11#ifndef __PACKET_DCERPC_LSARPC_H
12#define __PACKET_DCERPC_LSARPC_H
14#define LSA_POLICY_ALL_ACCESS ( (STANDARD_RIGHTS_REQUIRED_ACCESS|LSA_POLICY_VIEW_LOCAL_INFORMATION|LSA_POLICY_VIEW_AUDIT_INFORMATION|LSA_POLICY_GET_PRIVATE_INFORMATION|LSA_POLICY_TRUST_ADMIN|LSA_POLICY_CREATE_ACCOUNT|LSA_POLICY_CREATE_SECRET|LSA_POLICY_CREATE_PRIVILEGE|LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS|LSA_POLICY_SET_AUDIT_REQUIREMENTS|LSA_POLICY_AUDIT_LOG_ADMIN|LSA_POLICY_SERVER_ADMIN|LSA_POLICY_LOOKUP_NAMES|LSA_POLICY_NOTIFICATION) )
16#define LSA_POLICY_READ ( (STANDARD_RIGHTS_READ_ACCESS|LSA_POLICY_VIEW_LOCAL_INFORMATION|LSA_POLICY_VIEW_AUDIT_INFORMATION|LSA_POLICY_GET_PRIVATE_INFORMATION) )
18#define LSA_POLICY_WRITE ( (STANDARD_RIGHTS_READ_ACCESS|LSA_POLICY_TRUST_ADMIN|LSA_POLICY_CREATE_ACCOUNT|LSA_POLICY_CREATE_SECRET|LSA_POLICY_CREATE_PRIVILEGE|LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS|LSA_POLICY_SET_AUDIT_REQUIREMENTS|LSA_POLICY_AUDIT_LOG_ADMIN|LSA_POLICY_SERVER_ADMIN) )
20#define LSA_POLICY_EXECUTE ( (STANDARD_RIGHTS_EXECUTE_ACCESS|LSA_POLICY_VIEW_LOCAL_INFORMATION|LSA_POLICY_LOOKUP_NAMES) )
22#define LSA_ACCOUNT_ALL_ACCESS ( (STANDARD_RIGHTS_REQUIRED_ACCESS|LSA_ACCOUNT_VIEW|LSA_ACCOUNT_ADJUST_PRIVILEGES|LSA_ACCOUNT_ADJUST_QUOTAS|LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS) )
24#define LSA_ACCOUNT_READ ( (STANDARD_RIGHTS_READ_ACCESS|LSA_ACCOUNT_VIEW) )
26#define LSA_ACCOUNT_WRITE ( (STANDARD_RIGHTS_READ_ACCESS|LSA_ACCOUNT_ADJUST_PRIVILEGES|LSA_ACCOUNT_ADJUST_QUOTAS|LSA_ACCOUNT_ADJUST_SYSTEM_ACCESS) )
28#define LSA_ACCOUNT_EXECUTE ( (STANDARD_RIGHTS_EXECUTE_ACCESS) )
30#define LSA_SECRET_ALL_ACCESS ( (LSA_SECRET_QUERY_VALUE|LSA_SECRET_SET_VALUE|SEC_STD_DELETE|STANDARD_RIGHTS_READ_ACCESS|SEC_STD_WRITE_DAC|SEC_STD_WRITE_OWNER) )
32#define LSA_SECRET_READ ( (LSA_SECRET_QUERY_VALUE|STANDARD_RIGHTS_READ_ACCESS) )
34#define LSA_SECRET_WRITE ( (LSA_SECRET_SET_VALUE|STANDARD_RIGHTS_READ_ACCESS) )
36#define LSA_SECRET_EXECUTE ( (STANDARD_RIGHTS_READ_ACCESS) )
38#define LSA_TRUSTED_DOMAIN_ALL_ACCESS ( (LSA_TRUSTED_QUERY_DOMAIN_NAME|LSA_TRUSTED_QUERY_CONTROLLERS|LSA_TRUSTED_SET_CONTROLLERS|LSA_TRUSTED_QUERY_POSIX|LSA_TRUSTED_SET_POSIX|LSA_TRUSTED_SET_AUTH|LSA_TRUSTED_QUERY_AUTH|SEC_STD_DELETE|STANDARD_RIGHTS_READ_ACCESS|SEC_STD_WRITE_DAC|SEC_STD_WRITE_OWNER) )
40#define LSA_TRUSTED_DOMAIN_READ ( (LSA_TRUSTED_QUERY_DOMAIN_NAME|STANDARD_RIGHTS_READ_ACCESS) )
42#define LSA_TRUSTED_DOMAIN_WRITE ( (LSA_TRUSTED_SET_CONTROLLERS|LSA_TRUSTED_SET_POSIX|LSA_TRUSTED_SET_AUTH|STANDARD_RIGHTS_READ_ACCESS) )
44#define LSA_TRUSTED_DOMAIN_EXECUTE ( (LSA_TRUSTED_QUERY_DOMAIN_NAME|LSA_TRUSTED_QUERY_POSIX|STANDARD_RIGHTS_READ_ACCESS) )
46#define LSA_ENUM_TRUST_DOMAIN_MULTIPLIER ( 60 )
48#define LSA_REF_DOMAIN_LIST_MULTIPLIER ( 32 )
50#define LSA_ENUM_TRUST_DOMAIN_EX_MULTIPLIER ( 82 )
52#define LSA_TLN_DISABLED_MASK ( (LSA_TLN_DISABLED_NEW|LSA_TLN_DISABLED_ADMIN|LSA_TLN_DISABLED_CONFLICT) )
54#define LSA_SID_DISABLED_MASK ( (LSA_SID_DISABLED_ADMIN|LSA_SID_DISABLED_CONFLICT) )
56#define LSA_NB_DISABLED_MASK ( (LSA_NB_DISABLED_ADMIN|LSA_NB_DISABLED_CONFLICT) )
58#define LSA_FOREST_TRUST_RECORD_TYPE_LAST ( LSA_FOREST_TRUST_BINARY_DATA )
60#define LSA_FOREST_TRUST_RECORD2_TYPE_LAST ( LSA_FOREST_TRUST_SCANNER_INFO )
62#define LSA_CLIENT_REVISION_NO_DNS ( 0x00000001 )
64#define LSA_CLIENT_REVISION_DNS ( 0x00000002 )
66#define LSA_LOOKUP_OPTIONS_NO_ISOLATED ( 0x80000000 )
68int lsarpc_dissect_bitmap_security_secinfo(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
69int lsarpc_dissect_bitmap_kerb_EncTypes(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
70int lsarpc_dissect_struct_lsa_String(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
