum_lsa_PolicyInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetInfoPolicy2_level
, 0);
12171 lsarpc_dissect_element_lsa_SetInfoPolicy2_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12173 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetInfoPolicy2_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_PolicyInformation)",hf_lsarpc_lsa_SetInfoPolicy2_info
);
12179 lsarpc_dissect_element_lsa_SetInfoPolicy2_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12181 offset
= lsarpc_dissect_lsa_PolicyInformation(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetInfoPolicy2_info
, 0);
12186 /* IDL: NTSTATUS lsa_SetInfoPolicy2( */
12187 /* IDL: [in] [ref] policy_handle *handle, */
12188 /* IDL: [in] lsa_PolicyInfo level, */
12189 /* IDL: [in] [ref] [switch_is(level)] lsa_PolicyInformation *info */
12193 lsarpc_dissect_lsa_SetInfoPolicy2_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12197 di
->dcerpc_procedure_name
="lsa_SetInfoPolicy2";
12198 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12201 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12207 lsarpc_dissect_lsa_SetInfoPolicy2_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12209 di
->dcerpc_procedure_name
="lsa_SetInfoPolicy2";
12210 offset
= lsarpc_dissect_element_lsa_SetInfoPolicy2_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12211 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12212 offset
= lsarpc_dissect_element_lsa_SetInfoPolicy2_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
12213 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12214 offset
= lsarpc_dissect_element_lsa_SetInfoPolicy2_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
12215 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12220 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12222 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_QueryTrustedDomainInfoByName_handle
);
12228 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12230 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryTrustedDomainInfoByName_handle
, 0);
12236 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_trusted_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12238 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_trusted_domain_
, NDR_POINTER_REF
, "Pointer to Trusted Domain (lsa_String)",hf_lsarpc_lsa_QueryTrustedDomainInfoByName_trusted_domain
);
12244 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_trusted_domain_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12246 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_QueryTrustedDomainInfoByName_trusted_domain
,0);
12252 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12254 offset
= lsarpc_dissect_enum_lsa_TrustDomInfoEnum(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryTrustedDomainInfoByName_level
, 0);
12260 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12262 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_TrustedDomainInfo)",hf_lsarpc_lsa_QueryTrustedDomainInfoByName_info
);
12268 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12270 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_info__
, NDR_POINTER_UNIQUE
, "Pointer to Info (lsa_TrustedDomainInfo)",hf_lsarpc_lsa_QueryTrustedDomainInfoByName_info
);
12276 lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12278 offset
= lsarpc_dissect_lsa_TrustedDomainInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryTrustedDomainInfoByName_info
, 0);
12283 /* IDL: NTSTATUS lsa_QueryTrustedDomainInfoByName( */
12284 /* IDL: [in] [ref] policy_handle *handle, */
12285 /* IDL: [in] [ref] lsa_String *trusted_domain, */
12286 /* IDL: [in] lsa_TrustDomInfoEnum level, */
12287 /* IDL: [out] [ref] [switch_is(level)] lsa_TrustedDomainInfo **info */
12291 lsarpc_dissect_lsa_QueryTrustedDomainInfoByName_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12295 di
->dcerpc_procedure_name
="lsa_QueryTrustedDomainInfoByName";
12296 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
12297 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12299 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12302 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12308 lsarpc_dissect_lsa_QueryTrustedDomainInfoByName_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12310 di
->dcerpc_procedure_name
="lsa_QueryTrustedDomainInfoByName";
12311 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12312 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12313 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_trusted_domain(tvb
, offset
, pinfo
, tree
, di
, drep
);
12314 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12315 offset
= lsarpc_dissect_element_lsa_QueryTrustedDomainInfoByName_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
12316 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12321 lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12323 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_SetTrustedDomainInfoByName_handle
);
12329 lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12331 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetTrustedDomainInfoByName_handle
, 0);
12337 lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_trusted_domain(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12339 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_trusted_domain_
, NDR_POINTER_REF
, "Pointer to Trusted Domain (lsa_String)",hf_lsarpc_lsa_SetTrustedDomainInfoByName_trusted_domain
);
12345 lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_trusted_domain_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12347 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_SetTrustedDomainInfoByName_trusted_domain
,0);
12353 lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12355 offset
= lsarpc_dissect_enum_lsa_TrustDomInfoEnum(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetTrustedDomainInfoByName_level
, 0);
12361 lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12363 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_TrustedDomainInfo)",hf_lsarpc_lsa_SetTrustedDomainInfoByName_info
);
12369 lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12371 offset
= lsarpc_dissect_lsa_TrustedDomainInfo(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetTrustedDomainInfoByName_info
, 0);
12376 /* IDL: NTSTATUS lsa_SetTrustedDomainInfoByName( */
12377 /* IDL: [in] [ref] policy_handle *handle, */
12378 /* IDL: [in] [ref] lsa_String *trusted_domain, */
12379 /* IDL: [in] lsa_TrustDomInfoEnum level, */
12380 /* IDL: [in] [ref] [switch_is(level)] lsa_TrustedDomainInfo *info */
12384 lsarpc_dissect_lsa_SetTrustedDomainInfoByName_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12388 di
->dcerpc_procedure_name
="lsa_SetTrustedDomainInfoByName";
12389 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12392 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12398 lsarpc_dissect_lsa_SetTrustedDomainInfoByName_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12400 di
->dcerpc_procedure_name
="lsa_SetTrustedDomainInfoByName";
12401 offset
= lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12402 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12403 offset
= lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_trusted_domain(tvb
, offset
, pinfo
, tree
, di
, drep
);
12404 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12405 offset
= lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
12406 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12407 offset
= lsarpc_dissect_element_lsa_SetTrustedDomainInfoByName_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
12408 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12413 lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12415 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_EnumTrustedDomainsEx_handle
);
12421 lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12423 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumTrustedDomainsEx_handle
, 0);
12429 lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_resume_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12431 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_resume_handle_
, NDR_POINTER_REF
, "Pointer to Resume Handle (uint32)",hf_lsarpc_lsa_EnumTrustedDomainsEx_resume_handle
);
12437 lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_resume_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12439 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumTrustedDomainsEx_resume_handle
, 0);
12445 lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12447 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_domains_
, NDR_POINTER_REF
, "Pointer to Domains (lsa_DomainListEx)",hf_lsarpc_lsa_EnumTrustedDomainsEx_domains
);
12453 lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12455 offset
= lsarpc_dissect_struct_lsa_DomainListEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_EnumTrustedDomainsEx_domains
,0);
12461 lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_max_size(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12463 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_EnumTrustedDomainsEx_max_size
, 0);
12468 /* IDL: NTSTATUS lsa_EnumTrustedDomainsEx( */
12469 /* IDL: [in] [ref] policy_handle *handle, */
12470 /* IDL: [in] [out] [ref] uint32 *resume_handle, */
12471 /* IDL: [out] [ref] lsa_DomainListEx *domains, */
12472 /* IDL: [in] uint32 max_size */
12476 lsarpc_dissect_lsa_EnumTrustedDomainsEx_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12480 di
->dcerpc_procedure_name
="lsa_EnumTrustedDomainsEx";
12481 offset
= lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_resume_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12482 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12484 offset
= lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
12485 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12487 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12490 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12496 lsarpc_dissect_lsa_EnumTrustedDomainsEx_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12498 di
->dcerpc_procedure_name
="lsa_EnumTrustedDomainsEx";
12499 offset
= lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12500 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12501 offset
= lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_resume_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12502 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12503 offset
= lsarpc_dissect_element_lsa_EnumTrustedDomainsEx_max_size(tvb
, offset
, pinfo
, tree
, di
, drep
);
12504 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12509 lsarpc_dissect_element_lsa_CreateTrustedDomainEx_policy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12511 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx_policy_handle_
, NDR_POINTER_REF
, "Pointer to Policy Handle (policy_handle)",hf_lsarpc_lsa_CreateTrustedDomainEx_policy_handle
);
12517 lsarpc_dissect_element_lsa_CreateTrustedDomainEx_policy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12519 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomainEx_policy_handle
, 0);
12525 lsarpc_dissect_element_lsa_CreateTrustedDomainEx_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12527 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_TrustDomainInfoInfoEx)",hf_lsarpc_lsa_CreateTrustedDomainEx_info
);
12533 lsarpc_dissect_element_lsa_CreateTrustedDomainEx_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12535 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_CreateTrustedDomainEx_info
,0);
12541 lsarpc_dissect_element_lsa_CreateTrustedDomainEx_auth_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12543 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx_auth_info_
, NDR_POINTER_REF
, "Pointer to Auth Info (lsa_TrustDomainInfoAuthInfo)",hf_lsarpc_lsa_CreateTrustedDomainEx_auth_info
);
12549 lsarpc_dissect_element_lsa_CreateTrustedDomainEx_auth_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12551 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_CreateTrustedDomainEx_auth_info
,0);
12557 lsarpc_dissect_element_lsa_CreateTrustedDomainEx_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12559 offset
= lsarpc_dissect_bitmap_lsa_TrustedAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomainEx_access_mask
, 0);
12565 lsarpc_dissect_element_lsa_CreateTrustedDomainEx_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12567 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx_trustdom_handle_
, NDR_POINTER_REF
, "Pointer to Trustdom Handle (policy_handle)",hf_lsarpc_lsa_CreateTrustedDomainEx_trustdom_handle
);
12573 lsarpc_dissect_element_lsa_CreateTrustedDomainEx_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12575 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomainEx_trustdom_handle
, 0);
12580 /* IDL: NTSTATUS lsa_CreateTrustedDomainEx( */
12581 /* IDL: [in] [ref] policy_handle *policy_handle, */
12582 /* IDL: [in] [ref] lsa_TrustDomainInfoInfoEx *info, */
12583 /* IDL: [in] [ref] lsa_TrustDomainInfoAuthInfo *auth_info, */
12584 /* IDL: [in] lsa_TrustedAccessMask access_mask, */
12585 /* IDL: [out] [ref] policy_handle *trustdom_handle */
12589 lsarpc_dissect_lsa_CreateTrustedDomainEx_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12593 di
->dcerpc_procedure_name
="lsa_CreateTrustedDomainEx";
12594 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx_trustdom_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12595 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12597 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12600 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12606 lsarpc_dissect_lsa_CreateTrustedDomainEx_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12608 di
->dcerpc_procedure_name
="lsa_CreateTrustedDomainEx";
12609 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx_policy_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12610 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12611 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
12612 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12613 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx_auth_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
12614 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12615 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
12616 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12621 lsarpc_dissect_element_lsa_CloseTrustedDomainEx_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12623 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CloseTrustedDomainEx_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_CloseTrustedDomainEx_handle
);
12629 lsarpc_dissect_element_lsa_CloseTrustedDomainEx_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12631 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CloseTrustedDomainEx_handle
, PIDL_POLHND_CLOSE
);
12636 /* IDL: NTSTATUS lsa_CloseTrustedDomainEx( */
12637 /* IDL: [in] [out] [ref] policy_handle *handle */
12641 lsarpc_dissect_lsa_CloseTrustedDomainEx_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12645 di
->dcerpc_procedure_name
="lsa_CloseTrustedDomainEx";
12646 offset
= lsarpc_dissect_element_lsa_CloseTrustedDomainEx_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12647 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12649 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12652 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12658 lsarpc_dissect_lsa_CloseTrustedDomainEx_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12660 di
->dcerpc_procedure_name
="lsa_CloseTrustedDomainEx";
12661 offset
= lsarpc_dissect_element_lsa_CloseTrustedDomainEx_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12662 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12667 lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12669 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_QueryDomainInformationPolicy_handle
);
12675 lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12677 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryDomainInformationPolicy_handle
, 0);
12683 lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12685 offset
= lsarpc_dissect_enum_lsa_DomainInfoEnum(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryDomainInformationPolicy_level
, 0);
12691 lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12693 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_DomainInformationPolicy)",hf_lsarpc_lsa_QueryDomainInformationPolicy_info
);
12699 lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12701 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_info__
, NDR_POINTER_UNIQUE
, "Pointer to Info (lsa_DomainInformationPolicy)",hf_lsarpc_lsa_QueryDomainInformationPolicy_info
);
12707 lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12709 offset
= lsarpc_dissect_lsa_DomainInformationPolicy(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_QueryDomainInformationPolicy_info
, 0);
12714 /* IDL: NTSTATUS lsa_QueryDomainInformationPolicy( */
12715 /* IDL: [in] [ref] policy_handle *handle, */
12716 /* IDL: [in] lsa_DomainInfoEnum level, */
12717 /* IDL: [out] [ref] [switch_is(level)] lsa_DomainInformationPolicy **info */
12721 lsarpc_dissect_lsa_QueryDomainInformationPolicy_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12725 di
->dcerpc_procedure_name
="lsa_QueryDomainInformationPolicy";
12726 offset
= lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
12727 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12729 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12732 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12738 lsarpc_dissect_lsa_QueryDomainInformationPolicy_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12740 di
->dcerpc_procedure_name
="lsa_QueryDomainInformationPolicy";
12741 offset
= lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12742 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12743 offset
= lsarpc_dissect_element_lsa_QueryDomainInformationPolicy_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
12744 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12749 lsarpc_dissect_element_lsa_SetDomainInformationPolicy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12751 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetDomainInformationPolicy_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_SetDomainInformationPolicy_handle
);
12757 lsarpc_dissect_element_lsa_SetDomainInformationPolicy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12759 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetDomainInformationPolicy_handle
, 0);
12765 lsarpc_dissect_element_lsa_SetDomainInformationPolicy_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12767 offset
= lsarpc_dissect_enum_lsa_DomainInfoEnum(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetDomainInformationPolicy_level
, 0);
12773 lsarpc_dissect_element_lsa_SetDomainInformationPolicy_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12775 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_SetDomainInformationPolicy_info_
, NDR_POINTER_UNIQUE
, "Pointer to Info (lsa_DomainInformationPolicy)",hf_lsarpc_lsa_SetDomainInformationPolicy_info
);
12781 lsarpc_dissect_element_lsa_SetDomainInformationPolicy_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12783 offset
= lsarpc_dissect_lsa_DomainInformationPolicy(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_SetDomainInformationPolicy_info
, 0);
12788 /* IDL: NTSTATUS lsa_SetDomainInformationPolicy( */
12789 /* IDL: [in] [ref] policy_handle *handle, */
12790 /* IDL: [in] lsa_DomainInfoEnum level, */
12791 /* IDL: [in] [switch_is(level)] [unique(1)] lsa_DomainInformationPolicy *info */
12795 lsarpc_dissect_lsa_SetDomainInformationPolicy_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12799 di
->dcerpc_procedure_name
="lsa_SetDomainInformationPolicy";
12800 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12803 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12809 lsarpc_dissect_lsa_SetDomainInformationPolicy_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12811 di
->dcerpc_procedure_name
="lsa_SetDomainInformationPolicy";
12812 offset
= lsarpc_dissect_element_lsa_SetDomainInformationPolicy_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12813 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12814 offset
= lsarpc_dissect_element_lsa_SetDomainInformationPolicy_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
12815 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12816 offset
= lsarpc_dissect_element_lsa_SetDomainInformationPolicy_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
12817 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12822 lsarpc_dissect_element_lsa_OpenTrustedDomainByName_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12824 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenTrustedDomainByName_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_OpenTrustedDomainByName_handle
);
12830 lsarpc_dissect_element_lsa_OpenTrustedDomainByName_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12832 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenTrustedDomainByName_handle
, 0);
12838 lsarpc_dissect_element_lsa_OpenTrustedDomainByName_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12840 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_OpenTrustedDomainByName_name
,0);
12846 lsarpc_dissect_element_lsa_OpenTrustedDomainByName_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12848 offset
= lsarpc_dissect_bitmap_lsa_TrustedAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenTrustedDomainByName_access_mask
, 0);
12854 lsarpc_dissect_element_lsa_OpenTrustedDomainByName_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12856 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenTrustedDomainByName_trustdom_handle_
, NDR_POINTER_REF
, "Pointer to Trustdom Handle (policy_handle)",hf_lsarpc_lsa_OpenTrustedDomainByName_trustdom_handle
);
12862 lsarpc_dissect_element_lsa_OpenTrustedDomainByName_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12864 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenTrustedDomainByName_trustdom_handle
, PIDL_POLHND_OPEN
|PIDL_POLHND_TYPE_LSA_DOMAIN
);
12869 /* IDL: NTSTATUS lsa_OpenTrustedDomainByName( */
12870 /* IDL: [in] [ref] policy_handle *handle, */
12871 /* IDL: [in] lsa_String name, */
12872 /* IDL: [in] lsa_TrustedAccessMask access_mask, */
12873 /* IDL: [out] [ref] policy_handle *trustdom_handle */
12877 lsarpc_dissect_lsa_OpenTrustedDomainByName_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12881 di
->dcerpc_procedure_name
="lsa_OpenTrustedDomainByName";
12882 offset
= lsarpc_dissect_element_lsa_OpenTrustedDomainByName_trustdom_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12883 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12885 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12888 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12894 lsarpc_dissect_lsa_OpenTrustedDomainByName_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12896 di
->dcerpc_procedure_name
="lsa_OpenTrustedDomainByName";
12897 offset
= lsarpc_dissect_element_lsa_OpenTrustedDomainByName_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
12898 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12899 offset
= lsarpc_dissect_element_lsa_OpenTrustedDomainByName_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
12900 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12901 offset
= lsarpc_dissect_element_lsa_OpenTrustedDomainByName_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
12902 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
12906 /* IDL: NTSTATUS lsa_TestCall( */
12911 lsarpc_dissect_lsa_TestCall_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12915 di
->dcerpc_procedure_name
="lsa_TestCall";
12916 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
12919 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
12925 lsarpc_dissect_lsa_TestCall_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12927 di
->dcerpc_procedure_name
="lsa_TestCall";
12932 lsarpc_dissect_element_lsa_LookupSids2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12934 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids2_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_LookupSids2_handle
);
12940 lsarpc_dissect_element_lsa_LookupSids2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12942 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids2_handle
, 0);
12948 lsarpc_dissect_element_lsa_LookupSids2_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12950 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids2_sids_
, NDR_POINTER_REF
, "Pointer to Sids (lsa_SidArray)",hf_lsarpc_lsa_LookupSids2_sids
);
12956 lsarpc_dissect_element_lsa_LookupSids2_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12958 offset
= lsarpc_dissect_struct_lsa_SidArray(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupSids2_sids
,0);
12964 lsarpc_dissect_element_lsa_LookupSids2_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12966 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids2_domains_
, NDR_POINTER_REF
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupSids2_domains
);
12972 lsarpc_dissect_element_lsa_LookupSids2_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12974 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids2_domains__
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupSids2_domains
);
12980 lsarpc_dissect_element_lsa_LookupSids2_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12982 offset
= lsarpc_dissect_struct_lsa_RefDomainList(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupSids2_domains
,0);
12988 lsarpc_dissect_element_lsa_LookupSids2_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12990 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids2_names_
, NDR_POINTER_REF
, "Pointer to Names (lsa_TransNameArray2)",hf_lsarpc_lsa_LookupSids2_names
);
12996 lsarpc_dissect_element_lsa_LookupSids2_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
12998 offset
= lsarpc_dissect_struct_lsa_TransNameArray2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupSids2_names
,0);
13004 lsarpc_dissect_element_lsa_LookupSids2_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13006 offset
= lsarpc_dissect_enum_lsa_LookupNamesLevel(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids2_level
, 0);
13012 lsarpc_dissect_element_lsa_LookupSids2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13014 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids2_count_
, NDR_POINTER_REF
, "Pointer to Count (uint32)",hf_lsarpc_lsa_LookupSids2_count
);
13020 lsarpc_dissect_element_lsa_LookupSids2_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13022 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids2_count
, 0);
13028 lsarpc_dissect_element_lsa_LookupSids2_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13030 offset
= lsarpc_dissect_enum_lsa_LookupOptions(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids2_lookup_options
, 0);
13036 lsarpc_dissect_element_lsa_LookupSids2_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13038 offset
= lsarpc_dissect_enum_lsa_ClientRevision(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids2_client_revision
, 0);
13043 /* IDL: NTSTATUS lsa_LookupSids2( */
13044 /* IDL: [in] [ref] policy_handle *handle, */
13045 /* IDL: [in] [ref] lsa_SidArray *sids, */
13046 /* IDL: [out] [ref] lsa_RefDomainList **domains, */
13047 /* IDL: [in] [out] [ref] lsa_TransNameArray2 *names, */
13048 /* IDL: [in] lsa_LookupNamesLevel level, */
13049 /* IDL: [in] [out] [ref] uint32 *count, */
13050 /* IDL: [in] lsa_LookupOptions lookup_options, */
13051 /* IDL: [in] lsa_ClientRevision client_revision */
13055 lsarpc_dissect_lsa_LookupSids2_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13059 di
->dcerpc_procedure_name
="lsa_LookupSids2";
13060 offset
= lsarpc_dissect_element_lsa_LookupSids2_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
13061 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13063 offset
= lsarpc_dissect_element_lsa_LookupSids2_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
13064 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13066 offset
= lsarpc_dissect_element_lsa_LookupSids2_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
13067 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13069 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13072 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13078 lsarpc_dissect_lsa_LookupSids2_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13080 di
