Ethereal-dev: Re: [Ethereal-dev] packet-smb patch

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 8 Nov 2001 00:23:45 -0800
On Wed, Nov 07, 2001 at 10:53:37PM +1100, Ronnie Sahlberg wrote:
> Attached is a fairly large patch.
> It adds the NT Transaction (and secondary) command to the smb dissector.

Checked in, with some bug fixes and cleanups, and with some more
dissection of the Query Security Descriptor transaction (based on some
captures I've seen, and the documentation of "ZwQuerySecurityObject()"
(that's the name, inside the NT kernel, of the system call
"NtQuerySecurityObject()") from the "Windows(R) NT(R)/2000 Native API
Reference" book.  (The Win32 APIs "GetKernelObjectSecurity()" and
"GetUserObjectSecurity()" use that system call, according to that book. 
The security descriptor's structure might be documented in, for example,
the Win32 API documentation, as a "SECURITY_DESCRIPTOR" structure.)