Wireshark · Ethereal-dev: RE: [Ethereal-dev] patch for packet-dcerpc-srvsvc.c: NetServerDis kEnum[resend]

[Eric Wedel <ewedel@xxxxxxxxxxx>]

Nothing that shows it non-zero, I'm afraid.  So it's possible it could be a
pointer, but dunno..  unfortunately, right now I've only got nt4sp6 and
win2ksp3, no "bare" installs.

Wonder if there might be a more interesting way of invoking the call than
simply by using the NetServerDiskEnum() api?

Have attached four sample captures, two each from nt4sp6 and win2ksp3.

regards, Eric


> -----Original Message-----
> From: Ronnie Sahlberg [mailto:ronnie_sahlberg@xxxxxxxxxxxxxx]
> Sent: Saturday, November 22, 2003 12:15 AM
> To: Eric Wedel; ethereal-dev@xxxxxxxxxxxx
> Subject: Re: [Ethereal-dev] patch for packet-dcerpc-srvsvc.c:
> NetServerDiskEnum[resend]
> 
> 
> Do you have an example capture?
> 
> That 4 byte integer,  did it have any particular value? as in 
> 0x00000000 or
> something like 0x001abcde ?
> 
> It could be that it is a pointer and not an integer.
> Can you test it against an older server, as in a server that 
> does not have
> any service packs from the last say 12 months?
> It is easier to spot what is a pointer and what is a normal 
> integer on the
> older systems.
> 
> 
> 
> 
> ----- Original Message ----- 
> From: "Eric Wedel"
> Sent: Saturday, November 22, 2003 8:32 AM
> Subject: [Ethereal-dev] patch for packet-dcerpc-srvsvc.c:
> NetServerDiskEnum[resend]
> 
> 
> > [That last one was a bit mangled, let's try again.]
> >
> > Hi..
> >
> > Just tripped over NetServerDiskEnum, which doesn't seem to 
> be displaying
> > quite properly.  Used the sample code for NetServerDiskEnum at MSDN:
> >
> >
> http://msdn.microsoft.com/library/default.asp?url=/library/en-
us/netmgmt/net
> mgmt/netserverdiskenum.asp
> to check this.
>
> The attached patch fixes the reply display only.  Looks good against win2k
> (sp3) and NT4 (sp6) machines.  Please check this in.
>
> The patch only addresses the NetServerDiskEnum reply, as it is the more
> interesting one.  But the request seems a little broken too, specifically
it
> is not at all clear from either the win32 API or captures that the
> DISK_ENUM_CONTAINER parameter is an in/out.  Seems more likely to me that
it
> is [out] only.
>
> Anybody know any more about the request format, or have any interesting
> captures of it?
>
> regards, Eric
>
>
>
> *********************************************************************
> This e-mail and any attachment is confidential. It may only be read,
copied and used by the intended recipient(s). If you are not the intended
recipient(s), you may not copy, use, distribute, forward, store or disclose
this e-mail or any attachment. If you are not the intended recipient(s) or
have otherwise received this e-mail in error, you should destroy it and any
attachment and notify the sender by reply e-mail or send a message to
sysadmin@xxxxxxxxxxx
> *********************************************************************
>
>


----------------------------------------------------------------------------
----


> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>



*********************************************************************
This e-mail and any attachment is confidential. It may only be read, copied and used by the intended recipient(s). If you are not the intended recipient(s), you may not copy, use, distribute, forward, store or disclose this e-mail or any attachment. If you are not the intended recipient(s) or have otherwise received this e-mail in error, you should destroy it and any attachment and notify the sender by reply e-mail or send a message to sysadmin@xxxxxxxxxxx
*********************************************************************

Attachment: nt4_acc_deny1.cap
Description: Binary data

Attachment: nt4_ok1.cap
Description: Binary data

Attachment: win2k_ok1.cap
Description: Binary data

Attachment: win2k_ok2.cap
Description: Binary data