->dcerpc_procedure_name
="lsa_LookupSids2";
13081 offset
= lsarpc_dissect_element_lsa_LookupSids2_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
13082 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13083 offset
= lsarpc_dissect_element_lsa_LookupSids2_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
13084 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13085 offset
= lsarpc_dissect_element_lsa_LookupSids2_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
13086 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13087 offset
= lsarpc_dissect_element_lsa_LookupSids2_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
13088 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13089 offset
= lsarpc_dissect_element_lsa_LookupSids2_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
13090 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13091 offset
= lsarpc_dissect_element_lsa_LookupSids2_lookup_options(tvb
, offset
, pinfo
, tree
, di
, drep
);
13092 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13093 offset
= lsarpc_dissect_element_lsa_LookupSids2_client_revision(tvb
, offset
, pinfo
, tree
, di
, drep
);
13094 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13099 lsarpc_dissect_element_lsa_LookupNames2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13101 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames2_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_LookupNames2_handle
);
13107 lsarpc_dissect_element_lsa_LookupNames2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13109 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames2_handle
, 0);
13115 lsarpc_dissect_element_lsa_LookupNames2_num_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13117 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames2_num_names
, 0);
13123 lsarpc_dissect_element_lsa_LookupNames2_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13125 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames2_domains_
, NDR_POINTER_REF
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupNames2_domains
);
13131 lsarpc_dissect_element_lsa_LookupNames2_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13133 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames2_domains__
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupNames2_domains
);
13139 lsarpc_dissect_element_lsa_LookupNames2_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13141 offset
= lsarpc_dissect_struct_lsa_RefDomainList(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupNames2_domains
,0);
13147 lsarpc_dissect_element_lsa_LookupNames2_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13149 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames2_sids_
, NDR_POINTER_REF
, "Pointer to Sids (lsa_TransSidArray2)",hf_lsarpc_lsa_LookupNames2_sids
);
13155 lsarpc_dissect_element_lsa_LookupNames2_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13157 offset
= lsarpc_dissect_struct_lsa_TransSidArray2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupNames2_sids
,0);
13163 lsarpc_dissect_element_lsa_LookupNames2_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13165 offset
= lsarpc_dissect_enum_lsa_LookupNamesLevel(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames2_level
, 0);
13171 lsarpc_dissect_element_lsa_LookupNames2_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13173 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames2_count_
, NDR_POINTER_REF
, "Pointer to Count (uint32)",hf_lsarpc_lsa_LookupNames2_count
);
13179 lsarpc_dissect_element_lsa_LookupNames2_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13181 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames2_count
, 0);
13187 lsarpc_dissect_element_lsa_LookupNames2_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13189 offset
= lsarpc_dissect_enum_lsa_LookupOptions(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames2_lookup_options
, 0);
13195 lsarpc_dissect_element_lsa_LookupNames2_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13197 offset
= lsarpc_dissect_enum_lsa_ClientRevision(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames2_client_revision
, 0);
13202 /* IDL: NTSTATUS lsa_LookupNames2( */
13203 /* IDL: [in] [ref] policy_handle *handle, */
13204 /* IDL: [in] [range(0,1000)] uint32 num_names, */
13205 /* IDL: [in] [size_is(num_names)] lsa_String names[*], */
13206 /* IDL: [out] [ref] lsa_RefDomainList **domains, */
13207 /* IDL: [in] [out] [ref] lsa_TransSidArray2 *sids, */
13208 /* IDL: [in] lsa_LookupNamesLevel level, */
13209 /* IDL: [in] [out] [ref] uint32 *count, */
13210 /* IDL: [in] lsa_LookupOptions lookup_options, */
13211 /* IDL: [in] lsa_ClientRevision client_revision */
13215 lsarpc_dissect_lsa_LookupNames2_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13219 di
->dcerpc_procedure_name
="lsa_LookupNames2";
13220 offset
= lsarpc_dissect_element_lsa_LookupNames2_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
13221 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13223 offset
= lsarpc_dissect_element_lsa_LookupNames2_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
13224 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13226 offset
= lsarpc_dissect_element_lsa_LookupNames2_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
13227 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13229 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13232 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13238 lsarpc_dissect_lsa_LookupNames2_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13240 di
->dcerpc_procedure_name
="lsa_LookupNames2";
13241 offset
= lsarpc_dissect_element_lsa_LookupNames2_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
13242 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13243 offset
= lsarpc_dissect_element_lsa_LookupNames2_num_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
13244 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13245 offset
= lsarpc_dissect_element_lsa_LookupNames2_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
13246 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13247 offset
= lsarpc_dissect_element_lsa_LookupNames2_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
13248 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13249 offset
= lsarpc_dissect_element_lsa_LookupNames2_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
13250 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13251 offset
= lsarpc_dissect_element_lsa_LookupNames2_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
13252 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13253 offset
= lsarpc_dissect_element_lsa_LookupNames2_lookup_options(tvb
, offset
, pinfo
, tree
, di
, drep
);
13254 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13255 offset
= lsarpc_dissect_element_lsa_LookupNames2_client_revision(tvb
, offset
, pinfo
, tree
, di
, drep
);
13256 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13261 lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_policy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13263 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_policy_handle_
, NDR_POINTER_REF
, "Pointer to Policy Handle (policy_handle)",hf_lsarpc_lsa_CreateTrustedDomainEx2_policy_handle
);
13269 lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_policy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13271 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomainEx2_policy_handle
, 0);
13277 lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13279 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_TrustDomainInfoInfoEx)",hf_lsarpc_lsa_CreateTrustedDomainEx2_info
);
13285 lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13287 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_CreateTrustedDomainEx2_info
,0);
13293 lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_auth_info_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13295 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_auth_info_internal_
, NDR_POINTER_REF
, "Pointer to Auth Info Internal (lsa_TrustDomainInfoAuthInfoInternal)",hf_lsarpc_lsa_CreateTrustedDomainEx2_auth_info_internal
);
13301 lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_auth_info_internal_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13303 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternal(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_CreateTrustedDomainEx2_auth_info_internal
,0);
13309 lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13311 offset
= lsarpc_dissect_bitmap_lsa_TrustedAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomainEx2_access_mask
, 0);
13317 lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13319 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_trustdom_handle_
, NDR_POINTER_REF
, "Pointer to Trustdom Handle (policy_handle)",hf_lsarpc_lsa_CreateTrustedDomainEx2_trustdom_handle
);
13325 lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13327 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomainEx2_trustdom_handle
, 0);
13332 /* IDL: NTSTATUS lsa_CreateTrustedDomainEx2( */
13333 /* IDL: [in] [ref] policy_handle *policy_handle, */
13334 /* IDL: [in] [ref] lsa_TrustDomainInfoInfoEx *info, */
13335 /* IDL: [in] [ref] lsa_TrustDomainInfoAuthInfoInternal *auth_info_internal, */
13336 /* IDL: [in] lsa_TrustedAccessMask access_mask, */
13337 /* IDL: [out] [ref] policy_handle *trustdom_handle */
13341 lsarpc_dissect_lsa_CreateTrustedDomainEx2_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13345 di
->dcerpc_procedure_name
="lsa_CreateTrustedDomainEx2";
13346 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_trustdom_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
13347 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13349 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13352 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13358 lsarpc_dissect_lsa_CreateTrustedDomainEx2_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13360 di
->dcerpc_procedure_name
="lsa_CreateTrustedDomainEx2";
13361 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_policy_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
13362 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13363 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
13364 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13365 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_auth_info_internal(tvb
, offset
, pinfo
, tree
, di
, drep
);
13366 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13367 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx2_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
13368 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13372 /* IDL: NTSTATUS lsa_CREDRWRITE( */
13377 lsarpc_dissect_lsa_CREDRWRITE_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13381 di
->dcerpc_procedure_name
="lsa_CREDRWRITE";
13382 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13385 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13391 lsarpc_dissect_lsa_CREDRWRITE_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13393 di
->dcerpc_procedure_name
="lsa_CREDRWRITE";
13397 /* IDL: NTSTATUS lsa_CREDRREAD( */
13402 lsarpc_dissect_lsa_CREDRREAD_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13406 di
->dcerpc_procedure_name
="lsa_CREDRREAD";
13407 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13410 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13416 lsarpc_dissect_lsa_CREDRREAD_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13418 di
->dcerpc_procedure_name
="lsa_CREDRREAD";
13422 /* IDL: NTSTATUS lsa_CREDRENUMERATE( */
13427 lsarpc_dissect_lsa_CREDRENUMERATE_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13431 di
->dcerpc_procedure_name
="lsa_CREDRENUMERATE";
13432 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13435 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13441 lsarpc_dissect_lsa_CREDRENUMERATE_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13443 di
->dcerpc_procedure_name
="lsa_CREDRENUMERATE";
13447 /* IDL: NTSTATUS lsa_CREDRWRITEDOMAINCREDENTIALS( */
13452 lsarpc_dissect_lsa_CREDRWRITEDOMAINCREDENTIALS_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13456 di
->dcerpc_procedure_name
="lsa_CREDRWRITEDOMAINCREDENTIALS";
13457 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13460 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13466 lsarpc_dissect_lsa_CREDRWRITEDOMAINCREDENTIALS_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13468 di
->dcerpc_procedure_name
="lsa_CREDRWRITEDOMAINCREDENTIALS";
13472 /* IDL: NTSTATUS lsa_CREDRREADDOMAINCREDENTIALS( */
13477 lsarpc_dissect_lsa_CREDRREADDOMAINCREDENTIALS_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13481 di
->dcerpc_procedure_name
="lsa_CREDRREADDOMAINCREDENTIALS";
13482 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13485 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13491 lsarpc_dissect_lsa_CREDRREADDOMAINCREDENTIALS_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13493 di
->dcerpc_procedure_name
="lsa_CREDRREADDOMAINCREDENTIALS";
13497 /* IDL: NTSTATUS lsa_CREDRDELETE( */
13502 lsarpc_dissect_lsa_CREDRDELETE_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13506 di
->dcerpc_procedure_name
="lsa_CREDRDELETE";
13507 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13510 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13516 lsarpc_dissect_lsa_CREDRDELETE_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13518 di
->dcerpc_procedure_name
="lsa_CREDRDELETE";
13522 /* IDL: NTSTATUS lsa_CREDRGETTARGETINFO( */
13527 lsarpc_dissect_lsa_CREDRGETTARGETINFO_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13531 di
->dcerpc_procedure_name
="lsa_CREDRGETTARGETINFO";
13532 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13535 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13541 lsarpc_dissect_lsa_CREDRGETTARGETINFO_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13543 di
->dcerpc_procedure_name
="lsa_CREDRGETTARGETINFO";
13547 /* IDL: NTSTATUS lsa_CREDRPROFILELOADED( */
13552 lsarpc_dissect_lsa_CREDRPROFILELOADED_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13556 di
->dcerpc_procedure_name
="lsa_CREDRPROFILELOADED";
13557 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13560 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13566 lsarpc_dissect_lsa_CREDRPROFILELOADED_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13568 di
->dcerpc_procedure_name
="lsa_CREDRPROFILELOADED";
13573 lsarpc_dissect_element_lsa_LookupNames3_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13575 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_LookupNames3_handle
);
13581 lsarpc_dissect_element_lsa_LookupNames3_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13583 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames3_handle
, 0);
13589 lsarpc_dissect_element_lsa_LookupNames3_num_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13591 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames3_num_names
, 0);
13597 lsarpc_dissect_element_lsa_LookupNames3_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13599 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupNames3_names
,0);
13605 lsarpc_dissect_element_lsa_LookupNames3_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13607 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_domains_
, NDR_POINTER_REF
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupNames3_domains
);
13613 lsarpc_dissect_element_lsa_LookupNames3_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13615 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_domains__
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupNames3_domains
);
13621 lsarpc_dissect_element_lsa_LookupNames3_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13623 offset
= lsarpc_dissect_struct_lsa_RefDomainList(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupNames3_domains
,0);
13629 lsarpc_dissect_element_lsa_LookupNames3_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13631 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_sids_
, NDR_POINTER_REF
, "Pointer to Sids (lsa_TransSidArray3)",hf_lsarpc_lsa_LookupNames3_sids
);
13637 lsarpc_dissect_element_lsa_LookupNames3_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13639 offset
= lsarpc_dissect_struct_lsa_TransSidArray3(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupNames3_sids
,0);
13645 lsarpc_dissect_element_lsa_LookupNames3_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13647 offset
= lsarpc_dissect_enum_lsa_LookupNamesLevel(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames3_level
, 0);
13653 lsarpc_dissect_element_lsa_LookupNames3_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13655 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames3_count_
, NDR_POINTER_REF
, "Pointer to Count (uint32)",hf_lsarpc_lsa_LookupNames3_count
);
13661 lsarpc_dissect_element_lsa_LookupNames3_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13663 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames3_count
, 0);
13669 lsarpc_dissect_element_lsa_LookupNames3_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13671 offset
= lsarpc_dissect_enum_lsa_LookupOptions(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames3_lookup_options
, 0);
13677 lsarpc_dissect_element_lsa_LookupNames3_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13679 offset
= lsarpc_dissect_enum_lsa_ClientRevision(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames3_client_revision
, 0);
13684 /* IDL: NTSTATUS lsa_LookupNames3( */
13685 /* IDL: [in] [ref] policy_handle *handle, */
13686 /* IDL: [in] [range(0,1000)] uint32 num_names, */
13687 /* IDL: [in] [size_is(num_names)] lsa_String names[*], */
13688 /* IDL: [out] [ref] lsa_RefDomainList **domains, */
13689 /* IDL: [in] [out] [ref] lsa_TransSidArray3 *sids, */
13690 /* IDL: [in] lsa_LookupNamesLevel level, */
13691 /* IDL: [in] [out] [ref] uint32 *count, */
13692 /* IDL: [in] lsa_LookupOptions lookup_options, */
13693 /* IDL: [in] lsa_ClientRevision client_revision */
13697 lsarpc_dissect_lsa_LookupNames3_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13701 di
->dcerpc_procedure_name
="lsa_LookupNames3";
13702 offset
= lsarpc_dissect_element_lsa_LookupNames3_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
13703 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13705 offset
= lsarpc_dissect_element_lsa_LookupNames3_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
13706 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13708 offset
= lsarpc_dissect_element_lsa_LookupNames3_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
13709 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13711 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13714 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13720 lsarpc_dissect_lsa_LookupNames3_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13722 di
->dcerpc_procedure_name
="lsa_LookupNames3";
13723 offset
= lsarpc_dissect_element_lsa_LookupNames3_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
13724 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13725 offset
= lsarpc_dissect_element_lsa_LookupNames3_num_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
13726 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13727 offset
= lsarpc_dissect_element_lsa_LookupNames3_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
13728 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13729 offset
= lsarpc_dissect_element_lsa_LookupNames3_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
13730 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13731 offset
= lsarpc_dissect_element_lsa_LookupNames3_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
13732 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13733 offset
= lsarpc_dissect_element_lsa_LookupNames3_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
13734 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13735 offset
= lsarpc_dissect_element_lsa_LookupNames3_lookup_options(tvb
, offset
, pinfo
, tree
, di
, drep
);
13736 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13737 offset
= lsarpc_dissect_element_lsa_LookupNames3_client_revision(tvb
, offset
, pinfo
, tree
, di
, drep
);
13738 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13742 /* IDL: NTSTATUS lsa_CREDRGETSESSIONTYPES( */
13747 lsarpc_dissect_lsa_CREDRGETSESSIONTYPES_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13751 di
->dcerpc_procedure_name
="lsa_CREDRGETSESSIONTYPES";
13752 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13755 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13761 lsarpc_dissect_lsa_CREDRGETSESSIONTYPES_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13763 di
->dcerpc_procedure_name
="lsa_CREDRGETSESSIONTYPES";
13767 /* IDL: NTSTATUS lsa_LSARREGISTERAUDITEVENT( */
13772 lsarpc_dissect_lsa_LSARREGISTERAUDITEVENT_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13776 di
->dcerpc_procedure_name
="lsa_LSARREGISTERAUDITEVENT";
13777 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13780 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13786 lsarpc_dissect_lsa_LSARREGISTERAUDITEVENT_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13788 di
->dcerpc_procedure_name
="lsa_LSARREGISTERAUDITEVENT";
13792 /* IDL: NTSTATUS lsa_LSARGENAUDITEVENT( */
13797 lsarpc_dissect_lsa_LSARGENAUDITEVENT_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13801 di
->dcerpc_procedure_name
="lsa_LSARGENAUDITEVENT";
13802 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13805 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13811 lsarpc_dissect_lsa_LSARGENAUDITEVENT_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13813 di
->dcerpc_procedure_name
="lsa_LSARGENAUDITEVENT";
13817 /* IDL: NTSTATUS lsa_LSARUNREGISTERAUDITEVENT( */
13822 lsarpc_dissect_lsa_LSARUNREGISTERAUDITEVENT_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13826 di
->dcerpc_procedure_name
="lsa_LSARUNREGISTERAUDITEVENT";
13827 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13830 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13836 lsarpc_dissect_lsa_LSARUNREGISTERAUDITEVENT_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13838 di
->dcerpc_procedure_name
="lsa_LSARUNREGISTERAUDITEVENT";
13843 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13845 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_lsaRQueryForestTrustInformation_handle
);
13851 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13853 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRQueryForestTrustInformation_handle
, 0);
13859 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_trusted_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13861 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_trusted_domain_name_
, NDR_POINTER_REF
, "Pointer to Trusted Domain Name (lsa_String)",hf_lsarpc_lsa_lsaRQueryForestTrustInformation_trusted_domain_name
);
13867 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_trusted_domain_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13869 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRQueryForestTrustInformation_trusted_domain_name
,0);
13875 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_highest_record_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13877 offset
= lsarpc_dissect_enum_lsa_ForestTrustRecordType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRQueryForestTrustInformation_highest_record_type
, 0);
13883 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_forest_trust_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13885 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_forest_trust_info_
, NDR_POINTER_REF
, "Pointer to Forest Trust Info (lsa_ForestTrustInformation)",hf_lsarpc_lsa_lsaRQueryForestTrustInformation_forest_trust_info
);
13891 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_forest_trust_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13893 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_forest_trust_info__
, NDR_POINTER_UNIQUE
, "Pointer to Forest Trust Info (lsa_ForestTrustInformation)",hf_lsarpc_lsa_lsaRQueryForestTrustInformation_forest_trust_info
);
13899 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_forest_trust_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13901 offset
= lsarpc_dissect_struct_lsa_ForestTrustInformation(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRQueryForestTrustInformation_forest_trust_info
,0);
13906 /* IDL: NTSTATUS lsa_lsaRQueryForestTrustInformation( */
13907 /* IDL: [in] [ref] policy_handle *handle, */
13908 /* IDL: [in] [ref] lsa_String *trusted_domain_name, */
13909 /* IDL: [in] lsa_ForestTrustRecordType highest_record_type, */
13910 /* IDL: [out] [ref] lsa_ForestTrustInformation **forest_trust_info */
13914 lsarpc_dissect_lsa_lsaRQueryForestTrustInformation_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13918 di
->dcerpc_procedure_name
="lsa_lsaRQueryForestTrustInformation";
13919 offset
= lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_forest_trust_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
13920 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13922 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
13925 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
13931 lsarpc_dissect_lsa_lsaRQueryForestTrustInformation_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13933 di
->dcerpc_procedure_name
="lsa_lsaRQueryForestTrustInformation";
13934 offset
= lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
13935 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13936 offset
= lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_trusted_domain_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
13937 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13938 offset
= lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation_highest_record_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
13939 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
13944 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13946 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_lsaRSetForestTrustInformation_handle
);
13952 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13954 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRSetForestTrustInformation_handle
, 0);
13960 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_trusted_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13962 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_trusted_domain_name_
, NDR_POINTER_REF
, "Pointer to Trusted Domain Name (lsa_StringLarge)",hf_lsarpc_lsa_lsaRSetForestTrustInformation_trusted_domain_name
);
13968 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_trusted_domain_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13970 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRSetForestTrustInformation_trusted_domain_name
,0);
13976 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_highest_record_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13978 offset
= lsarpc_dissect_enum_lsa_ForestTrustRecordType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRSetForestTrustInformation_highest_record_type
, 0);
13984 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_forest_trust_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13986 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_forest_trust_info_
, NDR_POINTER_REF
, "Pointer to Forest Trust Info (lsa_ForestTrustInformation)",hf_lsarpc_lsa_lsaRSetForestTrustInformation_forest_trust_info
);
13992 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_forest_trust_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
13994 offset
= lsarpc_dissect_struct_lsa_ForestTrustInformation(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRSetForestTrustInformation_forest_trust_info
,0);
14000 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_check_only(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14002 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRSetForestTrustInformation_check_only
, 0);
14008 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_collision_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14010 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_collision_info_
, NDR_POINTER_REF
, "Pointer to Collision Info (lsa_ForestTrustCollisionInfo)",hf_lsarpc_lsa_lsaRSetForestTrustInformation_collision_info
);
