The Tcpdump Group git mirrors - tcpdump/blob - print-smb.c

   1 /*
   2  * Copyright (C) Andrew Tridgell 1995-1999
   3  *
   4  * This software may be distributed either under the terms of the
   5  * BSD-style license that accompanies tcpdump or the GNU GPL version 2
   6  * or later
   7  */
   8
   9 #ifdef HAVE_CONFIG_H
  10 #include "config.h"
  11 #endif
  12
  13 #ifndef lint
  14 static const char rcsid[] =
  15      "@(#) $Header: /tcpdump/master/tcpdump/print-smb.c,v 1.13 2001-06-25 18:58:07 itojun Exp $";
  16 #endif
  17
  18 #include <stdio.h>
  19 #include <string.h>
  20 #include <sys/types.h>
  21
  22 #include "interface.h"
  23 #include "smb.h"
  24
  25 static int request = 0;
  26
  27 const uchar *startbuf = NULL;
  28
  29 struct smbdescript {
  30     char *req_f1;
  31     char *req_f2;
  32     char *rep_f1;
  33     char *rep_f2;
  34     /*
  35      * sometimes (u_char *, u_char *, u_char *, u_char *) and
  36      * sometimes (u_char *, u_char *, int, int)
  37      */
  38     void (*fn)(const u_char *, const u_char *, ...);
  39 };
  40
  41 struct smbfns
  42 {
  43     int id;
  44     char *name;
  45     int flags;
  46     struct smbdescript descript;
  47 };
  48
  49 #define DEFDESCRIPT     {NULL,NULL,NULL,NULL,NULL}
  50
  51 #define FLG_CHAIN       (1<<0)
  52
  53 static struct smbfns *
  54 smbfind(int id, struct smbfns *list)
  55 {
  56     int sindex;
  57
  58     for (sindex = 0; list[sindex].name; sindex++)
  59         if (list[sindex].id == id)
  60             return(&list[sindex]);
  61
  62     return(&list[0]);
  63 }
  64
  65 static void
  66 trans2_findfirst(const uchar *param, const uchar *data, ...)
  67 {
  68     char *fmt;
  69     va_list ap;
  70     int pcnt, dcnt;
  71
  72     va_start(ap, data);
  73     pcnt = va_arg(ap, int);
  74     dcnt = va_arg(ap, int);
  75     va_end(ap);
  76
  77     if (request)
  78         fmt = "Attribute=[A]\nSearchCount=[d]\nFlags=[w]\nLevel=[dP5]\nFile=[S]\n";
  79     else
  80         fmt = "Handle=[w]\nCount=[d]\nEOS=[w]\nEoffset=[d]\nLastNameOfs=[w]\n";
  81
  82     fdata(param, fmt, param + pcnt);
  83     if (dcnt) {
  84         printf("data:\n");
  85         print_data(data, dcnt);
  86     }
  87 }
  88
  89 static void
  90 trans2_qfsinfo(const uchar *param, const uchar *data, ...)
  91 {
  92     static int level = 0;
  93     char *fmt="";
  94     va_list ap;
  95     int pcnt, dcnt;
  96
  97     va_start(ap, data);
  98     pcnt = va_arg(ap, int);
  99     dcnt = va_arg(ap, int);
 100     va_end(ap);
 101
 102     if (request) {
 103         level = SVAL(param, 0);
 104         fmt = "InfoLevel=[d]\n";
 105         fdata(param, fmt, param + pcnt);
 106     } else {
 107         switch (level) {
 108         case 1:
 109             fmt = "idFileSystem=[W]\nSectorUnit=[D]\nUnit=[D]\nAvail=[D]\nSectorSize=[d]\n";
 110             break;
 111         case 2:
 112             fmt = "CreationTime=[T2]VolNameLength=[B]\nVolumeLabel=[s12]\n";
 113             break;
 114         case 0x105:
 115             fmt = "Capabilities=[W]\nMaxFileLen=[D]\nVolNameLen=[D]\nVolume=[S]\n";
 116             break;
 117         default:
 118             fmt = "UnknownLevel\n";
 119             break;
 120         }
 121         fdata(data, fmt, data + dcnt);
 122     }
 123     if (dcnt) {
 124         printf("data:\n");
 125         print_data(data, dcnt);
 126     }
 127 }
 128
 129 struct smbfns trans2_fns[] = {
 130     { 0, "TRANSACT2_OPEN", 0,
 131         { "Flags2=[w]\nMode=[w]\nSearchAttrib=[A]\nAttrib=[A]\nTime=[T2]\nOFun=[w]\nSize=[D]\nRes=([w, w, w, w, w])\nPath=[S]",
 132           NULL,
 133           "Handle=[d]\nAttrib=[A]\nTime=[T2]\nSize=[D]\nAccess=[w]\nType=[w]\nState=[w]\nAction=[w]\nInode=[W]\nOffErr=[d]\n|EALength=[d]\n",
 134           NULL, NULL }},
 135     { 1, "TRANSACT2_FINDFIRST", 0,
 136         { NULL, NULL, NULL, NULL, trans2_findfirst }},
 137     { 2, "TRANSACT2_FINDNEXT", 0, DEFDESCRIPT },
 138     { 3, "TRANSACT2_QFSINFO", 0,
 139         { NULL, NULL, NULL, NULL, trans2_qfsinfo }},
 140     { 4, "TRANSACT2_SETFSINFO", 0, DEFDESCRIPT },
 141     { 5, "TRANSACT2_QPATHINFO", 0, DEFDESCRIPT },
 142     { 6, "TRANSACT2_SETPATHINFO", 0, DEFDESCRIPT },
 143     { 7, "TRANSACT2_QFILEINFO", 0, DEFDESCRIPT },
 144     { 8, "TRANSACT2_SETFILEINFO", 0, DEFDESCRIPT },
 145     { 9, "TRANSACT2_FSCTL", 0, DEFDESCRIPT },
 146     { 10, "TRANSACT2_IOCTL", 0, DEFDESCRIPT },
 147     { 11, "TRANSACT2_FINDNOTIFYFIRST", 0, DEFDESCRIPT },
 148     { 12, "TRANSACT2_FINDNOTIFYNEXT", 0, DEFDESCRIPT },
 149     { 13, "TRANSACT2_MKDIR", 0, DEFDESCRIPT },
 150     { -1, NULL, 0, DEFDESCRIPT }
 151 };
 152
 153
 154 static void
 155 print_trans2(const uchar *words, const uchar *dat, ...)
