print-smb.c (127668) | print-smb.c (146773) |
---|---|
1/* 2 * Copyright (C) Andrew Tridgell 1995-1999 3 * 4 * This software may be distributed either under the terms of the 5 * BSD-style license that accompanies tcpdump or the GNU GPL version 2 6 * or later 7 */ 8 9#ifdef HAVE_CONFIG_H 10#include "config.h" 11#endif 12 13#ifndef lint 14static const char rcsid[] _U_ = | 1/* 2 * Copyright (C) Andrew Tridgell 1995-1999 3 * 4 * This software may be distributed either under the terms of the 5 * BSD-style license that accompanies tcpdump or the GNU GPL version 2 6 * or later 7 */ 8 9#ifdef HAVE_CONFIG_H 10#include "config.h" 11#endif 12 13#ifndef lint 14static const char rcsid[] _U_ = |
15 "@(#) $Header: /tcpdump/master/tcpdump/print-smb.c,v 1.27.2.2 2003/11/16 08:51:45 guy Exp $"; | 15 "@(#) $Header: /tcpdump/master/tcpdump/print-smb.c,v 1.41 2004/12/30 03:36:51 guy Exp $"; |
16#endif 17 18#include <tcpdump-stdinc.h> 19 20#include <stdio.h> 21#include <string.h> 22 23#include "interface.h" 24#include "extract.h" 25#include "smb.h" 26 27static int request = 0; | 16#endif 17 18#include <tcpdump-stdinc.h> 19 20#include <stdio.h> 21#include <string.h> 22 23#include "interface.h" 24#include "extract.h" 25#include "smb.h" 26 27static int request = 0; |
28static int unicodestr = 0; |
|
28 29const u_char *startbuf = NULL; 30 31struct smbdescript { 32 const char *req_f1; 33 const char *req_f2; 34 const char *rep_f1; 35 const char *rep_f2; --- 53 unchanged lines hidden (view full) --- 89} 90 91static void 92trans2_findfirst(const u_char *param, const u_char *data, int pcnt, int dcnt) 93{ 94 const char *fmt; 95 96 if (request) | 29 30const u_char *startbuf = NULL; 31 32struct smbdescript { 33 const char *req_f1; 34 const char *req_f2; 35 const char *rep_f1; 36 const char *rep_f2; --- 53 unchanged lines hidden (view full) --- 90} 91 92static void 93trans2_findfirst(const u_char *param, const u_char *data, int pcnt, int dcnt) 94{ 95 const char *fmt; 96 97 if (request) |
97 fmt = "Attribute=[A]\nSearchCount=[d]\nFlags=[w]\nLevel=[dP5]\nFile=[S]\n"; | 98 fmt = "Attribute=[A]\nSearchCount=[d]\nFlags=[w]\nLevel=[dP4]\nFile=[S]\n"; |
98 else 99 fmt = "Handle=[w]\nCount=[d]\nEOS=[w]\nEoffset=[d]\nLastNameOfs=[w]\n"; 100 | 99 else 100 fmt = "Handle=[w]\nCount=[d]\nEOS=[w]\nEoffset=[d]\nLastNameOfs=[w]\n"; 101 |
101 smb_fdata(param, fmt, param + pcnt); | 102 smb_fdata(param, fmt, param + pcnt, unicodestr); |
102 if (dcnt) { 103 printf("data:\n"); 104 print_data(data, dcnt); 105 } 106} 107 108static void 109trans2_qfsinfo(const u_char *param, const u_char *data, int pcnt, int dcnt) 110{ 111 static int level = 0; 112 const char *fmt=""; 113 114 if (request) { 115 TCHECK2(*param, 2); 116 level = EXTRACT_LE_16BITS(param); 117 fmt = "InfoLevel=[d]\n"; | 103 if (dcnt) { 104 printf("data:\n"); 105 print_data(data, dcnt); 106 } 107} 108 109static void 110trans2_qfsinfo(const u_char *param, const u_char *data, int pcnt, int dcnt) 111{ 112 static int level = 0; 113 const char *fmt=""; 114 115 if (request) { 116 TCHECK2(*param, 2); 117 level = EXTRACT_LE_16BITS(param); 118 fmt = "InfoLevel=[d]\n"; |
118 smb_fdata(param, fmt, param + pcnt); | 119 smb_fdata(param, fmt, param + pcnt, unicodestr); |
119 } else { 120 switch (level) { 121 case 1: 122 fmt = "idFileSystem=[W]\nSectorUnit=[D]\nUnit=[D]\nAvail=[D]\nSectorSize=[d]\n"; 123 break; 124 case 2: | 120 } else { 121 switch (level) { 122 case 1: 123 fmt = "idFileSystem=[W]\nSectorUnit=[D]\nUnit=[D]\nAvail=[D]\nSectorSize=[d]\n"; 124 break; 125 case 2: |
125 fmt = "CreationTime=[T2]VolNameLength=[B]\nVolumeLabel=[s12]\n"; | 126 fmt = "CreationTime=[T2]VolNameLength=[lb]\nVolumeLabel=[c]\n"; |
126 break; 127 case 0x105: | 127 break; 128 case 0x105: |
128 fmt = "Capabilities=[W]\nMaxFileLen=[D]\nVolNameLen=[D]\nVolume=[S]\n"; | 129 fmt = "Capabilities=[W]\nMaxFileLen=[D]\nVolNameLen=[lD]\nVolume=[C]\n"; |
129 break; 130 default: 131 fmt = "UnknownLevel\n"; 132 break; 133 } | 130 break; 131 default: 132 fmt = "UnknownLevel\n"; 133 break; 134 } |
134 smb_fdata(data, fmt, data + dcnt); | 135 smb_fdata(data, fmt, data + dcnt, unicodestr); |
135 } 136 if (dcnt) { 137 printf("data:\n"); 138 print_data(data, dcnt); 139 } 140 return; 141trunc: 142 printf("[|SMB]"); --- 21 unchanged lines hidden (view full) --- 164 { 11, "TRANSACT2_FINDNOTIFYFIRST", 0, DEFDESCRIPT }, 165 { 12, "TRANSACT2_FINDNOTIFYNEXT", 0, DEFDESCRIPT }, 166 { 13, "TRANSACT2_MKDIR", 0, DEFDESCRIPT }, 167 { -1, NULL, 0, DEFDESCRIPT } 168}; 169 170 171static void | 136 } 137 if (dcnt) { 138 printf("data:\n"); 139 print_data(data, dcnt); 140 } 141 return; 142trunc: 143 printf("[|SMB]"); --- 21 unchanged lines hidden (view full) --- 165 { 11, "TRANSACT2_FINDNOTIFYFIRST", 0, DEFDESCRIPT }, 166 { 12, "TRANSACT2_FINDNOTIFYNEXT", 0, DEFDESCRIPT }, 167 { 13, "TRANSACT2_MKDIR", 0, DEFDESCRIPT }, 168 { -1, NULL, 0, DEFDESCRIPT } 169}; 170 171 172static void |
172print_trans2(const u_char *words, const u_char *dat _U_, const u_char *buf, const u_char *maxbuf) | 173print_trans2(const u_char *words, const u_char *dat, const u_char *buf, const u_char *maxbuf) |
173{ | 174{ |
175 u_int bcc; |
|
174 static struct smbfnsint *fn = &trans2_fns[0]; 175 const u_char *data, *param; 176 const u_char *w = words + 1; 177 const char *f1 = NULL, *f2 = NULL; 178 int pcnt, dcnt; 179 180 TCHECK(words[0]); 181 if (request) { --- 17 unchanged lines hidden (view full) --- 199 } 200 201 printf("%s param_length=%d data_length=%d\n", fn->name, pcnt, dcnt); 202 203 if (request) { 204 if (words[0] == 8) { 205 smb_fdata(words + 1, 206 "Trans2Secondary\nTotParam=[d]\nTotData=[d]\nParamCnt=[d]\nParamOff=[d]\nParamDisp=[d]\nDataCnt=[d]\nDataOff=[d]\nDataDisp=[d]\nHandle=[d]\n", | 176 static struct smbfnsint *fn = &trans2_fns[0]; 177 const u_char *data, *param; 178 const u_char *w = words + 1; 179 const char *f1 = NULL, *f2 = NULL; 180 int pcnt, dcnt; 181 182 TCHECK(words[0]); 183 if (request) { --- 17 unchanged lines hidden (view full) --- 201 } 202 203 printf("%s param_length=%d data_length=%d\n", fn->name, pcnt, dcnt); 204 205 if (request) { 206 if (words[0] == 8) { 207 smb_fdata(words + 1, 208 "Trans2Secondary\nTotParam=[d]\nTotData=[d]\nParamCnt=[d]\nParamOff=[d]\nParamDisp=[d]\nDataCnt=[d]\nDataOff=[d]\nDataDisp=[d]\nHandle=[d]\n", |
207 maxbuf); | 209 maxbuf, unicodestr); |
208 return; 209 } else { 210 smb_fdata(words + 1, | 210 return; 211 } else { 212 smb_fdata(words + 1, |
211 "TotParam=[d]\nTotData=[d]\nMaxParam=[d]\nMaxData=[d]\nMaxSetup=[d]\nFlags=[w]\nTimeOut=[D]\nRes1=[w]\nParamCnt=[d]\nParamOff=[d]\nDataCnt=[d]\nDataOff=[d]\nSetupCnt=[d]\n", 212 words + 1 + 14 * 2); 213 smb_fdata(data + 1, "TransactionName=[S]\n%", maxbuf); | 213 "TotParam=[d]\nTotData=[d]\nMaxParam=[d]\nMaxData=[d]\nMaxSetup=[b][P1]\nFlags=[w]\nTimeOut=[D]\nRes1=[w]\nParamCnt=[d]\nParamOff=[d]\nDataCnt=[d]\nDataOff=[d]\nSetupCnt=[b][P1]\n", 214 words + 1 + 14 * 2, unicodestr); |