14016 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_collision_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14018 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_collision_info__
, NDR_POINTER_UNIQUE
, "Pointer to Collision Info (lsa_ForestTrustCollisionInfo)",hf_lsarpc_lsa_lsaRSetForestTrustInformation_collision_info
);
14024 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_collision_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14026 offset
= lsarpc_dissect_struct_lsa_ForestTrustCollisionInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRSetForestTrustInformation_collision_info
,0);
14031 /* IDL: NTSTATUS lsa_lsaRSetForestTrustInformation( */
14032 /* IDL: [in] [ref] policy_handle *handle, */
14033 /* IDL: [in] [ref] lsa_StringLarge *trusted_domain_name, */
14034 /* IDL: [in] lsa_ForestTrustRecordType highest_record_type, */
14035 /* IDL: [in] [ref] lsa_ForestTrustInformation *forest_trust_info, */
14036 /* IDL: [in] uint8 check_only, */
14037 /* IDL: [out] [ref] lsa_ForestTrustCollisionInfo **collision_info */
14041 lsarpc_dissect_lsa_lsaRSetForestTrustInformation_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14045 di
->dcerpc_procedure_name
="lsa_lsaRSetForestTrustInformation";
14046 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_collision_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
14047 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14049 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
14052 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
14058 lsarpc_dissect_lsa_lsaRSetForestTrustInformation_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14060 di
->dcerpc_procedure_name
="lsa_lsaRSetForestTrustInformation";
14061 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
14062 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14063 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_trusted_domain_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
14064 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14065 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_highest_record_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
14066 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14067 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_forest_trust_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
14068 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14069 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation_check_only(tvb
, offset
, pinfo
, tree
, di
, drep
);
14070 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14074 /* IDL: NTSTATUS lsa_CREDRRENAME( */
14079 lsarpc_dissect_lsa_CREDRRENAME_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14083 di
->dcerpc_procedure_name
="lsa_CREDRRENAME";
14084 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
14087 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
14093 lsarpc_dissect_lsa_CREDRRENAME_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14095 di
->dcerpc_procedure_name
="lsa_CREDRRENAME";
14100 lsarpc_dissect_element_lsa_LookupSids3_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14102 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids3_sids_
, NDR_POINTER_REF
, "Pointer to Sids (lsa_SidArray)",hf_lsarpc_lsa_LookupSids3_sids
);
14108 lsarpc_dissect_element_lsa_LookupSids3_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14110 offset
= lsarpc_dissect_struct_lsa_SidArray(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupSids3_sids
,0);
14116 lsarpc_dissect_element_lsa_LookupSids3_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14118 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids3_domains_
, NDR_POINTER_REF
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupSids3_domains
);
14124 lsarpc_dissect_element_lsa_LookupSids3_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14126 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids3_domains__
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupSids3_domains
);
14132 lsarpc_dissect_element_lsa_LookupSids3_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14134 offset
= lsarpc_dissect_struct_lsa_RefDomainList(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupSids3_domains
,0);
14140 lsarpc_dissect_element_lsa_LookupSids3_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14142 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids3_names_
, NDR_POINTER_REF
, "Pointer to Names (lsa_TransNameArray2)",hf_lsarpc_lsa_LookupSids3_names
);
14148 lsarpc_dissect_element_lsa_LookupSids3_names_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14150 offset
= lsarpc_dissect_struct_lsa_TransNameArray2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupSids3_names
,0);
14156 lsarpc_dissect_element_lsa_LookupSids3_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14158 offset
= lsarpc_dissect_enum_lsa_LookupNamesLevel(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids3_level
, 0);
14164 lsarpc_dissect_element_lsa_LookupSids3_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14166 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupSids3_count_
, NDR_POINTER_REF
, "Pointer to Count (uint32)",hf_lsarpc_lsa_LookupSids3_count
);
14172 lsarpc_dissect_element_lsa_LookupSids3_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14174 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids3_count
, 0);
14180 lsarpc_dissect_element_lsa_LookupSids3_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14182 offset
= lsarpc_dissect_enum_lsa_LookupOptions(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids3_lookup_options
, 0);
14188 lsarpc_dissect_element_lsa_LookupSids3_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14190 offset
= lsarpc_dissect_enum_lsa_ClientRevision(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupSids3_client_revision
, 0);
14195 /* IDL: NTSTATUS lsa_LookupSids3( */
14196 /* IDL: [in] [ref] lsa_SidArray *sids, */
14197 /* IDL: [out] [ref] lsa_RefDomainList **domains, */
14198 /* IDL: [in] [out] [ref] lsa_TransNameArray2 *names, */
14199 /* IDL: [in] lsa_LookupNamesLevel level, */
14200 /* IDL: [in] [out] [ref] uint32 *count, */
14201 /* IDL: [in] lsa_LookupOptions lookup_options, */
14202 /* IDL: [in] lsa_ClientRevision client_revision */
14206 lsarpc_dissect_lsa_LookupSids3_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14210 di
->dcerpc_procedure_name
="lsa_LookupSids3";
14211 offset
= lsarpc_dissect_element_lsa_LookupSids3_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
14212 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14214 offset
= lsarpc_dissect_element_lsa_LookupSids3_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
14215 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14217 offset
= lsarpc_dissect_element_lsa_LookupSids3_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
14218 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14220 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
14223 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
14229 lsarpc_dissect_lsa_LookupSids3_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14231 di
->dcerpc_procedure_name
="lsa_LookupSids3";
14232 offset
= lsarpc_dissect_element_lsa_LookupSids3_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
14233 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14234 offset
= lsarpc_dissect_element_lsa_LookupSids3_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
14235 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14236 offset
= lsarpc_dissect_element_lsa_LookupSids3_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
14237 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14238 offset
= lsarpc_dissect_element_lsa_LookupSids3_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
14239 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14240 offset
= lsarpc_dissect_element_lsa_LookupSids3_lookup_options(tvb
, offset
, pinfo
, tree
, di
, drep
);
14241 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14242 offset
= lsarpc_dissect_element_lsa_LookupSids3_client_revision(tvb
, offset
, pinfo
, tree
, di
, drep
);
14243 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14248 lsarpc_dissect_element_lsa_LookupNames4_num_names(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14250 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames4_num_names
, 0);
14256 lsarpc_dissect_element_lsa_LookupNames4_domains(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14258 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames4_domains_
, NDR_POINTER_REF
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupNames4_domains
);
14264 lsarpc_dissect_element_lsa_LookupNames4_domains_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14266 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames4_domains__
, NDR_POINTER_UNIQUE
, "Pointer to Domains (lsa_RefDomainList)",hf_lsarpc_lsa_LookupNames4_domains
);
14272 lsarpc_dissect_element_lsa_LookupNames4_domains__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14274 offset
= lsarpc_dissect_struct_lsa_RefDomainList(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupNames4_domains
,0);
14280 lsarpc_dissect_element_lsa_LookupNames4_sids(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14282 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames4_sids_
, NDR_POINTER_REF
, "Pointer to Sids (lsa_TransSidArray3)",hf_lsarpc_lsa_LookupNames4_sids
);
14288 lsarpc_dissect_element_lsa_LookupNames4_sids_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14290 offset
= lsarpc_dissect_struct_lsa_TransSidArray3(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_LookupNames4_sids
,0);
14296 lsarpc_dissect_element_lsa_LookupNames4_level(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14298 offset
= lsarpc_dissect_enum_lsa_LookupNamesLevel(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames4_level
, 0);
14304 lsarpc_dissect_element_lsa_LookupNames4_count(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14306 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_LookupNames4_count_
, NDR_POINTER_REF
, "Pointer to Count (uint32)",hf_lsarpc_lsa_LookupNames4_count
);
14312 lsarpc_dissect_element_lsa_LookupNames4_count_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14314 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames4_count
, 0);
14320 lsarpc_dissect_element_lsa_LookupNames4_lookup_options(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14322 offset
= lsarpc_dissect_enum_lsa_LookupOptions(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames4_lookup_options
, 0);
14328 lsarpc_dissect_element_lsa_LookupNames4_client_revision(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14330 offset
= lsarpc_dissect_enum_lsa_ClientRevision(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_LookupNames4_client_revision
, 0);
14335 /* IDL: NTSTATUS lsa_LookupNames4( */
14336 /* IDL: [in] [range(0,1000)] uint32 num_names, */
14337 /* IDL: [in] [size_is(num_names)] lsa_String names[*], */
14338 /* IDL: [out] [ref] lsa_RefDomainList **domains, */
14339 /* IDL: [in] [out] [ref] lsa_TransSidArray3 *sids, */
14340 /* IDL: [in] lsa_LookupNamesLevel level, */
14341 /* IDL: [in] [out] [ref] uint32 *count, */
14342 /* IDL: [in] lsa_LookupOptions lookup_options, */
14343 /* IDL: [in] lsa_ClientRevision client_revision */
14347 lsarpc_dissect_lsa_LookupNames4_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14351 di
->dcerpc_procedure_name
="lsa_LookupNames4";
14352 offset
= lsarpc_dissect_element_lsa_LookupNames4_domains(tvb
, offset
, pinfo
, tree
, di
, drep
);
14353 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14355 offset
= lsarpc_dissect_element_lsa_LookupNames4_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
14356 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14358 offset
= lsarpc_dissect_element_lsa_LookupNames4_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
14359 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14361 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
14364 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
14370 lsarpc_dissect_lsa_LookupNames4_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14372 di
->dcerpc_procedure_name
="lsa_LookupNames4";
14373 offset
= lsarpc_dissect_element_lsa_LookupNames4_num_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
14374 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14375 offset
= lsarpc_dissect_element_lsa_LookupNames4_names(tvb
, offset
, pinfo
, tree
, di
, drep
);
14376 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14377 offset
= lsarpc_dissect_element_lsa_LookupNames4_sids(tvb
, offset
, pinfo
, tree
, di
, drep
);
14378 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14379 offset
= lsarpc_dissect_element_lsa_LookupNames4_level(tvb
, offset
, pinfo
, tree
, di
, drep
);
14380 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14381 offset
= lsarpc_dissect_element_lsa_LookupNames4_count(tvb
, offset
, pinfo
, tree
, di
, drep
);
14382 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14383 offset
= lsarpc_dissect_element_lsa_LookupNames4_lookup_options(tvb
, offset
, pinfo
, tree
, di
, drep
);
14384 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14385 offset
= lsarpc_dissect_element_lsa_LookupNames4_client_revision(tvb
, offset
, pinfo
, tree
, di
, drep
);
14386 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
14390 /* IDL: NTSTATUS lsa_LSAROPENPOLICYSCE( */
14395 lsarpc_dissect_lsa_LSAROPENPOLICYSCE_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14399 di
->dcerpc_procedure_name
="lsa_LSAROPENPOLICYSCE";
14400 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
14403 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
14409 lsarpc_dissect_lsa_LSAROPENPOLICYSCE_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14411 di
->dcerpc_procedure_name
="lsa_LSAROPENPOLICYSCE";
14415 /* IDL: NTSTATUS lsa_LSARADTREGISTERSECURITYEVENTSOURCE( */
14420 lsarpc_dissect_lsa_LSARADTREGISTERSECURITYEVENTSOURCE_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14424 di
->dcerpc_procedure_name
="lsa_LSARADTREGISTERSECURITYEVENTSOURCE";
14425 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
14428 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
14434 lsarpc_dissect_lsa_LSARADTREGISTERSECURITYEVENTSOURCE_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14436 di
->dcerpc_procedure_name
="lsa_LSARADTREGISTERSECURITYEVENTSOURCE";
14440 /* IDL: NTSTATUS lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE( */
14445 lsarpc_dissect_lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14449 di
->dcerpc_procedure_name
="lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE";
14450 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
14453 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
14459 lsarpc_dissect_lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14461 di
->dcerpc_procedure_name
="lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE";
14465 /* IDL: NTSTATUS lsa_LSARADTREPORTSECURITYEVENT( */
14470 lsarpc_dissect_lsa_LSARADTREPORTSECURITYEVENT_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14474 di
->dcerpc_procedure_name
="lsa_LSARADTREPORTSECURITYEVENT";
14475 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
14478 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
14484 lsarpc_dissect_lsa_LSARADTREPORTSECURITYEVENT_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14486 di
->dcerpc_procedure_name
="lsa_LSARADTREPORTSECURITYEVENT";
14490 /* IDL: void lsa_Opnum82NotUsedOnWire( */
14495 lsarpc_dissect_lsa_Opnum82NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14497 di
->dcerpc_procedure_name
="lsa_Opnum82NotUsedOnWire";
14502 lsarpc_dissect_lsa_Opnum82NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14504 di
->dcerpc_procedure_name
="lsa_Opnum82NotUsedOnWire";
14508 /* IDL: void lsa_Opnum83NotUsedOnWire( */
14513 lsarpc_dissect_lsa_Opnum83NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14515 di
->dcerpc_procedure_name
="lsa_Opnum83NotUsedOnWire";
14520 lsarpc_dissect_lsa_Opnum83NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14522 di
->dcerpc_procedure_name
="lsa_Opnum83NotUsedOnWire";
14526 /* IDL: void lsa_Opnum84NotUsedOnWire( */
14531 lsarpc_dissect_lsa_Opnum84NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14533 di
->dcerpc_procedure_name
="lsa_Opnum84NotUsedOnWire";
14538 lsarpc_dissect_lsa_Opnum84NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14540 di
->dcerpc_procedure_name
="lsa_Opnum84NotUsedOnWire";
14544 /* IDL: void lsa_Opnum85NotUsedOnWire( */
14549 lsarpc_dissect_lsa_Opnum85NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14551 di
->dcerpc_procedure_name
="lsa_Opnum85NotUsedOnWire";
14556 lsarpc_dissect_lsa_Opnum85NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14558 di
->dcerpc_procedure_name
="lsa_Opnum85NotUsedOnWire";
14562 /* IDL: void lsa_Opnum86NotUsedOnWire( */
14567 lsarpc_dissect_lsa_Opnum86NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14569 di
->dcerpc_procedure_name
="lsa_Opnum86NotUsedOnWire";
14574 lsarpc_dissect_lsa_Opnum86NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14576 di
->dcerpc_procedure_name
="lsa_Opnum86NotUsedOnWire";
14580 /* IDL: void lsa_Opnum87NotUsedOnWire( */
14585 lsarpc_dissect_lsa_Opnum87NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14587 di
->dcerpc_procedure_name
="lsa_Opnum87NotUsedOnWire";
14592 lsarpc_dissect_lsa_Opnum87NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14594 di
->dcerpc_procedure_name
="lsa_Opnum87NotUsedOnWire";
14598 /* IDL: void lsa_Opnum88NotUsedOnWire( */
14603 lsarpc_dissect_lsa_Opnum88NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14605 di
->dcerpc_procedure_name
="lsa_Opnum88NotUsedOnWire";
14610 lsarpc_dissect_lsa_Opnum88NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14612 di
->dcerpc_procedure_name
="lsa_Opnum88NotUsedOnWire";
14616 /* IDL: void lsa_Opnum89NotUsedOnWire( */
14621 lsarpc_dissect_lsa_Opnum89NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14623 di
->dcerpc_procedure_name
="lsa_Opnum89NotUsedOnWire";
14628 lsarpc_dissect_lsa_Opnum89NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14630 di
->dcerpc_procedure_name
="lsa_Opnum89NotUsedOnWire";
14634 /* IDL: void lsa_Opnum90NotUsedOnWire( */
14639 lsarpc_dissect_lsa_Opnum90NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14641 di
->dcerpc_procedure_name
="lsa_Opnum90NotUsedOnWire";
14646 lsarpc_dissect_lsa_Opnum90NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14648 di
->dcerpc_procedure_name
="lsa_Opnum90NotUsedOnWire";
14652 /* IDL: void lsa_Opnum91NotUsedOnWire( */
14657 lsarpc_dissect_lsa_Opnum91NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14659 di
->dcerpc_procedure_name
="lsa_Opnum91NotUsedOnWire";
14664 lsarpc_dissect_lsa_Opnum91NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14666 di
->dcerpc_procedure_name
="lsa_Opnum91NotUsedOnWire";
14670 /* IDL: void lsa_Opnum92NotUsedOnWire( */
14675 lsarpc_dissect_lsa_Opnum92NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14677 di
->dcerpc_procedure_name
="lsa_Opnum92NotUsedOnWire";
14682 lsarpc_dissect_lsa_Opnum92NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14684 di
->dcerpc_procedure_name
="lsa_Opnum92NotUsedOnWire";
14688 /* IDL: void lsa_Opnum93NotUsedOnWire( */
14693 lsarpc_dissect_lsa_Opnum93NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14695 di
->dcerpc_procedure_name
="lsa_Opnum93NotUsedOnWire";
14700 lsarpc_dissect_lsa_Opnum93NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14702 di
->dcerpc_procedure_name
="lsa_Opnum93NotUsedOnWire";
14706 /* IDL: void lsa_Opnum94NotUsedOnWire( */
14711 lsarpc_dissect_lsa_Opnum94NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14713 di
->dcerpc_procedure_name
="lsa_Opnum94NotUsedOnWire";
14718 lsarpc_dissect_lsa_Opnum94NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14720 di
->dcerpc_procedure_name
="lsa_Opnum94NotUsedOnWire";
14724 /* IDL: void lsa_Opnum95NotUsedOnWire( */
14729 lsarpc_dissect_lsa_Opnum95NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14731 di
->dcerpc_procedure_name
="lsa_Opnum95NotUsedOnWire";
14736 lsarpc_dissect_lsa_Opnum95NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14738 di
->dcerpc_procedure_name
="lsa_Opnum95NotUsedOnWire";
14742 /* IDL: void lsa_Opnum96NotUsedOnWire( */
14747 lsarpc_dissect_lsa_Opnum96NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14749 di
->dcerpc_procedure_name
="lsa_Opnum96NotUsedOnWire";
14754 lsarpc_dissect_lsa_Opnum96NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14756 di
->dcerpc_procedure_name
="lsa_Opnum96NotUsedOnWire";
14760 /* IDL: void lsa_Opnum97NotUsedOnWire( */
14765 lsarpc_dissect_lsa_Opnum97NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14767 di
->dcerpc_procedure_name
="lsa_Opnum97NotUsedOnWire";
14772 lsarpc_dissect_lsa_Opnum97NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14774 di
->dcerpc_procedure_name
="lsa_Opnum97NotUsedOnWire";
14778 /* IDL: void lsa_Opnum98NotUsedOnWire( */
14783 lsarpc_dissect_lsa_Opnum98NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14785 di
->dcerpc_procedure_name
="lsa_Opnum98NotUsedOnWire";
14790 lsarpc_dissect_lsa_Opnum98NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14792 di
->dcerpc_procedure_name
="lsa_Opnum98NotUsedOnWire";
14796 /* IDL: void lsa_Opnum99NotUsedOnWire( */
14801 lsarpc_dissect_lsa_Opnum99NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14803 di
->dcerpc_procedure_name
="lsa_Opnum99NotUsedOnWire";
14808 lsarpc_dissect_lsa_Opnum99NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14810 di
->dcerpc_procedure_name
="lsa_Opnum99NotUsedOnWire";
14814 /* IDL: void lsa_Opnum100NotUsedOnWire( */
14819 lsarpc_dissect_lsa_Opnum100NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14821 di
->dcerpc_procedure_name
="lsa_Opnum100NotUsedOnWire";
14826 lsarpc_dissect_lsa_Opnum100NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14828 di
->dcerpc_procedure_name
="lsa_Opnum100NotUsedOnWire";
14832 /* IDL: void lsa_Opnum101NotUsedOnWire( */
14837 lsarpc_dissect_lsa_Opnum101NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14839 di
->dcerpc_procedure_name
="lsa_Opnum101NotUsedOnWire";
14844 lsarpc_dissect_lsa_Opnum101NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14846 di
->dcerpc_procedure_name
="lsa_Opnum101NotUsedOnWire";
14850 /* IDL: void lsa_Opnum102NotUsedOnWire( */
14855 lsarpc_dissect_lsa_Opnum102NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14857 di
->dcerpc_procedure_name
="lsa_Opnum102NotUsedOnWire";
14862 lsarpc_dissect_lsa_Opnum102NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14864 di
->dcerpc_procedure_name
="lsa_Opnum102NotUsedOnWire";
14868 /* IDL: void lsa_Opnum103NotUsedOnWire( */
14873 lsarpc_dissect_lsa_Opnum103NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14875 di
->dcerpc_procedure_name
="lsa_Opnum103NotUsedOnWire";
14880 lsarpc_dissect_lsa_Opnum103NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14882 di
->dcerpc_procedure_name
="lsa_Opnum103NotUsedOnWire";
14886 /* IDL: void lsa_Opnum104NotUsedOnWire( */
14891 lsarpc_dissect_lsa_Opnum104NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14893 di
->dcerpc_procedure_name
="lsa_Opnum104NotUsedOnWire";
14898 lsarpc_dissect_lsa_Opnum104NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14900 di
->dcerpc_procedure_name
="lsa_Opnum104NotUsedOnWire";
14904 /* IDL: void lsa_Opnum105NotUsedOnWire( */
14909 lsarpc_dissect_lsa_Opnum105NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14911 di
->dcerpc_procedure_name
="lsa_Opnum105NotUsedOnWire";
14916 lsarpc_dissect_lsa_Opnum105NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14918 di
->dcerpc_procedure_name
="lsa_Opnum105NotUsedOnWire";
14922 /* IDL: void lsa_Opnum106NotUsedOnWire( */
14927 lsarpc_dissect_lsa_Opnum106NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14929 di
->dcerpc_procedure_name
="lsa_Opnum106NotUsedOnWire";
14934 lsarpc_dissect_lsa_Opnum106NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14936 di
->dcerpc_procedure_name
="lsa_Opnum106NotUsedOnWire";
14940 /* IDL: void lsa_Opnum107NotUsedOnWire( */
14945 lsarpc_dissect_lsa_Opnum107NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14947 di
->dcerpc_procedure_name
="lsa_Opnum107NotUsedOnWire";
14952 lsarpc_dissect_lsa_Opnum107NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14954 di
->dcerpc_procedure_name
="lsa_Opnum107NotUsedOnWire";
14958 /* IDL: void lsa_Opnum108NotUsedOnWire( */
14963 lsarpc_dissect_lsa_Opnum108NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14965 di
->dcerpc_procedure_name
="lsa_Opnum108NotUsedOnWire";
14970 lsarpc_dissect_lsa_Opnum108NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14972 di
->dcerpc_procedure_name
="lsa_Opnum108NotUsedOnWire";
14976 /* IDL: void lsa_Opnum109NotUsedOnWire( */
14981 lsarpc_dissect_lsa_Opnum109NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14983 di
->dcerpc_procedure_name
="lsa_Opnum109NotUsedOnWire";
14988 lsarpc_dissect_lsa_Opnum109NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
14990 di
->dcerpc_procedure_name
="lsa_Opnum109NotUsedOnWire";
14994 /* IDL: void lsa_Opnum110NotUsedOnWire( */
14999 lsarpc_dissect_lsa_Opnum110NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15001 di
->dcerpc_procedure_name
="lsa_Opnum110NotUsedOnWire";
15006 lsarpc_dissect_lsa_Opnum110NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15008 di
->dcerpc_procedure_name
="lsa_Opnum110NotUsedOnWire";
15012 /* IDL: void lsa_Opnum111NotUsedOnWire( */
15017 lsarpc_dissect_lsa_Opnum111NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15019 di
->dcerpc_procedure_name
="lsa_Opnum111NotUsedOnWire";
15024 lsarpc_dissect_lsa_Opnum111NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15026 di
->dcerpc_procedure_name
="lsa_Opnum111NotUsedOnWire";
15030 /* IDL: void lsa_Opnum112NotUsedOnWire( */
15035 lsarpc_dissect_lsa_Opnum112NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15037 di
->dcerpc_procedure_name
="lsa_Opnum112NotUsedOnWire";
15042 lsarpc_dissect_lsa_Opnum112NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15044 di
->dcerpc_procedure_name
="lsa_Opnum112NotUsedOnWire";
15048 /* IDL: void lsa_Opnum113NotUsedOnWire( */
15053 lsarpc_dissect_lsa_Opnum113NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15055 di
->dcerpc_procedure_name
="lsa_Opnum113NotUsedOnWire";
15060 lsarpc_dissect_lsa_Opnum113NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15062 di
->dcerpc_procedure_name
="lsa_Opnum113NotUsedOnWire";
15066 /* IDL: void lsa_Opnum114NotUsedOnWire( */
15071 lsarpc_dissect_lsa_Opnum114NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15073 di
->dcerpc_procedure_name
="lsa_Opnum114NotUsedOnWire";
15078 lsarpc_dissect_lsa_Opnum114NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15080 di
->dcerpc_procedure_name
="lsa_Opnum114NotUsedOnWire";
15084 /* IDL: void lsa_Opnum115NotUsedOnWire( */
15089 lsarpc_dissect_lsa_Opnum115NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15091 di
->dcerpc_procedure_name
="lsa_Opnum115NotUsedOnWire";
15096 lsarpc_dissect_lsa_Opnum115NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15098 di
->dcerpc_procedure_name
="lsa_Opnum115NotUsedOnWire";
15102 /* IDL: void lsa_Opnum116NotUsedOnWire( */
15107 lsarpc_dissect_lsa_Opnum116NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15109 di
->dcerpc_procedure_name
="lsa_Opnum116NotUsedOnWire";
15114 lsarpc_dissect_lsa_Opnum116NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15116 di
->dcerpc_procedure_name
="lsa_Opnum116NotUsedOnWire";
15120 /* IDL: void lsa_Opnum117NotUsedOnWire( */
15125 lsarpc_dissect_lsa_Opnum117NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15127 di
->dcerpc_procedure_name
="lsa_Opnum117NotUsedOnWire";
15132 lsarpc_dissect_lsa_Opnum117NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15134 di
->dcerpc_procedure_name
="lsa_Opnum117NotUsedOnWire";
15138 /* IDL: void lsa_Opnum118NotUsedOnWire( */
15143 lsarpc_dissect_lsa_Opnum118NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15145 di
->dcerpc_procedure_name
="lsa_Opnum118NotUsedOnWire";
15150 lsarpc_dissect_lsa_Opnum118NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15152 di
->dcerpc_procedure_name
="lsa_Opnum118NotUsedOnWire";
15156 /* IDL: void lsa_Opnum119NotUsedOnWire( */
15161 lsarpc_dissect_lsa_Opnum119NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15163 di
->dcerpc_procedure_name
="lsa_Opnum119NotUsedOnWire";
15168 lsarpc_dissect_lsa_Opnum119NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15170 di