71int lsarpc_dissect_struct_lsa_StringLarge(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
72int lsarpc_dissect_struct_lsa_Strings(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
73int lsarpc_dissect_struct_lsa_AsciiString(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
74int lsarpc_dissect_struct_lsa_AsciiStringLarge(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
75int lsarpc_dissect_struct_lsa_BinaryString(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
76int lsarpc_dissect_struct_lsa_LUID(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
77int lsarpc_dissect_struct_lsa_PrivEntry(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
78int lsarpc_dissect_struct_lsa_PrivArray(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
79#define LSA_SECURITY_ANONYMOUS (0)
80#define LSA_SECURITY_IDENTIFICATION (1)
81#define LSA_SECURITY_IMPERSONATION (2)
82#define LSA_SECURITY_DELEGATION (3)
83extern const value_string lsarpc_lsa_SecurityImpersonationLevel_vals[];
84int lsarpc_dissect_enum_lsa_SecurityImpersonationLevel(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
85int lsarpc_dissect_struct_lsa_QosInfo(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
86int lsarpc_dissect_struct_lsa_ObjectAttribute(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
87int lsarpc_dissect_bitmap_lsa_PolicyAccessMask(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
88int lsarpc_dissect_bitmap_lsa_AccountAccessMask(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
89int lsarpc_dissect_bitmap_lsa_SecretAccessMask(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
90int lsarpc_dissect_bitmap_lsa_TrustedAccessMask(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
91int lsarpc_dissect_struct_lsa_AuditLogInfo(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
92#define LSA_AUDIT_POLICY_NONE (0)
93#define LSA_AUDIT_POLICY_SUCCESS (1)
94#define LSA_AUDIT_POLICY_FAILURE (2)
95#define LSA_AUDIT_POLICY_ALL ((LSA_AUDIT_POLICY_SUCCESS|LSA_AUDIT_POLICY_FAILURE))
96#define LSA_AUDIT_POLICY_CLEAR (4)
97extern const value_string lsarpc_lsa_PolicyAuditPolicy_vals[];
98int lsarpc_dissect_enum_lsa_PolicyAuditPolicy(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
99#define LSA_AUDIT_CATEGORY_SYSTEM (0)
100#define LSA_AUDIT_CATEGORY_LOGON (1)
101#define LSA_AUDIT_CATEGORY_FILE_AND_OBJECT_ACCESS (2)
102#define LSA_AUDIT_CATEGORY_USE_OF_USER_RIGHTS (3)
103#define LSA_AUDIT_CATEGORY_PROCESS_TRACKING (4)
104#define LSA_AUDIT_CATEGORY_SECURITY_POLICY_CHANGES (5)
105#define LSA_AUDIT_CATEGORY_ACCOUNT_MANAGEMENT (6)
106#define LSA_AUDIT_CATEGORY_DIRECTORY_SERVICE_ACCESS (7)
107#define LSA_AUDIT_CATEGORY_ACCOUNT_LOGON (8)
108extern const value_string lsarpc_lsa_PolicyAuditEventType_vals[];
109int lsarpc_dissect_enum_lsa_PolicyAuditEventType(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
110int lsarpc_dissect_struct_lsa_AuditEventsInfo(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
111int lsarpc_dissect_struct_lsa_DomainInfo(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
112int lsarpc_dissect_struct_lsa_PDAccountInfo(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
113#define LSA_ROLE_BACKUP (2)
114#define LSA_ROLE_PRIMARY (3)
117int lsarpc_dissect_struct_lsa_ServerRole(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
118int lsarpc_dissect_struct_lsa_ReplicaSourceInfo(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
119int lsarpc_dissect_struct_lsa_DefaultQuotaInfo(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
120int lsarpc_dissect_struct_lsa_ModificationInfo(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
121int lsarpc_dissect_struct_lsa_AuditFullSetInfo(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