214 } 215 f1 = fn->descript.req_f1; 216 f2 = fn->descript.req_f2; 217 } else { 218 smb_fdata(words + 1, | 215 } 216 f1 = fn->descript.req_f1; 217 f2 = fn->descript.req_f2; 218 } else { 219 smb_fdata(words + 1, |
219 "TotParam=[d]\nTotData=[d]\nRes1=[w]\nParamCnt=[d]\nParamOff=[d]\nParamDisp[d]\nDataCnt=[d]\nDataOff=[d]\nDataDisp=[d]\nSetupCnt=[d]\n", 220 words + 1 + 10 * 2); | 220 "TotParam=[d]\nTotData=[d]\nRes1=[w]\nParamCnt=[d]\nParamOff=[d]\nParamDisp[d]\nDataCnt=[d]\nDataOff=[d]\nDataDisp=[d]\nSetupCnt=[b][P1]\n", 221 words + 1 + 10 * 2, unicodestr); |
221 f1 = fn->descript.rep_f1; 222 f2 = fn->descript.rep_f2; 223 } 224 | 222 f1 = fn->descript.rep_f1; 223 f2 = fn->descript.rep_f2; 224 } 225 |
226 TCHECK2(*dat, 2); 227 bcc = EXTRACT_LE_16BITS(dat); 228 printf("smb_bcc=%u\n", bcc); |
|
225 if (fn->descript.fn) 226 (*fn->descript.fn)(param, data, pcnt, dcnt); 227 else { | 229 if (fn->descript.fn) 230 (*fn->descript.fn)(param, data, pcnt, dcnt); 231 else { |
228 smb_fdata(param, f1 ? f1 : "Parameters=\n", param + pcnt); 229 smb_fdata(data, f2 ? f2 : "Data=\n", data + dcnt); | 232 smb_fdata(param, f1 ? f1 : "Parameters=\n", param + pcnt, unicodestr); 233 smb_fdata(data, f2 ? f2 : "Data=\n", data + dcnt, unicodestr); |
230 } 231 return; 232trunc: 233 printf("[|SMB]"); 234 return; 235} 236 237 238static void 239print_browse(const u_char *param, int paramlen, const u_char *data, int datalen) 240{ 241 const u_char *maxbuf = data + datalen; 242 int command; 243 244 TCHECK(data[0]); 245 command = data[0]; 246 | 234 } 235 return; 236trunc: 237 printf("[|SMB]"); 238 return; 239} 240 241 242static void 243print_browse(const u_char *param, int paramlen, const u_char *data, int datalen) 244{ 245 const u_char *maxbuf = data + datalen; 246 int command; 247 248 TCHECK(data[0]); 249 command = data[0]; 250 |
247 smb_fdata(param, "BROWSE PACKET\n|Param ", param+paramlen); | 251 smb_fdata(param, "BROWSE PACKET\n|Param ", param+paramlen, unicodestr); |
248 249 switch (command) { 250 case 0xF: 251 data = smb_fdata(data, 252 "BROWSE PACKET:\nType=[B] (LocalMasterAnnouncement)\nUpdateCount=[w]\nRes1=[B]\nAnnounceInterval=[d]\nName=[n2]\nMajorVersion=[B]\nMinorVersion=[B]\nServerType=[W]\nElectionVersion=[w]\nBrowserConstant=[w]\n", | 252 253 switch (command) { 254 case 0xF: 255 data = smb_fdata(data, 256 "BROWSE PACKET:\nType=[B] (LocalMasterAnnouncement)\nUpdateCount=[w]\nRes1=[B]\nAnnounceInterval=[d]\nName=[n2]\nMajorVersion=[B]\nMinorVersion=[B]\nServerType=[W]\nElectionVersion=[w]\nBrowserConstant=[w]\n", |
253 maxbuf); | 257 maxbuf, unicodestr); |
254 break; 255 256 case 0x1: 257 data = smb_fdata(data, 258 "BROWSE PACKET:\nType=[B] (HostAnnouncement)\nUpdateCount=[w]\nRes1=[B]\nAnnounceInterval=[d]\nName=[n2]\nMajorVersion=[B]\nMinorVersion=[B]\nServerType=[W]\nElectionVersion=[w]\nBrowserConstant=[w]\n", | 258 break; 259 260 case 0x1: 261 data = smb_fdata(data, 262 "BROWSE PACKET:\nType=[B] (HostAnnouncement)\nUpdateCount=[w]\nRes1=[B]\nAnnounceInterval=[d]\nName=[n2]\nMajorVersion=[B]\nMinorVersion=[B]\nServerType=[W]\nElectionVersion=[w]\nBrowserConstant=[w]\n", |
259 maxbuf); | 263 maxbuf, unicodestr); |
260 break; 261 262 case 0x2: 263 data = smb_fdata(data, 264 "BROWSE PACKET:\nType=[B] (AnnouncementRequest)\nFlags=[B]\nReplySystemName=[S]\n", | 264 break; 265 266 case 0x2: 267 data = smb_fdata(data, 268 "BROWSE PACKET:\nType=[B] (AnnouncementRequest)\nFlags=[B]\nReplySystemName=[S]\n", |
265 maxbuf); | 269 maxbuf, unicodestr); |
266 break; 267 268 case 0xc: 269 data = smb_fdata(data, 270 "BROWSE PACKET:\nType=[B] (WorkgroupAnnouncement)\nUpdateCount=[w]\nRes1=[B]\nAnnounceInterval=[d]\nName=[n2]\nMajorVersion=[B]\nMinorVersion=[B]\nServerType=[W]\nCommentPointer=[W]\nServerName=[S]\n", | 270 break; 271 272 case 0xc: 273 data = smb_fdata(data, 274 "BROWSE PACKET:\nType=[B] (WorkgroupAnnouncement)\nUpdateCount=[w]\nRes1=[B]\nAnnounceInterval=[d]\nName=[n2]\nMajorVersion=[B]\nMinorVersion=[B]\nServerType=[W]\nCommentPointer=[W]\nServerName=[S]\n", |
271 maxbuf); | 275 maxbuf, unicodestr); |
272 break; 273 274 case 0x8: 275 data = smb_fdata(data, 276 "BROWSE PACKET:\nType=[B] (ElectionFrame)\nElectionVersion=[B]\nOSSummary=[W]\nUptime=[(W, W)]\nServerName=[S]\n", | 276 break; 277 278 case 0x8: 279 data = smb_fdata(data, 280 "BROWSE PACKET:\nType=[B] (ElectionFrame)\nElectionVersion=[B]\nOSSummary=[W]\nUptime=[(W, W)]\nServerName=[S]\n", |
277 maxbuf); | 281 maxbuf, unicodestr); |
278 break; 279 280 case 0xb: 281 data = smb_fdata(data, 282 "BROWSE PACKET:\nType=[B] (BecomeBackupBrowser)\nName=[S]\n", | 282 break; 283 284 case 0xb: 285 data = smb_fdata(data, 286 "BROWSE PACKET:\nType=[B] (BecomeBackupBrowser)\nName=[S]\n", |
283 maxbuf); | 287 maxbuf, unicodestr); |
284 break; 285 286 case 0x9: 287 data = smb_fdata(data, | 288 break; 289 290 case 0x9: 291 data = smb_fdata(data, |
288 "BROWSE PACKET:\nType=[B] (GetBackupList)\nListCount?=[B]\nToken?=[B]\n", 289 maxbuf); | 292 "BROWSE PACKET:\nType=[B] (GetBackupList)\nListCount?=[B]\nToken=[W]\n", 293 maxbuf, unicodestr); |
290 break; 291 292 case 0xa: 293 data = smb_fdata(data, | 294 break; 295 296 case 0xa: 297 data = smb_fdata(data, |
294 "BROWSE PACKET:\nType=[B] (BackupListResponse)\nServerCount?=[B]\nToken?=[B]*Name=[S]\n", 295 maxbuf); | 298 "BROWSE PACKET:\nType=[B] (BackupListResponse)\nServerCount?=[B]\nToken=[W]\n*Name=[S]\n", 299 maxbuf, unicodestr); |
296 break; 297 298 case 0xd: 299 data = smb_fdata(data, 300 "BROWSE PACKET:\nType=[B] (MasterAnnouncement)\nMasterName=[S]\n", | 300 break; 301 302 case 0xd: 303 data = smb_fdata(data, 304 "BROWSE PACKET:\nType=[B] (MasterAnnouncement)\nMasterName=[S]\n", |
301 maxbuf); | 305 maxbuf, unicodestr); |
302 break; 303 304 case 0xe: 305 data = smb_fdata(data, | 306 break; 307 308 case 0xe: 309 data = smb_fdata(data, |
306 "BROWSE PACKET:\nType=[B] (ResetBrowser)\nOptions=[B]\n", maxbuf); | 310 "BROWSE PACKET:\nType=[B] (ResetBrowser)\nOptions=[B]\n", maxbuf, unicodestr); |
307 break; 308 309 default: | 311 break; 312 313 default: |
310 data = smb_fdata(data, "Unknown Browser Frame ", maxbuf); | 314 data = smb_fdata(data, "Unknown Browser Frame ", maxbuf, unicodestr); |
311 break; 312 } 313 return; 314trunc: 315 printf("[|SMB]"); 316 return; 317} 318 319 320static void 321print_ipc(const u_char *param, int paramlen, const u_char *data, int datalen) 322{ 323 if (paramlen) | 315 break; 316 } 317 return; 318trunc: 319 printf("[|SMB]"); 320 return; 321} 322 323 324static void 325print_ipc(const u_char *param, int paramlen, const u_char *data, int datalen) 326{ 327 if (paramlen) |