->dcerpc_procedure_name
="lsa_Opnum119NotUsedOnWire";
15174 /* IDL: void lsa_Opnum120NotUsedOnWire( */
15179 lsarpc_dissect_lsa_Opnum120NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15181 di
->dcerpc_procedure_name
="lsa_Opnum120NotUsedOnWire";
15186 lsarpc_dissect_lsa_Opnum120NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15188 di
->dcerpc_procedure_name
="lsa_Opnum120NotUsedOnWire";
15192 /* IDL: void lsa_Opnum121NotUsedOnWire( */
15197 lsarpc_dissect_lsa_Opnum121NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15199 di
->dcerpc_procedure_name
="lsa_Opnum121NotUsedOnWire";
15204 lsarpc_dissect_lsa_Opnum121NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15206 di
->dcerpc_procedure_name
="lsa_Opnum121NotUsedOnWire";
15210 /* IDL: void lsa_Opnum122NotUsedOnWire( */
15215 lsarpc_dissect_lsa_Opnum122NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15217 di
->dcerpc_procedure_name
="lsa_Opnum122NotUsedOnWire";
15222 lsarpc_dissect_lsa_Opnum122NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15224 di
->dcerpc_procedure_name
="lsa_Opnum122NotUsedOnWire";
15228 /* IDL: void lsa_Opnum123NotUsedOnWire( */
15233 lsarpc_dissect_lsa_Opnum123NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15235 di
->dcerpc_procedure_name
="lsa_Opnum123NotUsedOnWire";
15240 lsarpc_dissect_lsa_Opnum123NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15242 di
->dcerpc_procedure_name
="lsa_Opnum123NotUsedOnWire";
15246 /* IDL: void lsa_Opnum124NotUsedOnWire( */
15251 lsarpc_dissect_lsa_Opnum124NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15253 di
->dcerpc_procedure_name
="lsa_Opnum124NotUsedOnWire";
15258 lsarpc_dissect_lsa_Opnum124NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15260 di
->dcerpc_procedure_name
="lsa_Opnum124NotUsedOnWire";
15264 /* IDL: void lsa_Opnum125NotUsedOnWire( */
15269 lsarpc_dissect_lsa_Opnum125NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15271 di
->dcerpc_procedure_name
="lsa_Opnum125NotUsedOnWire";
15276 lsarpc_dissect_lsa_Opnum125NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15278 di
->dcerpc_procedure_name
="lsa_Opnum125NotUsedOnWire";
15282 /* IDL: void lsa_Opnum126NotUsedOnWire( */
15287 lsarpc_dissect_lsa_Opnum126NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15289 di
->dcerpc_procedure_name
="lsa_Opnum126NotUsedOnWire";
15294 lsarpc_dissect_lsa_Opnum126NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15296 di
->dcerpc_procedure_name
="lsa_Opnum126NotUsedOnWire";
15300 /* IDL: void lsa_Opnum127NotUsedOnWire( */
15305 lsarpc_dissect_lsa_Opnum127NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15307 di
->dcerpc_procedure_name
="lsa_Opnum127NotUsedOnWire";
15312 lsarpc_dissect_lsa_Opnum127NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15314 di
->dcerpc_procedure_name
="lsa_Opnum127NotUsedOnWire";
15318 /* IDL: void lsa_Opnum128NotUsedOnWire( */
15323 lsarpc_dissect_lsa_Opnum128NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15325 di
->dcerpc_procedure_name
="lsa_Opnum128NotUsedOnWire";
15330 lsarpc_dissect_lsa_Opnum128NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15332 di
->dcerpc_procedure_name
="lsa_Opnum128NotUsedOnWire";
15337 lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_policy_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15339 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_policy_handle_
, NDR_POINTER_REF
, "Pointer to Policy Handle (policy_handle)",hf_lsarpc_lsa_CreateTrustedDomainEx3_policy_handle
);
15345 lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_policy_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15347 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomainEx3_policy_handle
, 0);
15353 lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15355 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_info_
, NDR_POINTER_REF
, "Pointer to Info (lsa_TrustDomainInfoInfoEx)",hf_lsarpc_lsa_CreateTrustedDomainEx3_info
);
15361 lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15363 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_CreateTrustedDomainEx3_info
,0);
15369 lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_auth_info_internal(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15371 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_auth_info_internal_
, NDR_POINTER_REF
, "Pointer to Auth Info Internal (lsa_TrustDomainInfoAuthInfoInternalAES)",hf_lsarpc_lsa_CreateTrustedDomainEx3_auth_info_internal
);
15377 lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_auth_info_internal_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15379 offset
= lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternalAES(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_CreateTrustedDomainEx3_auth_info_internal
,0);
15385 lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15387 offset
= lsarpc_dissect_bitmap_lsa_TrustedAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomainEx3_access_mask
, 0);
15393 lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_trustdom_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15395 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_trustdom_handle_
, NDR_POINTER_REF
, "Pointer to Trustdom Handle (policy_handle)",hf_lsarpc_lsa_CreateTrustedDomainEx3_trustdom_handle
);
15401 lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_trustdom_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15403 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_CreateTrustedDomainEx3_trustdom_handle
, 0);
15408 /* IDL: NTSTATUS lsa_CreateTrustedDomainEx3( */
15409 /* IDL: [in] [ref] policy_handle *policy_handle, */
15410 /* IDL: [in] [ref] lsa_TrustDomainInfoInfoEx *info, */
15411 /* IDL: [in] [ref] lsa_TrustDomainInfoAuthInfoInternalAES *auth_info_internal, */
15412 /* IDL: [in] lsa_TrustedAccessMask access_mask, */
15413 /* IDL: [out] [ref] policy_handle *trustdom_handle */
15417 lsarpc_dissect_lsa_CreateTrustedDomainEx3_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15421 di
->dcerpc_procedure_name
="lsa_CreateTrustedDomainEx3";
15422 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_trustdom_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
15423 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15425 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
15428 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
15434 lsarpc_dissect_lsa_CreateTrustedDomainEx3_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15436 di
->dcerpc_procedure_name
="lsa_CreateTrustedDomainEx3";
15437 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_policy_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
15438 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15439 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
15440 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15441 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_auth_info_internal(tvb
, offset
, pinfo
, tree
, di
, drep
);
15442 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15443 offset
= lsarpc_dissect_element_lsa_CreateTrustedDomainEx3_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
15444 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15449 lsarpc_dissect_element_lsa_OpenPolicy3_system_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15451 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy3_system_name_
, NDR_POINTER_UNIQUE
, "Pointer to System Name (uint16)",hf_lsarpc_lsa_OpenPolicy3_system_name
);
15457 lsarpc_dissect_element_lsa_OpenPolicy3_system_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15461 offset
= dissect_ndr_cvstring(tvb
, offset
, pinfo
, tree
, di
, drep
, sizeof(uint16_t), hf_lsarpc_lsa_OpenPolicy3_system_name
, false, &data
);
15462 proto_item_append_text(tree
, ": %s", data
);
15468 lsarpc_dissect_element_lsa_OpenPolicy3_attr(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15470 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy3_attr_
, NDR_POINTER_REF
, "Pointer to Attr (lsa_ObjectAttribute)",hf_lsarpc_lsa_OpenPolicy3_attr
);
15476 lsarpc_dissect_element_lsa_OpenPolicy3_attr_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15478 offset
= lsarpc_dissect_struct_lsa_ObjectAttribute(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_OpenPolicy3_attr
,0);
15484 lsarpc_dissect_element_lsa_OpenPolicy3_access_mask(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15486 offset
= lsarpc_dissect_bitmap_lsa_PolicyAccessMask(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy3_access_mask
, 0);
15492 lsarpc_dissect_element_lsa_OpenPolicy3_in_version(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15494 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy3_in_version
, 0);
15500 lsarpc_dissect_element_lsa_OpenPolicy3_in_revision_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15502 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy3_in_revision_info_
, NDR_POINTER_REF
, "Pointer to In Revision Info (lsa_revision_info)",hf_lsarpc_lsa_OpenPolicy3_in_revision_info
);
15508 lsarpc_dissect_element_lsa_OpenPolicy3_in_revision_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15510 offset
= lsarpc_dissect_lsa_revision_info(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy3_in_revision_info
, 0);
15516 lsarpc_dissect_element_lsa_OpenPolicy3_out_version(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15518 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy3_out_version_
, NDR_POINTER_REF
, "Pointer to Out Version (uint32)",hf_lsarpc_lsa_OpenPolicy3_out_version
);
15524 lsarpc_dissect_element_lsa_OpenPolicy3_out_version_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15526 offset
= PIDL_dissect_uint32(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy3_out_version
, 0);
15532 lsarpc_dissect_element_lsa_OpenPolicy3_out_revision_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15534 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy3_out_revision_info_
, NDR_POINTER_REF
, "Pointer to Out Revision Info (lsa_revision_info)",hf_lsarpc_lsa_OpenPolicy3_out_revision_info
);
15540 lsarpc_dissect_element_lsa_OpenPolicy3_out_revision_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15542 offset
= lsarpc_dissect_lsa_revision_info(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy3_out_revision_info
, 0);
15548 lsarpc_dissect_element_lsa_OpenPolicy3_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15550 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_OpenPolicy3_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_OpenPolicy3_handle
);
15556 lsarpc_dissect_element_lsa_OpenPolicy3_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15558 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_OpenPolicy3_handle
, 0);
15563 /* IDL: NTSTATUS lsa_OpenPolicy3( */
15564 /* IDL: [charset(UTF16)] [in] [unique(1)] uint16 *system_name, */
15565 /* IDL: [in] [ref] lsa_ObjectAttribute *attr, */
15566 /* IDL: [in] lsa_PolicyAccessMask access_mask, */
15567 /* IDL: [in] uint32 in_version, */
15568 /* IDL: [in] [ref] [switch_is(in_version)] lsa_revision_info *in_revision_info, */
15569 /* IDL: [out] [ref] uint32 *out_version, */
15570 /* IDL: [out] [ref] [switch_is(*out_version)] lsa_revision_info *out_revision_info, */
15571 /* IDL: [out] [ref] policy_handle *handle */
15575 lsarpc_dissect_lsa_OpenPolicy3_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15579 di
->dcerpc_procedure_name
="lsa_OpenPolicy3";
15580 offset
= lsarpc_dissect_element_lsa_OpenPolicy3_out_version(tvb
, offset
, pinfo
, tree
, di
, drep
);
15581 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15583 offset
= lsarpc_dissect_element_lsa_OpenPolicy3_out_revision_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
15584 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15586 offset
= lsarpc_dissect_element_lsa_OpenPolicy3_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
15587 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15589 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
15592 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
15598 lsarpc_dissect_lsa_OpenPolicy3_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15600 di
->dcerpc_procedure_name
="lsa_OpenPolicy3";
15601 offset
= lsarpc_dissect_element_lsa_OpenPolicy3_system_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
15602 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15603 offset
= lsarpc_dissect_element_lsa_OpenPolicy3_attr(tvb
, offset
, pinfo
, tree
, di
, drep
);
15604 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15605 offset
= lsarpc_dissect_element_lsa_OpenPolicy3_access_mask(tvb
, offset
, pinfo
, tree
, di
, drep
);
15606 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15607 offset
= lsarpc_dissect_element_lsa_OpenPolicy3_in_version(tvb
, offset
, pinfo
, tree
, di
, drep
);
15608 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15609 offset
= lsarpc_dissect_element_lsa_OpenPolicy3_in_revision_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
15610 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15614 /* IDL: void lsa_Opnum131NotUsedOnWire( */
15619 lsarpc_dissect_lsa_Opnum131NotUsedOnWire_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15621 di
->dcerpc_procedure_name
="lsa_Opnum131NotUsedOnWire";
15626 lsarpc_dissect_lsa_Opnum131NotUsedOnWire_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15628 di
->dcerpc_procedure_name
="lsa_Opnum131NotUsedOnWire";
15633 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15635 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_handle
);
15641 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15643 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_handle
, 0);
15649 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15651 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name_
, NDR_POINTER_REF
, "Pointer to Trusted Domain Name (lsa_String)",hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name
);
15657 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15659 offset
= lsarpc_dissect_struct_lsa_String(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name
,0);
15665 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_highest_record_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15667 offset
= lsarpc_dissect_enum_lsa_ForestTrustRecordType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_highest_record_type
, 0);
15673 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_forest_trust_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15675 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_forest_trust_info_
, NDR_POINTER_REF
, "Pointer to Forest Trust Info (lsa_ForestTrustInformation2)",hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_forest_trust_info
);
15681 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_forest_trust_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15683 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_forest_trust_info__
, NDR_POINTER_UNIQUE
, "Pointer to Forest Trust Info (lsa_ForestTrustInformation2)",hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_forest_trust_info
);
15689 lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_forest_trust_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15691 offset
= lsarpc_dissect_struct_lsa_ForestTrustInformation2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_forest_trust_info
,0);
15696 /* IDL: NTSTATUS lsa_lsaRQueryForestTrustInformation2( */
15697 /* IDL: [in] [ref] policy_handle *handle, */
15698 /* IDL: [in] [ref] lsa_String *trusted_domain_name, */
15699 /* IDL: [in] lsa_ForestTrustRecordType highest_record_type, */
15700 /* IDL: [out] [ref] lsa_ForestTrustInformation2 **forest_trust_info */
15704 lsarpc_dissect_lsa_lsaRQueryForestTrustInformation2_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15708 di
->dcerpc_procedure_name
="lsa_lsaRQueryForestTrustInformation2";
15709 offset
= lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_forest_trust_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
15710 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15712 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
15715 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
15721 lsarpc_dissect_lsa_lsaRQueryForestTrustInformation2_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15723 di
->dcerpc_procedure_name
="lsa_lsaRQueryForestTrustInformation2";
15724 offset
= lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
15725 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15726 offset
= lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
15727 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15728 offset
= lsarpc_dissect_element_lsa_lsaRQueryForestTrustInformation2_highest_record_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
15729 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15734 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_handle(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15736 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_handle_
, NDR_POINTER_REF
, "Pointer to Handle (policy_handle)",hf_lsarpc_lsa_lsaRSetForestTrustInformation2_handle
);
15742 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_handle_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15744 offset
= PIDL_dissect_policy_hnd(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRSetForestTrustInformation2_handle
, 0);
15750 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_trusted_domain_name(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15752 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_trusted_domain_name_
, NDR_POINTER_REF
, "Pointer to Trusted Domain Name (lsa_StringLarge)",hf_lsarpc_lsa_lsaRSetForestTrustInformation2_trusted_domain_name
);
15758 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_trusted_domain_name_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15760 offset
= lsarpc_dissect_struct_lsa_StringLarge(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRSetForestTrustInformation2_trusted_domain_name
,0);
15766 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_highest_record_type(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15768 offset
= lsarpc_dissect_enum_lsa_ForestTrustRecordType(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRSetForestTrustInformation2_highest_record_type
, 0);
15774 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_forest_trust_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15776 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_forest_trust_info_
, NDR_POINTER_REF
, "Pointer to Forest Trust Info (lsa_ForestTrustInformation2)",hf_lsarpc_lsa_lsaRSetForestTrustInformation2_forest_trust_info
);
15782 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_forest_trust_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15784 offset
= lsarpc_dissect_struct_lsa_ForestTrustInformation2(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRSetForestTrustInformation2_forest_trust_info
,0);
15790 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_check_only(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15792 offset
= PIDL_dissect_uint8(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_lsa_lsaRSetForestTrustInformation2_check_only
, 0);
15798 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_collision_info(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15800 offset
= dissect_ndr_toplevel_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_collision_info_
, NDR_POINTER_REF
, "Pointer to Collision Info (lsa_ForestTrustCollisionInfo)",hf_lsarpc_lsa_lsaRSetForestTrustInformation2_collision_info
);
15806 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_collision_info_(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15808 offset
= dissect_ndr_embedded_pointer(tvb
, offset
, pinfo
, tree
, di
, drep
, lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_collision_info__
, NDR_POINTER_UNIQUE
, "Pointer to Collision Info (lsa_ForestTrustCollisionInfo)",hf_lsarpc_lsa_lsaRSetForestTrustInformation2_collision_info
);
15814 lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_collision_info__(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15816 offset
= lsarpc_dissect_struct_lsa_ForestTrustCollisionInfo(tvb
,offset
,pinfo
,tree
,di
,drep
,hf_lsarpc_lsa_lsaRSetForestTrustInformation2_collision_info
,0);
15821 /* IDL: NTSTATUS lsa_lsaRSetForestTrustInformation2( */
15822 /* IDL: [in] [ref] policy_handle *handle, */
15823 /* IDL: [in] [ref] lsa_StringLarge *trusted_domain_name, */
15824 /* IDL: [in] lsa_ForestTrustRecordType highest_record_type, */
15825 /* IDL: [in] [ref] lsa_ForestTrustInformation2 *forest_trust_info, */
15826 /* IDL: [in] uint8 check_only, */
15827 /* IDL: [out] [ref] lsa_ForestTrustCollisionInfo **collision_info */
15831 lsarpc_dissect_lsa_lsaRSetForestTrustInformation2_response(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15835 di
->dcerpc_procedure_name
="lsa_lsaRSetForestTrustInformation2";
15836 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_collision_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
15837 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15839 offset
= dissect_ntstatus(tvb
, offset
, pinfo
, tree
, di
, drep
, hf_lsarpc_status
, &status
);
15842 col_append_fstr(pinfo
->cinfo
, COL_INFO
, ", Error: %s", val_to_str_ext(status
, &NT_errors_ext
, "Unknown NT status 0x%08x"));
15848 lsarpc_dissect_lsa_lsaRSetForestTrustInformation2_request(tvbuff_t
*tvb _U_
, int offset _U_
, packet_info
*pinfo _U_
, proto_tree
*tree _U_
, dcerpc_info
* di _U_
, uint8_t *drep _U_
)
15850 di
->dcerpc_procedure_name
="lsa_lsaRSetForestTrustInformation2";
15851 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_handle(tvb
, offset
, pinfo
, tree
, di
, drep
);
15852 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15853 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_trusted_domain_name(tvb
, offset
, pinfo
, tree
, di
, drep
);
15854 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15855 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_highest_record_type(tvb
, offset
, pinfo
, tree
, di
, drep
);
15856 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15857 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_forest_trust_info(tvb
, offset
, pinfo
, tree
, di
, drep
);
15858 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15859 offset
= lsarpc_dissect_element_lsa_lsaRSetForestTrustInformation2_check_only(tvb
, offset
, pinfo
, tree
, di
, drep
);
15860 offset
= dissect_deferred_pointers(pinfo
, tvb
, offset
, di
, drep
);
15865 static const dcerpc_sub_dissector lsarpc_dissectors
[] = {
15867 lsarpc_dissect_lsa_Close_request
, lsarpc_dissect_lsa_Close_response
},
15869 lsarpc_dissect_lsa_Delete_request
, lsarpc_dissect_lsa_Delete_response
},
15870 { 2, "lsa_EnumPrivs",
15871 lsarpc_dissect_lsa_EnumPrivs_request
, lsarpc_dissect_lsa_EnumPrivs_response
},
15872 { 3, "lsa_QuerySecurity",
15873 lsarpc_dissect_lsa_QuerySecurity_request
, lsarpc_dissect_lsa_QuerySecurity_response
},
15874 { 4, "lsa_SetSecObj",
15875 lsarpc_dissect_lsa_SetSecObj_request
, lsarpc_dissect_lsa_SetSecObj_response
},
15876 { 5, "lsa_ChangePassword",
15877 lsarpc_dissect_lsa_ChangePassword_request
, lsarpc_dissect_lsa_ChangePassword_response
},
15878 { 6, "lsa_OpenPolicy",
15879 lsarpc_dissect_lsa_OpenPolicy_request
, lsarpc_dissect_lsa_OpenPolicy_response
},
15880 { 7, "lsa_QueryInfoPolicy",
15881 lsarpc_dissect_lsa_QueryInfoPolicy_request
, lsarpc_dissect_lsa_QueryInfoPolicy_response
},
15882 { 8, "lsa_SetInfoPolicy",
15883 lsarpc_dissect_lsa_SetInfoPolicy_request
, lsarpc_dissect_lsa_SetInfoPolicy_response
},
15884 { 9, "lsa_ClearAuditLog",
15885 lsarpc_dissect_lsa_ClearAuditLog_request
, lsarpc_dissect_lsa_ClearAuditLog_response
},
15886 { 10, "lsa_CreateAccount",
15887 lsarpc_dissect_lsa_CreateAccount_request
, lsarpc_dissect_lsa_CreateAccount_response
},
15888 { 11, "lsa_EnumAccounts",
15889 lsarpc_dissect_lsa_EnumAccounts_request
, lsarpc_dissect_lsa_EnumAccounts_response
},
15890 { 12, "lsa_CreateTrustedDomain",
15891 lsarpc_dissect_lsa_CreateTrustedDomain_request
, lsarpc_dissect_lsa_CreateTrustedDomain_response
},
15892 { 13, "lsa_EnumTrustDom",
15893 lsarpc_dissect_lsa_EnumTrustDom_request
, lsarpc_dissect_lsa_EnumTrustDom_response
},
15894 { 14, "lsa_LookupNames",
15895 lsarpc_dissect_lsa_LookupNames_request
, lsarpc_dissect_lsa_LookupNames_response
},
15896 { 15, "lsa_LookupSids",
15897 lsarpc_dissect_lsa_LookupSids_request
, lsarpc_dissect_lsa_LookupSids_response
},
15898 { 16, "lsa_CreateSecret",
15899 lsarpc_dissect_lsa_CreateSecret_request
, lsarpc_dissect_lsa_CreateSecret_response
},
15900 { 17, "lsa_OpenAccount",
15901 lsarpc_dissect_lsa_OpenAccount_request
, lsarpc_dissect_lsa_OpenAccount_response
},
15902 { 18, "lsa_EnumPrivsAccount",
15903 lsarpc_dissect_lsa_EnumPrivsAccount_request
, lsarpc_dissect_lsa_EnumPrivsAccount_response
},
15904 { 19, "lsa_AddPrivilegesToAccount",
15905 lsarpc_dissect_lsa_AddPrivilegesToAccount_request
, lsarpc_dissect_lsa_AddPrivilegesToAccount_response
},
15906 { 20, "lsa_RemovePrivilegesFromAccount",
15907 lsarpc_dissect_lsa_RemovePrivilegesFromAccount_request
, lsarpc_dissect_lsa_RemovePrivilegesFromAccount_response
},
15908 { 21, "lsa_GetQuotasForAccount",
15909 lsarpc_dissect_lsa_GetQuotasForAccount_request
, lsarpc_dissect_lsa_GetQuotasForAccount_response
},
15910 { 22, "lsa_SetQuotasForAccount",
15911 lsarpc_dissect_lsa_SetQuotasForAccount_request
, lsarpc_dissect_lsa_SetQuotasForAccount_response
},
15912 { 23, "lsa_GetSystemAccessAccount",
15913 lsarpc_dissect_lsa_GetSystemAccessAccount_request
, lsarpc_dissect_lsa_GetSystemAccessAccount_response
},
15914 { 24, "lsa_SetSystemAccessAccount",
15915 lsarpc_dissect_lsa_SetSystemAccessAccount_request
, lsarpc_dissect_lsa_SetSystemAccessAccount_response
},
15916 { 25, "lsa_OpenTrustedDomain",
15917 lsarpc_dissect_lsa_OpenTrustedDomain_request
, lsarpc_dissect_lsa_OpenTrustedDomain_response
},
15918 { 26, "lsa_QueryTrustedDomainInfo",
15919 lsarpc_dissect_lsa_QueryTrustedDomainInfo_request
, lsarpc_dissect_lsa_QueryTrustedDomainInfo_response
},
15920 { 27, "lsa_SetInformationTrustedDomain",
15921 lsarpc_dissect_lsa_SetInformationTrustedDomain_request
, lsarpc_dissect_lsa_SetInformationTrustedDomain_response
},
15922 { 28, "lsa_OpenSecret",
15923 lsarpc_dissect_lsa_OpenSecret_request
, lsarpc_dissect_lsa_OpenSecret_response
},
15924 { 29, "lsa_SetSecret",
15925 lsarpc_dissect_lsa_SetSecret_request
, lsarpc_dissect_lsa_SetSecret_response
},
15926 { 30, "lsa_QuerySecret",
15927 lsarpc_dissect_lsa_QuerySecret_request
, lsarpc_dissect_lsa_QuerySecret_response
},
15928 { 31, "lsa_LookupPrivValue",
15929 lsarpc_dissect_lsa_LookupPrivValue_request
, lsarpc_dissect_lsa_LookupPrivValue_response
},
15930 { 32, "lsa_LookupPrivName",
15931 lsarpc_dissect_lsa_LookupPrivName_request
, lsarpc_dissect_lsa_LookupPrivName_response
},
15932 { 33, "lsa_LookupPrivDisplayName",
15933 lsarpc_dissect_lsa_LookupPrivDisplayName_request
, lsarpc_dissect_lsa_LookupPrivDisplayName_response
},
15934 { 34, "lsa_DeleteObject",
15935 lsarpc_dissect_lsa_DeleteObject_request
, lsarpc_dissect_lsa_DeleteObject_response
},
15936 { 35, "lsa_EnumAccountsWithUserRight",
15937 lsarpc_dissect_lsa_EnumAccountsWithUserRight_request
, lsarpc_dissect_lsa_EnumAccountsWithUserRight_response
},
15938 { 36, "lsa_EnumAccountRights",
15939 lsarpc_dissect_lsa_EnumAccountRights_request
, lsarpc_dissect_lsa_EnumAccountRights_response
},
15940 { 37, "lsa_AddAccountRights",
15941 lsarpc_dissect_lsa_AddAccountRights_request
, lsarpc_dissect_lsa_AddAccountRights_response
},
15942 { 38, "lsa_RemoveAccountRights",
15943 lsarpc_dissect_lsa_RemoveAccountRights_request
, lsarpc_dissect_lsa_RemoveAccountRights_response
},
15944 { 39, "lsa_QueryTrustedDomainInfoBySid",
15945 lsarpc_dissect_lsa_QueryTrustedDomainInfoBySid_request
, lsarpc_dissect_lsa_QueryTrustedDomainInfoBySid_response
},
15946 { 40, "lsa_SetTrustedDomainInfo",
15947 lsarpc_dissect_lsa_SetTrustedDomainInfo_request
, lsarpc_dissect_lsa_SetTrustedDomainInfo_response
},
15948 { 41, "lsa_DeleteTrustedDomain",
15949 lsarpc_dissect_lsa_DeleteTrustedDomain_request
, lsarpc_dissect_lsa_DeleteTrustedDomain_response
},
15950 { 42, "lsa_StorePrivateData",
15951 lsarpc_dissect_lsa_StorePrivateData_request
, lsarpc_dissect_lsa_StorePrivateData_response
},
15952 { 43, "lsa_RetrievePrivateData",
15953 lsarpc_dissect_lsa_RetrievePrivateData_request
, lsarpc_dissect_lsa_RetrievePrivateData_response
},
15954 { 44, "lsa_OpenPolicy2",
15955 lsarpc_dissect_lsa_OpenPolicy2_request
, lsarpc_dissect_lsa_OpenPolicy2_response
},
