11#ifndef __PACKET_DCERPC_LSARPC_H
12#define __PACKET_DCERPC_LSARPC_H
14#define LSA_POLICY_ALL_ACCESS ( (STANDARD_RIGHTS_REQUIRED_ACCESS|LSA_POLICY_VIEW_LOCAL_INFORMATION|LSA_POLICY_VIEW_AUDIT_INFORMATION|LSA_POLICY_GET_PRIVATE_INFORMATION|LSA_POLICY_TRUST_ADMIN|LSA_POLICY_CREATE_ACCOUNT|LSA_POLICY_CREATE_SECRET|LSA_POLICY_CREATE_PRIVILEGE|LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS|LSA_POLICY_SET_AUDIT_REQUIREMENTS|LSA_POLICY_AUDIT_LOG_ADMIN|LSA_POLICY_SERVER_ADMIN|LSA_POLICY_LOOKUP_NAMES|LSA_POLICY_NOTIFICATION) )
16#define LSA_POLICY_READ ( (STANDARD_RIGHTS_READ_ACCESS|LSA_POLICY_VIEW_LOCAL_INFORMATION|LSA_POLICY_VIEW_AUDIT_INFORMATION|LSA_POLICY_GET_PRIVATE_INFORMATION) )
18#define LSA_POLICY_WRITE ( (STANDARD_RIGHTS_READ_ACCESS|LSA_POLICY_TRUST_ADMIN|LSA_POLICY_CREATE_ACCOUNT|LSA_POLICY_CREATE_SECRET|LSA_POLICY_CREATE_PRIVILEGE|LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS|LSA_POLICY_SET_AUDIT_REQUIREMENTS|LSA_POLICY_AUDIT_LOG_ADMIN|LSA_POLICY_SERVER_ADMIN) )
20#define LSA_POLICY_EXECUTE ( (STANDARD_RIGHTS_EXECUTE_ACCESS|LSA_POLICY_VIEW_LOCAL_INFORMATION|LSA_POLICY_LOOKUP_NAMES) )
22#define LSA_ACCOUNT_ALL_ACCESS ( (STANDARD_RIGHTS_REQUIRED_ACCESS|LSA_ACCOUNT_VIEW|LSA_ACCOUNT_ADJUST_PRIVILEGES|LSA_ACCOUNT_ADJUST_QUOTAS|LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS) )
24#define LSA_ACCOUNT_READ ( (STANDARD_RIGHTS_READ_ACCESS|LSA_ACCOUNT_VIEW) )
26#define LSA_ACCOUNT_WRITE ( (STANDARD_RIGHTS_READ_ACCESS|LSA_ACCOUNT_ADJUST_PRIVILEGES|LSA_ACCOUNT_ADJUST_QUOTAS|LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS) )
28#define LSA_ACCOUNT_EXECUTE ( (STANDARD_RIGHTS_EXECUTE_ACCESS) )
30#define LSA_SECRET_ALL_ACCESS ( (LSA_SECRET_QUERY_VALUE|LSA_SECRET_SET_VALUE|SEC_STD_DELETE|STANDARD_RIGHTS_READ_ACCESS|SEC_STD_WRITE_DAC|SEC_STD_WRITE_OWNER) )
32#define LSA_SECRET_READ ( (LSA_SECRET_QUERY_VALUE|STANDARD_RIGHTS_READ_ACCESS) )
34#define LSA_SECRET_WRITE ( (LSA_SECRET_SET_VALUE|STANDARD_RIGHTS_READ_ACCESS) )
36#define LSA_SECRET_EXECUTE ( (STANDARD_RIGHTS_READ_ACCESS) )
38#define LSA_TRUSTED_DOMAIN_ALL_ACCESS ( (LSA_TRUSTED_QUERY_DOMAIN_NAME|LSA_TRUSTED_QUERY_CONTROLLERS|LSA_TRUSTED_SET_CONTROLLERS|LSA_TRUSTED_QUERY_POSIX|LSA_TRUSTED_SET_POSIX|LSA_TRUSTED_SET_AUTH|LSA_TRUSTED_QUERY_AUTH|SEC_STD_DELETE|STANDARD_RIGHTS_READ_ACCESS|SEC_STD_WRITE_DAC|SEC_STD_WRITE_OWNER) )
40#define LSA_TRUSTED_DOMAIN_READ ( (LSA_TRUSTED_QUERY_DOMAIN_NAME|STANDARD_RIGHTS_READ_ACCESS) )
42#define LSA_TRUSTED_DOMAIN_WRITE ( (LSA_TRUSTED_SET_CONTROLLERS|LSA_TRUSTED_SET_POSIX|LSA_TRUSTED_SET_AUTH|STANDARD_RIGHTS_READ_ACCESS) )
44#define LSA_TRUSTED_DOMAIN_EXECUTE ( (LSA_TRUSTED_QUERY_DOMAIN_NAME|LSA_TRUSTED_QUERY_POSIX|STANDARD_RIGHTS_READ_ACCESS) )
46#define LSA_ENUM_TRUST_DOMAIN_MULTIPLIER ( 60 )
48#define LSA_REF_DOMAIN_LIST_MULTIPLIER ( 32 )
50#define LSA_ENUM_TRUST_DOMAIN_EX_MULTIPLIER ( 82 )
52#define LSA_TLN_DISABLED_MASK ( (LSA_TLN_DISABLED_NEW|LSA_TLN_DISABLED_ADMIN|LSA_TLN_DISABLED_CONFLICT) )
54#define LSA_SID_DISABLED_MASK ( (LSA_SID_DISABLED_ADMIN|LSA_SID_DISABLED_CONFLICT) )
56#define LSA_NB_DISABLED_MASK ( (LSA_NB_DISABLED_ADMIN|LSA_NB_DISABLED_CONFLICT) )
58#define LSA_FOREST_TRUST_RECORD_TYPE_LAST ( LSA_FOREST_TRUST_BINARY_DATA )
60#define LSA_FOREST_TRUST_RECORD2_TYPE_LAST ( LSA_FOREST_TRUST_SCANNER_INFO )
62#define LSA_CLIENT_REVISION_NO_DNS ( 0x00000001 )
64#define LSA_CLIENT_REVISION_DNS ( 0x00000002 )
66#define LSA_LOOKUP_OPTIONS_NO_ISOLATED ( 0x80000000 )
68unsigned lsarpc_dissect_bitmap_security_secinfo(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
69unsigned lsarpc_dissect_bitmap_kerb_EncTypes(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
70unsigned lsarpc_dissect_struct_lsa_String(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
71unsigned lsarpc_dissect_struct_lsa_StringLarge(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