324 smb_fdata(param, "Command=[w]\nStr1=[S]\nStr2=[S]\n", param + paramlen); | 328 smb_fdata(param, "Command=[w]\nStr1=[S]\nStr2=[S]\n", param + paramlen, 329 unicodestr); |
325 if (datalen) | 330 if (datalen) |
326 smb_fdata(data, "IPC ", data + datalen); | 331 smb_fdata(data, "IPC ", data + datalen, unicodestr); |
327} 328 329 330static void 331print_trans(const u_char *words, const u_char *data1, const u_char *buf, const u_char *maxbuf) 332{ | 332} 333 334 335static void 336print_trans(const u_char *words, const u_char *data1, const u_char *buf, const u_char *maxbuf) 337{ |
338 u_int bcc; |
|
333 const char *f1, *f2, *f3, *f4; 334 const u_char *data, *param; 335 const u_char *w = words + 1; 336 int datalen, paramlen; 337 338 if (request) { 339 TCHECK2(w[12 * 2], 2); 340 paramlen = EXTRACT_LE_16BITS(w + 9 * 2); --- 11 unchanged lines hidden (view full) --- 352 datalen = EXTRACT_LE_16BITS(w + 6 * 2); 353 data = buf + EXTRACT_LE_16BITS(w + 7 * 2); 354 f1 = "TotParamCnt=[d] \nTotDataCnt=[d] \nRes1=[d]\nParamCnt=[d] \nParamOff=[d] \nRes2=[d] \nDataCnt=[d] \nDataOff=[d] \nRes3=[d]\nLsetup=[d]\n"; 355 f2 = "|Unknown "; 356 f3 = "|Param "; 357 f4 = "|Data "; 358 } 359 | 339 const char *f1, *f2, *f3, *f4; 340 const u_char *data, *param; 341 const u_char *w = words + 1; 342 int datalen, paramlen; 343 344 if (request) { 345 TCHECK2(w[12 * 2], 2); 346 paramlen = EXTRACT_LE_16BITS(w + 9 * 2); --- 11 unchanged lines hidden (view full) --- 358 datalen = EXTRACT_LE_16BITS(w + 6 * 2); 359 data = buf + EXTRACT_LE_16BITS(w + 7 * 2); 360 f1 = "TotParamCnt=[d] \nTotDataCnt=[d] \nRes1=[d]\nParamCnt=[d] \nParamOff=[d] \nRes2=[d] \nDataCnt=[d] \nDataOff=[d] \nRes3=[d]\nLsetup=[d]\n"; 361 f2 = "|Unknown "; 362 f3 = "|Param "; 363 f4 = "|Data "; 364 } 365 |
360 smb_fdata(words + 1, f1, SMBMIN(words + 1 + 2 * words[0], maxbuf)); 361 smb_fdata(data1 + 2, f2, maxbuf - (paramlen + datalen)); | 366 smb_fdata(words + 1, f1, SMBMIN(words + 1 + 2 * words[0], maxbuf), 367 unicodestr); |
362 | 368 |
363 if (strcmp((const char *)(data1 + 2), "\\MAILSLOT\\BROWSE") == 0) { 364 print_browse(param, paramlen, data, datalen); 365 return; 366 } | 369 TCHECK2(*data1, 2); 370 bcc = EXTRACT_LE_16BITS(data1); 371 printf("smb_bcc=%u\n", bcc); 372 if (bcc > 0) { 373 smb_fdata(data1 + 2, f2, maxbuf - (paramlen + datalen), unicodestr); |
367 | 374 |
368 if (strcmp((const char *)(data1 + 2), "\\PIPE\\LANMAN") == 0) { 369 print_ipc(param, paramlen, data, datalen); 370 return; 371 } | 375 if (strcmp((const char *)(data1 + 2), "\\MAILSLOT\\BROWSE") == 0) { 376 print_browse(param, paramlen, data, datalen); 377 return; 378 } |
372 | 379 |
373 if (paramlen) 374 smb_fdata(param, f3, SMBMIN(param + paramlen, maxbuf)); 375 if (datalen) 376 smb_fdata(data, f4, SMBMIN(data + datalen, maxbuf)); | 380 if (strcmp((const char *)(data1 + 2), "\\PIPE\\LANMAN") == 0) { 381 print_ipc(param, paramlen, data, datalen); 382 return; 383 } 384 385 if (paramlen) 386 smb_fdata(param, f3, SMBMIN(param + paramlen, maxbuf), unicodestr); 387 if (datalen) 388 smb_fdata(data, f4, SMBMIN(data + datalen, maxbuf), unicodestr); 389 } |
377 return; 378trunc: 379 printf("[|SMB]"); 380 return; 381} 382 383 384static void 385print_negprot(const u_char *words, const u_char *data, const u_char *buf _U_, const u_char *maxbuf) 386{ | 390 return; 391trunc: 392 printf("[|SMB]"); 393 return; 394} 395 396 397static void 398print_negprot(const u_char *words, const u_char *data, const u_char *buf _U_, const u_char *maxbuf) 399{ |
387 u_int wcnt; | 400 u_int wct, bcc; |
388 const char *f1 = NULL, *f2 = NULL; 389 390 TCHECK(words[0]); | 401 const char *f1 = NULL, *f2 = NULL; 402 403 TCHECK(words[0]); |
391 wcnt = words[0]; | 404 wct = words[0]; |
392 if (request) | 405 if (request) |
393 f2 = "*|Dialect=[Z]\n"; | 406 f2 = "*|Dialect=[Y]\n"; |
394 else { | 407 else { |
395 if (wcnt == 1) | 408 if (wct == 1) |
396 f1 = "Core Protocol\nDialectIndex=[d]"; | 409 f1 = "Core Protocol\nDialectIndex=[d]"; |
397 else if (wcnt == 17) | 410 else if (wct == 17) |
398 f1 = "NT1 Protocol\nDialectIndex=[d]\nSecMode=[B]\nMaxMux=[d]\nNumVcs=[d]\nMaxBuffer=[D]\nRawSize=[D]\nSessionKey=[W]\nCapabilities=[W]\nServerTime=[T3]TimeZone=[d]\nCryptKey="; | 411 f1 = "NT1 Protocol\nDialectIndex=[d]\nSecMode=[B]\nMaxMux=[d]\nNumVcs=[d]\nMaxBuffer=[D]\nRawSize=[D]\nSessionKey=[W]\nCapabilities=[W]\nServerTime=[T3]TimeZone=[d]\nCryptKey="; |
399 else if (wcnt == 13) | 412 else if (wct == 13) |
400 f1 = "Coreplus/Lanman1/Lanman2 Protocol\nDialectIndex=[d]\nSecMode=[w]\nMaxXMit=[d]\nMaxMux=[d]\nMaxVcs=[d]\nBlkMode=[w]\nSessionKey=[W]\nServerTime=[T1]TimeZone=[d]\nRes=[W]\nCryptKey="; 401 } 402 403 if (f1) | 413 f1 = "Coreplus/Lanman1/Lanman2 Protocol\nDialectIndex=[d]\nSecMode=[w]\nMaxXMit=[d]\nMaxMux=[d]\nMaxVcs=[d]\nBlkMode=[w]\nSessionKey=[W]\nServerTime=[T1]TimeZone=[d]\nRes=[W]\nCryptKey="; 414 } 415 416 if (f1) |
404 smb_fdata(words + 1, f1, SMBMIN(words + 1 + wcnt * 2, maxbuf)); | 417 smb_fdata(words + 1, f1, SMBMIN(words + 1 + wct * 2, maxbuf), 418 unicodestr); |
405 else | 419 else |
406 print_data(words + 1, SMBMIN(wcnt * 2, PTR_DIFF(maxbuf, words + 1))); | 420 print_data(words + 1, SMBMIN(wct * 2, PTR_DIFF(maxbuf, words + 1))); |
407 408 TCHECK2(*data, 2); | 421 422 TCHECK2(*data, 2); |
409 if (f2) 410 smb_fdata(data + 2, f2, SMBMIN(data + 2 + EXTRACT_LE_16BITS(data), maxbuf)); 411 else 412 print_data(data + 2, SMBMIN(EXTRACT_LE_16BITS(data), PTR_DIFF(maxbuf, data + 2))); | 423 bcc = EXTRACT_LE_16BITS(data); 424 printf("smb_bcc=%u\n", bcc); 425 if (bcc > 0) { 426 if (f2) 427 smb_fdata(data + 2, f2, SMBMIN(data + 2 + EXTRACT_LE_16BITS(data), 428 maxbuf), unicodestr); 429 else 430 print_data(data + 2, SMBMIN(EXTRACT_LE_16BITS(data), PTR_DIFF(maxbuf, data + 2))); 431 } |
413 return; 414trunc: 415 printf("[|SMB]"); 416 return; 417} 418 419static void 420print_sesssetup(const u_char *words, const u_char *data, const u_char *buf _U_, const u_char *maxbuf) 421{ | 432 return; 433trunc: 434 printf("[|SMB]"); 435 return; 436} 437 438static void 439print_sesssetup(const u_char *words, const u_char *data, const u_char *buf _U_, const u_char *maxbuf) 440{ |
422 u_int wcnt; | 441 u_int wct, bcc; |
423 const char *f1 = NULL, *f2 = NULL; 424 425 TCHECK(words[0]); | 442 const char *f1 = NULL, *f2 = NULL; 443 444 TCHECK(words[0]); |
426 wcnt = words[0]; | 445 wct = words[0]; |
427 if (request) { | 446 if (request) { |
428 if (wcnt == 10) | 447 if (wct == 10) |
