diff --git a/scripts/base/protocols/dce-rpc/consts.bro b/scripts/base/protocols/dce-rpc/consts.bro index 7942661780..af8c9d06df 100644 --- a/scripts/base/protocols/dce-rpc/consts.bro +++ b/scripts/base/protocols/dce-rpc/consts.bro @@ -101,259 +101,259 @@ export { const operations: table[string,count] of string = { # atsvc - ["1ff70682-0a51-30e8-076d-740be8cee98b",0] = "NetrJobAdd", - ["1ff70682-0a51-30e8-076d-740be8cee98b",1] = "NetrJobDel", - ["1ff70682-0a51-30e8-076d-740be8cee98b",2] = "NetrJobEnum", - ["1ff70682-0a51-30e8-076d-740be8cee98b",3] = "NetrJobGetInfo", + ["1ff70682-0a51-30e8-076d-740be8cee98b",0x00] = "NetrJobAdd", + ["1ff70682-0a51-30e8-076d-740be8cee98b",0x01] = "NetrJobDel", + ["1ff70682-0a51-30e8-076d-740be8cee98b",0x02] = "NetrJobEnum", + ["1ff70682-0a51-30e8-076d-740be8cee98b",0x03] = "NetrJobGetInfo", # sasec - ["378e52b0-c0a9-11cf-822d-00aa0051e40f",0] = "SASetAccountInformation", - ["378e52b0-c0a9-11cf-822d-00aa0051e40f",1] = "SASetNSAccountInformation", - ["378e52b0-c0a9-11cf-822d-00aa0051e40f",2] = "SAGetNSAccountInformation", - ["378e52b0-c0a9-11cf-822d-00aa0051e40f",3] = "SAGetAccountInformation", + ["378e52b0-c0a9-11cf-822d-00aa0051e40f",0x00] = "SASetAccountInformation", + ["378e52b0-c0a9-11cf-822d-00aa0051e40f",0x01] = "SASetNSAccountInformation", + ["378e52b0-c0a9-11cf-822d-00aa0051e40f",0x02] = "SAGetNSAccountInformation", + ["378e52b0-c0a9-11cf-822d-00aa0051e40f",0x03] = "SAGetAccountInformation", # idletask - ["0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53",0] = "ItSrvRegisterIdleTask", - ["0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53",1] = "ItSrvUnregisterIdleTask", - ["0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53",2] = "ItSrvProcessIdleTasks", - ["0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53",3] = "ItSrvSetDetectionParameters", + ["0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53",0x00] = "ItSrvRegisterIdleTask", + ["0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53",0x01] = "ItSrvUnregisterIdleTask", + ["0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53",0x02] = "ItSrvProcessIdleTasks", + ["0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53",0x03] = "ItSrvSetDetectionParameters", # ITaskSchedulerService - ["86d35949-83c9-4044-b424-db363231fd0c",0] = "SchRpcHighestVersion", - ["86d35949-83c9-4044-b424-db363231fd0c",1] = "SchRpcRegisterTask", - ["86d35949-83c9-4044-b424-db363231fd0c",2] = "SchRpcRetrieveTask", - ["86d35949-83c9-4044-b424-db363231fd0c",3] = "SchRpcCreateFolder", - ["86d35949-83c9-4044-b424-db363231fd0c",4] = "SchRpcSetSecurity", - ["86d35949-83c9-4044-b424-db363231fd0c",5] = "SchRpcGetSecurity", - ["86d35949-83c9-4044-b424-db363231fd0c",6] = "SchRpcEnumFolder", - ["86d35949-83c9-4044-b424-db363231fd0c",7] = "SchRpcEnumTasks", - ["86d35949-83c9-4044-b424-db363231fd0c",8] = "SchRpcEnumInstances", - ["86d35949-83c9-4044-b424-db363231fd0c",9] = "SchRpcGetInstanceInfo", - ["86d35949-83c9-4044-b424-db363231fd0c",10] = "SchRpcStopInstance", - ["86d35949-83c9-4044-b424-db363231fd0c",11] = "SchRpcStop", - ["86d35949-83c9-4044-b424-db363231fd0c",12] = "SchRpcRun", - ["86d35949-83c9-4044-b424-db363231fd0c",13] = "SchRpcDelete", - ["86d35949-83c9-4044-b424-db363231fd0c",14] = "SchRpcRename", - ["86d35949-83c9-4044-b424-db363231fd0c",15] = "SchRpcScheduledRuntimes", - ["86d35949-83c9-4044-b424-db363231fd0c",16] = "SchRpcGetLastRunInfo", - ["86d35949-83c9-4044-b424-db363231fd0c",17] = "SchRpcGetTaskInfo", + ["86d35949-83c9-4044-b424-db363231fd0c",0x00] = "SchRpcHighestVersion", + ["86d35949-83c9-4044-b424-db363231fd0c",0x01] = "SchRpcRegisterTask", + ["86d35949-83c9-4044-b424-db363231fd0c",0x02] = "SchRpcRetrieveTask", + ["86d35949-83c9-4044-b424-db363231fd0c",0x03] = "SchRpcCreateFolder", + ["86d35949-83c9-4044-b424-db363231fd0c",0x04] = "SchRpcSetSecurity", + ["86d35949-83c9-4044-b424-db363231fd0c",0x05] = "SchRpcGetSecurity", + ["86d35949-83c9-4044-b424-db363231fd0c",0x06] = "SchRpcEnumFolder", + ["86d35949-83c9-4044-b424-db363231fd0c",0x07] = "SchRpcEnumTasks", + ["86d35949-83c9-4044-b424-db363231fd0c",0x08] = "SchRpcEnumInstances", + ["86d35949-83c9-4044-b424-db363231fd0c",0x09] = "SchRpcGetInstanceInfo", + ["86d35949-83c9-4044-b424-db363231fd0c",0x0a] = "SchRpcStopInstance", + ["86d35949-83c9-4044-b424-db363231fd0c",0x0b] = "SchRpcStop", + ["86d35949-83c9-4044-b424-db363231fd0c",0x0c] = "SchRpcRun", + ["86d35949-83c9-4044-b424-db363231fd0c",0x0d] = "SchRpcDelete", + ["86d35949-83c9-4044-b424-db363231fd0c",0x0e] = "SchRpcRename", + ["86d35949-83c9-4044-b424-db363231fd0c",0x0f] = "SchRpcScheduledRuntimes", + ["86d35949-83c9-4044-b424-db363231fd0c",0x10] = "SchRpcGetLastRunInfo", + ["86d35949-83c9-4044-b424-db363231fd0c",0x11] = "SchRpcGetTaskInfo", # IObjectExporter - ["99fcfec4-5260-101b-bbcb-00aa0021347a",0] = "ResolveOxid", - ["99fcfec4-5260-101b-bbcb-00aa0021347a",1] = "SimplePing", - ["99fcfec4-5260-101b-bbcb-00aa0021347a",2] = "ComplexPing", - ["99fcfec4-5260-101b-bbcb-00aa0021347a",3] = "ServerAlive", - ["99fcfec4-5260-101b-bbcb-00aa0021347a",4] = "ResolveOxid2", - ["99fcfec4-5260-101b-bbcb-00aa0021347a",5] = "ServerAlive2", + ["99fcfec4-5260-101b-bbcb-00aa0021347a",0x00] = "ResolveOxid", + ["99fcfec4-5260-101b-bbcb-00aa0021347a",0x01] = "SimplePing", + ["99fcfec4-5260-101b-bbcb-00aa0021347a",0x02] = "ComplexPing", + ["99fcfec4-5260-101b-bbcb-00aa0021347a",0x03] = "ServerAlive", + ["99fcfec4-5260-101b-bbcb-00aa0021347a",0x04] = "ResolveOxid2", + ["99fcfec4-5260-101b-bbcb-00aa0021347a",0x05] = "ServerAlive2", # IActivation - ["4d9f4ab8-7d1c-11cf-861e-0020af6e7c57",0] = "RemoteActivation", + ["4d9f4ab8-7d1c-11cf-861e-0020af6e7c57",0x00] = "RemoteActivation", # nspi - ["f5cc5a18-4264-101a-8c59-08002b2f8426",0] = "NspiBind", - ["f5cc5a18-4264-101a-8c59-08002b2f8426",1] = "NspiUnbind", - ["f5cc5a18-4264-101a-8c59-08002b2f8426",2] = "NspiUpdateStat", - ["f5cc5a18-4264-101a-8c59-08002b2f8426",3] = "NspiQueryRows", - ["f5cc5a18-4264-101a-8c59-08002b2f8426",4] = "NspiSeekEntries", - ["f5cc5a18-4264-101a-8c59-08002b2f8426",5] = "NspiGetMatches", - ["f5cc5a18-4264-101a-8c59-08002b2f8426",6] = "NspiResortRestriction", - ["f5cc5a18-4264-101a-8c59-08002b2f8426",7] = "NspiDNToEph", - ["f5cc5a18-4264-101a-8c59-08002b2f8426",8] = "NspiGetPropList", - ["f5cc5a18-4264-101a-8c59-08002b2f8426",9] = "NspiGetProps", + ["f5cc5a18-4264-101a-8c59-08002b2f8426",0x00] = "NspiBind", + ["f5cc5a18-4264-101a-8c59-08002b2f8426",0x01] = "NspiUnbind", + ["f5cc5a18-4264-101a-8c59-08002b2f8426",0x02] = "NspiUpdateStat", + ["f5cc5a18-4264-101a-8c59-08002b2f8426",0x03] = "NspiQueryRows", + ["f5cc5a18-4264-101a-8c59-08002b2f8426",0x04] = "NspiSeekEntries", + ["f5cc5a18-4264-101a-8c59-08002b2f8426",0x05] = "NspiGetMatches", + ["f5cc5a18-4264-101a-8c59-08002b2f8426",0x06] = "NspiResortRestriction", + ["f5cc5a18-4264-101a-8c59-08002b2f8426",0x07] = "NspiDNToEph", + ["f5cc5a18-4264-101a-8c59-08002b2f8426",0x08] = "NspiGetPropList", + ["f5cc5a18-4264-101a-8c59-08002b2f8426",0x09] = "NspiGetProps", # IWbemServices - ["9556dc99-828c-11cf-a37e-00aa003240c7",3] = "OpenNamespace", - ["9556dc99-828c-11cf-a37e-00aa003240c7",4] = "CancelAsyncCall", - ["9556dc99-828c-11cf-a37e-00aa003240c7",5] = "QueryObjectSink", - ["9556dc99-828c-11cf-a37e-00aa003240c7",6] = "GetObject", - ["9556dc99-828c-11cf-a37e-00aa003240c7",7] = "GetObjectAsync", - ["9556dc99-828c-11cf-a37e-00aa003240c7",8] = "PutClass", - ["9556dc99-828c-11cf-a37e-00aa003240c7",9] = "PutClassAsync", - ["9556dc99-828c-11cf-a37e-00aa003240c7",10] = "DeleteClass", - ["9556dc99-828c-11cf-a37e-00aa003240c7",11] = "DeleteClassAsync", - ["9556dc99-828c-11cf-a37e-00aa003240c7",12] = "CreateClassEnum", - ["9556dc99-828c-11cf-a37e-00aa003240c7",13] = "CreateClassEnumAsync", - ["9556dc99-828c-11cf-a37e-00aa003240c7",14] = "PutInstance", - ["9556dc99-828c-11cf-a37e-00aa003240c7",15] = "PutInstanceAsync", - ["9556dc99-828c-11cf-a37e-00aa003240c7",16] = "DeleteClass", - ["9556dc99-828c-11cf-a37e-00aa003240c7",17] = "DeleteClassAsync", - ["9556dc99-828c-11cf-a37e-00aa003240c7",18] = "CreateInstanceEnum", - ["9556dc99-828c-11cf-a37e-00aa003240c7",19] = "CreateInstanceEnumAsync", - ["9556dc99-828c-11cf-a37e-00aa003240c7",20] = "ExecQuery", - ["9556dc99-828c-11cf-a37e-00aa003240c7",21] = "ExecQueryAsync", - ["9556dc99-828c-11cf-a37e-00aa003240c7",22] = "ExecNotificationQuery", - ["9556dc99-828c-11cf-a37e-00aa003240c7",23] = "ExecNotificationQueryAsync", - ["9556dc99-828c-11cf-a37e-00aa003240c7",24] = "ExecMethod", - ["9556dc99-828c-11cf-a37e-00aa003240c7",25] = "ExecMethodAsync", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x03] = "OpenNamespace", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x04] = "CancelAsyncCall", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x05] = "QueryObjectSink", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x06] = "GetObject", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x07] = "GetObjectAsync", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x08] = "PutClass", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x09] = "PutClassAsync", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x0a] = "DeleteClass", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x0b] = "DeleteClassAsync", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x0c] = "CreateClassEnum", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x0d] = "CreateClassEnumAsync", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x0e] = "PutInstance", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x0f] = "PutInstanceAsync", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x10] = "DeleteClass", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x11] = "DeleteClassAsync", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x12] = "CreateInstanceEnum", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x13] = "CreateInstanceEnumAsync", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x14] = "ExecQuery", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x15] = "ExecQueryAsync", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x16] = "ExecNotificationQuery", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x17] = "ExecNotificationQueryAsync", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x18] = "ExecMethod", + ["9556dc99-828c-11cf-a37e-00aa003240c7",0x19] = "ExecMethodAsync", # IWbemLevel1Login - ["f309ad18-d86a-11d0-a075-00c04fb68820",3] = "EstablishPosition", - ["f309ad18-d86a-11d0-a075-00c04fb68820",4] = "RequestChallenge", - ["f309ad18-d86a-11d0-a075-00c04fb68820",5] = "WBEMLogin", - ["f309ad18-d86a-11d0-a075-00c04fb68820",6] = "NTLMLogin", + ["f309ad18-d86a-11d0-a075-00c04fb68820",0x03] = "EstablishPosition", + ["f309ad18-d86a-11d0-a075-00c04fb68820",0x04] = "RequestChallenge", + ["f309ad18-d86a-11d0-a075-00c04fb68820",0x05] = "WBEMLogin", + ["f309ad18-d86a-11d0-a075-00c04fb68820",0x06] = "NTLMLogin", # FrsRpc - ["f5cc59b4-4264-101a-8c59-08002b2f8426",0] = "FrsRpcSendCommPkt", - ["f5cc59b4-4264-101a-8c59-08002b2f8426",1] = "FrsRpcVerifyPromotionParent", - ["f5cc59b4-4264-101a-8c59-08002b2f8426",2] = "FrsRpcStartPromotionParent", - ["f5cc59b4-4264-101a-8c59-08002b2f8426",3] = "FrsNOP", - ["f5cc59b4-4264-101a-8c59-08002b2f8426",4] = "FrsBackupComplete", - ["f5cc59b4-4264-101a-8c59-08002b2f8426",5] = "FrsBackupComplete", - ["f5cc59b4-4264-101a-8c59-08002b2f8426",6] = "FrsBackupComplete", - ["f5cc59b4-4264-101a-8c59-08002b2f8426",7] = "FrsBackupComplete", - ["f5cc59b4-4264-101a-8c59-08002b2f8426",8] = "FrsBackupComplete", - ["f5cc59b4-4264-101a-8c59-08002b2f8426",9] = "FrsBackupComplete", - ["f5cc59b4-4264-101a-8c59-08002b2f8426",10] = "FrsRpcVerifyPromotionParentEx", + ["f5cc59b4-4264-101a-8c59-08002b2f8426",0x00] = "FrsRpcSendCommPkt", + ["f5cc59b4-4264-101a-8c59-08002b2f8426",0x01] = "FrsRpcVerifyPromotionParent", + ["f5cc59b4-4264-101a-8c59-08002b2f8426",0x02] = "FrsRpcStartPromotionParent", + ["f5cc59b4-4264-101a-8c59-08002b2f8426",0x03] = "FrsNOP", + ["f5cc59b4-4264-101a-8c59-08002b2f8426",0x04] = "FrsBackupComplete", + ["f5cc59b4-4264-101a-8c59-08002b2f8426",0x05] = "FrsBackupComplete", + ["f5cc59b4-4264-101a-8c59-08002b2f8426",0x06] = "FrsBackupComplete", + ["f5cc59b4-4264-101a-8c59-08002b2f8426",0x07] = "FrsBackupComplete", + ["f5cc59b4-4264-101a-8c59-08002b2f8426",0x08] = "FrsBackupComplete", + ["f5cc59b4-4264-101a-8c59-08002b2f8426",0x09] = "FrsBackupComplete", + ["f5cc59b4-4264-101a-8c59-08002b2f8426",0x0a] = "FrsRpcVerifyPromotionParentEx", # IRemUnknown2 - ["00000143-0000-0000-c000-000000000046",0] = "QueryInterface", - ["00000143-0000-0000-c000-000000000046",1] = "AddRef", - ["00000143-0000-0000-c000-000000000046",2] = "Release", - ["00000143-0000-0000-c000-000000000046",3] = "RemQueryInterface", - ["00000143-0000-0000-c000-000000000046",4] = "RemAddRef", - ["00000143-0000-0000-c000-000000000046",5] = "RemRelease", - ["00000143-0000-0000-c000-000000000046",6] = "RemQueryInterface2", + ["00000143-0000-0000-c000-000000000046",0x00] = "QueryInterface", + ["00000143-0000-0000-c000-000000000046",0x01] = "AddRef", + ["00000143-0000-0000-c000-000000000046",0x02] = "Release", + ["00000143-0000-0000-c000-000000000046",0x03] = "RemQueryInterface", + ["00000143-0000-0000-c000-000000000046",0x04] = "RemAddRef", + ["00000143-0000-0000-c000-000000000046",0x05] = "RemRelease", + ["00000143-0000-0000-c000-000000000046",0x06] = "RemQueryInterface2", # IRemoteSCMActivator - ["000001a0-0000-0000-c000-000000000046",0] = "QueryInterfaceIRemoteSCMActivator", - ["000001a0-0000-0000-c000-000000000046",1] = "AddRefIRemoteISCMActivator", - ["000001a0-0000-0000-c000-000000000046",2] = "ReleaseIRemoteISCMActivator", - ["000001a0-0000-0000-c000-000000000046",3] = "RemoteGetClassObject", - ["000001a0-0000-0000-c000-000000000046",4] = "RemoteCreateInstance", + ["000001a0-0000-0000-c000-000000000046",0x00] = "QueryInterfaceIRemoteSCMActivator", + ["000001a0-0000-0000-c000-000000000046",0x01] = "AddRefIRemoteISCMActivator", + ["000001a0-0000-0000-c000-000000000046",0x02] = "ReleaseIRemoteISCMActivator", + ["000001a0-0000-0000-c000-000000000046",0x03] = "RemoteGetClassObject", + ["000001a0-0000-0000-c000-000000000046",0x04] = "RemoteCreateInstance", # netlogon - ["12345678-1234-abcd-ef00-01234567cffb",0] = "NetrLogonUasLogon", - ["12345678-1234-abcd-ef00-01234567cffb",1] = "NetrLogonUasLogoff", - ["12345678-1234-abcd-ef00-01234567cffb",2] = "NetrLogonSamLogon", - ["12345678-1234-abcd-ef00-01234567cffb",3] = "NetrLogonSamLogoff", - ["12345678-1234-abcd-ef00-01234567cffb",4] = "NetrServerReqChallenge", - ["12345678-1234-abcd-ef00-01234567cffb",5] = "NetrServerAuthenticate", - ["12345678-1234-abcd-ef00-01234567cffb",6] = "NetrServerPasswordSet", - ["12345678-1234-abcd-ef00-01234567cffb",7] = "NetrDatabaseDeltas", - ["12345678-1234-abcd-ef00-01234567cffb",8] = "NetrDatabaseSync", - ["12345678-1234-abcd-ef00-01234567cffb",9] = "NetrAccountDeltas", - ["12345678-1234-abcd-ef00-01234567cffb",10] = "NetrAccountSync", - ["12345678-1234-abcd-ef00-01234567cffb",11] = "NetrGetDCName", - ["12345678-1234-abcd-ef00-01234567cffb",12] = "NetrLogonControl", - ["12345678-1234-abcd-ef00-01234567cffb",13] = "NetrGetAnyDCName", - ["12345678-1234-abcd-ef00-01234567cffb",14] = "NetrLogonControl2", - ["12345678-1234-abcd-ef00-01234567cffb",15] = "NetrServerAuthenticate2", - ["12345678-1234-abcd-ef00-01234567cffb",16] = "NetrDatabaseSync2", - ["12345678-1234-abcd-ef00-01234567cffb",17] = "NetrDatabaseRedo", - ["12345678-1234-abcd-ef00-01234567cffb",18] = "NetrLogonControl2Ex", - ["12345678-1234-abcd-ef00-01234567cffb",19] = "NetrEnumerateTrustedDomains", - ["12345678-1234-abcd-ef00-01234567cffb",20] = "DsrGetDcName", - ["12345678-1234-abcd-ef00-01234567cffb",21] = "NetrLogonGetCapabilities", - ["12345678-1234-abcd-ef00-01234567cffb",22] = "NetrLogonSetServiceBits", - ["12345678-1234-abcd-ef00-01234567cffb",23] = "NetrLogonGetTrustRid", - ["12345678-1234-abcd-ef00-01234567cffb",24] = "NetrLogonComputeServerDigest", - ["12345678-1234-abcd-ef00-01234567cffb",25] = "NetrLogonComputeClientDigest", - ["12345678-1234-abcd-ef00-01234567cffb",26] = "NetrServerAuthenticate3", - ["12345678-1234-abcd-ef00-01234567cffb",27] = "DsrGetDcNameEx", - ["12345678-1234-abcd-ef00-01234567cffb",28] = "DsrGetSiteName", - ["12345678-1234-abcd-ef00-01234567cffb",29] = "NetrLogonGetDomainInfo", - ["12345678-1234-abcd-ef00-01234567cffb",30] = "NetrServerPasswordSet2", - ["12345678-1234-abcd-ef00-01234567cffb",31] = "NetrServerPasswordGet", - ["12345678-1234-abcd-ef00-01234567cffb",32] = "NetrLogonSendToSam", - ["12345678-1234-abcd-ef00-01234567cffb",33] = "DsrAddressToSiteNamesW", - ["12345678-1234-abcd-ef00-01234567cffb",34] = "DsrGetDcNameEx2", - ["12345678-1234-abcd-ef00-01234567cffb",35] = "NetrLogonGetTimeServiceParentDomain", - ["12345678-1234-abcd-ef00-01234567cffb",36] = "NetrEnumerateTrustedDomainsEx", - ["12345678-1234-abcd-ef00-01234567cffb",37] = "DsrAddressToSiteNamesExW", - ["12345678-1234-abcd-ef00-01234567cffb",38] = "DsrGetDcSiteCoverageW", - ["12345678-1234-abcd-ef00-01234567cffb",39] = "NetrLogonSamLogonEx", - ["12345678-1234-abcd-ef00-01234567cffb",40] = "DsrEnumerateDomainTrusts", - ["12345678-1234-abcd-ef00-01234567cffb",41] = "DsrDeregisterDnsHostRecords", - ["12345678-1234-abcd-ef00-01234567cffb",42] = "NetrServerTrustPasswordsGet", - ["12345678-1234-abcd-ef00-01234567cffb",43] = "DsrGetForestTrustInformation", - ["12345678-1234-abcd-ef00-01234567cffb",44] = "NetrGetForestTrustInformation", - ["12345678-1234-abcd-ef00-01234567cffb",45] = "NetrLogonSameLogonWithFlags", - ["12345678-1234-abcd-ef00-01234567cffb",46] = "NetrServerGetTrustInfo", - ["12345678-1234-abcd-ef00-01234567cffb",47] = "unused", - ["12345678-1234-abcd-ef00-01234567cffb",48] = "DsrUpdateReadOnlyServerDnsRecords", - ["12345678-1234-abcd-ef00-01234567cffb",49] = "NetrChainSetClientAttributes", + ["12345678-1234-abcd-ef00-01234567cffb",0x00] = "NetrLogonUasLogon", + ["12345678-1234-abcd-ef00-01234567cffb",0x01] = "NetrLogonUasLogoff", + ["12345678-1234-abcd-ef00-01234567cffb",0x02] = "NetrLogonSamLogon", + ["12345678-1234-abcd-ef00-01234567cffb",0x03] = "NetrLogonSamLogoff", + ["12345678-1234-abcd-ef00-01234567cffb",0x04] = "NetrServerReqChallenge", + ["12345678-1234-abcd-ef00-01234567cffb",0x05] = "NetrServerAuthenticate", + ["12345678-1234-abcd-ef00-01234567cffb",0x06] = "NetrServerPasswordSet", + ["12345678-1234-abcd-ef00-01234567cffb",0x07] = "NetrDatabaseDeltas", + ["12345678-1234-abcd-ef00-01234567cffb",0x08] = "NetrDatabaseSync", + ["12345678-1234-abcd-ef00-01234567cffb",0x09] = "NetrAccountDeltas", + ["12345678-1234-abcd-ef00-01234567cffb",0x0a] = "NetrAccountSync", + ["12345678-1234-abcd-ef00-01234567cffb",0x0b] = "NetrGetDCName", + ["12345678-1234-abcd-ef00-01234567cffb",0x0c] = "NetrLogonControl", + ["12345678-1234-abcd-ef00-01234567cffb",0x0d] = "NetrGetAnyDCName", + ["12345678-1234-abcd-ef00-01234567cffb",0x0e] = "NetrLogonControl2", + ["12345678-1234-abcd-ef00-01234567cffb",