I need some help ...

Luke Kenneth Casson Leighton lkcl at switchboard.net
Tue Oct 27 18:11:48 GMT 1998


On Wed, 28 Oct 1998, Jean Francois Micouleau wrote:

> 
> To make a Windows NT happy printing on the spoolss pipe, I need to support
> the PRINTER_INFO_0 structure in the Getprinter call.
> This structure is not documented in MSDN nor in the DDK.
> 
> Note: I'm already printing by the spoolss pipe, but my NT WKS have a
> tendancy to behave in a strange manner, mainly the spooler service or
> the explorer die.
> 
> Anybody willing to help me decode and understand this struct is welcome.
> Below in a netmon capture of such a packet minus the header, and some info
> I have already decoded.
> 
> The buffer holding the struct is 1164 (0x48C) bytes long from offset
> 0x92 to 0x51D. The real needed size of this buffer is 202 (0xCA) bytes.
> This value is at offset 0x51E.
> 
> Offset 0x92: 0x450 (uint32) offset to the printer name string:
> 	     0x450+x092=0x4e2
> Offset 0x96: 0x43E (uint32) offset to the print server name string:
> 	     0x43e+0x92=0x4d0
> Offset 0x9A: 0x0 (uint32) number of jobs currently spooled.
> Offset 0x9E: 0xE (uint32) printer attributes.
> 
> I need to know what are the values between offset 0xa2 and offset 0x11e.
> What I have guess so far:
> offset 0xA2 and 0xA6: 2 memory pointers

a2 looks like a pointer: a6 does not.  compare two or more traces from
different machines or from the same machine: 0x000a07ce does not change.

> offset 0xC0: 0x0565 (uint16) -> 1381: build version of NT4.0

offset ba has changed between two traces: 36 not 34.

offset fa has also changed: 04d2 not 0648.

offset 9e has changed: 0e not 0c.

what other info do you have?  what do other data structures look like,
over-the -wire (partucularly printer_info_2 which has lots of goodies in
it).


> 00000090        50 04 00 00 3E 04 00 00 00 00 00 00 0E 00   P...>.........
> 000000A0  00 00 D3 A8 19 00 CE 07 0A 00 05 00 02 00 0D 00 ................
> 000000B0  06 00 26 00 18 02 09 00 00 00 36 00 00 00 04 00 ..&.......6.....
> 000000C0  65 05 01 00 00 00 00 00 00 00 02 00 00 00 02 00 e...............
> 000000D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................
> 000000E0  00 00 4A 02 00 00 00 00 00 00 44 D4 3E 42 00 00 ..J.......D.>B..
> 000000F0  00 00 00 00 00 00 00 00 00 00 48 06 00 00 00 00 ..........H.....
> 00000100  05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000110  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000120  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000130  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000140  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000150  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000160  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000170  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000180  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000190  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000001A0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000001B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000001C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000001D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000001E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000001F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000200  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000210  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000220  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000230  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000240  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000250  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000260  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000270  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000280  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000290  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000002A0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000002B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000002C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000002D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000002E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000002F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000300  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000310  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000320  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000330  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000340  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000350  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000360  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000370  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000380  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000390  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000003A0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000003B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000003C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000003D0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000003E0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000003F0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000400  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000410  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000420  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000430  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000440  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000450  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000460  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000470  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000480  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 00000490  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000004A0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000004B0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000004C0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
> 000004D0  5C 00 5C 00 53 00 41 00 54 00 55 00 52 00 4E 00 \.\.S.A.T.U.R.N.
> 000004E0  00 00 5C 00 5C 00 53 00 41 00 54 00 55 00 52 00 ..\.\.S.A.T.U.R.
> 000004F0  4E 00 5C 00 49 00 6D 00 70 00 72 00 69 00 6D 00 N.\.I.m.p.r.i.m.
> 00000500  61 00 6E 00 74 00 65 00 20 00 4C 00 61 00 73 00 a.n.t.e...L.a.s.
> 00000510  65 00 72 00 20 00 52 00 26 00 44 00 00 00 CA 00 e.r...R.&.D.....
> 00000520  00 00 00 00 00 00                               ......
> 
> 
> 
> 
> 
> 
> 

<a href="mailto:lkcl at samba.anu.edu.au" > Luke Kenneth Casson Leighton  </a>
<a href="http://mailhost.cb1.com/~lkcl"> Samba and Network Development </a>
<a href="http://www.samba.co.uk"       > Samba and Network Consultancy </a>



More information about the samba-technical mailing list