429 f1 = "Com2=[w]\nOff2=[d]\nBufSize=[d]\nMpxMax=[d]\nVcNum=[d]\nSessionKey=[W]\nPassLen=[d]\nCryptLen=[d]\nCryptOff=[d]\nPass&Name=\n"; 430 else 431 f1 = "Com2=[B]\nRes1=[B]\nOff2=[d]\nMaxBuffer=[d]\nMaxMpx=[d]\nVcNumber=[d]\nSessionKey=[W]\nCaseInsensitivePasswordLength=[d]\nCaseSensitivePasswordLength=[d]\nRes=[W]\nCapabilities=[W]\nPass1&Pass2&Account&Domain&OS&LanMan=\n"; 432 } else { | 448 f1 = "Com2=[w]\nOff2=[d]\nBufSize=[d]\nMpxMax=[d]\nVcNum=[d]\nSessionKey=[W]\nPassLen=[d]\nCryptLen=[d]\nCryptOff=[d]\nPass&Name=\n"; 449 else 450 f1 = "Com2=[B]\nRes1=[B]\nOff2=[d]\nMaxBuffer=[d]\nMaxMpx=[d]\nVcNumber=[d]\nSessionKey=[W]\nCaseInsensitivePasswordLength=[d]\nCaseSensitivePasswordLength=[d]\nRes=[W]\nCapabilities=[W]\nPass1&Pass2&Account&Domain&OS&LanMan=\n"; 451 } else { |
433 if (wcnt == 3) { | 452 if (wct == 3) { |
434 f1 = "Com2=[w]\nOff2=[d]\nAction=[w]\n"; | 453 f1 = "Com2=[w]\nOff2=[d]\nAction=[w]\n"; |
435 } else if (wcnt == 13) { | 454 } else if (wct == 13) { |
436 f1 = "Com2=[B]\nRes=[B]\nOff2=[d]\nAction=[w]\n"; 437 f2 = "NativeOS=[S]\nNativeLanMan=[S]\nPrimaryDomain=[S]\n"; 438 } 439 } 440 441 if (f1) | 455 f1 = "Com2=[B]\nRes=[B]\nOff2=[d]\nAction=[w]\n"; 456 f2 = "NativeOS=[S]\nNativeLanMan=[S]\nPrimaryDomain=[S]\n"; 457 } 458 } 459 460 if (f1) |
442 smb_fdata(words + 1, f1, SMBMIN(words + 1 + wcnt * 2, maxbuf)); | 461 smb_fdata(words + 1, f1, SMBMIN(words + 1 + wct * 2, maxbuf), 462 unicodestr); |
443 else | 463 else |
444 print_data(words + 1, SMBMIN(wcnt * 2, PTR_DIFF(maxbuf, words + 1))); | 464 print_data(words + 1, SMBMIN(wct * 2, PTR_DIFF(maxbuf, words + 1))); |
445 446 TCHECK2(*data, 2); | 465 466 TCHECK2(*data, 2); |
447 if (f2) 448 smb_fdata(data + 2, f2, SMBMIN(data + 2 + EXTRACT_LE_16BITS(data), maxbuf)); 449 else 450 print_data(data + 2, SMBMIN(EXTRACT_LE_16BITS(data), PTR_DIFF(maxbuf, data + 2))); | 467 bcc = EXTRACT_LE_16BITS(data); 468 printf("smb_bcc=%u\n", bcc); 469 if (bcc > 0) { 470 if (f2) 471 smb_fdata(data + 2, f2, SMBMIN(data + 2 + EXTRACT_LE_16BITS(data), 472 maxbuf), unicodestr); 473 else 474 print_data(data + 2, SMBMIN(EXTRACT_LE_16BITS(data), PTR_DIFF(maxbuf, data + 2))); 475 } |
451 return; 452trunc: 453 printf("[|SMB]"); 454 return; 455} 456 | 476 return; 477trunc: 478 printf("[|SMB]"); 479 return; 480} 481 |
482static void 483print_lockingandx(const u_char *words, const u_char *data, const u_char *buf _U_, const u_char *maxbuf) 484{ 485 u_int wct, bcc; 486 const u_char *maxwords; 487 const char *f1 = NULL, *f2 = NULL; |
|
457 | 488 |
489 TCHECK(words[0]); 490 wct = words[0]; 491 if (request) { 492 f1 = "Com2=[w]\nOff2=[d]\nHandle=[d]\nLockType=[w]\nTimeOut=[D]\nUnlockCount=[d]\nLockCount=[d]\n"; 493 TCHECK(words[7]); 494 if (words[7] & 0x10) 495 f2 = "*Process=[d]\n[P2]Offset=[M]\nLength=[M]\n"; 496 else 497 f2 = "*Process=[d]\nOffset=[D]\nLength=[D]\n"; 498 } else { 499 f1 = "Com2=[w]\nOff2=[d]\n"; 500 } 501 502 maxwords = SMBMIN(words + 1 + wct * 2, maxbuf); 503 if (wct) 504 smb_fdata(words + 1, f1, maxwords, unicodestr); 505 506 TCHECK2(*data, 2); 507 bcc = EXTRACT_LE_16BITS(data); 508 printf("smb_bcc=%u\n", bcc); 509 if (bcc > 0) { 510 if (f2) 511 smb_fdata(data + 2, f2, SMBMIN(data + 2 + EXTRACT_LE_16BITS(data), 512 maxbuf), unicodestr); 513 else 514 print_data(data + 2, SMBMIN(EXTRACT_LE_16BITS(data), PTR_DIFF(maxbuf, data + 2))); 515 } 516 return; 517trunc: 518 printf("[|SMB]"); 519 return; 520} 521 522 |
|
458static struct smbfns smb_fns[] = { 459 { -1, "SMBunknown", 0, DEFDESCRIPT }, 460 461 { SMBtcon, "SMBtcon", 0, 462 { NULL, "Path=[Z]\nPassword=[Z]\nDevice=[Z]\n", 463 "MaxXmit=[d]\nTreeId=[d]\n", NULL, 464 NULL } }, 465 --- 171 unchanged lines hidden (view full) --- 637 NULL, NULL } }, 638 639 { SMBwriteX, "SMBwriteX", FLG_CHAIN, 640 { "Com2=[w]\nOff2=[d]\nHandle=[d]\nOffset=[D]\nTimeOut=[D]\nWMode=[w]\nCountLeft=[d]\nRes=[w]\nDataSize=[d]\nDataOff=[d]\n", 641 NULL, 642 "Com2=[w]\nOff2=[d]\nCount=[d]\nRemaining=[d]\nRes=[W]\n", 643 NULL, NULL } }, 644 | 523static struct smbfns smb_fns[] = { 524 { -1, "SMBunknown", 0, DEFDESCRIPT }, 525 526 { SMBtcon, "SMBtcon", 0, 527 { NULL, "Path=[Z]\nPassword=[Z]\nDevice=[Z]\n", 528 "MaxXmit=[d]\nTreeId=[d]\n", NULL, 529 NULL } }, 530 --- 171 unchanged lines hidden (view full) --- 702 NULL, NULL } }, 703 704 { SMBwriteX, "SMBwriteX", FLG_CHAIN, 705 { "Com2=[w]\nOff2=[d]\nHandle=[d]\nOffset=[D]\nTimeOut=[D]\nWMode=[w]\nCountLeft=[d]\nRes=[w]\nDataSize=[d]\nDataOff=[d]\n", 706 NULL, 707 "Com2=[w]\nOff2=[d]\nCount=[d]\nRemaining=[d]\nRes=[W]\n", 708 NULL, NULL } }, 709 |
645 { SMBlockingX, "SMBlockingX", FLG_CHAIN, 646 { "Com2=[w]\nOff2=[d]\nHandle=[d]\nLockType=[w]\nTimeOut=[D]\nUnlockCount=[d]\nLockCount=[d]\n", 647 "*Process=[d]\nOffset=[D]\nLength=[D]\n", 648 "Com2=[w]\nOff2=[d]\n", NULL, NULL } }, 649 | |
650 { SMBffirst, "SMBffirst", 0, 651 { "Count=[d]\nAttrib=[A]\n", 652 "Path=[Z]\nBlkType=[B]\nBlkLen=[d]\n|Res1=[B]\nMask=[s11]\nSrv1=[B]\nDirIndex=[d]\nSrv2=[w]\n", 653 "Count=[d]\n", 654 "BlkType=[B]\nBlkLen=[d]\n*\nRes1=[B]\nMask=[s11]\nSrv1=[B]\nDirIndex=[d]\nSrv2=[w]\nRes2=[W]\nAttrib=[a]\nTime=[T1]Size=[D]\nName=[s13]\n", 655 NULL } }, 656 657 { SMBfunique, "SMBfunique", 0, --- 38 unchanged lines hidden (view full) --- 696 { SMBnegprot, "SMBnegprot", 0, 697 { NULL, NULL, NULL, NULL, print_negprot } }, 698 699 { SMBsesssetupX, "SMBsesssetupX", FLG_CHAIN, 700 { NULL, NULL, NULL, NULL, print_sesssetup } }, 701 702 { SMBtconX, "SMBtconX", FLG_CHAIN, 703 { "Com2=[w]\nOff2=[d]\nFlags=[w]\nPassLen=[d]\nPasswd&Path&Device=\n", | 710 { SMBffirst, "SMBffirst", 0, 711 { "Count=[d]\nAttrib=[A]\n", 712 "Path=[Z]\nBlkType=[B]\nBlkLen=[d]\n|Res1=[B]\nMask=[s11]\nSrv1=[B]\nDirIndex=[d]\nSrv2=[w]\n", 713 "Count=[d]\n", 714 "BlkType=[B]\nBlkLen=[d]\n*\nRes1=[B]\nMask=[s11]\nSrv1=[B]\nDirIndex=[d]\nSrv2=[w]\nRes2=[W]\nAttrib=[a]\nTime=[T1]Size=[D]\nName=[s13]\n", 715 NULL } }, 716 717 { SMBfunique, "SMBfunique", 0, --- 38 unchanged lines hidden (view full) --- 756 { SMBnegprot, "SMBnegprot", 0, 757 { NULL, NULL, NULL, NULL, print_negprot } }, 758 759 { SMBsesssetupX, "SMBsesssetupX", FLG_CHAIN, 760 { NULL, NULL, NULL, NULL, print_sesssetup } }, 761 762 { SMBtconX, "SMBtconX", FLG_CHAIN, 763 { "Com2=[w]\nOff2=[d]\nFlags=[w]\nPassLen=[d]\nPasswd&Path&Device=\n", |
704 NULL, "Com2=[w]\nOff2=[d]\n", "ServiceType=[S]\n", NULL } }, | 764 NULL, "Com2=[w]\nOff2=[d]\n", "ServiceType=[R]\n", NULL } }, |
705 | 765 |
766 { SMBlockingX, "SMBlockingX", FLG_CHAIN, 767 { NULL, NULL, NULL, NULL, print_lockingandx } }, 768 |
|