 156 {
 157     static struct smbfns *fn = &trans2_fns[0];
 158     uchar *data, *param;
 159     uchar *f1 = NULL, *f2 = NULL;
 160     int pcnt, dcnt;
 161     va_list ap;
 162     uchar *buf, *maxbuf;
 163
 164     va_start(ap, dat);
 165     buf = va_arg(ap, uchar *);
 166     maxbuf = va_arg(ap, uchar *);
 167     va_end(ap);
 168
 169     if (request) {
 170         fn = smbfind(SVAL(words + 1, 14 * 2), trans2_fns);
 171         data = buf+SVAL(words + 1, 12 * 2);
 172         param = buf+SVAL(words + 1, 10 * 2);
 173         pcnt = SVAL(words + 1, 9 * 2);
 174         dcnt = SVAL(words + 1, 11 * 2);
 175     } else {
 176         data = buf+SVAL(words + 1, 7 * 2);
 177         param = buf+SVAL(words + 1, 4 * 2);
 178         pcnt = SVAL(words + 1, 3 * 2);
 179         dcnt = SVAL(words + 1, 6 * 2);
 180     }
 181
 182     printf("%s param_length=%d data_length=%d\n", fn->name, pcnt, dcnt);
 183
 184     if (request) {
 185         if (CVAL(words, 0) == 8) {
 186             fdata(words + 1,
 187                 "Trans2Secondary\nTotParam=[d]\nTotData=[d]\nParamCnt=[d]\nParamOff=[d]\nParamDisp=[d]\nDataCnt=[d]\nDataOff=[d]\nDataDisp=[d]\nHandle=[d]\n",
 188                 maxbuf);
 189             return;
 190         } else {
 191             fdata(words + 1,
 192                 "TotParam=[d]\nTotData=[d]\nMaxParam=[d]\nMaxData=[d]\nMaxSetup=[d]\nFlags=[w]\nTimeOut=[D]\nRes1=[w]\nParamCnt=[d]\nParamOff=[d]\nDataCnt=[d]\nDataOff=[d]\nSetupCnt=[d]\n",
 193                 words + 1 + 14 * 2);
 194             fdata(data + 1, "TransactionName=[S]\n%", maxbuf);
 195         }
 196         f1 = fn->descript.req_f1;
 197         f2 = fn->descript.req_f2;
 198     } else {
 199         if (CVAL(words, 0) == 0) {
 200             printf("Trans2Interim\n");
 201             return;
 202         } else {
 203             fdata(words + 1,
 204                 "TotParam=[d]\nTotData=[d]\nRes1=[w]\nParamCnt=[d]\nParamOff=[d]\nParamDisp[d]\nDataCnt=[d]\nDataOff=[d]\nDataDisp=[d]\nSetupCnt=[d]\n",
 205                 words + 1 + 10 * 2);
 206         }
 207         f1 = fn->descript.rep_f1;
 208         f2 = fn->descript.rep_f2;
 209     }
 210
 211     if (fn->descript.fn)
 212         fn->descript.fn(param, data, pcnt, dcnt);
 213     else {
 214         fdata(param, f1 ? f1 : (uchar *)"Paramaters=\n", param + pcnt);
 215         fdata(data, f2 ? f2 : (uchar *)"Data=\n", data + dcnt);
 216     }
 217 }
 218
 219
 220 static void
 221 print_browse(uchar *param, int paramlen, const uchar *data, int datalen)
 222 {
 223     const uchar *maxbuf = data + datalen;
 224     int command = CVAL(data, 0);
 225
 226     fdata(param, "BROWSE PACKET\n|Param ", param+paramlen);
 227
 228     switch (command) {
 229     case 0xF:
 230         data = fdata(data,
 231             "BROWSE PACKET:\nType=[B] (LocalMasterAnnouncement)\nUpdateCount=[w]\nRes1=[B]\nAnnounceInterval=[d]\nName=[n2]\nMajorVersion=[B]\nMinorVersion=[B]\nServerType=[W]\nElectionVersion=[w]\nBrowserConstant=[w]\n",
 232             maxbuf);
 233         break;
 234
 235     case 0x1:
 236         data = fdata(data,
 237             "BROWSE PACKET:\nType=[B] (HostAnnouncement)\nUpdateCount=[w]\nRes1=[B]\nAnnounceInterval=[d]\nName=[n2]\nMajorVersion=[B]\nMinorVersion=[B]\nServerType=[W]\nElectionVersion=[w]\nBrowserConstant=[w]\n",
 238             maxbuf);
 239         break;
 240
 241     case 0x2:
 242         data = fdata(data,
 243             "BROWSE PACKET:\nType=[B] (AnnouncementRequest)\nFlags=[B]\nReplySystemName=[S]\n",
 244             maxbuf);
 245         break;
 246
 247     case 0xc:
 248         data = fdata(data,
 249             "BROWSE PACKET:\nType=[B] (WorkgroupAnnouncement)\nUpdateCount=[w]\nRes1=[B]\nAnnounceInterval=[d]\nName=[n2]\nMajorVersion=[B]\nMinorVersion=[B]\nServerType=[W]\nCommentPointer=[W]\nServerName=[S]\n",
 250             maxbuf);
 251         break;
 252
 253     case 0x8:
 254         data = fdata(data,
 255             "BROWSE PACKET:\nType=[B] (ElectionFrame)\nElectionVersion=[B]\nOSSummary=[W]\nUptime=[(W, W)]\nServerName=[S]\n",
 256             maxbuf);
 257         break;
 258
 259     case 0xb:
 260         data = fdata(data,
 261             "BROWSE PACKET:\nType=[B] (BecomeBackupBrowser)\nName=[S]\n",
 262             maxbuf);
 263         break;
 264
 265     case 0x9:
 266         data = fdata(data,
 267             "BROWSE PACKET:\nType=[B] (GetBackupList)\nListCount?=[B]\nToken?=[B]\n",
 268             maxbuf);
 269         break;
 270
 271     case 0xa:
 272         data = fdata(data,
 273             "BROWSE PACKET:\nType=[B] (BackupListResponse)\nServerCount?=[B]\nToken?=[B]*Name=[S]\n",
 274             maxbuf);
 275         break;
 276
 277     case 0xd:
 278         data = fdata(data,
 279             "BROWSE PACKET:\nType=[B] (MasterAnnouncement)\nMasterName=[S]\n",
 280             maxbuf);
 281         break;
 282
 283     case 0xe:
 284         data = fdata(data,
 285             "BROWSE PACKET:\nType=[B] (ResetBrowser)\nOptions=[B]\n", maxbuf);
 286         break;
 287
 288     default:
 289         data = fdata(data, "Unknown Browser Frame ", maxbuf);
 290         break;
 291     }
 292 }
 293
 294
 295 static void
 296 print_ipc(uchar *param, int paramlen, uchar *data, int datalen)
 297 {
 298     if (paramlen)
 299         fdata(param, "Command=[w]\nStr1=[S]\nStr2=[S]\n", param + paramlen);
 300     if (datalen)
 301         fdata(data, "IPC ", data + datalen);
 302 }
 303
 304
 305 static void
 306 print_trans(const uchar *words, const uchar *data1, ...)