122int lsarpc_dissect_struct_lsa_AuditFullQueryInfo(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
123int lsarpc_dissect_struct_lsa_DnsDomainInfo(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
124#define LSA_POLICY_INFO_AUDIT_LOG (1)
125#define LSA_POLICY_INFO_AUDIT_EVENTS (2)
126#define LSA_POLICY_INFO_DOMAIN (3)
127#define LSA_POLICY_INFO_PD (4)
128#define LSA_POLICY_INFO_ACCOUNT_DOMAIN (5)
129#define LSA_POLICY_INFO_ROLE (6)
130#define LSA_POLICY_INFO_REPLICA (7)
131#define LSA_POLICY_INFO_QUOTA (8)
132#define LSA_POLICY_INFO_MOD (9)
133#define LSA_POLICY_INFO_AUDIT_FULL_SET (10)
134#define LSA_POLICY_INFO_AUDIT_FULL_QUERY (11)
135#define LSA_POLICY_INFO_DNS (12)
136#define LSA_POLICY_INFO_DNS_INT (13)
137#define LSA_POLICY_INFO_L_ACCOUNT_DOMAIN (14)
139int lsarpc_dissect_enum_lsa_PolicyInfo(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
140int lsarpc_dissect_struct_lsa_SidPtr(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
141int lsarpc_dissect_struct_lsa_SidArray(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
142int lsarpc_dissect_struct_lsa_DomainList(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
143#define SID_NAME_USE_NONE (0)
144#define SID_NAME_USER (1)
145#define SID_NAME_DOM_GRP (2)
146#define SID_NAME_DOMAIN (3)
147#define SID_NAME_ALIAS (4)
148#define SID_NAME_WKN_GRP (5)
149#define SID_NAME_DELETED (6)
150#define SID_NAME_INVALID (7)
151#define SID_NAME_UNKNOWN (8)
152#define SID_NAME_COMPUTER (9)
153#define SID_NAME_LABEL (10)
156int lsarpc_dissect_struct_lsa_TranslatedSid(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
157int lsarpc_dissect_struct_lsa_TransSidArray(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
158int lsarpc_dissect_struct_lsa_RefDomainList(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
159#define LSA_LOOKUP_NAMES_ALL (1)
160#define LSA_LOOKUP_NAMES_DOMAINS_ONLY (2)
161#define LSA_LOOKUP_NAMES_PRIMARY_DOMAIN_ONLY (3)
162#define LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY (4)
163#define LSA_LOOKUP_NAMES_FOREST_TRUSTS_ONLY (5)
164#define LSA_LOOKUP_NAMES_UPLEVEL_TRUSTS_ONLY2 (6)
165#define LSA_LOOKUP_NAMES_RODC_REFERRAL_TO_FULL_DC (7)
166extern const value_string lsarpc_lsa_LookupNamesLevel_vals[];
167int lsarpc_dissect_enum_lsa_LookupNamesLevel(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
168int lsarpc_dissect_struct_lsa_TranslatedName(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
169int lsarpc_dissect_struct_lsa_TransNameArray(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
170int lsarpc_dissect_struct_lsa_LUIDAttribute(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
171int lsarpc_dissect_struct_lsa_PrivilegeSet(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
172int lsarpc_dissect_struct_lsa_DATA_BUF(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
173int lsarpc_dissect_struct_lsa_DATA_BUF2(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
174#define LSA_TRUSTED_DOMAIN_INFO_NAME (1)
175#define LSA_TRUSTED_DOMAIN_INFO_CONTROLLERS (2)
176#define LSA_TRUSTED_DOMAIN_INFO_POSIX_OFFSET (3)
177#define LSA_TRUSTED_DOMAIN_INFO_PASSWORD (4)
178#define LSA_TRUSTED_DOMAIN_INFO_BASIC (5)
179#define LSA_TRUSTED_DOMAIN_INFO_INFO_EX (6)
180#define LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO (7)
181#define LSA_TRUSTED_DOMAIN_INFO_FULL_INFO (8)
182#define LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL (9)
183#define LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL (10)
184#define LSA_TRUSTED_DOMAIN_INFO_INFO_EX2_INTERNAL (11)
185#define LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_2_INTERNAL (12)
186#define LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES (13)