706 { SMBtrans2, "SMBtrans2", 0, { NULL, NULL, NULL, NULL, print_trans2 } }, 707 708 { SMBtranss2, "SMBtranss2", 0, DEFDESCRIPT }, 709 { SMBctemp, "SMBctemp", 0, DEFDESCRIPT }, 710 { SMBreadBs, "SMBreadBs", 0, DEFDESCRIPT }, 711 { SMBtrans, "SMBtrans", 0, { NULL, NULL, NULL, NULL, print_trans } }, 712 713 { SMBnttrans, "SMBnttrans", 0, DEFDESCRIPT }, 714 { SMBnttranss, "SMBnttranss", 0, DEFDESCRIPT }, 715 716 { SMBntcreateX, "SMBntcreateX", FLG_CHAIN, | 769 { SMBtrans2, "SMBtrans2", 0, { NULL, NULL, NULL, NULL, print_trans2 } }, 770 771 { SMBtranss2, "SMBtranss2", 0, DEFDESCRIPT }, 772 { SMBctemp, "SMBctemp", 0, DEFDESCRIPT }, 773 { SMBreadBs, "SMBreadBs", 0, DEFDESCRIPT }, 774 { SMBtrans, "SMBtrans", 0, { NULL, NULL, NULL, NULL, print_trans } }, 775 776 { SMBnttrans, "SMBnttrans", 0, DEFDESCRIPT }, 777 { SMBnttranss, "SMBnttranss", 0, DEFDESCRIPT }, 778 779 { SMBntcreateX, "SMBntcreateX", FLG_CHAIN, |
717 { "Com2=[w]\nOff2=[d]\nRes=[b]\nNameLen=[d]\nFlags=[W]\nRootDirectoryFid=[D]\nAccessMask=[W]\nAllocationSize=[L]\nExtFileAttributes=[W]\nShareAccess=[W]\nCreateDisposition=[W]\nCreateOptions=[W]\nImpersonationLevel=[W]\nSecurityFlags=[b]\n", 718 "Path=[S]\n", | 780 { "Com2=[w]\nOff2=[d]\nRes=[b]\nNameLen=[ld]\nFlags=[W]\nRootDirectoryFid=[D]\nAccessMask=[W]\nAllocationSize=[L]\nExtFileAttributes=[W]\nShareAccess=[W]\nCreateDisposition=[W]\nCreateOptions=[W]\nImpersonationLevel=[W]\nSecurityFlags=[b]\n", 781 "Path=[C]\n", |
719 "Com2=[w]\nOff2=[d]\nOplockLevel=[b]\nFid=[d]\nCreateAction=[W]\nCreateTime=[T3]LastAccessTime=[T3]LastWriteTime=[T3]ChangeTime=[T3]ExtFileAttributes=[W]\nAllocationSize=[L]\nEndOfFile=[L]\nFileType=[w]\nDeviceState=[w]\nDirectory=[b]\n", 720 NULL, NULL } }, 721 722 { SMBntcancel, "SMBntcancel", 0, DEFDESCRIPT }, 723 724 { -1, NULL, 0, DEFDESCRIPT } 725}; 726 727 728/* 729 * print a SMB message 730 */ 731static void 732print_smb(const u_char *buf, const u_char *maxbuf) 733{ | 782 "Com2=[w]\nOff2=[d]\nOplockLevel=[b]\nFid=[d]\nCreateAction=[W]\nCreateTime=[T3]LastAccessTime=[T3]LastWriteTime=[T3]ChangeTime=[T3]ExtFileAttributes=[W]\nAllocationSize=[L]\nEndOfFile=[L]\nFileType=[w]\nDeviceState=[w]\nDirectory=[b]\n", 783 NULL, NULL } }, 784 785 { SMBntcancel, "SMBntcancel", 0, DEFDESCRIPT }, 786 787 { -1, NULL, 0, DEFDESCRIPT } 788}; 789 790 791/* 792 * print a SMB message 793 */ 794static void 795print_smb(const u_char *buf, const u_char *maxbuf) 796{ |
797 u_int16_t flags2; 798 int nterrcodes; |
|
734 int command; | 799 int command; |
735 const u_char *words, *data; | 800 u_int32_t nterror; 801 const u_char *words, *maxwords, *data; |
736 struct smbfns *fn; 737 const char *fmt_smbheader = 738 "[P4]SMB Command = [B]\nError class = [BP1]\nError code = [d]\nFlags1 = [B]\nFlags2 = [B][P13]\nTree ID = [d]\nProc ID = [d]\nUID = [d]\nMID = [d]\nWord Count = [b]\n"; | 802 struct smbfns *fn; 803 const char *fmt_smbheader = 804 "[P4]SMB Command = [B]\nError class = [BP1]\nError code = [d]\nFlags1 = [B]\nFlags2 = [B][P13]\nTree ID = [d]\nProc ID = [d]\nUID = [d]\nMID = [d]\nWord Count = [b]\n"; |
805 int smboffset; |
|
739 | 806 |
740 | |
741 TCHECK(buf[9]); 742 request = (buf[9] & 0x80) ? 0 : 1; | 807 TCHECK(buf[9]); 808 request = (buf[9] & 0x80) ? 0 : 1; |
809 flags2 = EXTRACT_LE_16BITS(&buf[10]); 810 unicodestr = flags2 & 0x8000; 811 nterrcodes = flags2 & 0x4000; 812 startbuf = buf; |
|
743 744 command = buf[4]; 745 746 fn = smbfind(command, smb_fns); 747 748 if (vflag > 1) 749 printf("\n"); 750 751 printf("SMB PACKET: %s (%s)\n", fn->name, request ? "REQUEST" : "REPLY"); 752 753 if (vflag < 2) 754 return; 755 756 /* print out the header */ | 813 814 command = buf[4]; 815 816 fn = smbfind(command, smb_fns); 817 818 if (vflag > 1) 819 printf("\n"); 820 821 printf("SMB PACKET: %s (%s)\n", fn->name, request ? "REQUEST" : "REPLY"); 822 823 if (vflag < 2) 824 return; 825 826 /* print out the header */ |
757 smb_fdata(buf, fmt_smbheader, buf + 33); | 827 smb_fdata(buf, fmt_smbheader, buf + 33, unicodestr); |
758 | 828 |
759 if (buf[5]) 760 printf("SMBError = %s\n", smb_errstr(buf[5], EXTRACT_LE_16BITS(&buf[7]))); | 829 if (nterrcodes) { 830 nterror = EXTRACT_LE_32BITS(&buf[5]); 831 if (nterror) 832 printf("NTError = %s\n", nt_errstr(nterror)); 833 } else { 834 if (buf[5]) 835 printf("SMBError = %s\n", smb_errstr(buf[5], EXTRACT_LE_16BITS(&buf[7]))); 836 } |
761 | 837 |
762 words = buf + 32; 763 TCHECK(words[0]); | 838 smboffset = 32; |
764 765 for (;;) { 766 const char *f1, *f2; 767 int wct; 768 u_int bcc; | 839 840 for (;;) { 841 const char *f1, *f2; 842 int wct; 843 u_int bcc; |
844 int newsmboffset; |
|
769 | 845 |
846 words = buf + smboffset; |
|
770 TCHECK(words[0]); 771 wct = words[0]; 772 data = words + 1 + wct * 2; | 847 TCHECK(words[0]); 848 wct = words[0]; 849 data = words + 1 + wct * 2; |
850 maxwords = SMBMIN(data, maxbuf); |
|
773 774 if (request) { 775 f1 = fn->descript.req_f1; 776 f2 = fn->descript.req_f2; 777 } else { 778 f1 = fn->descript.rep_f1; 779 f2 = fn->descript.rep_f2; 780 } 781 782 if (fn->descript.fn) 783 (*fn->descript.fn)(words, data, buf, maxbuf); 784 else { 785 if (wct) { | 851 852 if (request) { 853 f1 = fn->descript.req_f1; 854 f2 = fn->descript.req_f2; 855 } else { 856 f1 = fn->descript.rep_f1; 857 f2 = fn->descript.rep_f2; 858 } 859 860 if (fn->descript.fn) 861 (*fn->descript.fn)(words, data, buf, maxbuf); 862 else { 863 if (wct) { |
786 printf("smbvwv[]=\n"); | |
787 if (f1) | 864 if (f1) |
788 smb_fdata(words + 1, f1, words + 1 + wct * 2); | 865 smb_fdata(words + 1, f1, words + 1 + wct * 2, unicodestr); |
789 else { 790 int i; 791 int v; 792 | 866 else { 867 int i; 868 int v; 869 |
793 for (i = 0; i < wct; i++) { | 870 for (i = 0; &words[1 + 2 * i] < maxwords; i++) { |
794 TCHECK2(words[1 + 2 * i], 2); 795 v = EXTRACT_LE_16BITS(words + 1 + 2 * i); 796 printf("smb_vwv[%d]=%d (0x%X)\n", i, v, v); 797 } 798 } 799 } 800 801 TCHECK2(*data, 2); 802 bcc = EXTRACT_LE_16BITS(data); | 871 TCHECK2(words[1 + 2 * i], 2); 872 v = EXTRACT_LE_16BITS(words + 1 + 2 * i); 873 printf("smb_vwv[%d]=%d (0x%X)\n", i, v, v); 874 } 875 } 876 } 877 878 TCHECK2(*data, 2); 879 bcc = EXTRACT_LE_16BITS(data); |
880 printf("smb_bcc=%u\n", bcc); |
|
803 if (f2) { | 881 if (f2) { |
804 if (bcc > 0) { 805 printf("smbbuf[]=\n"); 806 smb_fdata(data + 2, f2, data + 2 + bcc); 807 } | 882 if (bcc > 0) 883 smb_fdata(data + 2, f2, data + 2 + bcc, unicodestr); |
808 } else { | 884 } else { |
809 printf("smb_bcc=%u\n", bcc); | |
810 if (bcc > 0) { 811 printf("smb_buf[]=\n"); 812 print_data(data + 2, SMBMIN(bcc, PTR_DIFF(maxbuf, data + 2))); 813 } 814 } 815 } 816 817 if ((fn->flags & FLG_CHAIN) == 0) 818 break; 819 if (wct == 0) 820 break; 821 TCHECK(words[1]); | 885 if (bcc > 0) { 886 printf("smb_buf[]=\n"); 887 print_data(data + 2, SMBMIN(bcc, PTR_DIFF(maxbuf, data + 2))); 888 } 889 } 890 } 891 892 if ((fn->flags & FLG_CHAIN) == 0) 893 break; 894 if (wct == 0) 895 break; 896 TCHECK(words[1]); |