15956 { 45, "lsa_GetUserName",
15957 lsarpc_dissect_lsa_GetUserName_request
, lsarpc_dissect_lsa_GetUserName_response
},
15958 { 46, "lsa_QueryInfoPolicy2",
15959 lsarpc_dissect_lsa_QueryInfoPolicy2_request
, lsarpc_dissect_lsa_QueryInfoPolicy2_response
},
15960 { 47, "lsa_SetInfoPolicy2",
15961 lsarpc_dissect_lsa_SetInfoPolicy2_request
, lsarpc_dissect_lsa_SetInfoPolicy2_response
},
15962 { 48, "lsa_QueryTrustedDomainInfoByName",
15963 lsarpc_dissect_lsa_QueryTrustedDomainInfoByName_request
, lsarpc_dissect_lsa_QueryTrustedDomainInfoByName_response
},
15964 { 49, "lsa_SetTrustedDomainInfoByName",
15965 lsarpc_dissect_lsa_SetTrustedDomainInfoByName_request
, lsarpc_dissect_lsa_SetTrustedDomainInfoByName_response
},
15966 { 50, "lsa_EnumTrustedDomainsEx",
15967 lsarpc_dissect_lsa_EnumTrustedDomainsEx_request
, lsarpc_dissect_lsa_EnumTrustedDomainsEx_response
},
15968 { 51, "lsa_CreateTrustedDomainEx",
15969 lsarpc_dissect_lsa_CreateTrustedDomainEx_request
, lsarpc_dissect_lsa_CreateTrustedDomainEx_response
},
15970 { 52, "lsa_CloseTrustedDomainEx",
15971 lsarpc_dissect_lsa_CloseTrustedDomainEx_request
, lsarpc_dissect_lsa_CloseTrustedDomainEx_response
},
15972 { 53, "lsa_QueryDomainInformationPolicy",
15973 lsarpc_dissect_lsa_QueryDomainInformationPolicy_request
, lsarpc_dissect_lsa_QueryDomainInformationPolicy_response
},
15974 { 54, "lsa_SetDomainInformationPolicy",
15975 lsarpc_dissect_lsa_SetDomainInformationPolicy_request
, lsarpc_dissect_lsa_SetDomainInformationPolicy_response
},
15976 { 55, "lsa_OpenTrustedDomainByName",
15977 lsarpc_dissect_lsa_OpenTrustedDomainByName_request
, lsarpc_dissect_lsa_OpenTrustedDomainByName_response
},
15978 { 56, "lsa_TestCall",
15979 lsarpc_dissect_lsa_TestCall_request
, lsarpc_dissect_lsa_TestCall_response
},
15980 { 57, "lsa_LookupSids2",
15981 lsarpc_dissect_lsa_LookupSids2_request
, lsarpc_dissect_lsa_LookupSids2_response
},
15982 { 58, "lsa_LookupNames2",
15983 lsarpc_dissect_lsa_LookupNames2_request
, lsarpc_dissect_lsa_LookupNames2_response
},
15984 { 59, "lsa_CreateTrustedDomainEx2",
15985 lsarpc_dissect_lsa_CreateTrustedDomainEx2_request
, lsarpc_dissect_lsa_CreateTrustedDomainEx2_response
},
15986 { 60, "lsa_CREDRWRITE",
15987 lsarpc_dissect_lsa_CREDRWRITE_request
, lsarpc_dissect_lsa_CREDRWRITE_response
},
15988 { 61, "lsa_CREDRREAD",
15989 lsarpc_dissect_lsa_CREDRREAD_request
, lsarpc_dissect_lsa_CREDRREAD_response
},
15990 { 62, "lsa_CREDRENUMERATE",
15991 lsarpc_dissect_lsa_CREDRENUMERATE_request
, lsarpc_dissect_lsa_CREDRENUMERATE_response
},
15992 { 63, "lsa_CREDRWRITEDOMAINCREDENTIALS",
15993 lsarpc_dissect_lsa_CREDRWRITEDOMAINCREDENTIALS_request
, lsarpc_dissect_lsa_CREDRWRITEDOMAINCREDENTIALS_response
},
15994 { 64, "lsa_CREDRREADDOMAINCREDENTIALS",
15995 lsarpc_dissect_lsa_CREDRREADDOMAINCREDENTIALS_request
, lsarpc_dissect_lsa_CREDRREADDOMAINCREDENTIALS_response
},
15996 { 65, "lsa_CREDRDELETE",
15997 lsarpc_dissect_lsa_CREDRDELETE_request
, lsarpc_dissect_lsa_CREDRDELETE_response
},
15998 { 66, "lsa_CREDRGETTARGETINFO",
15999 lsarpc_dissect_lsa_CREDRGETTARGETINFO_request
, lsarpc_dissect_lsa_CREDRGETTARGETINFO_response
},
16000 { 67, "lsa_CREDRPROFILELOADED",
16001 lsarpc_dissect_lsa_CREDRPROFILELOADED_request
, lsarpc_dissect_lsa_CREDRPROFILELOADED_response
},
16002 { 68, "lsa_LookupNames3",
16003 lsarpc_dissect_lsa_LookupNames3_request
, lsarpc_dissect_lsa_LookupNames3_response
},
16004 { 69, "lsa_CREDRGETSESSIONTYPES",
16005 lsarpc_dissect_lsa_CREDRGETSESSIONTYPES_request
, lsarpc_dissect_lsa_CREDRGETSESSIONTYPES_response
},
16006 { 70, "lsa_LSARREGISTERAUDITEVENT",
16007 lsarpc_dissect_lsa_LSARREGISTERAUDITEVENT_request
, lsarpc_dissect_lsa_LSARREGISTERAUDITEVENT_response
},
16008 { 71, "lsa_LSARGENAUDITEVENT",
16009 lsarpc_dissect_lsa_LSARGENAUDITEVENT_request
, lsarpc_dissect_lsa_LSARGENAUDITEVENT_response
},
16010 { 72, "lsa_LSARUNREGISTERAUDITEVENT",
16011 lsarpc_dissect_lsa_LSARUNREGISTERAUDITEVENT_request
, lsarpc_dissect_lsa_LSARUNREGISTERAUDITEVENT_response
},
16012 { 73, "lsa_lsaRQueryForestTrustInformation",
16013 lsarpc_dissect_lsa_lsaRQueryForestTrustInformation_request
, lsarpc_dissect_lsa_lsaRQueryForestTrustInformation_response
},
16014 { 74, "lsa_lsaRSetForestTrustInformation",
16015 lsarpc_dissect_lsa_lsaRSetForestTrustInformation_request
, lsarpc_dissect_lsa_lsaRSetForestTrustInformation_response
},
16016 { 75, "lsa_CREDRRENAME",
16017 lsarpc_dissect_lsa_CREDRRENAME_request
, lsarpc_dissect_lsa_CREDRRENAME_response
},
16018 { 76, "lsa_LookupSids3",
16019 lsarpc_dissect_lsa_LookupSids3_request
, lsarpc_dissect_lsa_LookupSids3_response
},
16020 { 77, "lsa_LookupNames4",
16021 lsarpc_dissect_lsa_LookupNames4_request
, lsarpc_dissect_lsa_LookupNames4_response
},
16022 { 78, "lsa_LSAROPENPOLICYSCE",
16023 lsarpc_dissect_lsa_LSAROPENPOLICYSCE_request
, lsarpc_dissect_lsa_LSAROPENPOLICYSCE_response
},
16024 { 79, "lsa_LSARADTREGISTERSECURITYEVENTSOURCE",
16025 lsarpc_dissect_lsa_LSARADTREGISTERSECURITYEVENTSOURCE_request
, lsarpc_dissect_lsa_LSARADTREGISTERSECURITYEVENTSOURCE_response
},
16026 { 80, "lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE",
16027 lsarpc_dissect_lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE_request
, lsarpc_dissect_lsa_LSARADTUNREGISTERSECURITYEVENTSOURCE_response
},
16028 { 81, "lsa_LSARADTREPORTSECURITYEVENT",
16029 lsarpc_dissect_lsa_LSARADTREPORTSECURITYEVENT_request
, lsarpc_dissect_lsa_LSARADTREPORTSECURITYEVENT_response
},
16030 { 82, "lsa_Opnum82NotUsedOnWire",
16031 lsarpc_dissect_lsa_Opnum82NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum82NotUsedOnWire_response
},
16032 { 83, "lsa_Opnum83NotUsedOnWire",
16033 lsarpc_dissect_lsa_Opnum83NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum83NotUsedOnWire_response
},
16034 { 84, "lsa_Opnum84NotUsedOnWire",
16035 lsarpc_dissect_lsa_Opnum84NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum84NotUsedOnWire_response
},
16036 { 85, "lsa_Opnum85NotUsedOnWire",
16037 lsarpc_dissect_lsa_Opnum85NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum85NotUsedOnWire_response
},
16038 { 86, "lsa_Opnum86NotUsedOnWire",
16039 lsarpc_dissect_lsa_Opnum86NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum86NotUsedOnWire_response
},
16040 { 87, "lsa_Opnum87NotUsedOnWire",
16041 lsarpc_dissect_lsa_Opnum87NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum87NotUsedOnWire_response
},
16042 { 88, "lsa_Opnum88NotUsedOnWire",
16043 lsarpc_dissect_lsa_Opnum88NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum88NotUsedOnWire_response
},
16044 { 89, "lsa_Opnum89NotUsedOnWire",
16045 lsarpc_dissect_lsa_Opnum89NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum89NotUsedOnWire_response
},
16046 { 90, "lsa_Opnum90NotUsedOnWire",
16047 lsarpc_dissect_lsa_Opnum90NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum90NotUsedOnWire_response
},
16048 { 91, "lsa_Opnum91NotUsedOnWire",
16049 lsarpc_dissect_lsa_Opnum91NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum91NotUsedOnWire_response
},
16050 { 92, "lsa_Opnum92NotUsedOnWire",
16051 lsarpc_dissect_lsa_Opnum92NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum92NotUsedOnWire_response
},
16052 { 93, "lsa_Opnum93NotUsedOnWire",
16053 lsarpc_dissect_lsa_Opnum93NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum93NotUsedOnWire_response
},
16054 { 94, "lsa_Opnum94NotUsedOnWire",
16055 lsarpc_dissect_lsa_Opnum94NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum94NotUsedOnWire_response
},
16056 { 95, "lsa_Opnum95NotUsedOnWire",
16057 lsarpc_dissect_lsa_Opnum95NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum95NotUsedOnWire_response
},
16058 { 96, "lsa_Opnum96NotUsedOnWire",
16059 lsarpc_dissect_lsa_Opnum96NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum96NotUsedOnWire_response
},
16060 { 97, "lsa_Opnum97NotUsedOnWire",
16061 lsarpc_dissect_lsa_Opnum97NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum97NotUsedOnWire_response
},
16062 { 98, "lsa_Opnum98NotUsedOnWire",
16063 lsarpc_dissect_lsa_Opnum98NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum98NotUsedOnWire_response
},
16064 { 99, "lsa_Opnum99NotUsedOnWire",
16065 lsarpc_dissect_lsa_Opnum99NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum99NotUsedOnWire_response
},
16066 { 100, "lsa_Opnum100NotUsedOnWire",
16067 lsarpc_dissect_lsa_Opnum100NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum100NotUsedOnWire_response
},
16068 { 101, "lsa_Opnum101NotUsedOnWire",
16069 lsarpc_dissect_lsa_Opnum101NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum101NotUsedOnWire_response
},
16070 { 102, "lsa_Opnum102NotUsedOnWire",
16071 lsarpc_dissect_lsa_Opnum102NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum102NotUsedOnWire_response
},
16072 { 103, "lsa_Opnum103NotUsedOnWire",
16073 lsarpc_dissect_lsa_Opnum103NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum103NotUsedOnWire_response
},
16074 { 104, "lsa_Opnum104NotUsedOnWire",
16075 lsarpc_dissect_lsa_Opnum104NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum104NotUsedOnWire_response
},
16076 { 105, "lsa_Opnum105NotUsedOnWire",
16077 lsarpc_dissect_lsa_Opnum105NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum105NotUsedOnWire_response
},
16078 { 106, "lsa_Opnum106NotUsedOnWire",
16079 lsarpc_dissect_lsa_Opnum106NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum106NotUsedOnWire_response
},
16080 { 107, "lsa_Opnum107NotUsedOnWire",
16081 lsarpc_dissect_lsa_Opnum107NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum107NotUsedOnWire_response
},
16082 { 108, "lsa_Opnum108NotUsedOnWire",
16083 lsarpc_dissect_lsa_Opnum108NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum108NotUsedOnWire_response
},
16084 { 109, "lsa_Opnum109NotUsedOnWire",
16085 lsarpc_dissect_lsa_Opnum109NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum109NotUsedOnWire_response
},
16086 { 110, "lsa_Opnum110NotUsedOnWire",
16087 lsarpc_dissect_lsa_Opnum110NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum110NotUsedOnWire_response
},
16088 { 111, "lsa_Opnum111NotUsedOnWire",
16089 lsarpc_dissect_lsa_Opnum111NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum111NotUsedOnWire_response
},
16090 { 112, "lsa_Opnum112NotUsedOnWire",
16091 lsarpc_dissect_lsa_Opnum112NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum112NotUsedOnWire_response
},
16092 { 113, "lsa_Opnum113NotUsedOnWire",
16093 lsarpc_dissect_lsa_Opnum113NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum113NotUsedOnWire_response
},
16094 { 114, "lsa_Opnum114NotUsedOnWire",
16095 lsarpc_dissect_lsa_Opnum114NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum114NotUsedOnWire_response
},
16096 { 115, "lsa_Opnum115NotUsedOnWire",
16097 lsarpc_dissect_lsa_Opnum115NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum115NotUsedOnWire_response
},
16098 { 116, "lsa_Opnum116NotUsedOnWire",
16099 lsarpc_dissect_lsa_Opnum116NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum116NotUsedOnWire_response
},
16100 { 117, "lsa_Opnum117NotUsedOnWire",
16101 lsarpc_dissect_lsa_Opnum117NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum117NotUsedOnWire_response
},
16102 { 118, "lsa_Opnum118NotUsedOnWire",
16103 lsarpc_dissect_lsa_Opnum118NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum118NotUsedOnWire_response
},
16104 { 119, "lsa_Opnum119NotUsedOnWire",
16105 lsarpc_dissect_lsa_Opnum119NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum119NotUsedOnWire_response
},
16106 { 120, "lsa_Opnum120NotUsedOnWire",
16107 lsarpc_dissect_lsa_Opnum120NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum120NotUsedOnWire_response
},
16108 { 121, "lsa_Opnum121NotUsedOnWire",
16109 lsarpc_dissect_lsa_Opnum121NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum121NotUsedOnWire_response
},
16110 { 122, "lsa_Opnum122NotUsedOnWire",
16111 lsarpc_dissect_lsa_Opnum122NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum122NotUsedOnWire_response
},
16112 { 123, "lsa_Opnum123NotUsedOnWire",
16113 lsarpc_dissect_lsa_Opnum123NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum123NotUsedOnWire_response
},
16114 { 124, "lsa_Opnum124NotUsedOnWire",
16115 lsarpc_dissect_lsa_Opnum124NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum124NotUsedOnWire_response
},
16116 { 125, "lsa_Opnum125NotUsedOnWire",
16117 lsarpc_dissect_lsa_Opnum125NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum125NotUsedOnWire_response
},
16118 { 126, "lsa_Opnum126NotUsedOnWire",
16119 lsarpc_dissect_lsa_Opnum126NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum126NotUsedOnWire_response
},
16120 { 127, "lsa_Opnum127NotUsedOnWire",
16121 lsarpc_dissect_lsa_Opnum127NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum127NotUsedOnWire_response
},
16122 { 128, "lsa_Opnum128NotUsedOnWire",
16123 lsarpc_dissect_lsa_Opnum128NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum128NotUsedOnWire_response
},
16124 { 129, "lsa_CreateTrustedDomainEx3",
16125 lsarpc_dissect_lsa_CreateTrustedDomainEx3_request
, lsarpc_dissect_lsa_CreateTrustedDomainEx3_response
},
16126 { 130, "lsa_OpenPolicy3",
16127 lsarpc_dissect_lsa_OpenPolicy3_request
, lsarpc_dissect_lsa_OpenPolicy3_response
},
16128 { 131, "lsa_Opnum131NotUsedOnWire",
16129 lsarpc_dissect_lsa_Opnum131NotUsedOnWire_request
, lsarpc_dissect_lsa_Opnum131NotUsedOnWire_response
},
16130 { 132, "lsa_lsaRQueryForestTrustInformation2",
16131 lsarpc_dissect_lsa_lsaRQueryForestTrustInformation2_request
, lsarpc_dissect_lsa_lsaRQueryForestTrustInformation2_response
},
16132 { 133, "lsa_lsaRSetForestTrustInformation2",
16133 lsarpc_dissect_lsa_lsaRSetForestTrustInformation2_request
, lsarpc_dissect_lsa_lsaRSetForestTrustInformation2_response
},
16134 { 0, NULL
, NULL
, NULL
}
16137 void proto_register_dcerpc_lsarpc(void)
16139 static hf_register_info hf
[] = {
16140 { &hf_lsarpc_String_name
,
16141 { "String", "lsarpc.lsa.string", FT_STRING
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16142 { &hf_lsarpc_account_access_mask
,
16143 { "Access Mask", "lsarpc.policy.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16144 { &hf_lsarpc_domain_access_mask
,
16145 { "Access Mask", "lsarpc.policy.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16146 { &hf_lsarpc_efs_blob_len
,
16147 { "EFS blob size", "lsarpc.efs.blob_size", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16148 { &hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_PRIVILEGES
,
16149 { "LSA ACCOUNT ADJUST PRIVILEGES", "lsarpc.lsa_AccountAccessMask.LSA_ACCOUNT_ADJUST_PRIVILEGES", FT_BOOLEAN
, 32, TFS(&lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_PRIVILEGES_tfs
), ( 0x00000002 ), NULL
, HFILL
}},
16150 { &hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_QUOTAS
,
16151 { "LSA ACCOUNT ADJUST QUOTAS", "lsarpc.lsa_AccountAccessMask.LSA_ACCOUNT_ADJUST_QUOTAS", FT_BOOLEAN
, 32, TFS(&lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_QUOTAS_tfs
), ( 0x00000004 ), NULL
, HFILL
}},
16152 { &hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS
,
16153 { "LSA ACCOUNT ADJUST SYSTEM ACCESS", "lsarpc.lsa_AccountAccessMask.LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS", FT_BOOLEAN
, 32, TFS(&lsa_AccountAccessMask_LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS_tfs
), ( 0x00000008 ), NULL
, HFILL
}},
16154 { &hf_lsarpc_lsa_AccountAccessMask_LSA_ACCOUNT_VIEW
,
16155 { "LSA ACCOUNT VIEW", "lsarpc.lsa_AccountAccessMask.LSA_ACCOUNT_VIEW", FT_BOOLEAN
, 32, TFS(&lsa_AccountAccessMask_LSA_ACCOUNT_VIEW_tfs
), ( 0x00000001 ), NULL
, HFILL
}},
16156 { &hf_lsarpc_lsa_AddAccountRights_handle
,
16157 { "Handle", "lsarpc.lsa_AddAccountRights.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16158 { &hf_lsarpc_lsa_AddAccountRights_rights
,
16159 { "Rights", "lsarpc.lsa_AddAccountRights.rights", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16160 { &hf_lsarpc_lsa_AddAccountRights_sid
,
16161 { "Sid", "lsarpc.lsa_AddAccountRights.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16162 { &hf_lsarpc_lsa_AddPrivilegesToAccount_handle
,
16163 { "Handle", "lsarpc.lsa_AddPrivilegesToAccount.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16164 { &hf_lsarpc_lsa_AddPrivilegesToAccount_privs
,
16165 { "Privs", "lsarpc.lsa_AddPrivilegesToAccount.privs", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16166 { &hf_lsarpc_lsa_AsciiStringLarge_length
,
16167 { "Length", "lsarpc.lsa_AsciiStringLarge.length", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16168 { &hf_lsarpc_lsa_AsciiStringLarge_size
,
16169 { "Size", "lsarpc.lsa_AsciiStringLarge.size", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16170 { &hf_lsarpc_lsa_AsciiStringLarge_string
,
16171 { "String", "lsarpc.lsa_AsciiStringLarge.string", FT_STRING
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16172 { &hf_lsarpc_lsa_AsciiString_length
,
16173 { "Length", "lsarpc.lsa_AsciiString.length", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16174 { &hf_lsarpc_lsa_AsciiString_size
,
16175 { "Size", "lsarpc.lsa_AsciiString.size", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16176 { &hf_lsarpc_lsa_AsciiString_string
,
16177 { "String", "lsarpc.lsa_AsciiString.string", FT_STRING
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16178 { &hf_lsarpc_lsa_AuditEventsInfo_auditing_mode
,
16179 { "Auditing Mode", "lsarpc.lsa_AuditEventsInfo.auditing_mode", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16180 { &hf_lsarpc_lsa_AuditEventsInfo_count
,
16181 { "Count", "lsarpc.lsa_AuditEventsInfo.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16182 { &hf_lsarpc_lsa_AuditEventsInfo_settings
,
16183 { "Settings", "lsarpc.lsa_AuditEventsInfo.settings", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_PolicyAuditPolicy_vals
), 0, NULL
, HFILL
}},
16184 { &hf_lsarpc_lsa_AuditFullQueryInfo_log_is_full
,
16185 { "Log Is Full", "lsarpc.lsa_AuditFullQueryInfo.log_is_full", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16186 { &hf_lsarpc_lsa_AuditFullQueryInfo_shutdown_on_full
,
16187 { "Shutdown On Full", "lsarpc.lsa_AuditFullQueryInfo.shutdown_on_full", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16188 { &hf_lsarpc_lsa_AuditFullSetInfo_shutdown_on_full
,
16189 { "Shutdown On Full", "lsarpc.lsa_AuditFullSetInfo.shutdown_on_full", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16190 { &hf_lsarpc_lsa_AuditLogInfo_maximum_log_size
,
16191 { "Maximum Log Size", "lsarpc.lsa_AuditLogInfo.maximum_log_size", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16192 { &hf_lsarpc_lsa_AuditLogInfo_next_audit_record
,
16193 { "Next Audit Record", "lsarpc.lsa_AuditLogInfo.next_audit_record", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16194 { &hf_lsarpc_lsa_AuditLogInfo_percent_full
,
16195 { "Percent Full", "lsarpc.lsa_AuditLogInfo.percent_full", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16196 { &hf_lsarpc_lsa_AuditLogInfo_retention_time
,
16197 { "Retention Time", "lsarpc.lsa_AuditLogInfo.retention_time", FT_UINT64
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16198 { &hf_lsarpc_lsa_AuditLogInfo_shutdown_in_progress
,
16199 { "Shutdown In Progress", "lsarpc.lsa_AuditLogInfo.shutdown_in_progress", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16200 { &hf_lsarpc_lsa_AuditLogInfo_time_to_shutdown
,
16201 { "Time To Shutdown", "lsarpc.lsa_AuditLogInfo.time_to_shutdown", FT_UINT64
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16202 { &hf_lsarpc_lsa_BinaryString_array
,
16203 { "Array", "lsarpc.lsa_BinaryString.array", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16204 { &hf_lsarpc_lsa_BinaryString_length
,
16205 { "Length", "lsarpc.lsa_BinaryString.length", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16206 { &hf_lsarpc_lsa_BinaryString_size
,
16207 { "Size", "lsarpc.lsa_BinaryString.size", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16208 { &hf_lsarpc_lsa_CloseTrustedDomainEx_handle
,
16209 { "Handle", "lsarpc.lsa_CloseTrustedDomainEx.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16210 { &hf_lsarpc_lsa_Close_handle
,
16211 { "Handle", "lsarpc.lsa_Close.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16212 { &hf_lsarpc_lsa_CreateAccount_access_mask
,
16213 { "Access Mask", "lsarpc.lsa_CreateAccount.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16214 { &hf_lsarpc_lsa_CreateAccount_acct_handle
,
16215 { "Acct Handle", "lsarpc.lsa_CreateAccount.acct_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16216 { &hf_lsarpc_lsa_CreateAccount_handle
,
16217 { "Handle", "lsarpc.lsa_CreateAccount.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16218 { &hf_lsarpc_lsa_CreateAccount_sid
,
16219 { "Sid", "lsarpc.lsa_CreateAccount.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16220 { &hf_lsarpc_lsa_CreateSecret_access_mask
,
16221 { "Access Mask", "lsarpc.lsa_CreateSecret.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16222 { &hf_lsarpc_lsa_CreateSecret_handle
,
16223 { "Handle", "lsarpc.lsa_CreateSecret.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16224 { &hf_lsarpc_lsa_CreateSecret_name
,
16225 { "Name", "lsarpc.lsa_CreateSecret.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16226 { &hf_lsarpc_lsa_CreateSecret_sec_handle
,
16227 { "Sec Handle", "lsarpc.lsa_CreateSecret.sec_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16228 { &hf_lsarpc_lsa_CreateTrustedDomainEx2_access_mask
,
16229 { "Access Mask", "lsarpc.lsa_CreateTrustedDomainEx2.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16230 { &hf_lsarpc_lsa_CreateTrustedDomainEx2_auth_info_internal
,
16231 { "Auth Info Internal", "lsarpc.lsa_CreateTrustedDomainEx2.auth_info_internal", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16232 { &hf_lsarpc_lsa_CreateTrustedDomainEx2_info
,
16233 { "Info", "lsarpc.lsa_CreateTrustedDomainEx2.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16234 { &hf_lsarpc_lsa_CreateTrustedDomainEx2_policy_handle
,
16235 { "Policy Handle", "lsarpc.lsa_CreateTrustedDomainEx2.policy_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16236 { &hf_lsarpc_lsa_CreateTrustedDomainEx2_trustdom_handle
,
16237 { "Trustdom Handle", "lsarpc.lsa_CreateTrustedDomainEx2.trustdom_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16238 { &hf_lsarpc_lsa_CreateTrustedDomainEx3_access_mask
,
16239 { "Access Mask", "lsarpc.lsa_CreateTrustedDomainEx3.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16240 { &hf_lsarpc_lsa_CreateTrustedDomainEx3_auth_info_internal
,
16241 { "Auth Info Internal", "lsarpc.lsa_CreateTrustedDomainEx3.auth_info_internal", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16242 { &hf_lsarpc_lsa_CreateTrustedDomainEx3_info
,
16243 { "Info", "lsarpc.lsa_CreateTrustedDomainEx3.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16244 { &hf_lsarpc_lsa_CreateTrustedDomainEx3_policy_handle
,
16245 { "Policy Handle", "lsarpc.lsa_CreateTrustedDomainEx3.policy_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16246 { &hf_lsarpc_lsa_CreateTrustedDomainEx3_trustdom_handle
,
16247 { "Trustdom Handle", "lsarpc.lsa_CreateTrustedDomainEx3.trustdom_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16248 { &hf_lsarpc_lsa_CreateTrustedDomainEx_access_mask
,
16249 { "Access Mask", "lsarpc.lsa_CreateTrustedDomainEx.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16250 { &hf_lsarpc_lsa_CreateTrustedDomainEx_auth_info
,
16251 { "Auth Info", "lsarpc.lsa_CreateTrustedDomainEx.auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16252 { &hf_lsarpc_lsa_CreateTrustedDomainEx_info
,
16253 { "Info", "lsarpc.lsa_CreateTrustedDomainEx.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16254 { &hf_lsarpc_lsa_CreateTrustedDomainEx_policy_handle
,
16255 { "Policy Handle", "lsarpc.lsa_CreateTrustedDomainEx.policy_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16256 { &hf_lsarpc_lsa_CreateTrustedDomainEx_trustdom_handle
,
16257 { "Trustdom Handle", "lsarpc.lsa_CreateTrustedDomainEx.trustdom_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16258 { &hf_lsarpc_lsa_CreateTrustedDomain_access_mask
,
16259 { "Access Mask", "lsarpc.lsa_CreateTrustedDomain.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16260 { &hf_lsarpc_lsa_CreateTrustedDomain_info
,
16261 { "Info", "lsarpc.lsa_CreateTrustedDomain.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16262 { &hf_lsarpc_lsa_CreateTrustedDomain_policy_handle
,
16263 { "Policy Handle", "lsarpc.lsa_CreateTrustedDomain.policy_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16264 { &hf_lsarpc_lsa_CreateTrustedDomain_trustdom_handle
,
16265 { "Trustdom Handle", "lsarpc.lsa_CreateTrustedDomain.trustdom_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16266 { &hf_lsarpc_lsa_DATA_BUF2_data
,
16267 { "Data", "lsarpc.lsa_DATA_BUF2.data", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16268 { &hf_lsarpc_lsa_DATA_BUF2_size
,
16269 { "Size", "lsarpc.lsa_DATA_BUF2.size", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16270 { &hf_lsarpc_lsa_DATA_BUF_PTR_buf
,
16271 { "Buf", "lsarpc.lsa_DATA_BUF_PTR.buf", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16272 { &hf_lsarpc_lsa_DATA_BUF_data
,
16273 { "Data", "lsarpc.lsa_DATA_BUF.data", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16274 { &hf_lsarpc_lsa_DATA_BUF_length
,
16275 { "Length", "lsarpc.lsa_DATA_BUF.length", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16276 { &hf_lsarpc_lsa_DATA_BUF_size
,
16277 { "Size", "lsarpc.lsa_DATA_BUF.size", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16278 { &hf_lsarpc_lsa_DefaultQuotaInfo_max_wss
,
16279 { "Max Wss", "lsarpc.lsa_DefaultQuotaInfo.max_wss", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16280 { &hf_lsarpc_lsa_DefaultQuotaInfo_min_wss
,
16281 { "Min Wss", "lsarpc.lsa_DefaultQuotaInfo.min_wss", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16282 { &hf_lsarpc_lsa_DefaultQuotaInfo_non_paged_pool
,
16283 { "Non Paged Pool", "lsarpc.lsa_DefaultQuotaInfo.non_paged_pool", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16284 { &hf_lsarpc_lsa_DefaultQuotaInfo_paged_pool
,
16285 { "Paged Pool", "lsarpc.lsa_DefaultQuotaInfo.paged_pool", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16286 { &hf_lsarpc_lsa_DefaultQuotaInfo_pagefile
,
16287 { "Pagefile", "lsarpc.lsa_DefaultQuotaInfo.pagefile", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16288 { &hf_lsarpc_lsa_DefaultQuotaInfo_unknown
,
16289 { "Unknown", "lsarpc.lsa_DefaultQuotaInfo.unknown", FT_UINT64
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16290 { &hf_lsarpc_lsa_DeleteObject_handle
,
16291 { "Handle", "lsarpc.lsa_DeleteObject.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16292 { &hf_lsarpc_lsa_DeleteTrustedDomain_dom_sid
,
16293 { "Dom Sid", "lsarpc.lsa_DeleteTrustedDomain.dom_sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16294 { &hf_lsarpc_lsa_DeleteTrustedDomain_handle
,
16295 { "Handle", "lsarpc.lsa_DeleteTrustedDomain.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16296 { &hf_lsarpc_lsa_Delete_handle
,
16297 { "Handle", "lsarpc.lsa_Delete.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16298 { &hf_lsarpc_lsa_DnsDomainInfo_dns_domain
,
16299 { "Dns Domain", "lsarpc.lsa_DnsDomainInfo.dns_domain", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16300 { &hf_lsarpc_lsa_DnsDomainInfo_dns_forest
,
16301 { "Dns Forest", "lsarpc.lsa_DnsDomainInfo.dns_forest", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16302 { &hf_lsarpc_lsa_DnsDomainInfo_domain_guid
,
16303 { "Domain Guid", "lsarpc.lsa_DnsDomainInfo.domain_guid", FT_GUID
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16304 { &hf_lsarpc_lsa_DnsDomainInfo_name
,
16305 { "Name", "lsarpc.lsa_DnsDomainInfo.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16306 { &hf_lsarpc_lsa_DnsDomainInfo_sid
,
16307 { "Sid", "lsarpc.lsa_DnsDomainInfo.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16308 { &hf_lsarpc_lsa_DomainInfoEfs_blob_size
,
16309 { "Blob Size", "lsarpc.lsa_DomainInfoEfs.blob_size", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16310 { &hf_lsarpc_lsa_DomainInfoEfs_efs_blob
,
16311 { "Efs Blob", "lsarpc.lsa_DomainInfoEfs.efs_blob", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16312 { &hf_lsarpc_lsa_DomainInfoKerberos_authentication_options
,
16313 { "Authentication Options", "lsarpc.lsa_DomainInfoKerberos.authentication_options", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16314 { &hf_lsarpc_lsa_DomainInfoKerberos_clock_skew
,
16315 { "Clock Skew", "lsarpc.lsa_DomainInfoKerberos.clock_skew", FT_UINT64
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16316 { &hf_lsarpc_lsa_DomainInfoKerberos_reserved
,
16317 { "Reserved", "lsarpc.lsa_DomainInfoKerberos.reserved", FT_UINT64