72unsigned lsarpc_dissect_struct_lsa_Strings(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
73unsigned lsarpc_dissect_struct_lsa_AsciiString(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
74unsigned lsarpc_dissect_struct_lsa_AsciiStringLarge(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
75unsigned lsarpc_dissect_struct_lsa_BinaryString(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
76unsigned lsarpc_dissect_struct_lsa_LUID(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
77unsigned lsarpc_dissect_struct_lsa_PrivEntry(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
78unsigned lsarpc_dissect_struct_lsa_PrivArray(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
79#define LSA_SECURITY_ANONYMOUS (0)
80#define LSA_SECURITY_IDENTIFICATION (1)
81#define LSA_SECURITY_IMPERSONATION (2)
82#define LSA_SECURITY_DELEGATION (3)
83extern const value_string lsarpc_lsa_SecurityImpersonationLevel_vals[];
84unsigned lsarpc_dissect_enum_lsa_SecurityImpersonationLevel(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
85unsigned lsarpc_dissect_struct_lsa_QosInfo(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
86unsigned lsarpc_dissect_struct_lsa_ObjectAttribute(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
87unsigned lsarpc_dissect_bitmap_lsa_PolicyAccessMask(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
88unsigned lsarpc_dissect_bitmap_lsa_AccountAccessMask(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
89unsigned lsarpc_dissect_bitmap_lsa_SecretAccessMask(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
90unsigned lsarpc_dissect_bitmap_lsa_TrustedAccessMask(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
91unsigned lsarpc_dissect_struct_lsa_AuditLogInfo(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
92#define LSA_AUDIT_POLICY_NONE (0)
93#define LSA_AUDIT_POLICY_SUCCESS (1)
94#define LSA_AUDIT_POLICY_FAILURE (2)
95#define LSA_AUDIT_POLICY_ALL ((LSA_AUDIT_POLICY_SUCCESS|LSA_AUDIT_POLICY_FAILURE))
96#define LSA_AUDIT_POLICY_CLEAR (4)
97extern const value_string lsarpc_lsa_PolicyAuditPolicy_vals[];
98unsigned lsarpc_dissect_enum_lsa_PolicyAuditPolicy(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
99#define LSA_AUDIT_CATEGORY_SYSTEM (0)
100#define LSA_AUDIT_CATEGORY_LOGON (1)
101#define LSA_AUDIT_CATEGORY_FILE_AND_OBJECT_ACCESS (2)
102#define LSA_AUDIT_CATEGORY_USE_OF_USER_RIGHTS (3)
103#define LSA_AUDIT_CATEGORY_PROCESS_TRACKING (4)
104#define LSA_AUDIT_CATEGORY_SECURITY_POLICY_CHANGES (5)
105#define LSA_AUDIT_CATEGORY_ACCOUNT_MANAGEMENT (6)
106#define LSA_AUDIT_CATEGORY_DIRECTORY_SERVICE_ACCESS (7)
107#define LSA_AUDIT_CATEGORY_ACCOUNT_LOGON (8)
108extern const value_string lsarpc_lsa_PolicyAuditEventType_vals[];
109unsigned lsarpc_dissect_enum_lsa_PolicyAuditEventType(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
110unsigned lsarpc_dissect_struct_lsa_AuditEventsInfo(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
111unsigned lsarpc_dissect_struct_lsa_DomainInfo(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
112unsigned lsarpc_dissect_struct_lsa_PDAccountInfo(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
113#define LSA_ROLE_BACKUP (2)
114#define LSA_ROLE_PRIMARY (3)
116unsigned lsarpc_dissect_enum_lsa_Role(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
117unsigned lsarpc_dissect_struct_lsa_ServerRole(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
118unsigned lsarpc_dissect_struct_lsa_ReplicaSourceInfo(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
119unsigned lsarpc_dissect_struct_lsa_DefaultQuotaInfo(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
120unsigned lsarpc_dissect_struct_lsa_ModificationInfo(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
121unsigned lsarpc_dissect_struct_lsa_AuditFullSetInfo(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