187#define LSA_TRUSTED_DOMAIN_INFO_AUTH_INFO_INTERNAL_AES (14)
188#define LSA_TRUSTED_DOMAIN_INFO_FULL_INFO_INTERNAL_AES (15)
189extern const value_string lsarpc_lsa_TrustDomInfoEnum_vals[];
190int lsarpc_dissect_enum_lsa_TrustDomInfoEnum(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
191int lsarpc_dissect_bitmap_lsa_TrustDirection(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
192#define LSA_TRUST_TYPE_DOWNLEVEL (0x00000001)
193#define LSA_TRUST_TYPE_UPLEVEL (0x00000002)
194#define LSA_TRUST_TYPE_MIT (0x00000003)
195#define LSA_TRUST_TYPE_DCE (0x00000004)
197int lsarpc_dissect_enum_lsa_TrustType(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
198int lsarpc_dissect_bitmap_lsa_TrustAttributes(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
199int lsarpc_dissect_struct_lsa_TrustDomainInfoName(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
200int lsarpc_dissect_struct_lsa_TrustDomainInfoControllers(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
201int lsarpc_dissect_struct_lsa_TrustDomainInfoPosixOffset(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
202int lsarpc_dissect_struct_lsa_TrustDomainInfoPassword(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
203int lsarpc_dissect_struct_lsa_TrustDomainInfoBasic(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
204int lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
205#define TRUST_AUTH_TYPE_NONE (0)
206#define TRUST_AUTH_TYPE_NT4OWF (1)
207#define TRUST_AUTH_TYPE_CLEAR (2)
208#define TRUST_AUTH_TYPE_VERSION (3)
209extern const value_string lsarpc_lsa_TrustAuthType_vals[];
210int lsarpc_dissect_enum_lsa_TrustAuthType(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
211int lsarpc_dissect_struct_lsa_TrustDomainInfoBuffer(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
212int lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfo(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
213int lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfo(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
214int lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternal(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
215int lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfoInternal(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
216int lsarpc_dissect_struct_lsa_TrustDomainInfoAuthInfoInternalAES(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
217int lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfoInternalAES(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
218int lsarpc_dissect_struct_lsa_TrustDomainInfoInfoEx2Internal(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
219int lsarpc_dissect_struct_lsa_TrustDomainInfoFullInfo2Internal(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
220int lsarpc_dissect_struct_lsa_TrustDomainInfoSupportedEncTypes(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
221int lsarpc_dissect_struct_lsa_DATA_BUF_PTR(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
222int lsarpc_dissect_struct_lsa_RightAttribute(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
223int lsarpc_dissect_struct_lsa_RightSet(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
224int lsarpc_dissect_struct_lsa_DomainListEx(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
225int lsarpc_dissect_struct_lsa_DomainInfoQoS(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
226int lsarpc_dissect_bitmap_lsa_krbAuthenticationOptions(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
227int lsarpc_dissect_struct_lsa_DomainInfoKerberos(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
228int lsarpc_dissect_struct_lsa_DomainInfoEfs(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