 307 {
 308   uchar *f1,*f2,*f3,*f4;
 309   uchar *data,*param;
 310   int datalen,paramlen;
 311   va_list ap;
 312   uchar *buf, *maxbuf;
 313
 314   va_start(ap, data1);
 315   buf = va_arg(ap, uchar *);
 316   maxbuf = va_arg(ap, uchar *);
 317   va_end(ap);
 318
 319   if (request) {
 320     paramlen = SVAL(words+1,9*2);
 321     param = buf + SVAL(words+1,10*2);
 322     datalen = SVAL(words+1,11*2);
 323     data = buf + SVAL(words+1,12*2);
 324     f1 = "TotParamCnt=[d] \nTotDataCnt=[d] \nMaxParmCnt=[d] \nMaxDataCnt=[d]\nMaxSCnt=[d] \nTransFlags=[w] \nRes1=[w] \nRes2=[w] \nRes3=[w]\nParamCnt=[d] \nParamOff=[d] \nDataCnt=[d] \nDataOff=[d] \nSUCnt=[d]\n";
 325     f2 = "|Name=[S]\n";
 326     f3 = "|Param ";
 327     f4 = "|Data ";
 328   } else {
 329     paramlen = SVAL(words+1,3*2);
 330     param = buf + SVAL(words+1,4*2);
 331     datalen = SVAL(words+1,6*2);
 332     data = buf + SVAL(words+1,7*2);
 333     f1 = "TotParamCnt=[d] \nTotDataCnt=[d] \nRes1=[d]\nParamCnt=[d] \nParamOff=[d] \nRes2=[d] \nDataCnt=[d] \nDataOff=[d] \nRes3=[d]\nLsetup=[d]\n";
 334     f2 = "|Unknown ";
 335     f3 = "|Param ";
 336     f4 = "|Data ";
 337   }
 338
 339   fdata(words+1,f1,MIN(words+1+2*CVAL(words,0),maxbuf));
 340   fdata(data1+2,f2,maxbuf - (paramlen + datalen));
 341
 342   if (!strcmp(data1+2,"\\MAILSLOT\\BROWSE")) {
 343     print_browse(param,paramlen,data,datalen);
 344     return;
 345   }
 346
 347   if (!strcmp(data1+2,"\\PIPE\\LANMAN")) {
 348     print_ipc(param,paramlen,data,datalen);
 349     return;
 350   }
 351
 352   if (paramlen) fdata(param,f3,MIN(param+paramlen,maxbuf));
 353   if (datalen) fdata(data,f4,MIN(data+datalen,maxbuf));
 354 }
 355
 356
 357
 358 static void
 359 print_negprot(const uchar *words, const uchar *data, ...)
 360 {
 361   uchar *f1=NULL,*f2=NULL;
 362   va_list ap;
 363   uchar *buf, *maxbuf;
 364
 365   va_start(ap, data);
 366   buf = va_arg(ap, uchar *);
 367   maxbuf = va_arg(ap, uchar *);
 368   va_end(ap);
 369
 370   if (request) {
 371     f2 = "*|Dialect=[Z]\n";
 372   } else {
 373     if (CVAL(words,0) == 1) {
 374       f1 = "Core Protocol\nDialectIndex=[d]";
 375     } else if (CVAL(words,0) == 17) {
 376       f1 = "NT1 Protocol\nDialectIndex=[d]\nSecMode=[B]\nMaxMux=[d]\nNumVcs=[d]\nMaxBuffer=[D]\nRawSize=[D]\nSessionKey=[W]\nCapabilities=[W]\nServerTime=[T3]TimeZone=[d]\nCryptKey=";
 377     } else if (CVAL(words,0) == 13) {
 378       f1 = "Coreplus/Lanman1/Lanman2 Protocol\nDialectIndex=[d]\nSecMode=[w]\nMaxXMit=[d]\nMaxMux=[d]\nMaxVcs=[d]\nBlkMode=[w]\nSessionKey=[W]\nServerTime=[T1]TimeZone=[d]\nRes=[W]\nCryptKey=";
 379     }
 380   }
 381
 382   if (f1)
 383     fdata(words+1,f1,MIN(words + 1 + CVAL(words,0)*2,maxbuf));
 384   else
 385     print_data(words+1,MIN(CVAL(words,0)*2,PTR_DIFF(maxbuf,words+1)));
 386
 387   if (f2)
 388     fdata(data+2,f2,MIN(data + 2 + SVAL(data,0),maxbuf));
 389   else
 390     print_data(data+2,MIN(SVAL(data,0),PTR_DIFF(maxbuf,data+2)));
 391
 392 }
 393
 394 static void
 395 print_sesssetup(const uchar *words, const uchar *data, ...)
 396 {
 397   int wcnt = CVAL(words,0);
 398   uchar *f1=NULL,*f2=NULL;
 399   va_list ap;
 400   uchar *buf, *maxbuf;
 401
 402   va_start(ap, data);
 403   buf = va_arg(ap, uchar *);
 404   maxbuf = va_arg(ap, uchar *);
 405   va_end(ap);
 406
 407   if (request) {
 408     if (wcnt==10) {
 409       f1 = "Com2=[w]\nOff2=[d]\nBufSize=[d]\nMpxMax=[d]\nVcNum=[d]\nSessionKey=[W]\nPassLen=[d]\nCryptLen=[d]\nCryptOff=[d]\nPass&Name=\n";
 410     } else {
 411       f1 = "Com2=[B]\nRes1=[B]\nOff2=[d]\nMaxBuffer=[d]\nMaxMpx=[d]\nVcNumber=[d]\nSessionKey=[W]\nCaseInsensitivePasswordLength=[d]\nCaseSensitivePasswordLength=[d]\nRes=[W]\nCapabilities=[W]\nPass1&Pass2&Account&Domain&OS&LanMan=\n";
 412     }
 413   } else {
 414     if (CVAL(words,0) == 3) {
 415       f1 = "Com2=[w]\nOff2=[d]\nAction=[w]\n";
 416     } else if (CVAL(words,0) == 13) {
 417       f1 = "Com2=[B]\nRes=[B]\nOff2=[d]\nAction=[w]\n";
 418       f2 = "NativeOS=[S]\nNativeLanMan=[S]\nPrimaryDomain=[S]\n";
 419     }
 420   }
 421
 422   if (f1)
 423     fdata(words+1,f1,MIN(words + 1 + CVAL(words,0)*2,maxbuf));
 424   else
 425     print_data(words+1,MIN(CVAL(words,0)*2,PTR_DIFF(maxbuf,words+1)));
 426
 427   if (f2)
 428     fdata(data+2,f2,MIN(data + 2 + SVAL(data,0),maxbuf));
 429   else
 430     print_data(data+2,MIN(SVAL(data,0),PTR_DIFF(maxbuf,data+2)));
 431 }
 432
 433
 434 static struct smbfns smb_fns[] =
 435 {
 436 {-1,"SMBunknown",0,DEFDESCRIPT},
 437
 438 {SMBtcon,"SMBtcon",0,
 439    {NULL,"Path=[Z]\nPassword=[Z]\nDevice=[Z]\n",
 440     "MaxXmit=[d]\nTreeId=[d]\n",NULL,
 441     NULL}},
 442
 443
 444 {SMBtdis,"SMBtdis",0,DEFDESCRIPT},
 445 {SMBexit,"SMBexit",0,DEFDESCRIPT},
 446 {SMBioctl,"SMBioctl",0,DEFDESCRIPT},
 447
 448 {SMBecho,"SMBecho",0,
 449    {"ReverbCount=[d]\n",NULL,
 450     "SequenceNum=[d]\n",NULL,
 451     NULL}},
 452
 453 {SMBulogoffX, "SMBulogoffX",FLG_CHAIN,DEFDESCRIPT},
 454