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16318 { &hf_lsarpc_lsa_DomainInfoKerberos_service_tkt_lifetime
,
16319 { "Service Tkt Lifetime", "lsarpc.lsa_DomainInfoKerberos.service_tkt_lifetime", FT_UINT64
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16320 { &hf_lsarpc_lsa_DomainInfoKerberos_user_tkt_lifetime
,
16321 { "User Tkt Lifetime", "lsarpc.lsa_DomainInfoKerberos.user_tkt_lifetime", FT_UINT64
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16322 { &hf_lsarpc_lsa_DomainInfoKerberos_user_tkt_renewaltime
,
16323 { "User Tkt Renewaltime", "lsarpc.lsa_DomainInfoKerberos.user_tkt_renewaltime", FT_UINT64
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16324 { &hf_lsarpc_lsa_DomainInfoQoS_quality_of_service
,
16325 { "Quality Of Service", "lsarpc.lsa_DomainInfoQoS.quality_of_service", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16326 { &hf_lsarpc_lsa_DomainInfo_name
,
16327 { "Name", "lsarpc.lsa_DomainInfo.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16328 { &hf_lsarpc_lsa_DomainInfo_sid
,
16329 { "Sid", "lsarpc.lsa_DomainInfo.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16330 { &hf_lsarpc_lsa_DomainInformationPolicy_efs_info
,
16331 { "Efs Info", "lsarpc.lsa_DomainInformationPolicy.efs_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16332 { &hf_lsarpc_lsa_DomainInformationPolicy_kerberos_info
,
16333 { "Kerberos Info", "lsarpc.lsa_DomainInformationPolicy.kerberos_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16334 { &hf_lsarpc_lsa_DomainInformationPolicy_qos_info
,
16335 { "Qos Info", "lsarpc.lsa_DomainInformationPolicy.qos_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16336 { &hf_lsarpc_lsa_DomainListEx_count
,
16337 { "Count", "lsarpc.lsa_DomainListEx.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16338 { &hf_lsarpc_lsa_DomainListEx_domains
,
16339 { "Domains", "lsarpc.lsa_DomainListEx.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16340 { &hf_lsarpc_lsa_DomainList_count
,
16341 { "Count", "lsarpc.lsa_DomainList.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16342 { &hf_lsarpc_lsa_DomainList_domains
,
16343 { "Domains", "lsarpc.lsa_DomainList.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16344 { &hf_lsarpc_lsa_EnumAccountRights_handle
,
16345 { "Handle", "lsarpc.lsa_EnumAccountRights.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16346 { &hf_lsarpc_lsa_EnumAccountRights_rights
,
16347 { "Rights", "lsarpc.lsa_EnumAccountRights.rights", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16348 { &hf_lsarpc_lsa_EnumAccountRights_sid
,
16349 { "Sid", "lsarpc.lsa_EnumAccountRights.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16350 { &hf_lsarpc_lsa_EnumAccountsWithUserRight_handle
,
16351 { "Handle", "lsarpc.lsa_EnumAccountsWithUserRight.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16352 { &hf_lsarpc_lsa_EnumAccountsWithUserRight_name
,
16353 { "Name", "lsarpc.lsa_EnumAccountsWithUserRight.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16354 { &hf_lsarpc_lsa_EnumAccountsWithUserRight_sids
,
16355 { "Sids", "lsarpc.lsa_EnumAccountsWithUserRight.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16356 { &hf_lsarpc_lsa_EnumAccounts_handle
,
16357 { "Handle", "lsarpc.lsa_EnumAccounts.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16358 { &hf_lsarpc_lsa_EnumAccounts_num_entries
,
16359 { "Num Entries", "lsarpc.lsa_EnumAccounts.num_entries", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16360 { &hf_lsarpc_lsa_EnumAccounts_resume_handle
,
16361 { "Resume Handle", "lsarpc.lsa_EnumAccounts.resume_handle", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16362 { &hf_lsarpc_lsa_EnumAccounts_sids
,
16363 { "Sids", "lsarpc.lsa_EnumAccounts.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16364 { &hf_lsarpc_lsa_EnumPrivsAccount_handle
,
16365 { "Handle", "lsarpc.lsa_EnumPrivsAccount.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16366 { &hf_lsarpc_lsa_EnumPrivsAccount_privs
,
16367 { "Privs", "lsarpc.lsa_EnumPrivsAccount.privs", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16368 { &hf_lsarpc_lsa_EnumPrivs_handle
,
16369 { "Handle", "lsarpc.lsa_EnumPrivs.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16370 { &hf_lsarpc_lsa_EnumPrivs_max_count
,
16371 { "Max Count", "lsarpc.lsa_EnumPrivs.max_count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16372 { &hf_lsarpc_lsa_EnumPrivs_privs
,
16373 { "Privs", "lsarpc.lsa_EnumPrivs.privs", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16374 { &hf_lsarpc_lsa_EnumPrivs_resume_handle
,
16375 { "Resume Handle", "lsarpc.lsa_EnumPrivs.resume_handle", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16376 { &hf_lsarpc_lsa_EnumTrustDom_domains
,
16377 { "Domains", "lsarpc.lsa_EnumTrustDom.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16378 { &hf_lsarpc_lsa_EnumTrustDom_handle
,
16379 { "Handle", "lsarpc.lsa_EnumTrustDom.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16380 { &hf_lsarpc_lsa_EnumTrustDom_max_size
,
16381 { "Max Size", "lsarpc.lsa_EnumTrustDom.max_size", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16382 { &hf_lsarpc_lsa_EnumTrustDom_resume_handle
,
16383 { "Resume Handle", "lsarpc.lsa_EnumTrustDom.resume_handle", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16384 { &hf_lsarpc_lsa_EnumTrustedDomainsEx_domains
,
16385 { "Domains", "lsarpc.lsa_EnumTrustedDomainsEx.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16386 { &hf_lsarpc_lsa_EnumTrustedDomainsEx_handle
,
16387 { "Handle", "lsarpc.lsa_EnumTrustedDomainsEx.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16388 { &hf_lsarpc_lsa_EnumTrustedDomainsEx_max_size
,
16389 { "Max Size", "lsarpc.lsa_EnumTrustedDomainsEx.max_size", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16390 { &hf_lsarpc_lsa_EnumTrustedDomainsEx_resume_handle
,
16391 { "Resume Handle", "lsarpc.lsa_EnumTrustedDomainsEx.resume_handle", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16392 { &hf_lsarpc_lsa_ForestTrustBinaryData_data
,
16393 { "Data", "lsarpc.lsa_ForestTrustBinaryData.data", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16394 { &hf_lsarpc_lsa_ForestTrustBinaryData_length
,
16395 { "Length", "lsarpc.lsa_ForestTrustBinaryData.length", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16396 { &hf_lsarpc_lsa_ForestTrustCollisionInfo_count
,
16397 { "Count", "lsarpc.lsa_ForestTrustCollisionInfo.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16398 { &hf_lsarpc_lsa_ForestTrustCollisionInfo_entries
,
16399 { "Entries", "lsarpc.lsa_ForestTrustCollisionInfo.entries", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16400 { &hf_lsarpc_lsa_ForestTrustCollisionRecord_flags
,
16401 { "Flags", "lsarpc.lsa_ForestTrustCollisionRecord.flags", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16402 { &hf_lsarpc_lsa_ForestTrustCollisionRecord_index
,
16403 { "Index", "lsarpc.lsa_ForestTrustCollisionRecord.index", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16404 { &hf_lsarpc_lsa_ForestTrustCollisionRecord_name
,
16405 { "Name", "lsarpc.lsa_ForestTrustCollisionRecord.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16406 { &hf_lsarpc_lsa_ForestTrustCollisionRecord_type
,
16407 { "Type", "lsarpc.lsa_ForestTrustCollisionRecord.type", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_ForestTrustCollisionRecordType_vals
), 0, NULL
, HFILL
}},
16408 { &hf_lsarpc_lsa_ForestTrustData2_data
,
16409 { "Data", "lsarpc.lsa_ForestTrustData2.data", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16410 { &hf_lsarpc_lsa_ForestTrustData2_domain_info
,
16411 { "Domain Info", "lsarpc.lsa_ForestTrustData2.domain_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16412 { &hf_lsarpc_lsa_ForestTrustData2_scanner_info
,
16413 { "Scanner Info", "lsarpc.lsa_ForestTrustData2.scanner_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16414 { &hf_lsarpc_lsa_ForestTrustData2_top_level_name
,
16415 { "Top Level Name", "lsarpc.lsa_ForestTrustData2.top_level_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16416 { &hf_lsarpc_lsa_ForestTrustData2_top_level_name_ex
,
16417 { "Top Level Name Ex", "lsarpc.lsa_ForestTrustData2.top_level_name_ex", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16418 { &hf_lsarpc_lsa_ForestTrustData_data
,
16419 { "Data", "lsarpc.lsa_ForestTrustData.data", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16420 { &hf_lsarpc_lsa_ForestTrustData_domain_info
,
16421 { "Domain Info", "lsarpc.lsa_ForestTrustData.domain_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16422 { &hf_lsarpc_lsa_ForestTrustData_top_level_name
,
16423 { "Top Level Name", "lsarpc.lsa_ForestTrustData.top_level_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16424 { &hf_lsarpc_lsa_ForestTrustData_top_level_name_ex
,
16425 { "Top Level Name Ex", "lsarpc.lsa_ForestTrustData.top_level_name_ex", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16426 { &hf_lsarpc_lsa_ForestTrustDomainInfo_dns_domain_name
,
16427 { "Dns Domain Name", "lsarpc.lsa_ForestTrustDomainInfo.dns_domain_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16428 { &hf_lsarpc_lsa_ForestTrustDomainInfo_domain_sid
,
16429 { "Domain Sid", "lsarpc.lsa_ForestTrustDomainInfo.domain_sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16430 { &hf_lsarpc_lsa_ForestTrustDomainInfo_netbios_domain_name
,
16431 { "Netbios Domain Name", "lsarpc.lsa_ForestTrustDomainInfo.netbios_domain_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16432 { &hf_lsarpc_lsa_ForestTrustInformation2_count
,
16433 { "Count", "lsarpc.lsa_ForestTrustInformation2.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16434 { &hf_lsarpc_lsa_ForestTrustInformation2_entries
,
16435 { "Entries", "lsarpc.lsa_ForestTrustInformation2.entries", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16436 { &hf_lsarpc_lsa_ForestTrustInformation_count
,
16437 { "Count", "lsarpc.lsa_ForestTrustInformation.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16438 { &hf_lsarpc_lsa_ForestTrustInformation_entries
,
16439 { "Entries", "lsarpc.lsa_ForestTrustInformation.entries", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16440 { &hf_lsarpc_lsa_ForestTrustRecord2_flags
,
16441 { "Flags", "lsarpc.lsa_ForestTrustRecord2.flags", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16442 { &hf_lsarpc_lsa_ForestTrustRecord2_forest_trust_data
,
16443 { "Forest Trust Data", "lsarpc.lsa_ForestTrustRecord2.forest_trust_data", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16444 { &hf_lsarpc_lsa_ForestTrustRecord2_time
,
16445 { "Time", "lsarpc.lsa_ForestTrustRecord2.time", FT_ABSOLUTE_TIME
, ABSOLUTE_TIME_LOCAL
, NULL
, 0, NULL
, HFILL
}},
16446 { &hf_lsarpc_lsa_ForestTrustRecord2_type
,
16447 { "Type", "lsarpc.lsa_ForestTrustRecord2.type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_ForestTrustRecordType_vals
), 0, NULL
, HFILL
}},
16448 { &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_ADMIN
,
16449 { "LSA NB DISABLED ADMIN", "lsarpc.lsa_ForestTrustRecordFlags.LSA_NB_DISABLED_ADMIN", FT_BOOLEAN
, 32, TFS(&lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_ADMIN_tfs
), ( 0x00000004 ), NULL
, HFILL
}},
16450 { &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_CONFLICT
,
16451 { "LSA NB DISABLED CONFLICT", "lsarpc.lsa_ForestTrustRecordFlags.LSA_NB_DISABLED_CONFLICT", FT_BOOLEAN
, 32, TFS(&lsa_ForestTrustRecordFlags_LSA_NB_DISABLED_CONFLICT_tfs
), ( 0x00000008 ), NULL
, HFILL
}},
16452 { &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_ADMIN
,
16453 { "LSA SID DISABLED ADMIN", "lsarpc.lsa_ForestTrustRecordFlags.LSA_SID_DISABLED_ADMIN", FT_BOOLEAN
, 32, TFS(&lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_ADMIN_tfs
), ( 0x00000001 ), NULL
, HFILL
}},
16454 { &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_CONFLICT
,
16455 { "LSA SID DISABLED CONFLICT", "lsarpc.lsa_ForestTrustRecordFlags.LSA_SID_DISABLED_CONFLICT", FT_BOOLEAN
, 32, TFS(&lsa_ForestTrustRecordFlags_LSA_SID_DISABLED_CONFLICT_tfs
), ( 0x00000002 ), NULL
, HFILL
}},
16456 { &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_ADMIN
,
16457 { "LSA TLN DISABLED ADMIN", "lsarpc.lsa_ForestTrustRecordFlags.LSA_TLN_DISABLED_ADMIN", FT_BOOLEAN
, 32, TFS(&lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_ADMIN_tfs
), ( 0x00000002 ), NULL
, HFILL
}},
16458 { &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_CONFLICT
,
16459 { "LSA TLN DISABLED CONFLICT", "lsarpc.lsa_ForestTrustRecordFlags.LSA_TLN_DISABLED_CONFLICT", FT_BOOLEAN
, 32, TFS(&lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_CONFLICT_tfs
), ( 0x00000004 ), NULL
, HFILL
}},
16460 { &hf_lsarpc_lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_NEW
,
16461 { "LSA TLN DISABLED NEW", "lsarpc.lsa_ForestTrustRecordFlags.LSA_TLN_DISABLED_NEW", FT_BOOLEAN
, 32, TFS(&lsa_ForestTrustRecordFlags_LSA_TLN_DISABLED_NEW_tfs
), ( 0x00000001 ), NULL
, HFILL
}},
16462 { &hf_lsarpc_lsa_ForestTrustRecord_flags
,
16463 { "Flags", "lsarpc.lsa_ForestTrustRecord.flags", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16464 { &hf_lsarpc_lsa_ForestTrustRecord_forest_trust_data
,
16465 { "Forest Trust Data", "lsarpc.lsa_ForestTrustRecord.forest_trust_data", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16466 { &hf_lsarpc_lsa_ForestTrustRecord_time
,
16467 { "Time", "lsarpc.lsa_ForestTrustRecord.time", FT_ABSOLUTE_TIME
, ABSOLUTE_TIME_LOCAL
, NULL
, 0, NULL
, HFILL
}},
16468 { &hf_lsarpc_lsa_ForestTrustRecord_type
,
16469 { "Type", "lsarpc.lsa_ForestTrustRecord.type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_ForestTrustRecordType_vals
), 0, NULL
, HFILL
}},
16470 { &hf_lsarpc_lsa_GetSystemAccessAccount_access_mask
,
16471 { "Access Mask", "lsarpc.lsa_GetSystemAccessAccount.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16472 { &hf_lsarpc_lsa_GetSystemAccessAccount_handle
,
16473 { "Handle", "lsarpc.lsa_GetSystemAccessAccount.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16474 { &hf_lsarpc_lsa_GetUserName_account_name
,
16475 { "Account Name", "lsarpc.lsa_GetUserName.account_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16476 { &hf_lsarpc_lsa_GetUserName_authority_name
,
16477 { "Authority Name", "lsarpc.lsa_GetUserName.authority_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16478 { &hf_lsarpc_lsa_GetUserName_system_name
,
16479 { "System Name", "lsarpc.lsa_GetUserName.system_name", FT_STRING
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16480 { &hf_lsarpc_lsa_LUIDAttribute_attribute
,
16481 { "Attribute", "lsarpc.lsa_LUIDAttribute.attribute", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16482 { &hf_lsarpc_lsa_LUIDAttribute_luid
,
16483 { "Luid", "lsarpc.lsa_LUIDAttribute.luid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16484 { &hf_lsarpc_lsa_LUID_high
,
16485 { "High", "lsarpc.lsa_LUID.high", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16486 { &hf_lsarpc_lsa_LUID_low
,
16487 { "Low", "lsarpc.lsa_LUID.low", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16488 { &hf_lsarpc_lsa_LookupNames2_client_revision
,
16489 { "Client Revision", "lsarpc.lsa_LookupNames2.client_revision", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_ClientRevision_vals
), 0, NULL
, HFILL
}},
16490 { &hf_lsarpc_lsa_LookupNames2_count
,
16491 { "Count", "lsarpc.lsa_LookupNames2.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16492 { &hf_lsarpc_lsa_LookupNames2_domains
,
16493 { "Domains", "lsarpc.lsa_LookupNames2.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16494 { &hf_lsarpc_lsa_LookupNames2_handle
,
16495 { "Handle", "lsarpc.lsa_LookupNames2.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16496 { &hf_lsarpc_lsa_LookupNames2_level
,
16497 { "Level", "lsarpc.lsa_LookupNames2.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_LookupNamesLevel_vals
), 0, NULL
, HFILL
}},
16498 { &hf_lsarpc_lsa_LookupNames2_lookup_options
,
16499 { "Lookup Options", "lsarpc.lsa_LookupNames2.lookup_options", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_LookupOptions_vals
), 0, NULL
, HFILL
}},
16500 { &hf_lsarpc_lsa_LookupNames2_names
,
16501 { "Names", "lsarpc.lsa_LookupNames2.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16502 { &hf_lsarpc_lsa_LookupNames2_num_names
,
16503 { "Num Names", "lsarpc.lsa_LookupNames2.num_names", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16504 { &hf_lsarpc_lsa_LookupNames2_sids
,
16505 { "Sids", "lsarpc.lsa_LookupNames2.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16506 { &hf_lsarpc_lsa_LookupNames3_client_revision
,
16507 { "Client Revision", "lsarpc.lsa_LookupNames3.client_revision", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_ClientRevision_vals
), 0, NULL
, HFILL
}},
16508 { &hf_lsarpc_lsa_LookupNames3_count
,
16509 { "Count", "lsarpc.lsa_LookupNames3.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16510 { &hf_lsarpc_lsa_LookupNames3_domains
,
16511 { "Domains", "lsarpc.lsa_LookupNames3.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16512 { &hf_lsarpc_lsa_LookupNames3_handle
,
16513 { "Handle", "lsarpc.lsa_LookupNames3.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16514 { &hf_lsarpc_lsa_LookupNames3_level
,
16515 { "Level", "lsarpc.lsa_LookupNames3.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_LookupNamesLevel_vals
), 0, NULL
, HFILL
}},
16516 { &hf_lsarpc_lsa_LookupNames3_lookup_options
,
16517 { "Lookup Options", "lsarpc.lsa_LookupNames3.lookup_options", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_LookupOptions_vals
), 0, NULL
, HFILL
}},
16518 { &hf_lsarpc_lsa_LookupNames3_names
,
16519 { "Names", "lsarpc.lsa_LookupNames3.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16520 { &hf_lsarpc_lsa_LookupNames3_num_names
,
16521 { "Num Names", "lsarpc.lsa_LookupNames3.num_names", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16522 { &hf_lsarpc_lsa_LookupNames3_sids
,
16523 { "Sids", "lsarpc.lsa_LookupNames3.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16524 { &hf_lsarpc_lsa_LookupNames4_client_revision
,
16525 { "Client Revision", "lsarpc.lsa_LookupNames4.client_revision", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_ClientRevision_vals
), 0, NULL
, HFILL
}},
16526 { &hf_lsarpc_lsa_LookupNames4_count
,
16527 { "Count", "lsarpc.lsa_LookupNames4.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16528 { &hf_lsarpc_lsa_LookupNames4_domains
,
16529 { "Domains", "lsarpc.lsa_LookupNames4.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16530 { &hf_lsarpc_lsa_LookupNames4_level
,
16531 { "Level", "lsarpc.lsa_LookupNames4.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_LookupNamesLevel_vals
), 0, NULL
, HFILL
}},
16532 { &hf_lsarpc_lsa_LookupNames4_lookup_options
,
16533 { "Lookup Options", "lsarpc.lsa_LookupNames4.lookup_options", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_LookupOptions_vals
), 0, NULL
, HFILL
}},
16534 { &hf_lsarpc_lsa_LookupNames4_names
,
16535 { "Names", "lsarpc.lsa_LookupNames4.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16536 { &hf_lsarpc_lsa_LookupNames4_num_names
,
16537 { "Num Names", "lsarpc.lsa_LookupNames4.num_names", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16538 { &hf_lsarpc_lsa_LookupNames4_sids
,
16539 { "Sids", "lsarpc.lsa_LookupNames4.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16540 { &hf_lsarpc_lsa_LookupNames_count
,
16541 { "Count", "lsarpc.lsa_LookupNames.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16542 { &hf_lsarpc_lsa_LookupNames_domains
,
16543 { "Domains", "lsarpc.lsa_LookupNames.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16544 { &hf_lsarpc_lsa_LookupNames_handle
,
16545 { "Handle", "lsarpc.lsa_LookupNames.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16546 { &hf_lsarpc_lsa_LookupNames_level
,
16547 { "Level", "lsarpc.lsa_LookupNames.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_LookupNamesLevel_vals
), 0, NULL
, HFILL
}},
16548 { &hf_lsarpc_lsa_LookupNames_names
,
16549 { "Names", "lsarpc.lsa_LookupNames.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16550 { &hf_lsarpc_lsa_LookupNames_num_names
,
16551 { "Num Names", "lsarpc.lsa_LookupNames.num_names", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16552 { &hf_lsarpc_lsa_LookupNames_sids
,
16553 { "Sids", "lsarpc.lsa_LookupNames.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16554 { &hf_lsarpc_lsa_LookupPrivDisplayName_disp_name
,
16555 { "Disp Name", "lsarpc.lsa_LookupPrivDisplayName.disp_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16556 { &hf_lsarpc_lsa_LookupPrivDisplayName_handle
,
16557 { "Handle", "lsarpc.lsa_LookupPrivDisplayName.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16558 { &hf_lsarpc_lsa_LookupPrivDisplayName_language_id
,
16559 { "Language Id", "lsarpc.lsa_LookupPrivDisplayName.language_id", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16560 { &hf_lsarpc_lsa_LookupPrivDisplayName_language_id_sys
,
16561 { "Language Id Sys", "lsarpc.lsa_LookupPrivDisplayName.language_id_sys", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16562 { &hf_lsarpc_lsa_LookupPrivDisplayName_name
,
16563 { "Name", "lsarpc.lsa_LookupPrivDisplayName.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16564 { &hf_lsarpc_lsa_LookupPrivDisplayName_returned_language_id
,
16565 { "Returned Language Id", "lsarpc.lsa_LookupPrivDisplayName.returned_language_id", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16566 { &hf_lsarpc_lsa_LookupPrivName_handle
,
16567 { "Handle", "lsarpc.lsa_LookupPrivName.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16568 { &hf_lsarpc_lsa_LookupPrivName_luid
,
16569 { "Luid", "lsarpc.lsa_LookupPrivName.luid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16570 { &hf_lsarpc_lsa_LookupPrivName_name
,
16571 { "Name", "lsarpc.lsa_LookupPrivName.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16572 { &hf_lsarpc_lsa_LookupPrivValue_handle
,
16573 { "Handle", "lsarpc.lsa_LookupPrivValue.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16574 { &hf_lsarpc_lsa_LookupPrivValue_luid
,
16575 { "Luid", "lsarpc.lsa_LookupPrivValue.luid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16576 { &hf_lsarpc_lsa_LookupPrivValue_name
,
16577 { "Name", "lsarpc.lsa_LookupPrivValue.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16578 { &hf_lsarpc_lsa_LookupSids2_client_revision
,
16579 { "Client Revision", "lsarpc.lsa_LookupSids2.client_revision", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_ClientRevision_vals
), 0, NULL
, HFILL
}},
16580 { &hf_lsarpc_lsa_LookupSids2_count
,
16581 { "Count", "lsarpc.lsa_LookupSids2.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16582 { &hf_lsarpc_lsa_LookupSids2_domains
,
16583 { "Domains", "lsarpc.lsa_LookupSids2.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16584 { &hf_lsarpc_lsa_LookupSids2_handle
,
16585 { "Handle", "lsarpc.lsa_LookupSids2.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16586 { &hf_lsarpc_lsa_LookupSids2_level
,
16587 { "Level", "lsarpc.lsa_LookupSids2.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_LookupNamesLevel_vals
), 0, NULL
, HFILL
}},
16588 { &hf_lsarpc_lsa_LookupSids2_lookup_options
,
16589 { "Lookup Options", "lsarpc.lsa_LookupSids2.lookup_options", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_LookupOptions_vals
), 0, NULL
, HFILL
}},
16590 { &hf_lsarpc_lsa_LookupSids2_names
,
16591 { "Names", "lsarpc.lsa_LookupSids2.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16592 { &hf_lsarpc_lsa_LookupSids2_sids
,
16593 { "Sids", "lsarpc.lsa_LookupSids2.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16594 { &hf_lsarpc_lsa_LookupSids3_client_revision
,
16595 { "Client Revision", "lsarpc.lsa_LookupSids3.client_revision", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_ClientRevision_vals
), 0, NULL
, HFILL
}},
16596 { &hf_lsarpc_lsa_LookupSids3_count
,
16597 { "Count", "lsarpc.lsa_LookupSids3.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16598 { &hf_lsarpc_lsa_LookupSids3_domains
,
16599 { "Domains", "lsarpc.lsa_LookupSids3.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16600 { &hf_lsarpc_lsa_LookupSids3_level
,
16601 { "Level", "lsarpc.lsa_LookupSids3.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_LookupNamesLevel_vals
), 0, NULL
, HFILL
}},
16602 { &hf_lsarpc_lsa_LookupSids3_lookup_options
,
16603 { "Lookup Options", "lsarpc.lsa_LookupSids3.lookup_options", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_LookupOptions_vals
), 0, NULL
, HFILL
}},
16604 { &hf_lsarpc_lsa_LookupSids3_names
,
16605 { "Names", "lsarpc.lsa_LookupSids3.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16606 { &hf_lsarpc_lsa_LookupSids3_sids
,
16607 { "Sids", "lsarpc.lsa_LookupSids3.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16608 { &hf_lsarpc_lsa_LookupSids_count
,
16609 { "Count", "lsarpc.lsa_LookupSids.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16610 { &hf_lsarpc_lsa_LookupSids_domains
,
16611 { "Domains", "lsarpc.lsa_LookupSids.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16612 { &hf_lsarpc_lsa_LookupSids_handle
,
16613 { "Handle", "lsarpc.lsa_LookupSids.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16614 { &hf_lsarpc_lsa_LookupSids_level
,
16615 { "Level", "lsarpc.lsa_LookupSids.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_LookupNamesLevel_vals
), 0, NULL
, HFILL
}},
16616 { &hf_lsarpc_lsa_LookupSids_names
,
16617 { "Names", "lsarpc.lsa_LookupSids.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16618 { &hf_lsarpc_lsa_LookupSids_sids
,
16619 { "Sids", "lsarpc.lsa_LookupSids.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16620 { &hf_lsarpc_lsa_ModificationInfo_db_create_time
,
16621 { "Db Create Time", "lsarpc.lsa_ModificationInfo.db_create_time", FT_ABSOLUTE_TIME
, ABSOLUTE_TIME_LOCAL
, NULL
, 0, NULL
, HFILL
}},
16622 { &hf_lsarpc_lsa_ModificationInfo_modified_id
,
16623 { "Modified Id", "lsarpc.lsa_ModificationInfo.modified_id", FT_UINT64
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16624 { &hf_lsarpc_lsa_ObjectAttribute_attributes
,
16625 { "Attributes", "lsarpc.lsa_ObjectAttribute.attributes", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16626 { &hf_lsarpc_lsa_ObjectAttribute_len
,
16627 { "Len", "lsarpc.lsa_ObjectAttribute.len", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16628 { &hf_lsarpc_lsa_ObjectAttribute_object_name
,
16629 { "Object Name", "lsarpc.lsa_ObjectAttribute.object_name", FT_STRING
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16630 { &hf_lsarpc_lsa_ObjectAttribute_root_dir
,
16631 { "Root Dir", "lsarpc.lsa_ObjectAttribute.root_dir", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16632 { &hf_lsarpc_lsa_ObjectAttribute_sec_desc
,
16633 { "Sec Desc", "lsarpc.lsa_ObjectAttribute.sec_desc", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16634 { &hf_lsarpc_lsa_ObjectAttribute_sec_qos
,
16635 { "Sec Qos", "lsarpc.lsa_ObjectAttribute.sec_qos", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16636 { &hf_lsarpc_lsa_OpenAccount_access_mask
,
16637 { "Access Mask", "lsarpc.lsa_OpenAccount.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16638 { &hf_lsarpc_lsa_OpenAccount_acct_handle
,
16639 { "Acct Handle", "lsarpc.lsa_OpenAccount.acct_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16640 { &hf_lsarpc_lsa_OpenAccount_handle
,
16641 { "Handle", "lsarpc.lsa_OpenAccount.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16642 { &hf_lsarpc_lsa_OpenAccount_sid
,
16643 { "Sid", "lsarpc.lsa_OpenAccount.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16644 { &hf_lsarpc_lsa_OpenPolicy2_access_mask
,
16645 { "Access Mask", "lsarpc.lsa_OpenPolicy2.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16646 { &hf_lsarpc_lsa_OpenPolicy2_attr
,
16647 { "Attr", "lsarpc.lsa_OpenPolicy2.attr", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16648 { &hf_lsarpc_lsa_OpenPolicy2_handle
,
16649 { "Handle", "lsarpc.lsa_OpenPolicy2.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16650 { &hf_lsarpc_lsa_OpenPolicy2_system_name
,
16651 { "System Name", "lsarpc.lsa_OpenPolicy2.system_name", FT_STRING
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16652 { &hf_lsarpc_lsa_OpenPolicy3_access_mask
,
16653 { "Access Mask", "lsarpc.lsa_OpenPolicy3.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16654 { &hf_lsarpc_lsa_OpenPolicy3_attr
,
16655 { "Attr", "lsarpc.lsa_OpenPolicy3.attr", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16656 { &hf_lsarpc_lsa_OpenPolicy3_handle
,
16657 { "Handle", "lsarpc.lsa_OpenPolicy3.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16658 { &hf_lsarpc_lsa_OpenPolicy3_in_revision_info
,
16659 { "In Revision Info", "lsarpc.lsa_OpenPolicy3.in_revision_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16660 { &hf_lsarpc_lsa_OpenPolicy3_in_version