229#define LSA_DOMAIN_INFO_POLICY_QOS (1)
230#define LSA_DOMAIN_INFO_POLICY_EFS (2)
231#define LSA_DOMAIN_INFO_POLICY_KERBEROS (3)
232extern const value_string lsarpc_lsa_DomainInfoEnum_vals[];
233int lsarpc_dissect_enum_lsa_DomainInfoEnum(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
234int lsarpc_dissect_struct_lsa_TranslatedName2(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
235int lsarpc_dissect_struct_lsa_TransNameArray2(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
236#define LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES (0x00000000)
237#define LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES_LOCAL (0x80000000)
238extern const value_string lsarpc_lsa_LookupOptions_vals[];
239int lsarpc_dissect_enum_lsa_LookupOptions(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
240#define LSA_CLIENT_REVISION_1 (0x00000001)
241#define LSA_CLIENT_REVISION_2 (0x00000002)
242extern const value_string lsarpc_lsa_ClientRevision_vals[];
243int lsarpc_dissect_enum_lsa_ClientRevision(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
244int lsarpc_dissect_struct_lsa_TranslatedSid2(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
245int lsarpc_dissect_struct_lsa_TransSidArray2(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
246int lsarpc_dissect_struct_lsa_TranslatedSid3(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
247int lsarpc_dissect_struct_lsa_TransSidArray3(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
248int lsarpc_dissect_bitmap_lsa_ForestTrustRecordFlags(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
249#define LSA_FOREST_TRUST_TOP_LEVEL_NAME (0)
250#define LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX (1)
251#define LSA_FOREST_TRUST_DOMAIN_INFO (2)
252#define LSA_FOREST_TRUST_BINARY_DATA (3)
253#define LSA_FOREST_TRUST_SCANNER_INFO (4)
254extern const value_string lsarpc_lsa_ForestTrustRecordType_vals[];
255int lsarpc_dissect_enum_lsa_ForestTrustRecordType(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
256int lsarpc_dissect_struct_lsa_ForestTrustBinaryData(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
257int lsarpc_dissect_struct_lsa_ForestTrustDomainInfo(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
258int lsarpc_dissect_struct_lsa_ForestTrustRecord(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
259int lsarpc_dissect_struct_lsa_ForestTrustInformation(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
260#define LSA_FOREST_TRUST_COLLISION_TDO (0)
261#define LSA_FOREST_TRUST_COLLISION_XREF (1)
262#define LSA_FOREST_TRUST_COLLISION_OTHER (2)
263extern const value_string lsarpc_lsa_ForestTrustCollisionRecordType_vals[];
264int lsarpc_dissect_enum_lsa_ForestTrustCollisionRecordType(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t *param _U_);
265int lsarpc_dissect_struct_lsa_ForestTrustCollisionRecord(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
266int lsarpc_dissect_struct_lsa_ForestTrustCollisionInfo(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
267int lsarpc_dissect_bitmap_lsa_RevisionSupportedFeature(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
268int lsarpc_dissect_struct_lsa_revision_info1(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
269int lsarpc_dissect_struct_lsa_ForestTrustRecord2(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
270int lsarpc_dissect_struct_lsa_ForestTrustInformation2(
tvbuff_t *tvb _U_,
int offset _U_,
packet_info *pinfo _U_,
proto_tree *parent_tree _U_,
dcerpc_info* di _U_, uint8_t *drep _U_,
int hf_index _U_, uint32_t param _U_);
Definition packet-dcerpc.h:154
Definition packet_info.h:43
Definition value_string.h:25
Definition tvbuff-int.h:35