1/*\ 2 * pcap2nbench - Converts libpcap network traces to nbench input 3 * Copyright (C) 2004 Jim McDonough <jmcd@us.ibm.com> 4 * 5 * This program is free software; you can redistribute it and/or modify 6 * it under the terms of the GNU General Public License as published by 7 * the Free Software Foundation; either version 2 of the License, or 8 * (at your option) any later version. 9 * 10 * This program is distributed in the hope that it will be useful, 11 * but WITHOUT ANY WARRANTY; without even the implied warranty of 12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 13 * GNU General Public License for more details. 14 * 15 * You should have received a copy of the GNU General Public License 16 * along with this program; if not, write to the Free Software 17 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. 18 * 19 * Written by Anthony Liguori <aliguori@us.ibm.com> 20\*/ 21 22#ifndef _NT_CREATE_AND_X_RESPONSE_HPP 23#define _NT_CREATE_AND_X_RESPONSE_HPP 24 25#include <iostream> 26#include <stdint.h> 27 28struct NtCreateAndXResponse { 29 enum { 30 COMMAND = 0xa2 31 }; 32 33 NtCreateAndXResponse() {} 34 NtCreateAndXResponse(const uint8_t *data, size_t size); 35 36 uint8_t word_count; 37 uint8_t and_x_command; 38 uint8_t reserved; 39 uint16_t and_x_offset; 40 uint8_t oplock_level; 41 uint16_t fid; 42 uint32_t create_action; 43 uint64_t create_date; 44 uint64_t access_date; 45 uint64_t write_date; 46 uint64_t change_date; 47 uint32_t file_attributes; 48 uint64_t allocation_size; 49 uint64_t end_of_file; 50 uint16_t file_type; 51 uint16_t ipc_state; 52 uint8_t is_directory; 53 uint16_t byte_count; 54}; 55 56std::ostream &operator<<(std::ostream &lhs, const NtCreateAndXResponse &rhs); 57 58#endif 59