 455 {SMBgetatr,"SMBgetatr",0,
 456    {NULL,"Path=[Z]\n",
 457     "Attribute=[A]\nTime=[T2]Size=[D]\nRes=([w,w,w,w,w])\n",NULL,
 458     NULL}},
 459
 460 {SMBsetatr,"SMBsetatr",0,
 461    {"Attribute=[A]\nTime=[T2]Res=([w,w,w,w,w])\n","Path=[Z]\n",
 462     NULL,NULL,NULL}},
 463
 464 {SMBchkpth,"SMBchkpth",0,
 465    {NULL,"Path=[Z]\n",NULL,NULL,NULL}},
 466
 467 {SMBsearch,"SMBsearch",0,
 468 {"Count=[d]\nAttrib=[A]\n","Path=[Z]\nBlkType=[B]\nBlkLen=[d]\n|Res1=[B]\nMask=[s11]\nSrv1=[B]\nDirIndex=[d]\nSrv2=[w]\nRes2=[W]\n",
 469 "Count=[d]\n","BlkType=[B]\nBlkLen=[d]\n*\nRes1=[B]\nMask=[s11]\nSrv1=[B]\nDirIndex=[d]\nSrv2=[w]\nRes2=[W]\nAttrib=[a]\nTime=[T1]Size=[D]\nName=[s13]\n",NULL}},
 470
 471
 472 {SMBopen,"SMBopen",0,
 473    {"Mode=[w]\nAttribute=[A]\n","Path=[Z]\n",
 474     "Handle=[d]\nOAttrib=[A]\nTime=[T2]Size=[D]\nAccess=[w]\n",NULL,
 475     NULL}},
 476
 477 {SMBcreate,"SMBcreate",0,
 478    {"Attrib=[A]\nTime=[T2]","Path=[Z]\n",
 479     "Handle=[d]\n",NULL,
 480     NULL}},
 481
 482 {SMBmknew,"SMBmknew",0,
 483    {"Attrib=[A]\nTime=[T2]","Path=[Z]\n",
 484     "Handle=[d]\n",NULL,
 485     NULL}},
 486
 487 {SMBunlink,"SMBunlink",0,
 488    {"Attrib=[A]\n","Path=[Z]\n",NULL,NULL,NULL}},
 489
 490 {SMBread,"SMBread",0,
 491    {"Handle=[d]\nByteCount=[d]\nOffset=[D]\nCountLeft=[d]\n",NULL,
 492     "Count=[d]\nRes=([w,w,w,w])\n",NULL,NULL}},
 493
 494 {SMBwrite,"SMBwrite",0,
 495    {"Handle=[d]\nByteCount=[d]\nOffset=[D]\nCountLeft=[d]\n",NULL,
 496     "Count=[d]\n",NULL,NULL}},
 497
 498 {SMBclose,"SMBclose",0,
 499    {"Handle=[d]\nTime=[T2]",NULL,NULL,NULL,NULL}},
 500
 501 {SMBmkdir,"SMBmkdir",0,
 502    {NULL,"Path=[Z]\n",NULL,NULL,NULL}},
 503
 504 {SMBrmdir,"SMBrmdir",0,
 505    {NULL,"Path=[Z]\n",NULL,NULL,NULL}},
 506
 507 {SMBdskattr,"SMBdskattr",0,
 508 {NULL,NULL,
 509 "TotalUnits=[d]\nBlocksPerUnit=[d]\nBlockSize=[d]\nFreeUnits=[d]\nMedia=[w]\n",
 510 NULL,NULL}},
 511
 512 {SMBmv,"SMBmv",0,
 513    {"Attrib=[A]\n","OldPath=[Z]\nNewPath=[Z]\n",NULL,NULL,NULL}},
 514
 515 /* this is a Pathworks specific call, allowing the
 516    changing of the root path */
 517 {pSETDIR,"SMBsetdir",0,
 518    {NULL,"Path=[Z]\n",NULL,NULL,NULL}},
 519
 520 {SMBlseek,"SMBlseek",0,
 521    {"Handle=[d]\nMode=[w]\nOffset=[D]\n","Offset=[D]\n",NULL,NULL}},
 522
 523 {SMBflush,"SMBflush",0,
 524    {"Handle=[d]\n",NULL,NULL,NULL,NULL}},
 525
 526 {SMBsplopen,"SMBsplopen",0,
 527    {"SetupLen=[d]\nMode=[w]\n","Ident=[Z]\n","Handle=[d]\n",NULL,NULL}},
 528
 529 {SMBsplclose,"SMBsplclose",0,
 530    {"Handle=[d]\n",NULL,NULL,NULL,NULL}},
 531
 532 {SMBsplretq,"SMBsplretq",0,
 533    {"MaxCount=[d]\nStartIndex=[d]\n",NULL,
 534     "Count=[d]\nIndex=[d]\n",
 535     "*Time=[T2]Status=[B]\nJobID=[d]\nSize=[D]\nRes=[B]Name=[s16]\n",
 536     NULL}},
 537
 538 {SMBsplwr,"SMBsplwr",0,
 539    {"Handle=[d]\n",NULL,NULL,NULL,NULL}},
 540
 541 {SMBlock,"SMBlock",0,
 542    {"Handle=[d]\nCount=[D]\nOffset=[D]\n",NULL,NULL,NULL,NULL}},
 543
 544 {SMBunlock,"SMBunlock",0,
 545    {"Handle=[d]\nCount=[D]\nOffset=[D]\n",NULL,NULL,NULL,NULL}},
 546
 547 /* CORE+ PROTOCOL FOLLOWS */
 548
 549 {SMBreadbraw,"SMBreadbraw",0,
 550 {"Handle=[d]\nOffset=[D]\nMaxCount=[d]\nMinCount=[d]\nTimeOut=[D]\nRes=[d]\n",
 551  NULL,NULL,NULL,NULL}},
 552
 553 {SMBwritebraw,"SMBwritebraw",0,
 554 {"Handle=[d]\nTotalCount=[d]\nRes=[w]\nOffset=[D]\nTimeOut=[D]\nWMode=[w]\nRes2=[W]\n|DataSize=[d]\nDataOff=[d]\n",
 555 NULL,"WriteRawAck",NULL,NULL}},
 556
 557 {SMBwritec,"SMBwritec",0,
 558    {NULL,NULL,"Count=[d]\n",NULL,NULL}},
 559
 560 {SMBwriteclose,"SMBwriteclose",0,
 561    {"Handle=[d]\nCount=[d]\nOffset=[D]\nTime=[T2]Res=([w,w,w,w,w,w])",NULL,
 562     "Count=[d]\n",NULL,NULL}},
 563
 564 {SMBlockread,"SMBlockread",0,
 565    {"Handle=[d]\nByteCount=[d]\nOffset=[D]\nCountLeft=[d]\n",NULL,
 566     "Count=[d]\nRes=([w,w,w,w])\n",NULL,NULL}},
 567
 568 {SMBwriteunlock,"SMBwriteunlock",0,
 569    {"Handle=[d]\nByteCount=[d]\nOffset=[D]\nCountLeft=[d]\n",NULL,
 570     "Count=[d]\n",NULL,NULL}},
 571
 572 {SMBreadBmpx,"SMBreadBmpx",0,
 573 {"Handle=[d]\nOffset=[D]\nMaxCount=[d]\nMinCount=[d]\nTimeOut=[D]\nRes=[w]\n",
 574 NULL,
 575 "Offset=[D]\nTotCount=[d]\nRemaining=[d]\nRes=([w,w])\nDataSize=[d]\nDataOff=[d]\n",
 576 NULL,NULL}},
 577
 578 {SMBwriteBmpx,"SMBwriteBmpx",0,
 579 {"Handle=[d]\nTotCount=[d]\nRes=[w]\nOffset=[D]\nTimeOut=[D]\nWMode=[w]\nRes2=[W]\nDataSize=[d]\nDataOff=[d]\n",NULL,
 580 "Remaining=[d]\n",NULL,NULL}},
 581
 582 {SMBwriteBs,"SMBwriteBs",0,
 583    {"Handle=[d]\nTotCount=[d]\nOffset=[D]\nRes=[W]\nDataSize=[d]\nDataOff=[d]\n",NULL,
 584     "Count=[d]\n",NULL,NULL}},
 585
 586 {SMBsetattrE,"SMBsetattrE",0,
 587    {"Handle=[d]\nCreationTime=[T2]AccessTime=[T2]ModifyTime=[T2]",NULL,
 588       NULL,NULL,NULL}},
 589
 590 {SMBgetattrE,"SMBgetattrE",0,
 591 {"Handle=[d]\n",NULL,
 592  "CreationTime=[T2]AccessTime=[T2]ModifyTime=[T2]Size=[D]\nAllocSize=[D]\nAttribute=[A]\n",NULL,NULL}},
 593
