Ethereal dissectors and pidl

Jelmer Vernooij jelmer at samba.org
Sat Mar 12 16:56:44 GMT 2005


Hi Metze,

On Fri, Mar 11, 2005 at 01:28:12AM +0100, Stefan (metze) Metzmacher wrote about 'Ethereal dissectors and pidl':
> can you check if the ethereal dissectors in lorikeet/ethereal
> still work, with the current samba4 pidl and the latest ethereal svn.

> yesterday I tried it and got a lot of errors while running make in
> lorikeet/ethereal/

> And as ethereal supports decrypting of gsskrb5 DCERPC blobs now,
> it would be very cool for me to have a proper DRSUAPI dissector...
I'm currently working on a template-like system for the ndr parts of 
pidl. I'll make sure the ethereal parsers work again with that.

Currently I generate a "tree" (basically 
a hash, very similar to $pidl) for NDR parsing that is used by both 
the Samba4 NDR parser and the ethereal parsers. This tree 
describes all sorts of things such as the order in which various
things are embedded (multiple levels of pointers, arrays, etc), 
alignment sizes, whether a variable might contain deferred data, etc ... 

The only thing the ndr_parser.epm and eparser.pm
backends then have to do is walk the tree and generate C code (very
trivial).

Cheers,

Jelmer

-- 
Jelmer Vernooij <jelmer at samba.org> - http://jelmer.vernstok.nl/ - ctrlsoft at jabber.org
Just 226 more Samba commits left before r6000!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.samba.org/archive/samba-technical/attachments/20050312/b231ea61/attachment.bin


More information about the samba-technical mailing list