http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=18922
User: sahlberg
Date: 2006/08/16 08:00 AM
Log:
add a type field for the fid tracking structure and initialize it to UNKNOWN
when files are opened using NTCreateAndX and if we recognize the type set the type field to either FILE, DIR or PIPE
This is useful to know when dissecting things like security descriptors since it tells us how to dissect the specific bits of the access mask.
Only do this for NTCreateAndX for now. It is trivial to add similar tracking to some of the older obsolete calls used to open fids but no clients ever use those old calls any more.
Directory: /trunk/epan/dissectors/
Changes Path Action
+32 -11 packet-smb.c Modified
+15 -1 packet-smb.h Modified