,
16661 { "In Version", "lsarpc.lsa_OpenPolicy3.in_version", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16662 { &hf_lsarpc_lsa_OpenPolicy3_out_revision_info
,
16663 { "Out Revision Info", "lsarpc.lsa_OpenPolicy3.out_revision_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16664 { &hf_lsarpc_lsa_OpenPolicy3_out_version
,
16665 { "Out Version", "lsarpc.lsa_OpenPolicy3.out_version", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16666 { &hf_lsarpc_lsa_OpenPolicy3_system_name
,
16667 { "System Name", "lsarpc.lsa_OpenPolicy3.system_name", FT_STRING
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16668 { &hf_lsarpc_lsa_OpenPolicy_access_mask
,
16669 { "Access Mask", "lsarpc.lsa_OpenPolicy.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16670 { &hf_lsarpc_lsa_OpenPolicy_attr
,
16671 { "Attr", "lsarpc.lsa_OpenPolicy.attr", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16672 { &hf_lsarpc_lsa_OpenPolicy_handle
,
16673 { "Handle", "lsarpc.lsa_OpenPolicy.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16674 { &hf_lsarpc_lsa_OpenPolicy_system_name
,
16675 { "System Name", "lsarpc.lsa_OpenPolicy.system_name", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16676 { &hf_lsarpc_lsa_OpenSecret_access_mask
,
16677 { "Access Mask", "lsarpc.lsa_OpenSecret.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16678 { &hf_lsarpc_lsa_OpenSecret_handle
,
16679 { "Handle", "lsarpc.lsa_OpenSecret.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16680 { &hf_lsarpc_lsa_OpenSecret_name
,
16681 { "Name", "lsarpc.lsa_OpenSecret.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16682 { &hf_lsarpc_lsa_OpenSecret_sec_handle
,
16683 { "Sec Handle", "lsarpc.lsa_OpenSecret.sec_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16684 { &hf_lsarpc_lsa_OpenTrustedDomainByName_access_mask
,
16685 { "Access Mask", "lsarpc.lsa_OpenTrustedDomainByName.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16686 { &hf_lsarpc_lsa_OpenTrustedDomainByName_handle
,
16687 { "Handle", "lsarpc.lsa_OpenTrustedDomainByName.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16688 { &hf_lsarpc_lsa_OpenTrustedDomainByName_name
,
16689 { "Name", "lsarpc.lsa_OpenTrustedDomainByName.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16690 { &hf_lsarpc_lsa_OpenTrustedDomainByName_trustdom_handle
,
16691 { "Trustdom Handle", "lsarpc.lsa_OpenTrustedDomainByName.trustdom_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16692 { &hf_lsarpc_lsa_OpenTrustedDomain_access_mask
,
16693 { "Access Mask", "lsarpc.lsa_OpenTrustedDomain.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16694 { &hf_lsarpc_lsa_OpenTrustedDomain_handle
,
16695 { "Handle", "lsarpc.lsa_OpenTrustedDomain.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16696 { &hf_lsarpc_lsa_OpenTrustedDomain_sid
,
16697 { "Sid", "lsarpc.lsa_OpenTrustedDomain.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16698 { &hf_lsarpc_lsa_OpenTrustedDomain_trustdom_handle
,
16699 { "Trustdom Handle", "lsarpc.lsa_OpenTrustedDomain.trustdom_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16700 { &hf_lsarpc_lsa_PDAccountInfo_name
,
16701 { "Name", "lsarpc.lsa_PDAccountInfo.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16702 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_AUDIT_LOG_ADMIN
,
16703 { "LSA POLICY AUDIT LOG ADMIN", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_AUDIT_LOG_ADMIN", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_AUDIT_LOG_ADMIN_tfs
), ( 0x00000200 ), NULL
, HFILL
}},
16704 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_CREATE_ACCOUNT
,
16705 { "LSA POLICY CREATE ACCOUNT", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_CREATE_ACCOUNT", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_CREATE_ACCOUNT_tfs
), ( 0x00000010 ), NULL
, HFILL
}},
16706 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_CREATE_PRIVILEGE
,
16707 { "LSA POLICY CREATE PRIVILEGE", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_CREATE_PRIVILEGE", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_CREATE_PRIVILEGE_tfs
), ( 0x00000040 ), NULL
, HFILL
}},
16708 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_CREATE_SECRET
,
16709 { "LSA POLICY CREATE SECRET", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_CREATE_SECRET", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_CREATE_SECRET_tfs
), ( 0x00000020 ), NULL
, HFILL
}},
16710 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_GET_PRIVATE_INFORMATION
,
16711 { "LSA POLICY GET PRIVATE INFORMATION", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_GET_PRIVATE_INFORMATION", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_GET_PRIVATE_INFORMATION_tfs
), ( 0x00000004 ), NULL
, HFILL
}},
16712 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_LOOKUP_NAMES
,
16713 { "LSA POLICY LOOKUP NAMES", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_LOOKUP_NAMES", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_LOOKUP_NAMES_tfs
), ( 0x00000800 ), NULL
, HFILL
}},
16714 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_NOTIFICATION
,
16715 { "LSA POLICY NOTIFICATION", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_NOTIFICATION", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_NOTIFICATION_tfs
), ( 0x00001000 ), NULL
, HFILL
}},
16716 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_SERVER_ADMIN
,
16717 { "LSA POLICY SERVER ADMIN", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_SERVER_ADMIN", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_SERVER_ADMIN_tfs
), ( 0x00000400 ), NULL
, HFILL
}},
16718 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_SET_AUDIT_REQUIREMENTS
,
16719 { "LSA POLICY SET AUDIT REQUIREMENTS", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_SET_AUDIT_REQUIREMENTS", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_SET_AUDIT_REQUIREMENTS_tfs
), ( 0x00000100 ), NULL
, HFILL
}},
16720 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS
,
16721 { "LSA POLICY SET DEFAULT QUOTA LIMITS", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS_tfs
), ( 0x00000080 ), NULL
, HFILL
}},
16722 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_TRUST_ADMIN
,
16723 { "LSA POLICY TRUST ADMIN", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_TRUST_ADMIN", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_TRUST_ADMIN_tfs
), ( 0x00000008 ), NULL
, HFILL
}},
16724 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_VIEW_AUDIT_INFORMATION
,
16725 { "LSA POLICY VIEW AUDIT INFORMATION", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_VIEW_AUDIT_INFORMATION", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_VIEW_AUDIT_INFORMATION_tfs
), ( 0x00000002 ), NULL
, HFILL
}},
16726 { &hf_lsarpc_lsa_PolicyAccessMask_LSA_POLICY_VIEW_LOCAL_INFORMATION
,
16727 { "LSA POLICY VIEW LOCAL INFORMATION", "lsarpc.lsa_PolicyAccessMask.LSA_POLICY_VIEW_LOCAL_INFORMATION", FT_BOOLEAN
, 32, TFS(&lsa_PolicyAccessMask_LSA_POLICY_VIEW_LOCAL_INFORMATION_tfs
), ( 0x00000001 ), NULL
, HFILL
}},
16728 { &hf_lsarpc_lsa_PolicyInformation_account_domain
,
16729 { "Account Domain", "lsarpc.lsa_PolicyInformation.account_domain", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16730 { &hf_lsarpc_lsa_PolicyInformation_audit_events
,
16731 { "Audit Events", "lsarpc.lsa_PolicyInformation.audit_events", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16732 { &hf_lsarpc_lsa_PolicyInformation_audit_log
,
16733 { "Audit Log", "lsarpc.lsa_PolicyInformation.audit_log", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16734 { &hf_lsarpc_lsa_PolicyInformation_auditfullquery
,
16735 { "Auditfullquery", "lsarpc.lsa_PolicyInformation.auditfullquery", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16736 { &hf_lsarpc_lsa_PolicyInformation_auditfullset
,
16737 { "Auditfullset", "lsarpc.lsa_PolicyInformation.auditfullset", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16738 { &hf_lsarpc_lsa_PolicyInformation_dns
,
16739 { "Dns", "lsarpc.lsa_PolicyInformation.dns", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16740 { &hf_lsarpc_lsa_PolicyInformation_dns_int
,
16741 { "Dns Int", "lsarpc.lsa_PolicyInformation.dns_int", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16742 { &hf_lsarpc_lsa_PolicyInformation_domain
,
16743 { "Domain", "lsarpc.lsa_PolicyInformation.domain", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16744 { &hf_lsarpc_lsa_PolicyInformation_l_account_domain
,
16745 { "L Account Domain", "lsarpc.lsa_PolicyInformation.l_account_domain", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16746 { &hf_lsarpc_lsa_PolicyInformation_mod
,
16747 { "Mod", "lsarpc.lsa_PolicyInformation.mod", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16748 { &hf_lsarpc_lsa_PolicyInformation_pd
,
16749 { "Pd", "lsarpc.lsa_PolicyInformation.pd", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16750 { &hf_lsarpc_lsa_PolicyInformation_quota
,
16751 { "Quota", "lsarpc.lsa_PolicyInformation.quota", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16752 { &hf_lsarpc_lsa_PolicyInformation_replica
,
16753 { "Replica", "lsarpc.lsa_PolicyInformation.replica", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16754 { &hf_lsarpc_lsa_PolicyInformation_role
,
16755 { "Role", "lsarpc.lsa_PolicyInformation.role", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16756 { &hf_lsarpc_lsa_PrivArray_count
,
16757 { "Count", "lsarpc.lsa_PrivArray.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16758 { &hf_lsarpc_lsa_PrivArray_privs
,
16759 { "Privs", "lsarpc.lsa_PrivArray.privs", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16760 { &hf_lsarpc_lsa_PrivEntry_luid
,
16761 { "Luid", "lsarpc.lsa_PrivEntry.luid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16762 { &hf_lsarpc_lsa_PrivEntry_name
,
16763 { "Name", "lsarpc.lsa_PrivEntry.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16764 { &hf_lsarpc_lsa_PrivilegeSet_count
,
16765 { "Count", "lsarpc.lsa_PrivilegeSet.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16766 { &hf_lsarpc_lsa_PrivilegeSet_set
,
16767 { "Set", "lsarpc.lsa_PrivilegeSet.set", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16768 { &hf_lsarpc_lsa_PrivilegeSet_unknown
,
16769 { "Unknown", "lsarpc.lsa_PrivilegeSet.unknown", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16770 { &hf_lsarpc_lsa_QosInfo_context_mode
,
16771 { "Context Mode", "lsarpc.lsa_QosInfo.context_mode", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16772 { &hf_lsarpc_lsa_QosInfo_effective_only
,
16773 { "Effective Only", "lsarpc.lsa_QosInfo.effective_only", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16774 { &hf_lsarpc_lsa_QosInfo_impersonation_level
,
16775 { "Impersonation Level", "lsarpc.lsa_QosInfo.impersonation_level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_SecurityImpersonationLevel_vals
), 0, NULL
, HFILL
}},
16776 { &hf_lsarpc_lsa_QosInfo_len
,
16777 { "Len", "lsarpc.lsa_QosInfo.len", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16778 { &hf_lsarpc_lsa_QueryDomainInformationPolicy_handle
,
16779 { "Handle", "lsarpc.lsa_QueryDomainInformationPolicy.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16780 { &hf_lsarpc_lsa_QueryDomainInformationPolicy_info
,
16781 { "Info", "lsarpc.lsa_QueryDomainInformationPolicy.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16782 { &hf_lsarpc_lsa_QueryDomainInformationPolicy_level
,
16783 { "Level", "lsarpc.lsa_QueryDomainInformationPolicy.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_DomainInfoEnum_vals
), 0, NULL
, HFILL
}},
16784 { &hf_lsarpc_lsa_QueryInfoPolicy2_handle
,
16785 { "Handle", "lsarpc.lsa_QueryInfoPolicy2.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16786 { &hf_lsarpc_lsa_QueryInfoPolicy2_info
,
16787 { "Info", "lsarpc.lsa_QueryInfoPolicy2.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16788 { &hf_lsarpc_lsa_QueryInfoPolicy2_level
,
16789 { "Level", "lsarpc.lsa_QueryInfoPolicy2.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_PolicyInfo_vals
), 0, NULL
, HFILL
}},
16790 { &hf_lsarpc_lsa_QueryInfoPolicy_handle
,
16791 { "Handle", "lsarpc.lsa_QueryInfoPolicy.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16792 { &hf_lsarpc_lsa_QueryInfoPolicy_info
,
16793 { "Info", "lsarpc.lsa_QueryInfoPolicy.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16794 { &hf_lsarpc_lsa_QueryInfoPolicy_level
,
16795 { "Level", "lsarpc.lsa_QueryInfoPolicy.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_PolicyInfo_vals
), 0, NULL
, HFILL
}},
16796 { &hf_lsarpc_lsa_QuerySecret_new_mtime
,
16797 { "New Mtime", "lsarpc.lsa_QuerySecret.new_mtime", FT_ABSOLUTE_TIME
, ABSOLUTE_TIME_LOCAL
, NULL
, 0, NULL
, HFILL
}},
16798 { &hf_lsarpc_lsa_QuerySecret_new_val
,
16799 { "New Val", "lsarpc.lsa_QuerySecret.new_val", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16800 { &hf_lsarpc_lsa_QuerySecret_old_mtime
,
16801 { "Old Mtime", "lsarpc.lsa_QuerySecret.old_mtime", FT_ABSOLUTE_TIME
, ABSOLUTE_TIME_LOCAL
, NULL
, 0, NULL
, HFILL
}},
16802 { &hf_lsarpc_lsa_QuerySecret_old_val
,
16803 { "Old Val", "lsarpc.lsa_QuerySecret.old_val", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16804 { &hf_lsarpc_lsa_QuerySecret_sec_handle
,
16805 { "Sec Handle", "lsarpc.lsa_QuerySecret.sec_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16806 { &hf_lsarpc_lsa_QuerySecurity_handle
,
16807 { "Handle", "lsarpc.lsa_QuerySecurity.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16808 { &hf_lsarpc_lsa_QuerySecurity_sdbuf
,
16809 { "Sdbuf", "lsarpc.lsa_QuerySecurity.sdbuf", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16810 { &hf_lsarpc_lsa_QuerySecurity_sec_info
,
16811 { "Sec Info", "lsarpc.lsa_QuerySecurity.sec_info", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16812 { &hf_lsarpc_lsa_QueryTrustedDomainInfoByName_handle
,
16813 { "Handle", "lsarpc.lsa_QueryTrustedDomainInfoByName.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16814 { &hf_lsarpc_lsa_QueryTrustedDomainInfoByName_info
,
16815 { "Info", "lsarpc.lsa_QueryTrustedDomainInfoByName.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16816 { &hf_lsarpc_lsa_QueryTrustedDomainInfoByName_level
,
16817 { "Level", "lsarpc.lsa_QueryTrustedDomainInfoByName.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_TrustDomInfoEnum_vals
), 0, NULL
, HFILL
}},
16818 { &hf_lsarpc_lsa_QueryTrustedDomainInfoByName_trusted_domain
,
16819 { "Trusted Domain", "lsarpc.lsa_QueryTrustedDomainInfoByName.trusted_domain", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16820 { &hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_dom_sid
,
16821 { "Dom Sid", "lsarpc.lsa_QueryTrustedDomainInfoBySid.dom_sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16822 { &hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_handle
,
16823 { "Handle", "lsarpc.lsa_QueryTrustedDomainInfoBySid.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16824 { &hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_info
,
16825 { "Info", "lsarpc.lsa_QueryTrustedDomainInfoBySid.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16826 { &hf_lsarpc_lsa_QueryTrustedDomainInfoBySid_level
,
16827 { "Level", "lsarpc.lsa_QueryTrustedDomainInfoBySid.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_TrustDomInfoEnum_vals
), 0, NULL
, HFILL
}},
16828 { &hf_lsarpc_lsa_QueryTrustedDomainInfo_info
,
16829 { "Info", "lsarpc.lsa_QueryTrustedDomainInfo.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16830 { &hf_lsarpc_lsa_QueryTrustedDomainInfo_level
,
16831 { "Level", "lsarpc.lsa_QueryTrustedDomainInfo.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_TrustDomInfoEnum_vals
), 0, NULL
, HFILL
}},
16832 { &hf_lsarpc_lsa_QueryTrustedDomainInfo_trustdom_handle
,
16833 { "Trustdom Handle", "lsarpc.lsa_QueryTrustedDomainInfo.trustdom_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16834 { &hf_lsarpc_lsa_RefDomainList_count
,
16835 { "Count", "lsarpc.lsa_RefDomainList.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16836 { &hf_lsarpc_lsa_RefDomainList_domains
,
16837 { "Domains", "lsarpc.lsa_RefDomainList.domains", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16838 { &hf_lsarpc_lsa_RefDomainList_max_size
,
16839 { "Max Size", "lsarpc.lsa_RefDomainList.max_size", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16840 { &hf_lsarpc_lsa_RemoveAccountRights_handle
,
16841 { "Handle", "lsarpc.lsa_RemoveAccountRights.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16842 { &hf_lsarpc_lsa_RemoveAccountRights_remove_all
,
16843 { "Remove All", "lsarpc.lsa_RemoveAccountRights.remove_all", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16844 { &hf_lsarpc_lsa_RemoveAccountRights_rights
,
16845 { "Rights", "lsarpc.lsa_RemoveAccountRights.rights", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16846 { &hf_lsarpc_lsa_RemoveAccountRights_sid
,
16847 { "Sid", "lsarpc.lsa_RemoveAccountRights.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16848 { &hf_lsarpc_lsa_RemovePrivilegesFromAccount_handle
,
16849 { "Handle", "lsarpc.lsa_RemovePrivilegesFromAccount.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16850 { &hf_lsarpc_lsa_RemovePrivilegesFromAccount_privs
,
16851 { "Privs", "lsarpc.lsa_RemovePrivilegesFromAccount.privs", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16852 { &hf_lsarpc_lsa_RemovePrivilegesFromAccount_remove_all
,
16853 { "Remove All", "lsarpc.lsa_RemovePrivilegesFromAccount.remove_all", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16854 { &hf_lsarpc_lsa_ReplicaSourceInfo_account
,
16855 { "Account", "lsarpc.lsa_ReplicaSourceInfo.account", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16856 { &hf_lsarpc_lsa_ReplicaSourceInfo_source
,
16857 { "Source", "lsarpc.lsa_ReplicaSourceInfo.source", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16858 { &hf_lsarpc_lsa_RetrievePrivateData_handle
,
16859 { "Handle", "lsarpc.lsa_RetrievePrivateData.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16860 { &hf_lsarpc_lsa_RetrievePrivateData_name
,
16861 { "Name", "lsarpc.lsa_RetrievePrivateData.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16862 { &hf_lsarpc_lsa_RetrievePrivateData_val
,
16863 { "Val", "lsarpc.lsa_RetrievePrivateData.val", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16864 { &hf_lsarpc_lsa_RevisionSupportedFeature_LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER
,
16865 { "LSA FEATURE TDO AUTH INFO AES CIPHER", "lsarpc.lsa_RevisionSupportedFeature.LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER", FT_BOOLEAN
, 32, TFS(&lsa_RevisionSupportedFeature_LSA_FEATURE_TDO_AUTH_INFO_AES_CIPHER_tfs
), ( 0x00000001 ), NULL
, HFILL
}},
16866 { &hf_lsarpc_lsa_RightAttribute_name
,
16867 { "Name", "lsarpc.lsa_RightAttribute.name", FT_STRING
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16868 { &hf_lsarpc_lsa_RightSet_count
,
16869 { "Count", "lsarpc.lsa_RightSet.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16870 { &hf_lsarpc_lsa_RightSet_names
,
16871 { "Names", "lsarpc.lsa_RightSet.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16872 { &hf_lsarpc_lsa_SecretAccessMask_LSA_SECRET_QUERY_VALUE
,
16873 { "LSA SECRET QUERY VALUE", "lsarpc.lsa_SecretAccessMask.LSA_SECRET_QUERY_VALUE", FT_BOOLEAN
, 32, TFS(&lsa_SecretAccessMask_LSA_SECRET_QUERY_VALUE_tfs
), ( 0x00000002 ), NULL
, HFILL
}},
16874 { &hf_lsarpc_lsa_SecretAccessMask_LSA_SECRET_SET_VALUE
,
16875 { "LSA SECRET SET VALUE", "lsarpc.lsa_SecretAccessMask.LSA_SECRET_SET_VALUE", FT_BOOLEAN
, 32, TFS(&lsa_SecretAccessMask_LSA_SECRET_SET_VALUE_tfs
), ( 0x00000001 ), NULL
, HFILL
}},
16876 { &hf_lsarpc_lsa_ServerRole_role
,
16877 { "Role", "lsarpc.lsa_ServerRole.role", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_Role_vals
), 0, NULL
, HFILL
}},
16878 { &hf_lsarpc_lsa_SetDomainInformationPolicy_handle
,
16879 { "Handle", "lsarpc.lsa_SetDomainInformationPolicy.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16880 { &hf_lsarpc_lsa_SetDomainInformationPolicy_info
,
16881 { "Info", "lsarpc.lsa_SetDomainInformationPolicy.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16882 { &hf_lsarpc_lsa_SetDomainInformationPolicy_level
,
16883 { "Level", "lsarpc.lsa_SetDomainInformationPolicy.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_DomainInfoEnum_vals
), 0, NULL
, HFILL
}},
16884 { &hf_lsarpc_lsa_SetInfoPolicy2_handle
,
16885 { "Handle", "lsarpc.lsa_SetInfoPolicy2.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16886 { &hf_lsarpc_lsa_SetInfoPolicy2_info
,
16887 { "Info", "lsarpc.lsa_SetInfoPolicy2.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16888 { &hf_lsarpc_lsa_SetInfoPolicy2_level
,
16889 { "Level", "lsarpc.lsa_SetInfoPolicy2.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_PolicyInfo_vals
), 0, NULL
, HFILL
}},
16890 { &hf_lsarpc_lsa_SetInfoPolicy_handle
,
16891 { "Handle", "lsarpc.lsa_SetInfoPolicy.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16892 { &hf_lsarpc_lsa_SetInfoPolicy_info
,
16893 { "Info", "lsarpc.lsa_SetInfoPolicy.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16894 { &hf_lsarpc_lsa_SetInfoPolicy_level
,
16895 { "Level", "lsarpc.lsa_SetInfoPolicy.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_PolicyInfo_vals
), 0, NULL
, HFILL
}},
16896 { &hf_lsarpc_lsa_SetInformationTrustedDomain_info
,
16897 { "Info", "lsarpc.lsa_SetInformationTrustedDomain.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16898 { &hf_lsarpc_lsa_SetInformationTrustedDomain_level
,
16899 { "Level", "lsarpc.lsa_SetInformationTrustedDomain.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_TrustDomInfoEnum_vals
), 0, NULL
, HFILL
}},
16900 { &hf_lsarpc_lsa_SetInformationTrustedDomain_trustdom_handle
,
16901 { "Trustdom Handle", "lsarpc.lsa_SetInformationTrustedDomain.trustdom_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16902 { &hf_lsarpc_lsa_SetSecObj_handle
,
16903 { "Handle", "lsarpc.lsa_SetSecObj.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16904 { &hf_lsarpc_lsa_SetSecObj_sdbuf
,
16905 { "Sdbuf", "lsarpc.lsa_SetSecObj.sdbuf", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16906 { &hf_lsarpc_lsa_SetSecObj_sec_info
,
16907 { "Sec Info", "lsarpc.lsa_SetSecObj.sec_info", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16908 { &hf_lsarpc_lsa_SetSecret_new_val
,
16909 { "New Val", "lsarpc.lsa_SetSecret.new_val", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16910 { &hf_lsarpc_lsa_SetSecret_old_val
,
16911 { "Old Val", "lsarpc.lsa_SetSecret.old_val", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16912 { &hf_lsarpc_lsa_SetSecret_sec_handle
,
16913 { "Sec Handle", "lsarpc.lsa_SetSecret.sec_handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16914 { &hf_lsarpc_lsa_SetSystemAccessAccount_access_mask
,
16915 { "Access Mask", "lsarpc.lsa_SetSystemAccessAccount.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
16916 { &hf_lsarpc_lsa_SetSystemAccessAccount_handle
,
16917 { "Handle", "lsarpc.lsa_SetSystemAccessAccount.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16918 { &hf_lsarpc_lsa_SetTrustedDomainInfoByName_handle
,
16919 { "Handle", "lsarpc.lsa_SetTrustedDomainInfoByName.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16920 { &hf_lsarpc_lsa_SetTrustedDomainInfoByName_info
,
16921 { "Info", "lsarpc.lsa_SetTrustedDomainInfoByName.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16922 { &hf_lsarpc_lsa_SetTrustedDomainInfoByName_level
,
16923 { "Level", "lsarpc.lsa_SetTrustedDomainInfoByName.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_TrustDomInfoEnum_vals
), 0, NULL
, HFILL
}},
16924 { &hf_lsarpc_lsa_SetTrustedDomainInfoByName_trusted_domain
,
16925 { "Trusted Domain", "lsarpc.lsa_SetTrustedDomainInfoByName.trusted_domain", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16926 { &hf_lsarpc_lsa_SetTrustedDomainInfo_dom_sid
,
16927 { "Dom Sid", "lsarpc.lsa_SetTrustedDomainInfo.dom_sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16928 { &hf_lsarpc_lsa_SetTrustedDomainInfo_handle
,
16929 { "Handle", "lsarpc.lsa_SetTrustedDomainInfo.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16930 { &hf_lsarpc_lsa_SetTrustedDomainInfo_info
,
16931 { "Info", "lsarpc.lsa_SetTrustedDomainInfo.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16932 { &hf_lsarpc_lsa_SetTrustedDomainInfo_level
,
16933 { "Level", "lsarpc.lsa_SetTrustedDomainInfo.level", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_TrustDomInfoEnum_vals
), 0, NULL
, HFILL
}},
16934 { &hf_lsarpc_lsa_SidArray_num_sids
,
16935 { "Num Sids", "lsarpc.lsa_SidArray.num_sids", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16936 { &hf_lsarpc_lsa_SidArray_sids
,
16937 { "Sids", "lsarpc.lsa_SidArray.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16938 { &hf_lsarpc_lsa_SidPtr_sid
,
16939 { "Sid", "lsarpc.lsa_SidPtr.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16940 { &hf_lsarpc_lsa_StorePrivateData_handle
,
16941 { "Handle", "lsarpc.lsa_StorePrivateData.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16942 { &hf_lsarpc_lsa_StorePrivateData_name
,
16943 { "Name", "lsarpc.lsa_StorePrivateData.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16944 { &hf_lsarpc_lsa_StorePrivateData_val
,
16945 { "Val", "lsarpc.lsa_StorePrivateData.val", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16946 { &hf_lsarpc_lsa_StringLarge_length
,
16947 { "Length", "lsarpc.lsa_StringLarge.length", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16948 { &hf_lsarpc_lsa_StringLarge_size
,
16949 { "Size", "lsarpc.lsa_StringLarge.size", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16950 { &hf_lsarpc_lsa_StringLarge_string
,
16951 { "String", "lsarpc.lsa_StringLarge.string", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16952 { &hf_lsarpc_lsa_String_length
,
16953 { "Length", "lsarpc.lsa_String.length", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16954 { &hf_lsarpc_lsa_String_size
,
16955 { "Size", "lsarpc.lsa_String.size", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16956 { &hf_lsarpc_lsa_String_string
,
16957 { "String", "lsarpc.lsa_String.string", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16958 { &hf_lsarpc_lsa_Strings_count
,
16959 { "Count", "lsarpc.lsa_Strings.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16960 { &hf_lsarpc_lsa_Strings_names
,
16961 { "Names", "lsarpc.lsa_Strings.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16962 { &hf_lsarpc_lsa_TransNameArray2_count
,
16963 { "Count", "lsarpc.lsa_TransNameArray2.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16964 { &hf_lsarpc_lsa_TransNameArray2_names
,
16965 { "Names", "lsarpc.lsa_TransNameArray2.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16966 { &hf_lsarpc_lsa_TransNameArray_count
,
16967 { "Count", "lsarpc.lsa_TransNameArray.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16968 { &hf_lsarpc_lsa_TransNameArray_names
,
16969 { "Names", "lsarpc.lsa_TransNameArray.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16970 { &hf_lsarpc_lsa_TransSidArray2_count
,
16971 { "Count", "lsarpc.lsa_TransSidArray2.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16972 { &hf_lsarpc_lsa_TransSidArray2_sids
,
16973 { "Sids", "lsarpc.lsa_TransSidArray2.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16974 { &hf_lsarpc_lsa_TransSidArray3_count
,
16975 { "Count", "lsarpc.lsa_TransSidArray3.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16976 { &hf_lsarpc_lsa_TransSidArray3_sids
,
16977 { "Sids", "lsarpc.lsa_TransSidArray3.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16978 { &hf_lsarpc_lsa_TransSidArray_count
,
16979 { "Count", "lsarpc.lsa_TransSidArray.count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16980 { &hf_lsarpc_lsa_TransSidArray_sids
,
16981 { "Sids", "lsarpc.lsa_TransSidArray.sids", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16982 { &hf_lsarpc_lsa_TranslatedName2_name
,
16983 { "Name", "lsarpc.lsa_TranslatedName2.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16984 { &hf_lsarpc_lsa_TranslatedName2_sid_index
,
16985 { "Sid Index", "lsarpc.lsa_TranslatedName2.sid_index", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16986 { &hf_lsarpc_lsa_TranslatedName2_sid_type
,
16987 { "Sid Type", "lsarpc.lsa_TranslatedName2.sid_type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_SidType_vals
), 0, NULL
, HFILL
}},
16988 { &hf_lsarpc_lsa_TranslatedName2_unknown
,
16989 { "Unknown", "lsarpc.lsa_TranslatedName2.unknown", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16990 { &hf_lsarpc_lsa_TranslatedName_name
,
16991 { "Name", "lsarpc.lsa_TranslatedName.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