822 command = EXTRACT_LE_16BITS(words + 1); | 897 command = words[1]; |
823 if (command == 0xFF) 824 break; 825 TCHECK2(words[3], 2); | 898 if (command == 0xFF) 899 break; 900 TCHECK2(words[3], 2); |
826 words = buf + EXTRACT_LE_16BITS(words + 3); | 901 newsmboffset = EXTRACT_LE_16BITS(words + 3); |
827 828 fn = smbfind(command, smb_fns); 829 830 printf("\nSMB PACKET: %s (%s) (CHAINED)\n", 831 fn->name, request ? "REQUEST" : "REPLY"); | 902 903 fn = smbfind(command, smb_fns); 904 905 printf("\nSMB PACKET: %s (%s) (CHAINED)\n", 906 fn->name, request ? "REQUEST" : "REPLY"); |
907 if (newsmboffset < smboffset) { 908 printf("Bad andX offset: %u < %u\n", newsmboffset, smboffset); 909 break; 910 } 911 smboffset = newsmboffset; |
|
832 } 833 834 printf("\n"); 835 return; 836trunc: 837 printf("[|SMB]"); 838 return; 839} 840 841 842/* 843 * print a NBT packet received across tcp on port 139 844 */ 845void 846nbt_tcp_print(const u_char *data, int length) 847{ 848 const u_char *maxbuf = data + length; | 912 } 913 914 printf("\n"); 915 return; 916trunc: 917 printf("[|SMB]"); 918 return; 919} 920 921 922/* 923 * print a NBT packet received across tcp on port 139 924 */ 925void 926nbt_tcp_print(const u_char *data, int length) 927{ 928 const u_char *maxbuf = data + length; |
849 int flags; | 929 int type; |
850 u_int nbt_len; 851 852 TCHECK2(data[2], 2); | 930 u_int nbt_len; 931 932 TCHECK2(data[2], 2); |
853 flags = data[0]; | 933 type = data[0]; |
854 nbt_len = EXTRACT_16BITS(data + 2); 855 856 startbuf = data; 857 if (maxbuf <= data) 858 return; 859 | 934 nbt_len = EXTRACT_16BITS(data + 2); 935 936 startbuf = data; 937 if (maxbuf <= data) 938 return; 939 |
860 if (vflag > 1) 861 printf ("\n>>>"); | 940 if (vflag < 2) { 941 printf(" NBT Session Packet: "); 942 switch (type) { 943 case 0x00: 944 printf("Session Message"); 945 break; |
862 | 946 |
863 printf(" NBT Packet"); | 947 case 0x81: 948 printf("Session Request"); 949 break; |
864 | 950 |
865 if (vflag < 2) 866 return; | 951 case 0x82: 952 printf("Session Granted"); 953 break; |
867 | 954 |
868 printf("\n"); | 955 case 0x83: 956 { 957 int ecode; |
869 | 958 |
870 switch (flags) { 871 case 1: 872 printf("flags=0x%x\n", flags); 873 case 0: 874 data = smb_fdata(data, "NBT Session Packet\nFlags=[rw]\nLength=[rd]\n", 875 data + 4); 876 if (data == NULL) | 959 TCHECK(data[4]); 960 ecode = data[4]; 961 962 printf("Session Reject, "); 963 switch (ecode) { 964 case 0x80: 965 printf("Not listening on called name"); 966 break; 967 case 0x81: 968 printf("Not listening for calling name"); 969 break; 970 case 0x82: 971 printf("Called name not present"); 972 break; 973 case 0x83: 974 printf("Called name present, but insufficient resources"); 975 break; 976 default: 977 printf("Unspecified error 0x%X", ecode); 978 break; 979 } 980 } |
877 break; | 981 break; |
878 if (memcmp(data,"\377SMB",4) == 0) { 879 if (nbt_len > PTR_DIFF(maxbuf, data)) 880 printf("WARNING: Short packet. Try increasing the snap length (%lu)\n", 881 (unsigned long)PTR_DIFF(maxbuf, data)); 882 print_smb(data, maxbuf > data + nbt_len ? data + nbt_len : maxbuf); 883 } else 884 printf("Session packet:(raw data?)\n"); 885 break; | |
886 | 982 |
983 case 0x85: 984 printf("Session Keepalive"); 985 break; 986 987 default: 988 data = smb_fdata(data, "Unknown packet type [rB]", maxbuf, 0); 989 break; 990 } 991 } else { 992 printf ("\n>>> NBT Session Packet\n"); 993 switch (type) { 994 case 0x00: 995 data = smb_fdata(data, "[P1]NBT Session Message\nFlags=[B]\nLength=[rd]\n", 996 data + 4, 0); 997 if (data == NULL) 998 break; 999 if (memcmp(data,"\377SMB",4) == 0) { 1000 if (nbt_len > PTR_DIFF(maxbuf, data)) 1001 printf("WARNING: Short packet. Try increasing the snap length (%lu)\n", 1002 (unsigned long)PTR_DIFF(maxbuf, data)); 1003 print_smb(data, maxbuf > data + nbt_len ? data + nbt_len : maxbuf); 1004 } else 1005 printf("Session packet:(raw data?)\n"); 1006 break; 1007 |
|
887 case 0x81: 888 data = smb_fdata(data, | 1008 case 0x81: 1009 data = smb_fdata(data, |
889 "NBT Session Request\nFlags=[rW]\nDestination=[n1]\nSource=[n1]\n", 890 maxbuf); | 1010 "[P1]NBT Session Request\nFlags=[B]\nLength=[rd]\nDestination=[n1]\nSource=[n1]\n", 1011 maxbuf, 0); |
891 break; 892 893 case 0x82: | 1012 break; 1013 1014 case 0x82: |
894 data = smb_fdata(data, "NBT Session Granted\nFlags=[rW]\n", maxbuf); | 1015 data = smb_fdata(data, "[P1]NBT Session Granted\nFlags=[B]\nLength=[rd]\n", maxbuf, 0); |
895 break; 896 897 case 0x83: 898 { 899 int ecode; 900 901 TCHECK(data[4]); 902 ecode = data[4]; 903 | 1016 break; 1017 1018 case 0x83: 1019 { 1020 int ecode; 1021 1022 TCHECK(data[4]); 1023 ecode = data[4]; 1024 |
904 data = smb_fdata(data, "NBT SessionReject\nFlags=[rW]\nReason=[B]\n", 905 maxbuf); | 1025 data = smb_fdata(data, "[P1]NBT SessionReject\nFlags=[B]\nLength=[rd]\nReason=[B]\n", 1026 maxbuf, 0); |
906 switch (ecode) { 907 case 0x80: 908 printf("Not listening on called name\n"); 909 break; 910 case 0x81: 911 printf("Not listening for calling name\n"); 912 break; 913 case 0x82: --- 5 unchanged lines hidden (view full) --- 919 default: 920 printf("Unspecified error 0x%X\n", ecode); 921 break; 922 } 923 } 924 break; 925 926 case 0x85: | 1027 switch (ecode) { 1028 case 0x80: 1029 printf("Not listening on called name\n"); 1030 break; 1031 case 0x81: 1032 printf("Not listening for calling name\n"); 1033 break; 1034 case 0x82: --- 5 unchanged lines hidden (view full) --- 1040 default: 1041 printf("Unspecified error 0x%X\n", ecode); 1042 break; 1043 } 1044 } 1045 break; 1046 1047 case 0x85: |
927 data = smb_fdata(data, "NBT Session Keepalive\nFlags=[rW]\n", maxbuf); | 1048 data = smb_fdata(data, "[P1]NBT Session Keepalive\nFlags=[B]\nLength=[rd]\n", maxbuf, 0); |
928 break; 929 930 default: | 1049 break; 1050 1051 default: |
931 printf("flags=0x%x\n", flags); 932 data = smb_fdata(data, "NBT - Unknown packet type\nType=[rW]\n", maxbuf); | 1052 data = smb_fdata(data, "NBT - Unknown packet type\nType=[B]\n", maxbuf, 0); 1053 break; 1054 } 1055 printf("\n"); 1056 fflush(stdout); |
933 } | 1057 } |
934 printf("\n"); 935 fflush(stdout); | |
936 return; 937trunc: 938 printf("[|SMB]"); 939 return; 940} 941 942 943/* --- 73 unchanged lines hidden (view full) --- 1017 return; 1018 } 1019 1020 if (qdcount) { 1021 printf("QuestionRecords:\n"); 1022 for (i = 0; i < qdcount; i++) 1023 p = smb_fdata(p, 1024 "|Name=[n1]\nQuestionType=[rw]\nQuestionClass=[rw]\n#", | 1058 return; 1059trunc: 1060 printf("[|SMB]"); 1061 return; 1062} 1063 1064 1065/* --- 73 unchanged lines hidden (view full) --- 1139 return; 1140 } 1141 1142 if (qdcount) { 1143 printf("QuestionRecords:\n"); 1144 for (i = 0; i < qdcount; i++) 1145 p = smb_fdata(p, 1146 "|Name=[n1]\nQuestionType=[rw]\nQuestionClass=[rw]\n#", |