 594 {SMBtranss,"SMBtranss",0,DEFDESCRIPT},
 595 {SMBioctls,"SMBioctls",0,DEFDESCRIPT},
 596
 597 {SMBcopy,"SMBcopy",0,
 598    {"TreeID2=[d]\nOFun=[w]\nFlags=[w]\n","Path=[S]\nNewPath=[S]\n",
 599     "CopyCount=[d]\n","|ErrStr=[S]\n",NULL}},
 600
 601 {SMBmove,"SMBmove",0,
 602    {"TreeID2=[d]\nOFun=[w]\nFlags=[w]\n","Path=[S]\nNewPath=[S]\n",
 603     "MoveCount=[d]\n","|ErrStr=[S]\n",NULL}},
 604
 605 {SMBopenX,"SMBopenX",FLG_CHAIN,
 606 {"Com2=[w]\nOff2=[d]\nFlags=[w]\nMode=[w]\nSearchAttrib=[A]\nAttrib=[A]\nTime=[T2]OFun=[w]\nSize=[D]\nTimeOut=[D]\nRes=[W]\n","Path=[S]\n",
 607 "Com2=[w]\nOff2=[d]\nHandle=[d]\nAttrib=[A]\nTime=[T2]Size=[D]\nAccess=[w]\nType=[w]\nState=[w]\nAction=[w]\nFileID=[W]\nRes=[w]\n",NULL,NULL}},
 608
 609 {SMBreadX,"SMBreadX",FLG_CHAIN,
 610 {"Com2=[w]\nOff2=[d]\nHandle=[d]\nOffset=[D]\nMaxCount=[d]\nMinCount=[d]\nTimeOut=[D]\nCountLeft=[d]\n",NULL,
 611 "Com2=[w]\nOff2=[d]\nRemaining=[d]\nRes=[W]\nDataSize=[d]\nDataOff=[d]\nRes=([w,w,w,w])\n",NULL,NULL}},
 612
 613 {SMBwriteX,"SMBwriteX",FLG_CHAIN,
 614 {"Com2=[w]\nOff2=[d]\nHandle=[d]\nOffset=[D]\nTimeOut=[D]\nWMode=[w]\nCountLeft=[d]\nRes=[w]\nDataSize=[d]\nDataOff=[d]\n",NULL,
 615 "Com2=[w]\nOff2=[d]\nCount=[d]\nRemaining=[d]\nRes=[W]\n",NULL,NULL}},
 616
 617 {SMBlockingX,"SMBlockingX",FLG_CHAIN,
 618 {"Com2=[w]\nOff2=[d]\nHandle=[d]\nLockType=[w]\nTimeOut=[D]\nUnlockCount=[d]\nLockCount=[d]\n",
 619 "*Process=[d]\nOffset=[D]\nLength=[D]\n",
 620 "Com2=[w]\nOff2=[d]\n"}},
 621
 622 {SMBffirst,"SMBffirst",0,
 623 {"Count=[d]\nAttrib=[A]\n","Path=[Z]\nBlkType=[B]\nBlkLen=[d]\n|Res1=[B]\nMask=[s11]\nSrv1=[B]\nDirIndex=[d]\nSrv2=[w]\n",
 624 "Count=[d]\n","BlkType=[B]\nBlkLen=[d]\n*\nRes1=[B]\nMask=[s11]\nSrv1=[B]\nDirIndex=[d]\nSrv2=[w]\nRes2=[W]\nAttrib=[a]\nTime=[T1]Size=[D]\nName=[s13]\n",NULL}},
 625
 626 {SMBfunique,"SMBfunique",0,
 627 {"Count=[d]\nAttrib=[A]\n","Path=[Z]\nBlkType=[B]\nBlkLen=[d]\n|Res1=[B]\nMask=[s11]\nSrv1=[B]\nDirIndex=[d]\nSrv2=[w]\n",
 628 "Count=[d]\n","BlkType=[B]\nBlkLen=[d]\n*\nRes1=[B]\nMask=[s11]\nSrv1=[B]\nDirIndex=[d]\nSrv2=[w]\nRes2=[W]\nAttrib=[a]\nTime=[T1]Size=[D]\nName=[s13]\n",NULL}},
 629
 630 {SMBfclose,"SMBfclose",0,
 631 {"Count=[d]\nAttrib=[A]\n","Path=[Z]\nBlkType=[B]\nBlkLen=[d]\n|Res1=[B]\nMask=[s11]\nSrv1=[B]\nDirIndex=[d]\nSrv2=[w]\n",
 632 "Count=[d]\n","BlkType=[B]\nBlkLen=[d]\n*\nRes1=[B]\nMask=[s11]\nSrv1=[B]\nDirIndex=[d]\nSrv2=[w]\nRes2=[W]\nAttrib=[a]\nTime=[T1]Size=[D]\nName=[s13]\n",NULL}},
 633
 634 {SMBfindnclose, "SMBfindnclose", 0,
 635    {"Handle=[d]\n",NULL,NULL,NULL,NULL}},
 636
 637 {SMBfindclose, "SMBfindclose", 0,
 638    {"Handle=[d]\n",NULL,NULL,NULL,NULL}},
 639
 640 {SMBsends,"SMBsends",0,
 641    {NULL,"Source=[Z]\nDest=[Z]\n",NULL,NULL,NULL}},
 642
 643 {SMBsendstrt,"SMBsendstrt",0,
 644    {NULL,"Source=[Z]\nDest=[Z]\n","GroupID=[d]\n",NULL,NULL}},
 645
 646 {SMBsendend,"SMBsendend",0,
 647    {"GroupID=[d]\n",NULL,NULL,NULL,NULL}},
 648
 649 {SMBsendtxt,"SMBsendtxt",0,
 650    {"GroupID=[d]\n",NULL,NULL,NULL,NULL}},
 651
 652 {SMBsendb,"SMBsendb",0,
 653    {NULL,"Source=[Z]\nDest=[Z]\n",NULL,NULL,NULL}},
 654
 655 {SMBfwdname,"SMBfwdname",0,DEFDESCRIPT},
 656 {SMBcancelf,"SMBcancelf",0,DEFDESCRIPT},
 657 {SMBgetmac,"SMBgetmac",0,DEFDESCRIPT},
 658
 659 {SMBnegprot,"SMBnegprot",0,
 660    {NULL,NULL,NULL,NULL,print_negprot}},
 661
 662 {SMBsesssetupX,"SMBsesssetupX",FLG_CHAIN,
 663    {NULL,NULL,NULL,NULL,print_sesssetup}},
 664
 665 {SMBtconX,"SMBtconX",FLG_CHAIN,
 666 {"Com2=[w]\nOff2=[d]\nFlags=[w]\nPassLen=[d]\nPasswd&Path&Device=\n",NULL,
 667  "Com2=[w]\nOff2=[d]\n","ServiceType=[S]\n",NULL}},
 668
 669 {SMBtrans2, "SMBtrans2",0,{NULL,NULL,NULL,NULL,print_trans2}},
 670
 671 {SMBtranss2, "SMBtranss2", 0,DEFDESCRIPT},
 672 {SMBctemp,"SMBctemp",0,DEFDESCRIPT},
 673 {SMBreadBs,"SMBreadBs",0,DEFDESCRIPT},
 674 {SMBtrans,"SMBtrans",0,{NULL,NULL,NULL,NULL,print_trans}},
 675
 676 {SMBnttrans,"SMBnttrans", 0, DEFDESCRIPT},
 677 {SMBnttranss,"SMBnttranss", 0, DEFDESCRIPT},
 678
 679 {SMBntcreateX,"SMBntcreateX", FLG_CHAIN,
 680 {"Com2=[w]\nOff2=[d]\nRes=[b]\nNameLen=[d]\nFlags=[W]\nRootDirectoryFid=[D]\nAccessMask=[W]\nAllocationSize=[L]\nExtFileAttributes=[W]\nShareAccess=[W]\nCreateDisposition=[W]\nCreateOptions=[W]\nImpersonationLevel=[W]\nSecurityFlags=[b]\n","Path=[S]\n",
 681          "Com2=[w]\nOff2=[d]\nOplockLevel=[b]\nFid=[d]\nCreateAction=[W]\nCreateTime=[T3]LastAccessTime=[T3]LastWriteTime=[T3]ChangeTime=[T3]ExtFileAttributes=[W]\nAllocationSize=[L]\nEndOfFile=[L]\nFileType=[w]\nDeviceState=[w]\nDirectory=[b]\n", NULL}},
 682
 683 {SMBntcancel,"SMBntcancel", 0, DEFDESCRIPT},
 684
 685 {-1,NULL,0,DEFDESCRIPT}};
 686
 687
 688 /*
 689  * print a SMB message
 690  */
 691 static void
 692 print_smb(const uchar *buf, const uchar *maxbuf)
 693 {
 694     int command;
 695     const uchar *words, *data;
 696     struct smbfns *fn;
 697     char *fmt_smbheader =
