From 8daa83a594a2e98f39d764422bfbdbc62c9efd44 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Fri, 19 Apr 2024 19:20:00 +0200 Subject: Adding upstream version 2:4.20.0+dfsg. Signed-off-by: Daniel Baumann --- examples/pcap2nbench/smb.cpp | 71 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 71 insertions(+) create mode 100644 examples/pcap2nbench/smb.cpp (limited to 'examples/pcap2nbench/smb.cpp') diff --git a/examples/pcap2nbench/smb.cpp b/examples/pcap2nbench/smb.cpp new file mode 100644 index 0000000..78f8aaf --- /dev/null +++ b/examples/pcap2nbench/smb.cpp @@ -0,0 +1,71 @@ +/*\ + * pcap2nbench - Converts libpcap network traces to nbench input + * Copyright (C) 2004 Jim McDonough + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 3 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, see . + * + * Written by Anthony Liguori +\*/ + +#include + +#include "smb.hpp" + +smb::smb(const uint8_t *data, size_t length) +{ + if (length < 36) { + memset(magic, 0, 4); + return; + } + + /* This code assumes Little Endian... Don't say I didn't warn you */ + memcpy(&size, data + 2, 2); + memcpy(magic, data + 4, 4); + + command = data[8]; + + memcpy(&nt_status, data + 9, 4); + + flags = data[13]; + + memcpy(&flags2, data + 14, 2); + memcpy(&pid_hi, data + 16, 2); + memcpy(signature, data + 18, 8); + memcpy(&reserved, data + 26, 2); + memcpy(&tid, data + 28, 2); + memcpy(&pid, data + 30, 2); + memcpy(&uid, data + 32, 2); + memcpy(&mid, data + 34, 2); +} + +std::ostream &operator<<(std::ostream &lhs, const smb &rhs) +{ + lhs << "Magic: "; + for (int i = 1; i < 4; i++) { + lhs << rhs.magic[i]; + } + lhs << std::endl; + + lhs << "Command: " << (uint16_t)rhs.command << std::endl + << "NT Status: " << rhs.nt_status << std::endl + << "Flags: " << (uint16_t)rhs.flags << std::endl + << "Flags2: " << rhs.flags2 << std::endl + << "Pid Hi: " << rhs.pid_hi << std::endl + << "Tid: " << rhs.tid << std::endl + << "Pid: " << rhs.pid << std::endl + << "Uid: " << rhs.uid << std::endl + << "Mid: " << rhs.mid << std::endl; + + return lhs; +} -- cgit v1.2.3