1025 maxbuf); | 1147 maxbuf, 0); |
1026 if (p == NULL) 1027 goto out; 1028 } 1029 1030 if (total) { 1031 printf("\nResourceRecords:\n"); 1032 for (i = 0; i < total; i++) { 1033 int rdlen; 1034 int restype; 1035 | 1148 if (p == NULL) 1149 goto out; 1150 } 1151 1152 if (total) { 1153 printf("\nResourceRecords:\n"); 1154 for (i = 0; i < total; i++) { 1155 int rdlen; 1156 int restype; 1157 |
1036 p = smb_fdata(p, "Name=[n1]\n#", maxbuf); | 1158 p = smb_fdata(p, "Name=[n1]\n#", maxbuf, 0); |
1037 if (p == NULL) 1038 goto out; 1039 restype = EXTRACT_16BITS(p); | 1159 if (p == NULL) 1160 goto out; 1161 restype = EXTRACT_16BITS(p); |
1040 p = smb_fdata(p, "ResType=[rw]\nResClass=[rw]\nTTL=[rD]\n", p + 8); | 1162 p = smb_fdata(p, "ResType=[rw]\nResClass=[rw]\nTTL=[rD]\n", p + 8, 0); |
1041 if (p == NULL) 1042 goto out; 1043 rdlen = EXTRACT_16BITS(p); 1044 printf("ResourceLength=%d\nResourceData=\n", rdlen); 1045 p += 2; 1046 if (rdlen == 6) { | 1163 if (p == NULL) 1164 goto out; 1165 rdlen = EXTRACT_16BITS(p); 1166 printf("ResourceLength=%d\nResourceData=\n", rdlen); 1167 p += 2; 1168 if (rdlen == 6) { |
1047 p = smb_fdata(p, "AddrType=[rw]\nAddress=[b.b.b.b]\n", p + rdlen); | 1169 p = smb_fdata(p, "AddrType=[rw]\nAddress=[b.b.b.b]\n", p + rdlen, 0); |
1048 if (p == NULL) 1049 goto out; 1050 } else { 1051 if (restype == 0x21) { 1052 int numnames; 1053 1054 TCHECK(*p); 1055 numnames = p[0]; | 1170 if (p == NULL) 1171 goto out; 1172 } else { 1173 if (restype == 0x21) { 1174 int numnames; 1175 1176 TCHECK(*p); 1177 numnames = p[0]; |
1056 p = smb_fdata(p, "NumNames=[B]\n", p + 1); | 1178 p = smb_fdata(p, "NumNames=[B]\n", p + 1, 0); |
1057 if (p == NULL) 1058 goto out; 1059 while (numnames--) { | 1179 if (p == NULL) 1180 goto out; 1181 while (numnames--) { |
1060 p = smb_fdata(p, "Name=[n2]\t#", maxbuf); | 1182 p = smb_fdata(p, "Name=[n2]\t#", maxbuf, 0); |
1061 TCHECK(*p); 1062 if (p[0] & 0x80) 1063 printf("<GROUP> "); 1064 switch (p[0] & 0x60) { 1065 case 0x00: printf("B "); break; 1066 case 0x20: printf("P "); break; 1067 case 0x40: printf("M "); break; 1068 case 0x60: printf("_ "); break; --- 13 unchanged lines hidden (view full) --- 1082 print_data(p, min(rdlen, length - (p - data))); 1083 p += rdlen; 1084 } 1085 } 1086 } 1087 } 1088 1089 if (p < maxbuf) | 1183 TCHECK(*p); 1184 if (p[0] & 0x80) 1185 printf("<GROUP> "); 1186 switch (p[0] & 0x60) { 1187 case 0x00: printf("B "); break; 1188 case 0x20: printf("P "); break; 1189 case 0x40: printf("M "); break; 1190 case 0x60: printf("_ "); break; --- 13 unchanged lines hidden (view full) --- 1204 print_data(p, min(rdlen, length - (p - data))); 1205 p += rdlen; 1206 } 1207 } 1208 } 1209 } 1210 1211 if (p < maxbuf) |
1090 smb_fdata(p, "AdditionalData:\n", maxbuf); | 1212 smb_fdata(p, "AdditionalData:\n", maxbuf, 0); |
1091 1092out: 1093 printf("\n"); 1094 fflush(stdout); 1095 return; 1096trunc: 1097 printf("[|SMB]"); 1098 return; --- 17 unchanged lines hidden (view full) --- 1116 1117 if (vflag < 2) { 1118 printf("NBT UDP PACKET(138)"); 1119 return; 1120 } 1121 1122 data = smb_fdata(data, 1123 "\n>>> NBT UDP PACKET(138) Res=[rw] ID=[rw] IP=[b.b.b.b] Port=[rd] Length=[rd] Res2=[rw]\nSourceName=[n1]\nDestName=[n1]\n#", | 1213 1214out: 1215 printf("\n"); 1216 fflush(stdout); 1217 return; 1218trunc: 1219 printf("[|SMB]"); 1220 return; --- 17 unchanged lines hidden (view full) --- 1238 1239 if (vflag < 2) { 1240 printf("NBT UDP PACKET(138)"); 1241 return; 1242 } 1243 1244 data = smb_fdata(data, 1245 "\n>>> NBT UDP PACKET(138) Res=[rw] ID=[rw] IP=[b.b.b.b] Port=[rd] Length=[rd] Res2=[rw]\nSourceName=[n1]\nDestName=[n1]\n#", |
1124 maxbuf); | 1246 maxbuf, 0); |
1125 1126 if (data != NULL) { 1127 /* If there isn't enough data for "\377SMB", don't check for it. */ 1128 if (&data[3] >= maxbuf) 1129 goto out; 1130 1131 if (memcmp(data, "\377SMB",4) == 0) 1132 print_smb(data, maxbuf); 1133 } 1134out: 1135 printf("\n"); 1136 fflush(stdout); 1137} 1138 1139 1140/* 1141 print netbeui frames 1142*/ | 1247 1248 if (data != NULL) { 1249 /* If there isn't enough data for "\377SMB", don't check for it. */ 1250 if (&data[3] >= maxbuf) 1251 goto out; 1252 1253 if (memcmp(data, "\377SMB",4) == 0) 1254 print_smb(data, maxbuf); 1255 } 1256out: 1257 printf("\n"); 1258 fflush(stdout); 1259} 1260 1261 1262/* 1263 print netbeui frames 1264*/ |
1265struct nbf_strings { 1266 const char *name; 1267 const char *nonverbose; 1268 const char *verbose; 1269} nbf_strings[0x20] = { 1270 { "Add Group Name Query", ", [P23]Name to add=[n2]#", 1271 "[P5]ResponseCorrelator=[w]\n[P16]Name to add=[n2]\n" }, 1272 { "Add Name Query", ", [P23]Name to add=[n2]#", 1273 "[P5]ResponseCorrelator=[w]\n[P16]Name to add=[n2]\n" }, 1274 { "Name In Conflict", NULL, NULL }, 1275 { "Status Query", NULL, NULL }, 1276 { NULL, NULL, NULL }, /* not used */ 1277 { NULL, NULL, NULL }, /* not used */ 1278 { NULL, NULL, NULL }, /* not used */ 1279 { "Terminate Trace", NULL, NULL }, 1280 { "Datagram", NULL, 1281 "[P7]Destination=[n2]\nSource=[n2]\n" }, 1282 { "Broadcast Datagram", NULL, 1283 "[P7]Destination=[n2]\nSource=[n2]\n" }, 1284 { "Name Query", ", [P7]Name=[n2]#", 1285 "[P1]SessionNumber=[B]\nNameType=[B][P2]\nResponseCorrelator=[w]\nName=[n2]\nName of sender=[n2]\n" }, 1286 { NULL, NULL, NULL }, /* not used */ 1287 { NULL, NULL, NULL }, /* not used */ 1288 { "Add Name Response", ", [P1]GroupName=[w] [P4]Destination=[n2] Source=[n2]#", 1289 "AddNameInProcess=[B]\nGroupName=[w]\nTransmitCorrelator=[w][P2]\nDestination=[n2]\nSource=[n2]\n" }, 1290 { "Name Recognized", NULL, 1291 "[P1]Data2=[w]\nTransmitCorrelator=[w]\nResponseCorelator=[w]\nDestination=[n2]\nSource=[n2]\n" }, 1292 { "Status Response", NULL, NULL }, 1293 { NULL, NULL, NULL }, /* not used */ 1294 { NULL, NULL, NULL }, /* not used */ 1295 { NULL, NULL, NULL }, /* not used */ 1296 { "Terminate Trace", NULL, NULL }, 1297 { "Data Ack", NULL, 1298 "[P3]TransmitCorrelator=[w][P2]\nRemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n" }, 1299 { "Data First/Middle", NULL, 1300 "Flags=[{RECEIVE_CONTINUE|NO_ACK||PIGGYBACK_ACK_INCLUDED|}]\nResyncIndicator=[w][P2]\nResponseCorelator=[w]\nRemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n" }, 1301 { "Data Only/Last", NULL, 1302 "Flags=[{|NO_ACK|PIGGYBACK_ACK_ALLOWED|PIGGYBACK_ACK_INCLUDED|}]\nResyncIndicator=[w][P2]\nResponseCorelator=[w]\nRemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n" }, 1303 { "Session Confirm", NULL, 1304 "Data1=[B]\nData2=[w]\nTransmitCorrelator=[w]\nResponseCorelator=[w]\nRemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n" }, 1305 { "Session End", NULL, 1306 "[P1]Data2=[w][P4]\nRemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n" }, 1307 { "Session Initialize", NULL, 1308 "Data1=[B]\nData2=[w]\nTransmitCorrelator=[w]\nResponseCorelator=[w]\nRemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n" }, 1309 { "No Receive", NULL, 1310 "Flags=[{|SEND_NO_ACK}]\nDataBytesAccepted=[b][P4]\nRemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n" }, 1311 { "Receive Outstanding", NULL, 1312 "[P1]DataBytesAccepted=[b][P4]\nRemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n" }, 1313 { "Receive Continue", NULL, 1314 "[P2]TransmitCorrelator=[w]\n[P2]RemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n" }, 1315 { NULL, NULL, NULL }, /* not used */ 1316 { NULL, NULL, NULL }, /* not used */ 1317 { "Session Alive", NULL, NULL } 1318}; 1319 |
