24 #ifndef __APP_LAYER_DCERPC_COMMON_H__ 25 #define __APP_LAYER_DCERPC_COMMON_H__ 52 #define ALTER_CONTEXT 14 53 #define ALTER_CONTEXT_RESP 15 68 unsigned long server_boot;
69 unsigned long if_vers;
75 unsigned short fragnum;
76 unsigned small auth_proto;
77 unsigned small serial_lo;
78 } dc_rpc_cl_pkt_hdr_t;
81 #define RESERVED_01 0x01 86 #define IDEMPOTENT 0x20 87 #define BROADCAST 0x40 88 #define RESERVED_80 0x80 90 #define CANCEL_PENDING 0x02 91 #define RESERVED_04 0x04 92 #define RESERVED_10 0x10 93 #define RESERVED_20 0x20 94 #define RESERVED_40 0x40 95 #define RESERVED_80 0x80 102 uint8_t packed_drep[4];
108 #define DCERPC_HDR_LEN 16 117 uint8_t objectuuid[16];
118 uint8_t interfaceuuid[16];
119 uint8_t activityuuid[16];
132 #define DCERPC_UDP_HDR_LEN 80 134 #define DCERPC_UUID_ENTRY_FLAG_FF 0x0001 139 uint16_t internal_id;
143 uint16_t versionminor;
152 uint8_t numctxitemsleft;
153 uint8_t ctxbytesprocessed;
157 uint16_t versionminor;
159 DCERPCUuidEntryList uuid_list;
161 DCERPCUuidEntryList accepted_uuid_list;
162 uint16_t uuid_internal_id;
163 uint16_t secondaryaddrlen;
164 uint16_t secondaryaddrlenleft;
172 uint8_t *stub_data_buffer;
174 uint32_t stub_data_buffer_len;
175 uint8_t first_request_seen;
176 bool stub_data_buffer_reset;
181 uint8_t *stub_data_buffer;
183 uint32_t stub_data_buffer_len;
184 bool stub_data_buffer_reset;
192 uint16_t bytesprocessed;
195 uint16_t transaction_id;
203 uint16_t bytesprocessed;
204 uint16_t fraglenleft;
211 #define PFC_FIRST_FRAG 0x01 213 #define PFC_LAST_FRAG 0x02 215 #define PFC_PENDING_CANCEL 0x04 216 #define PFC_RESERVED_1 0x08 218 #define PFC_CONC_MPX 0x10 221 #define PFC_DID_NOT_EXECUTE 0x20 223 #define PFC_MAYBE 0x40 227 #define PFC_OBJECT_UUID 0x80 229 #define REASON_NOT_SPECIFIED 0 230 #define TEMPORARY_CONGESTION 1 231 #define LOCAL_LIMIT_EXCEEDED 2 232 #define CALLED_PADDR_UNKNOWN 3 233 #define PROTOCOL_VERSION_NOT_SUPPORTED 4 234 #define DEFAULT_CONTEXT_NOT_SUPPORTED 5 235 #define USER_DATA_NOT_READABLE 6 236 #define NO_PSAP_AVAILABLE 7
struct HtpBodyChunk_ * next
void DCERPCParserRegisterTests(void)
struct DCERPCRequest_ DCERPCRequest
void DCERPCParserTests(void)
struct DCERPCHdrUdp_ DCERPCHdrUdp
void hexdump(const void *buf, size_t len)
struct DCERPCHdr_ DCERPCHdr
struct DCERPCBindBindAck_ DCERPCBindBindAck
void printUUID(const char *type, DCERPCUuidEntry *uuid)
printUUID function used to print UUID, Major and Minor Version Number and if it was Accepted or Rejec...
struct DCERPCResponse_ DCERPCResponse
#define TAILQ_ENTRY(type)
typedef TAILQ_HEAD(DCERPCUuidEntryList_, DCERPCUuidEntry_) DCERPCUuidEntryList
void RegisterDCERPCParsers(void)
int32_t DCERPCParser(DCERPC *, const uint8_t *, uint32_t)