 698         "[P4]SMB Command   =  [B]\nError class   =  [BP1]\nError code    =  [d]\nFlags1        =  [B]\nFlags2        =  [B][P13]\nTree ID       =  [d]\nProc ID       =  [d]\nUID           =  [d]\nMID           =  [d]\nWord Count    =  [b]\n";
 699
 700     request = (CVAL(buf, 9) & 0x80) ? 0 : 1;
 701
 702     command = CVAL(buf, 4);
 703
 704     fn = smbfind(command, smb_fns);
 705
 706     if (vflag > 1)
 707         printf("\n");
 708
 709     printf("SMB PACKET: %s (%s)\n", fn->name, request ? "REQUEST" : "REPLY");
 710
 711     if (vflag < 2)
 712         return;
 713
 714     /* print out the header */
 715     fdata(buf, fmt_smbheader, buf + 33);
 716
 717     if (CVAL(buf, 5)) {
 718         int class = CVAL(buf, 5);
 719         int num = SVAL(buf, 7);
 720         printf("SMBError = %s\n", smb_errstr(class, num));
 721     }
 722
 723     words = buf + 32;
 724     data = words + 1 + CVAL(words,0)*2;
 725
 726     while (words && data) {
 727         char *f1, *f2;
 728         int wct = CVAL(words, 0);
 729
 730         if (request) {
 731             f1 = fn->descript.req_f1;
 732             f2 = fn->descript.req_f2;
 733         } else {
 734             f1 = fn->descript.rep_f1;
 735             f2 = fn->descript.rep_f2;
 736         }
 737
 738         if (fn->descript.fn)
 739             fn->descript.fn(words, data, buf, maxbuf);
 740         else {
 741             if (f1) {
 742                 printf("smbvwv[]=\n");
 743                 fdata(words + 1, f1, words + 1 + wct * 2);
 744             } else if (wct) {
 745                 int i;
 746                 int v;
 747                 printf("smbvwv[]=\n");
 748                 for (i = 0; i < wct; i++) {
 749                     v = SVAL(words + 1, 2 * i);
 750                     printf("smb_vwv[%d]=%d (0x%X)\n", i, v, v);
 751                 }
 752             }
 753
 754             if (f2) {
 755                 printf("smbbuf[]=\n");
 756                 fdata(data + 2, f2, maxbuf);
 757             } else {
 758                 int bcc = SVAL(data, 0);
 759                 printf("smb_bcc=%d\n", bcc);
 760                 if (bcc > 0) {
 761                     printf("smb_buf[]=\n");
 762                     print_data(data + 2, MIN(bcc, PTR_DIFF(maxbuf, data + 2)));
 763                 }
 764             }
 765         }
 766
 767         if ((fn->flags & FLG_CHAIN) != 0&& CVAL(words, 0) &&
 768             SVAL(words, 1) != 0xFF) {
 769             command = SVAL(words, 1);
 770             words = buf + SVAL(words, 3);
 771             data = words + 1 + CVAL(words, 0) * 2;
 772
 773             fn = smbfind(command, smb_fns);
 774
 775             printf("\nSMB PACKET: %s (%s) (CHAINED)\n",
 776                 fn->name, request ? "REQUEST" : "REPLY");
 777         } else
 778             words = data = NULL;
 779     }
 780
 781     printf("\n");
 782 }
 783
 784
 785 /*
 786  * print a NBT packet received across tcp on port 139
 787  */
 788 void
 789 nbt_tcp_print(const uchar *data, int length)
 790 {
 791     const uchar *maxbuf = data + length;
 792     int flags = CVAL(data, 0);
 793     int nbt_len = RSVAL(data, 2);
 794
 795     startbuf = data;
 796     if (maxbuf <= data)
 797         return;
 798
 799     if (vflag > 1)
 800         printf ("\n>>> ");
 801
 802     printf("NBT Packet");
 803
 804     if (vflag < 2)
 805         return;
 806
 807     printf("\n");
 808
 809     switch (flags) {
 810     case 1:
 811         printf("flags=0x%x\n", flags);
 812     case 0:
 813         data = fdata(data, "NBT Session Packet\nFlags=[rw]\nLength=[rd]\n",
 814             data + 4);
 815         if (data == NULL)
 816             break;
 817         if (memcmp(data,"\377SMB",4) == 0) {
 818             if (nbt_len > PTR_DIFF(maxbuf, data))
 819             printf("WARNING: Short packet. Try increasing the snap length (%lu)\n",
 820                (unsigned long)PTR_DIFF(maxbuf, data));
 821             print_smb(data, maxbuf > data + nbt_len ? data + nbt_len : maxbuf);
 822         } else
 823             printf("Session packet:(raw data?)\n");
 824         break;
 825
 826         case 0x81:
 827             data = fdata(data,
 828                 "NBT Session Request\nFlags=[rW]\nDestination=[n1]\nSource=[n1]\n",
 829                 maxbuf);
 830             break;
 831
 832         case 0x82:
 833             data = fdata(data, "NBT Session Granted\nFlags=[rW]\n", maxbuf);
 834             break;
 835
 836         case 0x83:
 837           {
 838             int ecode = CVAL(data,4);
 839
 840             data = fdata(data, "NBT SessionReject\nFlags=[rW]\nReason=[B]\n",
 841                 maxbuf);
 842             switch (ecode) {
 843             case 0x80:
 844                 printf("Not listening on called name\n");
 845                 break;
 846             case 0x81:
 847                 printf("Not listening for calling name\n");
 848                 break;
 849             case 0x82:
 850                 printf("Called name not present\n");
 851                 break;
 852             case 0x83:
 853                 printf("Called name present, but insufficient resources\n");
 854                 break;
 855             default:
 856                 printf("Unspecified error 0x%X\n", ecode);
 857                 break;
 858             }
 859           }
 860             break;
 861
 862         case 0x85:
 863             data = fdata(data, "NBT Session Keepalive\nFlags=[rW]\n", maxbuf);
 864             break;
 865
 866         default:
 867             printf("flags=0x%x\n", flags);
 868             data = fdata(data, "NBT - Unknown packet type\nType=[rW]\n", maxbuf);
 869     }
 870     printf("\n");
 871     fflush(stdout);
 872 }
 873
 874
 875 /*
 876  * print a NBT packet received across udp on port 137
 877  */
 878 void
 879 nbt_udp137_print(const uchar *data, int length)
 880 {
 881   const uchar *maxbuf = data + length;
 882   int name_trn_id = RSVAL(data,0);
 883   int response = (CVAL(data,2)>>7);
 884   int opcode = (CVAL(data,2) >> 3) & 0xF;
 885   int nm_flags = ((CVAL(data,2) & 0x7) << 4) + (CVAL(data,3)>>4);
 886   int rcode = CVAL(data,3) & 0xF;
 887   int qdcount = RSVAL(data,4);
 888   int ancount = RSVAL(data,6);
 889   int nscount = RSVAL(data,8);
 890   int arcount = RSVAL(data,10);
 891   char *opcodestr;
 892   const char *p;
 893
 894   startbuf = data;
 895
 896   if (maxbuf <= data) return;
 897
 898   if (vflag > 1)
 899     printf("\n>>> ");
 900
 901   printf("NBT UDP PACKET(137): ");
 902
 903   switch (opcode) {
 904   case 0: opcodestr = "QUERY"; break;
 905   case 5: opcodestr = "REGISTRATION"; break;
 906   case 6: opcodestr = "RELEASE"; break;
 907   case 7: opcodestr = "WACK"; break;
 908   case 8: opcodestr = "REFRESH(8)"; break;
 909   case 9: opcodestr = "REFRESH"; break;
 910   default: opcodestr = "OPUNKNOWN"; break;
 911   }
 912   printf("%s", opcodestr);
 913   if (response) {
 914     if (rcode)
 915       printf("; NEGATIVE");
 916     else
 917       printf("; POSITIVE");
 918   }
 919
 920   if (response)
 921     printf("; RESPONSE");
 922   else
 923     printf("; REQUEST");
 924
 925   if (nm_flags&1)
 926     printf("; BROADCAST");
 927   else
 928     printf("; UNICAST");
 929
 930   if (vflag < 2)
 931     return;
 932
 933   printf("\nTrnID=0x%X\nOpCode=%d\nNmFlags=0x%X\nRcode=%d\nQueryCount=%d\nAnswerCount=%d\nAuthorityCount=%d\nAddressRecCount=%d\n",
 934          name_trn_id,opcode,nm_flags,rcode,qdcount,ancount,nscount,arcount);
 935
 936   p = data + 12;
 937
 938   {
 939     int total = ancount+nscount+arcount;
 940     int i;
 941
 942     if (qdcount>100 || total>100) {
 943       printf("Corrupt packet??\n");
 944       return;
 945     }
 946
 947     if (qdcount) {
 948       printf("QuestionRecords:\n");
 949       for (i=0;i<qdcount;i++)
 950         p = fdata(p,"|Name=[n1]\nQuestionType=[rw]\nQuestionClass=[rw]\n#",maxbuf);
 951         if (p == NULL)
 952           goto out;
 953     }
 954
 955     if (total) {
 956       printf("\nResourceRecords:\n");
 957       for (i=0;i<total;i++) {
 958         int rdlen;
 959         int restype;
 960         p = fdata(p,"Name=[n1]\n#",maxbuf);
 961         if (p == NULL)
 962           goto out;
 963         restype = RSVAL(p,0);
 964         p = fdata(p,"ResType=[rw]\nResClass=[rw]\nTTL=[rD]\n",p+8);
 965         if (p == NULL)
 966           goto out;
 967         rdlen = RSVAL(p,0);
 968         printf("ResourceLength=%d\nResourceData=\n",rdlen);
 969         p += 2;
 970         if (rdlen == 6) {
 971           p = fdata(p,"AddrType=[rw]\nAddress=[b.b.b.b]\n",p+rdlen);
 972           if (p == NULL)
 973             goto out;
 974         } else {
 975           if (restype == 0x21) {
 976             int numnames = CVAL(p,0);
 977             p = fdata(p,"NumNames=[B]\n",p+1);
 978             if (p == NULL)
 979               goto out;
 980             while (numnames--) {
 981               p = fdata(p,"Name=[n2]\t#",maxbuf);
 982               if (p[0] & 0x80) printf("<GROUP> ");
 983               switch (p[0] & 0x60) {
 984               case 0x00: printf("B "); break;
 985               case 0x20: printf("P "); break;
 986               case 0x40: printf("M "); break;
 987               case 0x60: printf("_ "); break;
 988               }
 989               if (p[0] & 0x10) printf("<DEREGISTERING> ");
 990               if (p[0] & 0x08) printf("<CONFLICT> ");
 991               if (p[0] & 0x04) printf("<ACTIVE> ");
 992               if (p[0] & 0x02) printf("<PERMANENT> ");
 993               printf("\n");
 994               p += 2;
 995             }
 996           } else {
 997             print_data(p, min(rdlen, length - ((const uchar *)p - data)));
 998             p += rdlen;
 999           }
1000         }
1001       }
1002     }
1003   }
1004
1005   if ((uchar*)p < maxbuf) {
1006     fdata(p,"AdditionalData:\n",maxbuf);
1007   }
1008
1009 out:
1010   printf("\n");
1011   fflush(stdout);
1012 }
1013
1014
1015
1016 /*
1017  * print a NBT packet received across udp on port 138