|
1143void 1144netbeui_print(u_short control, const u_char *data, int length) 1145{ 1146 const u_char *maxbuf = data + length; 1147 int len; 1148 int command; 1149 const u_char *data2; 1150 int is_truncated = 0; --- 7 unchanged lines hidden (view full) --- 1158 if (data2 >= maxbuf) { 1159 data2 = maxbuf; 1160 is_truncated = 1; 1161 } 1162 1163 startbuf = data; 1164 1165 if (vflag < 2) { | 1320void 1321netbeui_print(u_short control, const u_char *data, int length) 1322{ 1323 const u_char *maxbuf = data + length; 1324 int len; 1325 int command; 1326 const u_char *data2; 1327 int is_truncated = 0; --- 7 unchanged lines hidden (view full) --- 1335 if (data2 >= maxbuf) { 1336 data2 = maxbuf; 1337 is_truncated = 1; 1338 } 1339 1340 startbuf = data; 1341 1342 if (vflag < 2) { |
1166 printf("NetBeui Packet"); 1167 return; | 1343 printf("NBF Packet: "); 1344 data = smb_fdata(data, "[P5]#", maxbuf, 0); 1345 } else { 1346 printf("\n>>> NBF Packet\nType=0x%X ", control); 1347 data = smb_fdata(data, "Length=[d] Signature=[w] Command=[B]\n#", maxbuf, 0); |
1168 } | 1348 } |
1169 1170 printf("\n>>> NetBeui Packet\nType=0x%X ", control); 1171 data = smb_fdata(data, "Length=[d] Signature=[w] Command=[B]\n#", maxbuf); | |
1172 if (data == NULL) 1173 goto out; 1174 | 1349 if (data == NULL) 1350 goto out; 1351 |
1175 switch (command) { 1176 case 0xA: 1177 data = smb_fdata(data, "NameQuery:[P1]\nSessionNumber=[B]\nNameType=[B][P2]\nResponseCorrelator=[w]\nDestination=[n2]\nSource=[n2]\n", data2); 1178 break; | 1352 if (command > 0x1f || nbf_strings[command].name == NULL) { 1353 if (vflag < 2) 1354 data = smb_fdata(data, "Unknown NBF Command#", data2, 0); 1355 else 1356 data = smb_fdata(data, "Unknown NBF Command\n", data2, 0); 1357 } else { 1358 if (vflag < 2) { 1359 printf("%s", nbf_strings[command].name); 1360 if (nbf_strings[command].nonverbose != NULL) 1361 data = smb_fdata(data, nbf_strings[command].nonverbose, data2, 0); 1362 } else { 1363 printf("%s:\n", nbf_strings[command].name); 1364 if (nbf_strings[command].verbose != NULL) 1365 data = smb_fdata(data, nbf_strings[command].verbose, data2, 0); 1366 else 1367 printf("\n"); 1368 } 1369 } |
1179 | 1370 |
1180 case 0x8: 1181 data = smb_fdata(data, 1182 "NetbiosDataGram:[P7]\nDestination=[n2]\nSource=[n2]\n", data2); 1183 break; | 1371 if (vflag < 2) 1372 return; |
1184 | 1373 |
1185 case 0xE: 1186 data = smb_fdata(data, 1187 "NameRecognise:\n[P1]\nData2=[w]\nTransmitCorrelator=[w]\nResponseCorelator=[w]\nDestination=[n2]\nSource=[n2]\n", 1188 data2); 1189 break; 1190 1191 case 0x19: 1192 data = smb_fdata(data, 1193 "SessionInitialise:\nData1=[B]\nData2=[w]\nTransmitCorrelator=[w]\nResponseCorelator=[w]\nRemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n", 1194 data2); 1195 break; 1196 1197 case 0x17: 1198 data = smb_fdata(data, 1199 "SessionConfirm:\nData1=[B]\nData2=[w]\nTransmitCorrelator=[w]\nResponseCorelator=[w]\nRemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n", 1200 data2); 1201 break; 1202 1203 case 0x16: 1204 data = smb_fdata(data, 1205 "NetbiosDataOnlyLast:\nFlags=[{|NO_ACK|PIGGYBACK_ACK_ALLOWED|PIGGYBACK_ACK_INCLUDED|}]\nResyncIndicator=[w][P2]\nResponseCorelator=[w]\nRemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n", 1206 data2); 1207 break; 1208 1209 case 0x14: 1210 data = smb_fdata(data, 1211 "NetbiosDataAck:\n[P3]TransmitCorrelator=[w][P2]\nRemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n", 1212 data2); 1213 break; 1214 1215 case 0x18: 1216 data = smb_fdata(data, 1217 "SessionEnd:\n[P1]Data2=[w][P4]\nRemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n", 1218 data2); 1219 break; 1220 1221 case 0x1f: 1222 data = smb_fdata(data, "SessionAlive\n", data2); 1223 break; 1224 1225 default: 1226 data = smb_fdata(data, "Unknown Netbios Command ", data2); 1227 break; 1228 } | |
1229 if (data == NULL) 1230 goto out; 1231 1232 if (is_truncated) { 1233 /* data2 was past the end of the buffer */ 1234 goto out; 1235 } 1236 | 1374 if (data == NULL) 1375 goto out; 1376 1377 if (is_truncated) { 1378 /* data2 was past the end of the buffer */ 1379 goto out; 1380 } 1381 |
1382 /* If this isn't a command that would contain an SMB message, quit. */ 1383 if (command != 0x08 && command != 0x09 && command != 0x15 && 1384 command != 0x16) 1385 goto out; 1386 |
|
1237 /* If there isn't enough data for "\377SMB", don't look for it. */ 1238 if (&data2[3] >= maxbuf) 1239 goto out; 1240 1241 if (memcmp(data2, "\377SMB",4) == 0) 1242 print_smb(data2, maxbuf); 1243 else { 1244 int i; --- 34 unchanged lines hidden (view full) --- 1279 /* Don't go past the end of the captured data in the packet. */ 1280 if (maxbuf > snapend) 1281 maxbuf = snapend; 1282 startbuf = data; 1283 for (i = 0; i < 128; i++) { 1284 if (&data[i + 4] > maxbuf) 1285 break; 1286 if (memcmp(&data[i], "\377SMB", 4) == 0) { | 1387 /* If there isn't enough data for "\377SMB", don't look for it. */ 1388 if (&data2[3] >= maxbuf) 1389 goto out; 1390 1391 if (memcmp(data2, "\377SMB",4) == 0) 1392 print_smb(data2, maxbuf); 1393 else { 1394 int i; --- 34 unchanged lines hidden (view full) --- 1429 /* Don't go past the end of the captured data in the packet. */ 1430 if (maxbuf > snapend) 1431 maxbuf = snapend; 1432 startbuf = data; 1433 for (i = 0; i < 128; i++) { 1434 if (&data[i + 4] > maxbuf) 1435 break; 1436 if (memcmp(&data[i], "\377SMB", 4) == 0) { |
1287 smb_fdata(data, "\n>>> IPX transport ", &data[i]); | 1437 smb_fdata(data, "\n>>> IPX transport ", &data[i], 0); |
1288 if (data != NULL) 1289 print_smb(&data[i], maxbuf); 1290 printf("\n"); 1291 fflush(stdout); 1292 break; 1293 } 1294 } 1295 if (i == 128) | 1438 if (data != NULL) 1439 print_smb(&data[i], maxbuf); 1440 printf("\n"); 1441 fflush(stdout); 1442 break; 1443 } 1444 } 1445 if (i == 128) |
1296 smb_fdata(data, "\n>>> Unknown IPX ", maxbuf); | 1446 smb_fdata(data, "\n>>> Unknown IPX ", maxbuf, 0); |
1297} | 1447} |