122unsigned lsarpc_dissect_struct_lsa_AuditFullQueryInfo(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
123unsigned lsarpc_dissect_struct_lsa_DnsDomainInfo(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
124#define LSA_POLICY_INFO_AUDIT_LOG (1)
125#define LSA_POLICY_INFO_AUDIT_EVENTS (2)
126#define LSA_POLICY_INFO_DOMAIN (3)
127#define LSA_POLICY_INFO_PD (4)
128#define LSA_POLICY_INFO_ACCOUNT_DOMAIN (5)
129#define LSA_POLICY_INFO_ROLE (6)
130#define LSA_POLICY_INFO_REPLICA (7)
131#define LSA_POLICY_INFO_QUOTA (8)
132#define LSA_POLICY_INFO_MOD (9)
133#define LSA_POLICY_INFO_AUDIT_FULL_SET (10)
134#define LSA_POLICY_INFO_AUDIT_FULL_QUERY (11)
135#define LSA_POLICY_INFO_DNS (12)
136#define LSA_POLICY_INFO_DNS_INT (13)
137#define LSA_POLICY_INFO_L_ACCOUNT_DOMAIN (14)
139unsigned lsarpc_dissect_enum_lsa_PolicyInfo(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
140unsigned lsarpc_dissect_struct_lsa_SidPtr(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
141unsigned lsarpc_dissect_struct_lsa_SidArray(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
142unsigned lsarpc_dissect_struct_lsa_DomainList(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
143#define SID_NAME_USE_NONE (0)
144#define SID_NAME_USER (1)
145#define SID_NAME_DOM_GRP (2)
146#define SID_NAME_DOMAIN (3)
147#define SID_NAME_ALIAS (4)
148#define SID_NAME_WKN_GRP (5)
149#define SID_NAME_DELETED (6)
150#define SID_NAME_INVALID (7)
151#define SID_NAME_UNKNOWN (8)
152#define SID_NAME_COMPUTER (9)
153#define SID_NAME_LABEL (10)
155unsigned lsarpc_dissect_enum_lsa_SidType(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
156unsigned lsarpc_dissect_struct_lsa_TranslatedSid(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
157unsigned lsarpc_dissect_struct_lsa_TransSidArray(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
158unsigned lsarpc_dissect_struct_lsa_RefDomainList(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
159#define LSA_LOOKUP_NAMES_ALL (1)
160#define LSA_LOOKUP_NAMES_DOMAINS_ONLY (2)
161#define LSA_LOOKUP_NAMES_PRIMARY_DOMAIN_ONLY (3)
162#define LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY (4)
163#define LSA_LOOKUP_NAMES_FOREST_TRUSTS_ONLY (5)
164#define LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY2 (6)
165#define LSA_LOOKUP_NAMES_RODC_REFERRAL_TO_FULL_DC (7)
166extern const value_string lsarpc_lsa_LookupNamesLevel_vals[];
167unsigned lsarpc_dissect_enum_lsa_LookupNamesLevel(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
168unsigned lsarpc_dissect_struct_lsa_TranslatedName(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
169unsigned lsarpc_dissect_struct_lsa_TransNameArray(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
170unsigned lsarpc_dissect_struct_lsa_LUIDAttribute(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
171unsigned lsarpc_dissect_struct_lsa_PrivilegeSet(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
172unsigned lsarpc_dissect_struct_lsa_DATA_BUF(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
173unsigned lsarpc_dissect_struct_lsa_DATA_BUF2(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
174#define LSA_TRUSTED_DOMAIN_INFO_NAME (1)
175#define LSA_TRUSTED_DOMAIN_INFO_CONTROLLERS (2)
176#define LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET (3)
177#define LSA_TRUSTED_DOMAIN_INFO_PASSWORD (4)
178#define LSA_TRUSTED_DOMAIN_INFO_BASIC (5)
179#define LSA_TRUSTED_DOMAIN_INFO_INFO_EX (6)
180#define LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO (7)
181#define LSA_TRUSTED_DOMAIN_INFO_FULL_INFO (8)
182#define LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL (9)
183#define LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL (10)
184#define LSA_TRUSTED_DOMAIN_INFO_INFO_EX2_INTERNAL (11)
185#define LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_2_INTERNAL (12)