1018  */
1019 void nbt_udp138_print(const uchar *data, int length)
1020 {
1021   const uchar *maxbuf = data + length;
1022
1023   if (maxbuf > snapend) maxbuf = snapend;
1024   if (maxbuf <= data) return;
1025   startbuf = data;
1026
1027   if (vflag < 2) {
1028     printf("NBT UDP PACKET(138)");
1029     return;
1030   }
1031
1032   data = fdata(data,"\n>>> NBT UDP PACKET(138) Res=[rw] ID=[rw] IP=[b.b.b.b] Port=[rd] Length=[rd] Res2=[rw]\nSourceName=[n1]\nDestName=[n1]\n#",maxbuf);
1033
1034   if (data != NULL)
1035     print_smb(data,maxbuf);
1036
1037   printf("\n");
1038   fflush(stdout);
1039 }
1040
1041
1042
1043 /*
1044    print netbeui frames
1045 */
1046 void netbeui_print(u_short control, const uchar *data, int length)
1047 {
1048   const uchar *maxbuf = data + length;
1049   int len;
1050   int command;
1051   const uchar *data2;
1052   int is_truncated = 0;
1053
1054   if (maxbuf > snapend)
1055     maxbuf = snapend;
1056   if (&data[7] >= maxbuf)
1057     goto out;
1058   len = SVAL(data,0);
1059   command = CVAL(data,4);
1060   data2 = data + len;
1061   if (data2 >= maxbuf) {
1062     data2 = maxbuf;
1063     is_truncated = 1;
1064   }
1065
1066   startbuf = data;
1067
1068   if (vflag < 2) {
1069     printf("NetBeui Packet");
1070     return;
1071   }
1072
1073   printf("\n>>> NetBeui Packet\nType=0x%X ", control);
1074   data = fdata(data,"Length=[d] Signature=[w] Command=[B]\n#",maxbuf);
1075   if (data == NULL)
1076     goto out;
1077
1078   switch (command) {
1079   case 0xA:
1080     data = fdata(data,"NameQuery:[P1]\nSessionNumber=[B]\nNameType=[B][P2]\nResponseCorrelator=[w]\nDestination=[n2]\nSource=[n2]\n",data2);
1081     break;
1082
1083   case 0x8:
1084     data = fdata(data,"NetbiosDataGram:[P7]\nDestination=[n2]\nSource=[n2]\n",data2);
1085     break;
1086
1087   case 0xE:
1088     data = fdata(data,"NameRecognise:\n[P1]\nData2=[w]\nTransmitCorrelator=[w]\nResponseCorelator=[w]\nDestination=[n2]\nSource=[n2]\n",data2);
1089     break;
1090
1091   case 0x19:
1092     data = fdata(data,"SessionInitialise:\nData1=[B]\nData2=[w]\nTransmitCorrelator=[w]\nResponseCorelator=[w]\nRemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n",data2);
1093     break;
1094
1095   case 0x17:
1096     data = fdata(data,"SessionConfirm:\nData1=[B]\nData2=[w]\nTransmitCorrelator=[w]\nResponseCorelator=[w]\nRemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n",data2);
1097     break;
1098
1099   case 0x16:
1100     data = fdata(data,"NetbiosDataOnlyLast:\nFlags=[{|NO_ACK|PIGGYBACK_ACK_ALLOWED|PIGGYBACK_ACK_INCLUDED|}]\nResyncIndicator=[w][P2]\nResponseCorelator=[w]\nRemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n",data2);
1101     break;
1102
1103   case 0x14:
1104     data = fdata(data,"NetbiosDataAck:\n[P3]TransmitCorrelator=[w][P2]\nRemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n",data2);
1105     break;
1106
1107   case 0x18:
1108     data = fdata(data,"SessionEnd:\n[P1]Data2=[w][P4]\nRemoteSessionNumber=[B]\nLocalSessionNumber=[B]\n",data2);
1109     break;
1110
1111   case 0x1f:
1112     data = fdata(data,"SessionAlive\n",data2);
1113     break;
1114
1115   default:
1116     data = fdata(data,"Unknown Netbios Command ",data2);
1117     break;
1118   }
1119   if (data == NULL)
1120     goto out;
1121
1122   if (is_truncated) {
1123     /* data2 was past the end of the buffer */
1124     goto out;
1125   }
1126
1127   /* If there isn't enough data for "\377SMB", don't look for it. */
1128   if (&data2[3] >= maxbuf)
1129     goto out;
1130
1131   if (memcmp(data2,"\377SMB",4)==0) {
1132     print_smb(data2,maxbuf);
1133   } else {
1134     int i;
1135     for (i=0;i<128;i++) {
1136       if (&data2[i+3] >= maxbuf)
1137         break;
1138       if (memcmp(&data2[i],"\377SMB",4)==0) {
1139         printf("found SMB packet at %d\n", i);
1140         print_smb(&data2[i],maxbuf);
1141         break;
1142       }
1143     }
1144   }
1145
1146 out:
1147   printf("\n");
1148 }
1149
1150
1151 /*
1152  * print IPX-Netbios frames
1153  */
1154 void ipx_netbios_print(const uchar *data, u_int length)
1155 {
1156     /*
1157      * this is a hack till I work out how to parse the rest of the
1158      * NetBIOS-over-IPX stuff
1159      */
1160     int i;
1161     const uchar *maxbuf;
1162
1163     maxbuf = data + length;
1164     /* Don't go past the end of the captured data in the packet. */
1165     if (maxbuf > snapend)
1166         maxbuf = snapend;
1167     startbuf = data;
1168     for (i = 0; i < 128; i++) {
1169         if (&data[i + 4] > maxbuf)
1170             break;
1171         if (memcmp(&data[i], "\377SMB", 4) == 0) {
1172             fdata(data, "\n>>> IPX transport ", &data[i]);
1173             if (data != NULL)
1174                 print_smb(&data[i], maxbuf);
1175             printf("\n");
1176             fflush(stdout);
1177             break;
1178         }
1179     }
1180     if (i == 128)
1181         fdata(data, "\n>>> Unknown IPX ", maxbuf);
1182 }