0x0f] = "NetrServerAuthenticate2", + ["12345678-1234-abcd-ef00-01234567cffb",0x10] = "NetrDatabaseSync2", + ["12345678-1234-abcd-ef00-01234567cffb",0x11] = "NetrDatabaseRedo", + ["12345678-1234-abcd-ef00-01234567cffb",0x12] = "NetrLogonControl2Ex", + ["12345678-1234-abcd-ef00-01234567cffb",0x13] = "NetrEnumerateTrustedDomains", + ["12345678-1234-abcd-ef00-01234567cffb",0x14] = "DsrGetDcName", + ["12345678-1234-abcd-ef00-01234567cffb",0x15] = "NetrLogonGetCapabilities", + ["12345678-1234-abcd-ef00-01234567cffb",0x16] = "NetrLogonSetServiceBits", + ["12345678-1234-abcd-ef00-01234567cffb",0x17] = "NetrLogonGetTrustRid", + ["12345678-1234-abcd-ef00-01234567cffb",0x18] = "NetrLogonComputeServerDigest", + ["12345678-1234-abcd-ef00-01234567cffb",0x19] = "NetrLogonComputeClientDigest", + ["12345678-1234-abcd-ef00-01234567cffb",0x1a] = "NetrServerAuthenticate3", + ["12345678-1234-abcd-ef00-01234567cffb",0x1b] = "DsrGetDcNameEx", + ["12345678-1234-abcd-ef00-01234567cffb",0x1c] = "DsrGetSiteName", + ["12345678-1234-abcd-ef00-01234567cffb",0x1d] = "NetrLogonGetDomainInfo", + ["12345678-1234-abcd-ef00-01234567cffb",0x1e] = "NetrServerPasswordSet2", + ["12345678-1234-abcd-ef00-01234567cffb",0x1f] = "NetrServerPasswordGet", + ["12345678-1234-abcd-ef00-01234567cffb",0x20] = "NetrLogonSendToSam", + ["12345678-1234-abcd-ef00-01234567cffb",0x21] = "DsrAddressToSiteNamesW", + ["12345678-1234-abcd-ef00-01234567cffb",0x22] = "DsrGetDcNameEx2", + ["12345678-1234-abcd-ef00-01234567cffb",0x23] = "NetrLogonGetTimeServiceParentDomain", + ["12345678-1234-abcd-ef00-01234567cffb",0x24] = "NetrEnumerateTrustedDomainsEx", + ["12345678-1234-abcd-ef00-01234567cffb",0x25] = "DsrAddressToSiteNamesExW", + ["12345678-1234-abcd-ef00-01234567cffb",0x26] = "DsrGetDcSiteCoverageW", + ["12345678-1234-abcd-ef00-01234567cffb",0x27] = "NetrLogonSamLogonEx", + ["12345678-1234-abcd-ef00-01234567cffb",0x28] = "DsrEnumerateDomainTrusts", + ["12345678-1234-abcd-ef00-01234567cffb",0x29] = "DsrDeregisterDnsHostRecords", + ["12345678-1234-abcd-ef00-01234567cffb",0x2a] = "NetrServerTrustPasswordsGet", + ["12345678-1234-abcd-ef00-01234567cffb",0x2b] = "DsrGetForestTrustInformation", + ["12345678-1234-abcd-ef00-01234567cffb",0x2c] = "NetrGetForestTrustInformation", + ["12345678-1234-abcd-ef00-01234567cffb",0x2d] = "NetrLogonSameLogonWithFlags", + ["12345678-1234-abcd-ef00-01234567cffb",0x2e] = "NetrServerGetTrustInfo", + ["12345678-1234-abcd-ef00-01234567cffb",0x2f] = "unused", + ["12345678-1234-abcd-ef00-01234567cffb",0x30] = "DsrUpdateReadOnlyServerDnsRecords", + ["12345678-1234-abcd-ef00-01234567cffb",0x31] = "NetrChainSetClientAttributes", # IRemoteWinspool - ["76f03f96-cdfd-44fc-a22c-64950a001209",0] = "RpcAsyncOpenPrinter", - ["76f03f96-cdfd-44fc-a22c-64950a001209",1] = "RpcAsyncAddPrinter", - ["76f03f96-cdfd-44fc-a22c-64950a001209",2] = "RpcAsyncSetJob", - ["76f03f96-cdfd-44fc-a22c-64950a001209",3] = "RpcAsyncGetJob", - ["76f03f96-cdfd-44fc-a22c-64950a001209",4] = "RpcAsyncEnumJobs", - ["76f03f96-cdfd-44fc-a22c-64950a001209",5] = "RpcAsyncAddJob", - ["76f03f96-cdfd-44fc-a22c-64950a001209",6] = "RpcAsyncScheduleJob", - ["76f03f96-cdfd-44fc-a22c-64950a001209",7] = "RpcAsyncDeletePrinter", - ["76f03f96-cdfd-44fc-a22c-64950a001209",8] = "RpcAsyncSetPrinter", - ["76f03f96-cdfd-44fc-a22c-64950a001209",9] = "RpcAsyncGetPrinter", - ["76f03f96-cdfd-44fc-a22c-64950a001209",10] = "RpcAsyncStartDocPrinter", - ["76f03f96-cdfd-44fc-a22c-64950a001209",11] = "RpcAsyncStartPagePrinter", - ["76f03f96-cdfd-44fc-a22c-64950a001209",12] = "RpcAsyncWritePrinter", - ["76f03f96-cdfd-44fc-a22c-64950a001209",13] = "RpcAsyncEndPagePrinter", - ["76f03f96-cdfd-44fc-a22c-64950a001209",14] = "RpcAsyncEndDocPrinter", - ["76f03f96-cdfd-44fc-a22c-64950a001209",15] = "RpcAsyncAbortPrinter", - ["76f03f96-cdfd-44fc-a22c-64950a001209",16] = "RpcAsyncGetPrinterData", - ["76f03f96-cdfd-44fc-a22c-64950a001209",17] = "RpcAsyncGetPrinterDataEx", - ["76f03f96-cdfd-44fc-a22c-64950a001209",18] = "RpcAsyncSetPrinterData", - ["76f03f96-cdfd-44fc-a22c-64950a001209",19] = "RpcAsyncSetPrinterDataEx", - ["76f03f96-cdfd-44fc-a22c-64950a001209",20] = "RpcAsyncClosePrinter", - ["76f03f96-cdfd-44fc-a22c-64950a001209",21] = "RpcAsyncAddForm", - ["76f03f96-cdfd-44fc-a22c-64950a001209",22] = "RpcAsyncDeleteForm", - ["76f03f96-cdfd-44fc-a22c-64950a001209",23] = "RpcAsyncGetForm", - ["76f03f96-cdfd-44fc-a22c-64950a001209",24] = "RpcAsyncSetForm", - ["76f03f96-cdfd-44fc-a22c-64950a001209",25] = "RpcAsyncEnumForms", - ["76f03f96-cdfd-44fc-a22c-64950a001209",26] = "RpcAsyncGetPrinterDriver", - ["76f03f96-cdfd-44fc-a22c-64950a001209",27] = "RpcAsyncEnumPrinterData", - ["76f03f96-cdfd-44fc-a22c-64950a001209",28] = "RpcAsyncEnumPrinterDataEx", - ["76f03f96-cdfd-44fc-a22c-64950a001209",29] = "RpcAsyncEnumPrinterKey", - ["76f03f96-cdfd-44fc-a22c-64950a001209",30] = "RpcAsyncDeletePrinterData", - ["76f03f96-cdfd-44fc-a22c-64950a001209",31] = "RpcAsyncDeletePrinterDataEx", - ["76f03f96-cdfd-44fc-a22c-64950a001209",32] = "RpcAsyncDeletePrinterKey", - ["76f03f96-cdfd-44fc-a22c-64950a001209",33] = "RpcAsyncXcvData", - ["76f03f96-cdfd-44fc-a22c-64950a001209",34] = "RpcAsyncSendRecvBidiData", - ["76f03f96-cdfd-44fc-a22c-64950a001209",35] = "RpcAsyncCreatePrinterIC", - ["76f03f96-cdfd-44fc-a22c-64950a001209",36] = "RpcAsyncPlayGdiScriptOnPrinterIC", - ["76f03f96-cdfd-44fc-a22c-64950a001209",37] = "RpcAsyncDeletePrinterIC", - ["76f03f96-cdfd-44fc-a22c-64950a001209",38] = "RpcAsyncEnumPrinters", - ["76f03f96-cdfd-44fc-a22c-64950a001209",39] = "RpcAsyncAddPrinterDriver", - ["76f03f96-cdfd-44fc-a22c-64950a001209",40] = "RpcAsyncEnumPrinterDrivers", - ["76f03f96-cdfd-44fc-a22c-64950a001209",41] = "RpcAsyncGetPrinterDriverDirectory", - ["76f03f96-cdfd-44fc-a22c-64950a001209",42] = "RpcAsyncDeletePrinterDriver", - ["76f03f96-cdfd-44fc-a22c-64950a001209",43] = "RpcAsyncDeletePrinterDriverEx", - ["76f03f96-cdfd-44fc-a22c-64950a001209",44] = "RpcAsyncAddPrintProcessor", - ["76f03f96-cdfd-44fc-a22c-64950a001209",45] = "RpcAsyncEnumPrintProcessors", - ["76f03f96-cdfd-44fc-a22c-64950a001209",46] = "RpcAsyncGetPrintProcessorDirectory", - ["76f03f96-cdfd-44fc-a22c-64950a001209",47] = "RpcAsyncEnumPorts", - ["76f03f96-cdfd-44fc-a22c-64950a001209",48] = "RpcAsyncEnumMonitors", - ["76f03f96-cdfd-44fc-a22c-64950a001209",49] = "RpcAsyncAddPort", - ["76f03f96-cdfd-44fc-a22c-64950a001209",50] = "RpcAsyncSetPort", - ["76f03f96-cdfd-44fc-a22c-64950a001209",51] = "RpcAsyncAddMonitor", - ["76f03f96-cdfd-44fc-a22c-64950a001209",52] = "RpcAsyncDeleteMonitor", - ["76f03f96-cdfd-44fc-a22c-64950a001209",53] = "RpcAsyncDeletePrintProcessor", - ["76f03f96-cdfd-44fc-a22c-64950a001209",54] = "RpcAsyncEnumPrintProcessorDatatypes", - ["76f03f96-cdfd-44fc-a22c-64950a001209",55] = "RpcAsyncAddPerMachineConnection", - ["76f03f96-cdfd-44fc-a22c-64950a001209",56] = "RpcAsyncDeletePerMachineConnection", - ["76f03f96-cdfd-44fc-a22c-64950a001209",57] = "RpcAsyncEnumPerMachineConnections", - ["76f03f96-cdfd-44fc-a22c-64950a001209",58] = "RpcSyncRegisterForRemoteNotifications", - ["76f03f96-cdfd-44fc-a22c-64950a001209",59] = "RpcSyncUnRegisterForRemoteNotifications", - ["76f03f96-cdfd-44fc-a22c-64950a001209",60] = "RpcSyncRefreshRemoteNotifications", - ["76f03f96-cdfd-44fc-a22c-64950a001209",61] = "RpcAsyncGetRemoteNotifications", - ["76f03f96-cdfd-44fc-a22c-64950a001209",62] = "RpcAsyncInstallPrinterDriverFromPackage", - ["76f03f96-cdfd-44fc-a22c-64950a001209",63] = "RpcAsyncUploadPrinterDriverPackage", - ["76f03f96-cdfd-44fc-a22c-64950a001209",64] = "RpcAsyncGetCorePrinterDrivers", - ["76f03f96-cdfd-44fc-a22c-64950a001209",65] = "RpcAsyncCorePrinterDriverInstalled", - ["76f03f96-cdfd-44fc-a22c-64950a001209",66] = "RpcAsyncGetPrinterDriverPackagePath", - ["76f03f96-cdfd-44fc-a22c-64950a001209",67] = "RpcAsyncDeletePrinterDriverPackage", - ["76f03f96-cdfd-44fc-a22c-64950a001209",68] = "RpcAsyncReadPrinter", - ["76f03f96-cdfd-44fc-a22c-64950a001209",69] = "RpcAsyncResetPrinter", - ["76f03f96-cdfd-44fc-a22c-64950a001209",70] = "RpcAsyncGetJobNamedPropertyValue", - ["76f03f96-cdfd-44fc-a22c-64950a001209",71] = "RpcAsyncSetJobNamedProperty", - ["76f03f96-cdfd-44fc-a22c-64950a001209",72] = "RpcAsyncDeleteJobNamedProperty", - ["76f03f96-cdfd-44fc-a22c-64950a001209",73] = "RpcAsyncEnumJobNamedProperties", - ["76f03f96-cdfd-44fc-a22c-64950a001209",74] = "RpcAsyncLogJobInfoForBranchOffice", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x0x00] = "RpcAsyncOpenPrinter", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x0x01] = "RpcAsyncAddPrinter", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x0x2] = "RpcAsyncSetJob", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x0x3] = "RpcAsyncGetJob", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x0x4] = "RpcAsyncEnumJobs", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x0x5] = "RpcAsyncAddJob", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x0x6] = "RpcAsyncScheduleJob", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x0x7] = "RpcAsyncDeletePrinter", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x0x8] = "RpcAsyncSetPrinter", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x0x9] = "RpcAsyncGetPrinter", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x0a] = "RpcAsyncStartDocPrinter", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x0b] = "RpcAsyncStartPagePrinter", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x0c] = "RpcAsyncWritePrinter", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x0d] = "RpcAsyncEndPagePrinter", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x0e] = "RpcAsyncEndDocPrinter", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x0f] = "RpcAsyncAbortPrinter", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x10] = "RpcAsyncGetPrinterData", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x11] = "RpcAsyncGetPrinterDataEx", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x12] = "RpcAsyncSetPrinterData", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x13] = "RpcAsyncSetPrinterDataEx", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x14] = "RpcAsyncClosePrinter", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x15] = "RpcAsyncAddForm", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x16] = "RpcAsyncDeleteForm", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x17] = "RpcAsyncGetForm", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x18] = "RpcAsyncSetForm", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x19] = "RpcAsyncEnumForms", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x1a] = "RpcAsyncGetPrinterDriver", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x1b] = "RpcAsyncEnumPrinterData", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x1c] = "RpcAsyncEnumPrinterDataEx", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x1d] = "RpcAsyncEnumPrinterKey", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x1e] = "RpcAsyncDeletePrinterData", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x1f] = "RpcAsyncDeletePrinterDataEx", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x20] = "RpcAsyncDeletePrinterKey", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x21] = "RpcAsyncXcvData", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x22] = "RpcAsyncSendRecvBidiData", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x23] = "RpcAsyncCreatePrinterIC", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x24] = "RpcAsyncPlayGdiScriptOnPrinterIC", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x25] = "RpcAsyncDeletePrinterIC", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x26] = "RpcAsyncEnumPrinters", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x27] = "RpcAsyncAddPrinterDriver", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x28] = "RpcAsyncEnumPrinterDrivers", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x29] = "RpcAsyncGetPrinterDriverDirectory", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x2a] = "RpcAsyncDeletePrinterDriver", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x2b] = "RpcAsyncDeletePrinterDriverEx", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x2c] = "RpcAsyncAddPrintProcessor", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x2d] = "RpcAsyncEnumPrintProcessors", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x2e] = "RpcAsyncGetPrintProcessorDirectory", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x2f] = "RpcAsyncEnumPorts", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x30] = "RpcAsyncEnumMonitors", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x31] = "RpcAsyncAddPort", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x32] = "RpcAsyncSetPort", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x33] = "RpcAsyncAddMonitor", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x34] = "RpcAsyncDeleteMonitor", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x35] = "RpcAsyncDeletePrintProcessor", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x36] = "RpcAsyncEnumPrintProcessorDatatypes", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x37] = "RpcAsyncAddPerMachineConnection", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x38] = "RpcAsyncDeletePerMachineConnection", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x39] = "RpcAsyncEnumPerMachineConnections", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x3a] = "RpcSyncRegisterForRemoteNotifications", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x3b] = "RpcSyncUnRegisterForRemoteNotifications", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x3c] = "RpcSyncRefreshRemoteNotifications", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x3d] = "RpcAsyncGetRemoteNotifications", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x3e] = "RpcAsyncInstallPrinterDriverFromPackage", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x3f] = "RpcAsyncUploadPrinterDriverPackage", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x40] = "RpcAsyncGetCorePrinterDrivers", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x41] = "RpcAsyncCorePrinterDriverInstalled", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x42] = "RpcAsyncGetPrinterDriverPackagePath", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x43] = "RpcAsyncDeletePrinterDriverPackage", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x44] = "RpcAsyncReadPrinter", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x45] = "RpcAsyncResetPrinter", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x46] = "RpcAsyncGetJobNamedPropertyValue", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x47] = "RpcAsyncSetJobNamedProperty", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x48] = "RpcAsyncDeleteJobNamedProperty", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x49] = "RpcAsyncEnumJobNamedProperties", + ["76f03f96-cdfd-44fc-a22c-64950a001209",0x4a] = "RpcAsyncLogJobInfoForBranchOffice", # InitShutdown - ["894de0c0-0d55-11d3-a322-00c04fa321a1",0] = "BaseInitiateShutdown", - ["894de0c0-0d55-11d3-a322-00c04fa321a1",1] = "BaseAbortShutdown", - ["894de0c0-0d55-11d3-a322-00c04fa321a1",2] = "BaseInitiateShutdownEx", + ["894de0c0-0d55-11d3-a322-00c04fa321a1",0x00] = "BaseInitiateShutdown", + ["894de0c0-0d55-11d3-a322-00c04fa321a1",0x01] = "BaseAbortShutdown", + ["894de0c0-0d55-11d3-a322-00c04fa321a1",0x02] = "BaseInitiateShutdownEx", # WindowsShutdown ["d95afe70-a6d5-4259-822e-2c84da1ddb0d",0x00] = "WsdrInitiateShutdown", diff --git a/scripts/base/protocols/dnp3/consts.bro b/scripts/base/protocols/dnp3/consts.bro index 1b2a6206ef..515738cbed 100644 --- a/scripts/base/protocols/dnp3/consts.bro +++ b/scripts/base/protocols/dnp3/consts.bro @@ -38,12 +38,12 @@ export { [0x1e] = "ABORT_FILE", [0x1f] = "ACTIVATE_CONFIG", [0x20] = "AUTHENTICATE_REQ", - [0x21] = "AUTHENTICATE_ERR", + [0x21] = "AUTHENTICATE_REQ_NR", # Responses. [0x81] = "RESPONSE", [0x82] = "UNSOLICITED_RESPONSE", - [0x83] = "AUTHENTICATE_RESP", + [0x83] = "AUTHENTICATE_RESPONSE", } &default=function(i: count):string { return fmt("unknown-%d", i); } &redef; } diff --git a/scripts/base/protocols/dns/consts.bro b/scripts/base/protocols/dns/consts.bro index dfcbc4031f..00fa6b0969 100644 --- a/scripts/base/protocols/dns/consts.bro +++ b/scripts/base/protocols/dns/consts.bro @@ -4,31 +4,81 @@ module DNS; export { - const PTR = 12; ##< RR TYPE value for a domain name pointer. - const EDNS = 41; ##< An OPT RR TYPE value described by EDNS. - const ANY = 255; ##< A QTYPE value describing a request for all records. - ## Mapping of DNS query type codes to human readable string ## representation. const query_types = { - [1] = "A", [2] = "NS", [3] = "MD", [4] = "MF", - [5] = "CNAME", [6] = "SOA", [7] = "MB", [8] = "MG", - [9] = "MR", [10] = "NULL", [11] = "WKS", [PTR] = "PTR", - [13] = "HINFO", [14] = "MINFO", [15] = "MX", [16] = "TXT", - [17] = "RP", [18] = "AFSDB", [19] = "X25", [20] = "ISDN", - [21] = "RT", [22] = "NSAP", [23] = "NSAP-PTR", [24] = "SIG", - [25] = "KEY", [26] = "PX" , [27] = "GPOS", [28] = "AAAA", - [29] = "LOC", [30] = "EID", [31] = "NIMLOC", [32] = "NB", - [33] = "SRV", [34] = "ATMA", [35] = "NAPTR", [36] = "KX", - [37] = "CERT", [38] = "A6", [39] = "DNAME", [40] = "SINK", - [EDNS] = "EDNS", [42] = "APL", [43] = "DS", [44] = "SSHFP", - [45] = "IPSECKEY", [46] = "RRSIG", [47] = "NSEC", [48] = "DNSKEY", - [49] = "DHCID", [99] = "SPF", [100] = "DINFO", [101] = "UID", - [102] = "GID", [103] = "UNSPEC", [249] = "TKEY", [250] = "TSIG", - [251] = "IXFR", [252] = "AXFR", [253] = "MAILB", [254] = "MAILA", + [1] = "A", + [2] = "NS", + [3] = "MD", + [4] = "MF", + [5] = "CNAME", + [6] = "SOA", + [7] = "MB", + [8] = "MG", + [9] = "MR", + [10] = "NULL", + [11] = "WKS", + [12] = "PTR", + [13] = "HINFO", + [14] = "MINFO", + [15] = "MX", + [16] = "TXT", + [17] = "RP", + [18] = "AFSDB", + [19] = "X25", + [20] = "ISDN", + [21] = "RT", + [22] = "NSAP", + [23] = "NSAP-PTR", + [24] = "SIG", + [25] = "KEY", + [26] = "PX" , + [27] = "GPOS", + [28] = "AAAA", + [29] = "LOC", + [30] = "EID", + [31] = "NIMLOC", + [32] = "NB", + [33] = "SRV", + [34] = "ATMA", + [35] = "NAPTR", + [36] = "KX", + [37] = "CERT", + [38] = "A6", + [39] = "DNAME", + [40] = "SINK", + [41] = "OPT", + [42] = "APL", + [43] = "DS", + [44] = "SSHFP", + [45] = "IPSECKEY", + [46] = "RRSIG", + [47] = "NSEC", + [48] = "DNSKEY", + [49] = "DHCID", + [50] = "NSEC3", + [51] = "NSEC3PARAM", + [52] = "TLSA", + [55] = "HIP", + [59] = "CDS", + [60] = "CDNSKEY", + [61] = "OPENPGPKEY", + [99] = "SPF", + [100] = "UINFO", + [101] = "UID", + [102] = "GID", + [103] = "UNSPEC", + [249] = "TKEY", + [250] = "TSIG", + [251] = "IXFR", + [252] = "AXFR", + [253] = "MAILB", + [254] = "MAILA", + [255] = "ANY" + [256] = "URI" [257] = "CAA", - [32768] = "TA", [32769] = "DLV", - [ANY] = "*", + [32768] = "TA", + [32769] = "DLV", } &default = function(n: count): string { return fmt("query-%d", n); }; ## Errors used for non-TSIG/EDNS types.