186#define LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES (13)
187#define LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL_AES (14)
188#define LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL_AES (15)
189extern const value_string lsarpc_lsa_TrustDomInfoEnum_vals[];
190unsigned lsarpc_dissect_enum_lsa_TrustDomInfoEnum(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
191unsigned lsarpc_dissect_bitmap_lsa_TrustDirection(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
192#define LSA_TRUST_TYPE_DOWNLEVEL (0x00000001)
193#define LSA_TRUST_TYPE_UPLEVEL (0x00000002)
194#define LSA_TRUST_TYPE_MIT (0x00000003)
195#define LSA_TRUST_TYPE_DCE (0x00000004)
197unsigned lsarpc_dissect_enum_lsa_TrustType(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
198unsigned lsarpc_dissect_bitmap_lsa_TrustAttributes(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
199unsigned lsarpc_dissect_struct_lsa_TrustDomainInfoName(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
200unsigned lsarpc_dissect_struct_lsa_TrustDomainInfoControllers(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
201unsigned lsarpc_dissect_struct_lsa_TrustDomainInfoPosixOffset(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
202unsigned lsarpc_dissect_struct_lsa_TrustDomainInfoPassword(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
203unsigned lsarpc_dissect_struct_lsa_TrustDomainInfoBasic(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
204unsigned lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
205#define TRUST_AUTH_TYPE_NONE (0)
206#define TRUST_AUTH_TYPE_NT4OWF (1)
207#define TRUST_AUTH_TYPE_CLEAR (2)
208#define TRUST_AUTH_TYPE_VERSION (3)
209extern const value_string lsarpc_lsa_TrustAuthType_vals[];
210unsigned lsarpc_dissect_enum_lsa_TrustAuthType(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
211unsigned lsarpc_dissect_struct_lsa_TrustDomainInfoBuffer(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
212unsigned lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfo(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
213unsigned lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfo(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
214unsigned lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternal(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
215unsigned lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfoInternal(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
216unsigned lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternalAES(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
217unsigned lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfoInternalAES(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
218unsigned lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx2Internal(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
219unsigned lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfo2Internal(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
220unsigned lsarpc_dissect_struct_lsa_TrustDomainInfoSupportedEncTypes(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
221unsigned lsarpc_dissect_struct_lsa_DATA_BUF_PTR(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
222unsigned lsarpc_dissect_struct_lsa_RightAttribute(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
223unsigned lsarpc_dissect_struct_lsa_RightSet(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
224unsigned lsarpc_dissect_struct_lsa_DomainListEx(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
225unsigned lsarpc_dissect_struct_lsa_DomainInfoQoS(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
226unsigned lsarpc_dissect_bitmap_lsa_krbAuthenticationOptions(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
227unsigned lsarpc_dissect_struct_lsa_DomainInfoKerberos(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
