pidl-wireshark: add the type dom_sid28 and call ad-hoc dissector
authorMatthieu Patou <mat@matws.net>
Tue, 1 Oct 2013 19:04:02 +0000 (12:04 -0700)
committerMatthieu Patou <mat@matws.net>
Mon, 4 Nov 2013 08:56:42 +0000 (00:56 -0800)
Signed-off-by: Matthieu Patou <mat@matws.net>
pidl/lib/Parse/Pidl/Wireshark/NDR.pm

index 696241db709b8554d1e5dac9daf962c44cfeac11..83ab3efc38ceec17167a9dbe533194540522fd0e 100644 (file)
@@ -1031,6 +1031,12 @@ sub Initialize($$)
        $self->register_type("NTTIME_hyper", "offset = dissect_ndr_nt_NTTIME(tvb, offset, pinfo, tree, drep, \@HF\@);","FT_ABSOLUTE_TIME", "ABSOLUTE_TIME_LOCAL", 0, "NULL", 4);
        $self->register_type("time_t", "offset = dissect_ndr_time_t(tvb, offset, pinfo,tree, drep, \@HF\@, NULL);","FT_ABSOLUTE_TIME", "ABSOLUTE_TIME_LOCAL", 0, "NULL", 4);
        $self->register_type("NTTIME_1sec", "offset = dissect_ndr_nt_NTTIME(tvb, offset, pinfo, tree, drep, \@HF\@);", "FT_ABSOLUTE_TIME", "ABSOLUTE_TIME_LOCAL", 0, "NULL", 4);
+       $self->register_type("dom_sid28", "
+               dcerpc_info *di = (dcerpc_info *)pinfo->private_data;
+               di->hf_index = \@HF\@;
+
+               offset = dissect_ndr_nt_SID28(tvb, offset, pinfo, tree, drep);",
+               "FT_STRING", "BASE_NONE", 0, "NULL", 4);
        $self->register_type("SID", "
                dcerpc_info *di = (dcerpc_info *)pinfo->private_data;