Re: [Ethereal-dev] packet-smb patch

[Guy Harris <gharris@xxxxxxxxx>]

On Wed, Nov 07, 2001 at 10:53:37PM +1100, Ronnie Sahlberg wrote:
> Attached is a fairly large patch.
> It adds the NT Transaction (and secondary) command to the smb dissector.

Checked in, with some bug fixes and cleanups, and with some more
dissection of the Query Security Descriptor transaction (based on some
captures I've seen, and the documentation of "ZwQuerySecurityObject()"
(that's the name, inside the NT kernel, of the system call
"NtQuerySecurityObject()") from the "Windows(R) NT(R)/2000 Native API
Reference" book.  (The Win32 APIs "GetKernelObjectSecurity()" and
"GetUserObjectSecurity()" use that system call, according to that book. 
The security descriptor's structure might be documented in, for example,
the Win32 API documentation, as a "SECURITY_DESCRIPTOR" structure.)