228unsigned lsarpc_dissect_struct_lsa_DomainInfoEfs(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
229#define LSA_DOMAIN_INFO_POLICY_QOS (1)
230#define LSA_DOMAIN_INFO_POLICY_EFS (2)
231#define LSA_DOMAIN_INFO_POLICY_KERBEROS (3)
232extern const value_string lsarpc_lsa_DomainInfoEnum_vals[];
233unsigned lsarpc_dissect_enum_lsa_DomainInfoEnum(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
234unsigned lsarpc_dissect_struct_lsa_TranslatedName2(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
235unsigned lsarpc_dissect_struct_lsa_TransNameArray2(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
236#define LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES (0x00000000)
237#define LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES_LOCAL (0x80000000)
238extern const value_string lsarpc_lsa_LookupOptions_vals[];
239unsigned lsarpc_dissect_enum_lsa_LookupOptions(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
240#define LSA_CLIENT_REVISION_1 (0x00000001)
241#define LSA_CLIENT_REVISION_2 (0x00000002)
242extern const value_string lsarpc_lsa_ClientRevision_vals[];
243unsigned lsarpc_dissect_enum_lsa_ClientRevision(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
244unsigned lsarpc_dissect_struct_lsa_TranslatedSid2(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
245unsigned lsarpc_dissect_struct_lsa_TransSidArray2(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
246unsigned lsarpc_dissect_struct_lsa_TranslatedSid3(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
247unsigned lsarpc_dissect_struct_lsa_TransSidArray3(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
248unsigned lsarpc_dissect_bitmap_lsa_ForestTrustRecordFlags(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
249#define LSA_FOREST_TRUST_TOP_LEVEL_NAME (0)
250#define LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX (1)
251#define LSA_FOREST_TRUST_DOMAIN_INFO (2)
252#define LSA_FOREST_TRUST_BINARY_DATA (3)
253#define LSA_FOREST_TRUST_SCANNER_INFO (4)
254extern const value_string lsarpc_lsa_ForestTrustRecordType_vals[];
255unsigned lsarpc_dissect_enum_lsa_ForestTrustRecordType(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
256unsigned lsarpc_dissect_struct_lsa_ForestTrustBinaryData(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
257unsigned lsarpc_dissect_struct_lsa_ForestTrustDomainInfo(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
258unsigned lsarpc_dissect_struct_lsa_ForestTrustRecord(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
259unsigned lsarpc_dissect_struct_lsa_ForestTrustInformation(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
260#define LSA_FOREST_TRUST_COLLISION_TDO (0)
261#define LSA_FOREST_TRUST_COLLISION_XREF (1)
262#define LSA_FOREST_TRUST_COLLISION_OTHER (2)
263extern const value_string lsarpc_lsa_ForestTrustCollisionRecordType_vals[];
264unsigned lsarpc_dissect_enum_lsa_ForestTrustCollisionRecordType(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
265unsigned lsarpc_dissect_struct_lsa_ForestTrustCollisionRecord(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
266unsigned lsarpc_dissect_struct_lsa_ForestTrustCollisionInfo(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
267unsigned lsarpc_dissect_bitmap_lsa_RevisionSupportedFeature(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
268unsigned lsarpc_dissect_struct_lsa_revision_info1(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
269unsigned lsarpc_dissect_struct_lsa_ForestTrustRecord2(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
270unsigned lsarpc_dissect_struct_lsa_ForestTrustInformation2(
tvbuff_t *tvb _U_,
unsigned offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
Definition packet-dcerpc.h:154
Definition packet_info.h:43
Mapping between a 32-bit integer value and its string representation.
Definition value_string.h:33
Definition tvbuff-int.h:36