16992 { &hf_lsarpc_lsa_TranslatedName_sid_index
,
16993 { "Sid Index", "lsarpc.lsa_TranslatedName.sid_index", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16994 { &hf_lsarpc_lsa_TranslatedName_sid_type
,
16995 { "Sid Type", "lsarpc.lsa_TranslatedName.sid_type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_SidType_vals
), 0, NULL
, HFILL
}},
16996 { &hf_lsarpc_lsa_TranslatedSid2_rid
,
16997 { "Rid", "lsarpc.lsa_TranslatedSid2.rid", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
16998 { &hf_lsarpc_lsa_TranslatedSid2_sid_index
,
16999 { "Sid Index", "lsarpc.lsa_TranslatedSid2.sid_index", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17000 { &hf_lsarpc_lsa_TranslatedSid2_sid_type
,
17001 { "Sid Type", "lsarpc.lsa_TranslatedSid2.sid_type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_SidType_vals
), 0, NULL
, HFILL
}},
17002 { &hf_lsarpc_lsa_TranslatedSid2_unknown
,
17003 { "Unknown", "lsarpc.lsa_TranslatedSid2.unknown", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17004 { &hf_lsarpc_lsa_TranslatedSid3_flags
,
17005 { "Flags", "lsarpc.lsa_TranslatedSid3.flags", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17006 { &hf_lsarpc_lsa_TranslatedSid3_sid
,
17007 { "Sid", "lsarpc.lsa_TranslatedSid3.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17008 { &hf_lsarpc_lsa_TranslatedSid3_sid_index
,
17009 { "Sid Index", "lsarpc.lsa_TranslatedSid3.sid_index", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17010 { &hf_lsarpc_lsa_TranslatedSid3_sid_type
,
17011 { "Sid Type", "lsarpc.lsa_TranslatedSid3.sid_type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_SidType_vals
), 0, NULL
, HFILL
}},
17012 { &hf_lsarpc_lsa_TranslatedSid_rid
,
17013 { "Rid", "lsarpc.lsa_TranslatedSid.rid", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17014 { &hf_lsarpc_lsa_TranslatedSid_sid_index
,
17015 { "Sid Index", "lsarpc.lsa_TranslatedSid.sid_index", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17016 { &hf_lsarpc_lsa_TranslatedSid_sid_type
,
17017 { "Sid Type", "lsarpc.lsa_TranslatedSid.sid_type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_SidType_vals
), 0, NULL
, HFILL
}},
17018 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION
,
17019 { "LSA TRUST ATTRIBUTE CROSS ORGANIZATION", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_tfs
), ( 0x00000010 ), NULL
, HFILL
}},
17020 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION
,
17021 { "LSA TRUST ATTRIBUTE CROSS ORGANIZATION ENABLE TGT DELEGATION", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION_tfs
), ( 0x00000800 ), NULL
, HFILL
}},
17022 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION
,
17023 { "LSA TRUST ATTRIBUTE CROSS ORGANIZATION NO TGT DELEGATION", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION_tfs
), ( 0x00000200 ), NULL
, HFILL
}},
17024 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE
,
17025 { "LSA TRUST ATTRIBUTE FOREST TRANSITIVE", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE_tfs
), ( 0x00000008 ), NULL
, HFILL
}},
17026 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE
,
17027 { "LSA TRUST ATTRIBUTE NON TRANSITIVE", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE_tfs
), ( 0x00000001 ), NULL
, HFILL
}},
17028 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_PIM_TRUST
,
17029 { "LSA TRUST ATTRIBUTE PIM TRUST", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_PIM_TRUST", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_PIM_TRUST_tfs
), ( 0x00000400 ), NULL
, HFILL
}},
17030 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN
,
17031 { "LSA TRUST ATTRIBUTE QUARANTINED DOMAIN", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN_tfs
), ( 0x00000004 ), NULL
, HFILL
}},
17032 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL
,
17033 { "LSA TRUST ATTRIBUTE TREAT AS EXTERNAL", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL_tfs
), ( 0x00000040 ), NULL
, HFILL
}},
17034 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY
,
17035 { "LSA TRUST ATTRIBUTE UPLEVEL ONLY", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY_tfs
), ( 0x00000002 ), NULL
, HFILL
}},
17036 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION
,
17037 { "LSA TRUST ATTRIBUTE USES RC4 ENCRYPTION", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION_tfs
), ( 0x00000080 ), NULL
, HFILL
}},
17038 { &hf_lsarpc_lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_WITHIN_FOREST
,
17039 { "LSA TRUST ATTRIBUTE WITHIN FOREST", "lsarpc.lsa_TrustAttributes.LSA_TRUST_ATTRIBUTE_WITHIN_FOREST", FT_BOOLEAN
, 32, TFS(&lsa_TrustAttributes_LSA_TRUST_ATTRIBUTE_WITHIN_FOREST_tfs
), ( 0x00000020 ), NULL
, HFILL
}},
17040 { &hf_lsarpc_lsa_TrustDirection_LSA_TRUST_DIRECTION_INBOUND
,
17041 { "LSA TRUST DIRECTION INBOUND", "lsarpc.lsa_TrustDirection.LSA_TRUST_DIRECTION_INBOUND", FT_BOOLEAN
, 32, TFS(&lsa_TrustDirection_LSA_TRUST_DIRECTION_INBOUND_tfs
), ( 0x00000001 ), NULL
, HFILL
}},
17042 { &hf_lsarpc_lsa_TrustDirection_LSA_TRUST_DIRECTION_OUTBOUND
,
17043 { "LSA TRUST DIRECTION OUTBOUND", "lsarpc.lsa_TrustDirection.LSA_TRUST_DIRECTION_OUTBOUND", FT_BOOLEAN
, 32, TFS(&lsa_TrustDirection_LSA_TRUST_DIRECTION_OUTBOUND_tfs
), ( 0x00000002 ), NULL
, HFILL
}},
17044 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES_auth_data
,
17045 { "Auth Data", "lsarpc.lsa_TrustDomainInfoAuthInfoInternalAES.auth_data", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17046 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES_cipher
,
17047 { "Cipher", "lsarpc.lsa_TrustDomainInfoAuthInfoInternalAES.cipher", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17048 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES_salt
,
17049 { "Salt", "lsarpc.lsa_TrustDomainInfoAuthInfoInternalAES.salt", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17050 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfoInternal_auth_blob
,
17051 { "Auth Blob", "lsarpc.lsa_TrustDomainInfoAuthInfoInternal.auth_blob", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17052 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_count
,
17053 { "Incoming Count", "lsarpc.lsa_TrustDomainInfoAuthInfo.incoming_count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17054 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_current_auth_info
,
17055 { "Incoming Current Auth Info", "lsarpc.lsa_TrustDomainInfoAuthInfo.incoming_current_auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17056 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfo_incoming_previous_auth_info
,
17057 { "Incoming Previous Auth Info", "lsarpc.lsa_TrustDomainInfoAuthInfo.incoming_previous_auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17058 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_count
,
17059 { "Outgoing Count", "lsarpc.lsa_TrustDomainInfoAuthInfo.outgoing_count", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17060 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_current_auth_info
,
17061 { "Outgoing Current Auth Info", "lsarpc.lsa_TrustDomainInfoAuthInfo.outgoing_current_auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17062 { &hf_lsarpc_lsa_TrustDomainInfoAuthInfo_outgoing_previous_auth_info
,
17063 { "Outgoing Previous Auth Info", "lsarpc.lsa_TrustDomainInfoAuthInfo.outgoing_previous_auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17064 { &hf_lsarpc_lsa_TrustDomainInfoBasic_netbios_name
,
17065 { "Netbios Name", "lsarpc.lsa_TrustDomainInfoBasic.netbios_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17066 { &hf_lsarpc_lsa_TrustDomainInfoBasic_sid
,
17067 { "Sid", "lsarpc.lsa_TrustDomainInfoBasic.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17068 { &hf_lsarpc_lsa_TrustDomainInfoBuffer_AuthType
,
17069 { "AuthType", "lsarpc.lsa_TrustDomainInfoBuffer.AuthType", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_TrustAuthType_vals
), 0, NULL
, HFILL
}},
17070 { &hf_lsarpc_lsa_TrustDomainInfoBuffer_data
,
17071 { "Data", "lsarpc.lsa_TrustDomainInfoBuffer.data", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17072 { &hf_lsarpc_lsa_TrustDomainInfoBuffer_last_update_time
,
17073 { "Last Update Time", "lsarpc.lsa_TrustDomainInfoBuffer.last_update_time", FT_ABSOLUTE_TIME
, ABSOLUTE_TIME_LOCAL
, NULL
, 0, NULL
, HFILL
}},
17074 { &hf_lsarpc_lsa_TrustDomainInfoControllers_entries
,
17075 { "Entries", "lsarpc.lsa_TrustDomainInfoControllers.entries", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17076 { &hf_lsarpc_lsa_TrustDomainInfoControllers_netbios_names
,
17077 { "Netbios Names", "lsarpc.lsa_TrustDomainInfoControllers.netbios_names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17078 { &hf_lsarpc_lsa_TrustDomainInfoFullInfo2Internal_auth_info
,
17079 { "Auth Info", "lsarpc.lsa_TrustDomainInfoFullInfo2Internal.auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17080 { &hf_lsarpc_lsa_TrustDomainInfoFullInfo2Internal_info
,
17081 { "Info", "lsarpc.lsa_TrustDomainInfoFullInfo2Internal.info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17082 { &hf_lsarpc_lsa_TrustDomainInfoFullInfo2Internal_posix_offset
,
17083 { "Posix Offset", "lsarpc.lsa_TrustDomainInfoFullInfo2Internal.posix_offset", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17084 { &hf_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES_auth_info
,
17085 { "Auth Info", "lsarpc.lsa_TrustDomainInfoFullInfoInternalAES.auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17086 { &hf_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES_info_ex
,
17087 { "Info Ex", "lsarpc.lsa_TrustDomainInfoFullInfoInternalAES.info_ex", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17088 { &hf_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES_posix_offset
,
17089 { "Posix Offset", "lsarpc.lsa_TrustDomainInfoFullInfoInternalAES.posix_offset", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17090 { &hf_lsarpc_lsa_TrustDomainInfoFullInfoInternal_auth_info
,
17091 { "Auth Info", "lsarpc.lsa_TrustDomainInfoFullInfoInternal.auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17092 { &hf_lsarpc_lsa_TrustDomainInfoFullInfoInternal_info_ex
,
17093 { "Info Ex", "lsarpc.lsa_TrustDomainInfoFullInfoInternal.info_ex", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17094 { &hf_lsarpc_lsa_TrustDomainInfoFullInfoInternal_posix_offset
,
17095 { "Posix Offset", "lsarpc.lsa_TrustDomainInfoFullInfoInternal.posix_offset", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17096 { &hf_lsarpc_lsa_TrustDomainInfoFullInfo_auth_info
,
17097 { "Auth Info", "lsarpc.lsa_TrustDomainInfoFullInfo.auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17098 { &hf_lsarpc_lsa_TrustDomainInfoFullInfo_info_ex
,
17099 { "Info Ex", "lsarpc.lsa_TrustDomainInfoFullInfo.info_ex", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17100 { &hf_lsarpc_lsa_TrustDomainInfoFullInfo_posix_offset
,
17101 { "Posix Offset", "lsarpc.lsa_TrustDomainInfoFullInfo.posix_offset", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17102 { &hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_data
,
17103 { "Forest Trust Data", "lsarpc.lsa_TrustDomainInfoInfoEx2Internal.forest_trust_data", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17104 { &hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_forest_trust_length
,
17105 { "Forest Trust Length", "lsarpc.lsa_TrustDomainInfoInfoEx2Internal.forest_trust_length", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17106 { &hf_lsarpc_lsa_TrustDomainInfoInfoEx2Internal_info_ex
,
17107 { "Info Ex", "lsarpc.lsa_TrustDomainInfoInfoEx2Internal.info_ex", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17108 { &hf_lsarpc_lsa_TrustDomainInfoInfoEx_domain_name
,
17109 { "Domain Name", "lsarpc.lsa_TrustDomainInfoInfoEx.domain_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17110 { &hf_lsarpc_lsa_TrustDomainInfoInfoEx_netbios_name
,
17111 { "Netbios Name", "lsarpc.lsa_TrustDomainInfoInfoEx.netbios_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17112 { &hf_lsarpc_lsa_TrustDomainInfoInfoEx_sid
,
17113 { "Sid", "lsarpc.lsa_TrustDomainInfoInfoEx.sid", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17114 { &hf_lsarpc_lsa_TrustDomainInfoInfoEx_trust_attributes
,
17115 { "Trust Attributes", "lsarpc.lsa_TrustDomainInfoInfoEx.trust_attributes", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
17116 { &hf_lsarpc_lsa_TrustDomainInfoInfoEx_trust_direction
,
17117 { "Trust Direction", "lsarpc.lsa_TrustDomainInfoInfoEx.trust_direction", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
17118 { &hf_lsarpc_lsa_TrustDomainInfoInfoEx_trust_type
,
17119 { "Trust Type", "lsarpc.lsa_TrustDomainInfoInfoEx.trust_type", FT_UINT32
, BASE_DEC
, VALS(lsarpc_lsa_TrustType_vals
), 0, NULL
, HFILL
}},
17120 { &hf_lsarpc_lsa_TrustDomainInfoName_netbios_name
,
17121 { "Netbios Name", "lsarpc.lsa_TrustDomainInfoName.netbios_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17122 { &hf_lsarpc_lsa_TrustDomainInfoPassword_old_password
,
17123 { "Old Password", "lsarpc.lsa_TrustDomainInfoPassword.old_password", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17124 { &hf_lsarpc_lsa_TrustDomainInfoPassword_password
,
17125 { "Password", "lsarpc.lsa_TrustDomainInfoPassword.password", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17126 { &hf_lsarpc_lsa_TrustDomainInfoPosixOffset_posix_offset
,
17127 { "Posix Offset", "lsarpc.lsa_TrustDomainInfoPosixOffset.posix_offset", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17128 { &hf_lsarpc_lsa_TrustDomainInfoSupportedEncTypes_enc_types
,
17129 { "Enc Types", "lsarpc.lsa_TrustDomainInfoSupportedEncTypes.enc_types", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
17130 { &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_AUTH
,
17131 { "LSA TRUSTED QUERY AUTH", "lsarpc.lsa_TrustedAccessMask.LSA_TRUSTED_QUERY_AUTH", FT_BOOLEAN
, 32, TFS(&lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_AUTH_tfs
), ( 0x00000040 ), NULL
, HFILL
}},
17132 { &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_CONTROLLERS
,
17133 { "LSA TRUSTED QUERY CONTROLLERS", "lsarpc.lsa_TrustedAccessMask.LSA_TRUSTED_QUERY_CONTROLLERS", FT_BOOLEAN
, 32, TFS(&lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_CONTROLLERS_tfs
), ( 0x00000002 ), NULL
, HFILL
}},
17134 { &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_DOMAIN_NAME
,
17135 { "LSA TRUSTED QUERY DOMAIN NAME", "lsarpc.lsa_TrustedAccessMask.LSA_TRUSTED_QUERY_DOMAIN_NAME", FT_BOOLEAN
, 32, TFS(&lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_DOMAIN_NAME_tfs
), ( 0x00000001 ), NULL
, HFILL
}},
17136 { &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_POSIX
,
17137 { "LSA TRUSTED QUERY POSIX", "lsarpc.lsa_TrustedAccessMask.LSA_TRUSTED_QUERY_POSIX", FT_BOOLEAN
, 32, TFS(&lsa_TrustedAccessMask_LSA_TRUSTED_QUERY_POSIX_tfs
), ( 0x00000008 ), NULL
, HFILL
}},
17138 { &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_AUTH
,
17139 { "LSA TRUSTED SET AUTH", "lsarpc.lsa_TrustedAccessMask.LSA_TRUSTED_SET_AUTH", FT_BOOLEAN
, 32, TFS(&lsa_TrustedAccessMask_LSA_TRUSTED_SET_AUTH_tfs
), ( 0x00000020 ), NULL
, HFILL
}},
17140 { &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_CONTROLLERS
,
17141 { "LSA TRUSTED SET CONTROLLERS", "lsarpc.lsa_TrustedAccessMask.LSA_TRUSTED_SET_CONTROLLERS", FT_BOOLEAN
, 32, TFS(&lsa_TrustedAccessMask_LSA_TRUSTED_SET_CONTROLLERS_tfs
), ( 0x00000004 ), NULL
, HFILL
}},
17142 { &hf_lsarpc_lsa_TrustedAccessMask_LSA_TRUSTED_SET_POSIX
,
17143 { "LSA TRUSTED SET POSIX", "lsarpc.lsa_TrustedAccessMask.LSA_TRUSTED_SET_POSIX", FT_BOOLEAN
, 32, TFS(&lsa_TrustedAccessMask_LSA_TRUSTED_SET_POSIX_tfs
), ( 0x00000010 ), NULL
, HFILL
}},
17144 { &hf_lsarpc_lsa_TrustedDomainInfo_auth_info
,
17145 { "Auth Info", "lsarpc.lsa_TrustedDomainInfo.auth_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17146 { &hf_lsarpc_lsa_TrustedDomainInfo_auth_info_internal
,
17147 { "Auth Info Internal", "lsarpc.lsa_TrustedDomainInfo.auth_info_internal", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17148 { &hf_lsarpc_lsa_TrustedDomainInfo_auth_info_internal_aes
,
17149 { "Auth Info Internal Aes", "lsarpc.lsa_TrustedDomainInfo.auth_info_internal_aes", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17150 { &hf_lsarpc_lsa_TrustedDomainInfo_controllers
,
17151 { "Controllers", "lsarpc.lsa_TrustedDomainInfo.controllers", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17152 { &hf_lsarpc_lsa_TrustedDomainInfo_enc_types
,
17153 { "Enc Types", "lsarpc.lsa_TrustedDomainInfo.enc_types", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17154 { &hf_lsarpc_lsa_TrustedDomainInfo_full_info
,
17155 { "Full Info", "lsarpc.lsa_TrustedDomainInfo.full_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17156 { &hf_lsarpc_lsa_TrustedDomainInfo_full_info2_internal
,
17157 { "Full Info2 Internal", "lsarpc.lsa_TrustedDomainInfo.full_info2_internal", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17158 { &hf_lsarpc_lsa_TrustedDomainInfo_full_info_internal
,
17159 { "Full Info Internal", "lsarpc.lsa_TrustedDomainInfo.full_info_internal", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17160 { &hf_lsarpc_lsa_TrustedDomainInfo_full_info_internal_aes
,
17161 { "Full Info Internal Aes", "lsarpc.lsa_TrustedDomainInfo.full_info_internal_aes", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17162 { &hf_lsarpc_lsa_TrustedDomainInfo_info_basic
,
17163 { "Info Basic", "lsarpc.lsa_TrustedDomainInfo.info_basic", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17164 { &hf_lsarpc_lsa_TrustedDomainInfo_info_ex
,
17165 { "Info Ex", "lsarpc.lsa_TrustedDomainInfo.info_ex", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17166 { &hf_lsarpc_lsa_TrustedDomainInfo_info_ex2_internal
,
17167 { "Info Ex2 Internal", "lsarpc.lsa_TrustedDomainInfo.info_ex2_internal", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17168 { &hf_lsarpc_lsa_TrustedDomainInfo_name
,
17169 { "Name", "lsarpc.lsa_TrustedDomainInfo.name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17170 { &hf_lsarpc_lsa_TrustedDomainInfo_password
,
17171 { "Password", "lsarpc.lsa_TrustedDomainInfo.password", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17172 { &hf_lsarpc_lsa_TrustedDomainInfo_posix_offset
,
17173 { "Posix Offset", "lsarpc.lsa_TrustedDomainInfo.posix_offset", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17174 { &hf_lsarpc_lsa_krbAuthenticationOptions_LSA_POLICY_KERBEROS_VALIDATE_CLIENT
,
17175 { "LSA POLICY KERBEROS VALIDATE CLIENT", "lsarpc.lsa_krbAuthenticationOptions.LSA_POLICY_KERBEROS_VALIDATE_CLIENT", FT_BOOLEAN
, 32, TFS(&lsa_krbAuthenticationOptions_LSA_POLICY_KERBEROS_VALIDATE_CLIENT_tfs
), ( 0x00000080 ), NULL
, HFILL
}},
17176 { &hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_forest_trust_info
,
17177 { "Forest Trust Info", "lsarpc.lsa_lsaRQueryForestTrustInformation2.forest_trust_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17178 { &hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_handle
,
17179 { "Handle", "lsarpc.lsa_lsaRQueryForestTrustInformation2.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17180 { &hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_highest_record_type
,
17181 { "Highest Record Type", "lsarpc.lsa_lsaRQueryForestTrustInformation2.highest_record_type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_ForestTrustRecordType_vals
), 0, NULL
, HFILL
}},
17182 { &hf_lsarpc_lsa_lsaRQueryForestTrustInformation2_trusted_domain_name
,
17183 { "Trusted Domain Name", "lsarpc.lsa_lsaRQueryForestTrustInformation2.trusted_domain_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17184 { &hf_lsarpc_lsa_lsaRQueryForestTrustInformation_forest_trust_info
,
17185 { "Forest Trust Info", "lsarpc.lsa_lsaRQueryForestTrustInformation.forest_trust_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17186 { &hf_lsarpc_lsa_lsaRQueryForestTrustInformation_handle
,
17187 { "Handle", "lsarpc.lsa_lsaRQueryForestTrustInformation.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17188 { &hf_lsarpc_lsa_lsaRQueryForestTrustInformation_highest_record_type
,
17189 { "Highest Record Type", "lsarpc.lsa_lsaRQueryForestTrustInformation.highest_record_type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_ForestTrustRecordType_vals
), 0, NULL
, HFILL
}},
17190 { &hf_lsarpc_lsa_lsaRQueryForestTrustInformation_trusted_domain_name
,
17191 { "Trusted Domain Name", "lsarpc.lsa_lsaRQueryForestTrustInformation.trusted_domain_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17192 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation2_check_only
,
17193 { "Check Only", "lsarpc.lsa_lsaRSetForestTrustInformation2.check_only", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17194 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation2_collision_info
,
17195 { "Collision Info", "lsarpc.lsa_lsaRSetForestTrustInformation2.collision_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17196 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation2_forest_trust_info
,
17197 { "Forest Trust Info", "lsarpc.lsa_lsaRSetForestTrustInformation2.forest_trust_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17198 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation2_handle
,
17199 { "Handle", "lsarpc.lsa_lsaRSetForestTrustInformation2.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17200 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation2_highest_record_type
,
17201 { "Highest Record Type", "lsarpc.lsa_lsaRSetForestTrustInformation2.highest_record_type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_ForestTrustRecordType_vals
), 0, NULL
, HFILL
}},
17202 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation2_trusted_domain_name
,
17203 { "Trusted Domain Name", "lsarpc.lsa_lsaRSetForestTrustInformation2.trusted_domain_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17204 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation_check_only
,
17205 { "Check Only", "lsarpc.lsa_lsaRSetForestTrustInformation.check_only", FT_UINT8
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17206 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation_collision_info
,
17207 { "Collision Info", "lsarpc.lsa_lsaRSetForestTrustInformation.collision_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17208 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation_forest_trust_info
,
17209 { "Forest Trust Info", "lsarpc.lsa_lsaRSetForestTrustInformation.forest_trust_info", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17210 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation_handle
,
17211 { "Handle", "lsarpc.lsa_lsaRSetForestTrustInformation.handle", FT_BYTES
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17212 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation_highest_record_type
,
17213 { "Highest Record Type", "lsarpc.lsa_lsaRSetForestTrustInformation.highest_record_type", FT_UINT1632
, BASE_DEC
, VALS(lsarpc_lsa_ForestTrustRecordType_vals
), 0, NULL
, HFILL
}},
17214 { &hf_lsarpc_lsa_lsaRSetForestTrustInformation_trusted_domain_name
,
17215 { "Trusted Domain Name", "lsarpc.lsa_lsaRSetForestTrustInformation.trusted_domain_name", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17216 { &hf_lsarpc_lsa_revision_info1_revision
,
17217 { "Revision", "lsarpc.lsa_revision_info1.revision", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17218 { &hf_lsarpc_lsa_revision_info1_supported_features
,
17219 { "Supported Features", "lsarpc.lsa_revision_info1.supported_features", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
17220 { &hf_lsarpc_lsa_revision_info_info1
,
17221 { "Info1", "lsarpc.lsa_revision_info.info1", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17222 { &hf_lsarpc_names
,
17223 { "Names", "lsarpc.lookup.names", FT_NONE
, BASE_NONE
, NULL
, 0, NULL
, HFILL
}},
17224 { &hf_lsarpc_opnum
,
17225 { "Operation", "lsarpc.opnum", FT_UINT16
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17226 { &hf_lsarpc_policy_access_mask
,
17227 { "Access Mask", "lsarpc.policy.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
17228 { &hf_lsarpc_sec_desc_buf_len
,
17229 { "Sec Desc Buf Len", "lsarpc.sec_desc_buf_len", FT_UINT32
, BASE_DEC
, NULL
, 0, NULL
, HFILL
}},
17230 { &hf_lsarpc_secret_access_mask
,
17231 { "Access Mask", "lsarpc.policy.access_mask", FT_UINT32
, BASE_HEX
, NULL
, 0, NULL
, HFILL
}},
17232 { &hf_lsarpc_status
,
17233 { "NT Error", "lsarpc.status", FT_UINT32
, BASE_HEX
|BASE_EXT_STRING
, &NT_errors_ext
, 0, NULL
, HFILL
}},
17237 static int *ett
[] = {
17239 &ett_dcerpc_lsarpc
,
17240 &ett_lsarpc_security_secinfo
,
17241 &ett_lsarpc_kerb_EncTypes
,
17242 &ett_lsarpc_lsa_String
,
17243 &ett_lsarpc_lsa_StringLarge
,
17244 &ett_lsarpc_lsa_Strings
,
17245 &ett_lsarpc_lsa_AsciiString
,
17246 &ett_lsarpc_lsa_AsciiStringLarge
,
17247 &ett_lsarpc_lsa_BinaryString
,
17248 &ett_lsarpc_lsa_LUID
,
17249 &ett_lsarpc_lsa_PrivEntry
,
17250 &ett_lsarpc_lsa_PrivArray
,
17251 &ett_lsarpc_lsa_QosInfo
,
17252 &ett_lsarpc_lsa_ObjectAttribute
,
17253 &ett_lsarpc_lsa_PolicyAccessMask
,
17254 &ett_lsarpc_lsa_AccountAccessMask
,
17255 &ett_lsarpc_lsa_SecretAccessMask
,
17256 &ett_lsarpc_lsa_TrustedAccessMask
,
17257 &ett_lsarpc_lsa_AuditLogInfo
,
17258 &ett_lsarpc_lsa_AuditEventsInfo
,
17259 &ett_lsarpc_lsa_DomainInfo
,
17260 &ett_lsarpc_lsa_PDAccountInfo
,
17261 &ett_lsarpc_lsa_ServerRole
,
17262 &ett_lsarpc_lsa_ReplicaSourceInfo
,
17263 &ett_lsarpc_lsa_DefaultQuotaInfo
,
17264 &ett_lsarpc_lsa_ModificationInfo
,
17265 &ett_lsarpc_lsa_AuditFullSetInfo
,
17266 &ett_lsarpc_lsa_AuditFullQueryInfo
,
17267 &ett_lsarpc_lsa_DnsDomainInfo
,
17268 &ett_lsarpc_lsa_PolicyInformation
,
17269 &ett_lsarpc_lsa_SidPtr
,
17270 &ett_lsarpc_lsa_SidArray
,
17271 &ett_lsarpc_lsa_DomainList
,
17272 &ett_lsarpc_lsa_TranslatedSid
,
17273 &ett_lsarpc_lsa_TransSidArray
,
17274 &ett_lsarpc_lsa_RefDomainList
,
17275 &ett_lsarpc_lsa_TranslatedName
,
17276 &ett_lsarpc_lsa_TransNameArray
,
17277 &ett_lsarpc_lsa_LUIDAttribute
,
17278 &ett_lsarpc_lsa_PrivilegeSet
,
17279 &ett_lsarpc_lsa_DATA_BUF
,
17280 &ett_lsarpc_lsa_DATA_BUF2
,
17281 &ett_lsarpc_lsa_TrustDirection
,
17282 &ett_lsarpc_lsa_TrustAttributes
,
17283 &ett_lsarpc_lsa_TrustDomainInfoName
,
17284 &ett_lsarpc_lsa_TrustDomainInfoControllers
,
17285 &ett_lsarpc_lsa_TrustDomainInfoPosixOffset
,
17286 &ett_lsarpc_lsa_TrustDomainInfoPassword
,
17287 &ett_lsarpc_lsa_TrustDomainInfoBasic
,
17288 &ett_lsarpc_lsa_TrustDomainInfoInfoEx
,
17289 &ett_lsarpc_lsa_TrustDomainInfoBuffer
,
17290 &ett_lsarpc_lsa_TrustDomainInfoAuthInfo
,
17291 &ett_lsarpc_lsa_TrustDomainInfoFullInfo
,
17292 &ett_lsarpc_lsa_TrustDomainInfoAuthInfoInternal
,
17293 &ett_lsarpc_lsa_TrustDomainInfoFullInfoInternal
,
17294 &ett_lsarpc_lsa_TrustDomainInfoAuthInfoInternalAES
,
17295 &ett_lsarpc_lsa_TrustDomainInfoFullInfoInternalAES
,
17296 &ett_lsarpc_lsa_TrustDomainInfoInfoEx2Internal
,
17297 &ett_lsarpc_lsa_TrustDomainInfoFullInfo2Internal
,
17298 &ett_lsarpc_lsa_TrustDomainInfoSupportedEncTypes
,
17299 &ett_lsarpc_lsa_TrustedDomainInfo
,
17300 &ett_lsarpc_lsa_DATA_BUF_PTR
,
17301 &ett_lsarpc_lsa_RightAttribute
,
17302 &ett_lsarpc_lsa_RightSet
,
17303 &ett_lsarpc_lsa_DomainListEx
,
17304 &ett_lsarpc_lsa_DomainInfoQoS
,
17305 &ett_lsarpc_lsa_krbAuthenticationOptions
,
17306 &ett_lsarpc_lsa_DomainInfoKerberos
,
17307 &ett_lsarpc_lsa_DomainInfoEfs
,
17308 &ett_lsarpc_lsa_DomainInformationPolicy
,
17309 &ett_lsarpc_lsa_TranslatedName2
,
17310 &ett_lsarpc_lsa_TransNameArray2
,
17311 &ett_lsarpc_lsa_TranslatedSid2
,
17312 &ett_lsarpc_lsa_TransSidArray2
,
17313 &ett_lsarpc_lsa_TranslatedSid3
,
17314 &ett_lsarpc_lsa_TransSidArray3
,
17315 &ett_lsarpc_lsa_ForestTrustRecordFlags
,
17316 &ett_lsarpc_lsa_ForestTrustBinaryData
,
17317 &ett_lsarpc_lsa_ForestTrustDomainInfo
,
17318 &ett_lsarpc_lsa_ForestTrustData
,
17319 &ett_lsarpc_lsa_ForestTrustRecord
,
17320 &ett_lsarpc_lsa_ForestTrustInformation
,
17321 &ett_lsarpc_lsa_ForestTrustCollisionRecord
,
17322 &ett_lsarpc_lsa_ForestTrustCollisionInfo
,
17323 &ett_lsarpc_lsa_RevisionSupportedFeature
,
17324 &ett_lsarpc_lsa_revision_info1
,
17325 &ett_lsarpc_lsa_revision_info
,
17326 &ett_lsarpc_lsa_ForestTrustData2
,
17327 &ett_lsarpc_lsa_ForestTrustRecord2
,
17328 &ett_lsarpc_lsa_ForestTrustInformation2
,
17331 proto_dcerpc_lsarpc
= proto_register_protocol("Local Security Authority", "LSARPC", "lsarpc");
17332 proto_register_field_array(proto_dcerpc_lsarpc
, hf
, array_length (hf
));
17333 proto_register_subtree_array(ett
, array_length(ett
));
17336 void proto_reg_handoff_dcerpc_lsarpc(void)
17338 dcerpc_init_uuid(proto_dcerpc_lsarpc
, ett_dcerpc_lsarpc
,
17339 &uuid_dcerpc_lsarpc
, ver_dcerpc_lsarpc
,
17340 lsarpc_dissectors
, hf_lsarpc_opnum
);