blob: 5780eb19ad7d81f27e72ffa0529ce29aa142be5f (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
|
/*++
Copyright (c) 1992 Microsoft Corporation
Module Name:
smbtrace.h
Abstract:
This module provides the interface between the SmbTrace program and
the kernel mode SmbTrace component.
The interface between the kernel mode component and the
server/redirector is found in nt\private\inc\smbtrsup.h
Author:
Peter Gray (w-peterg) 16-Mar-92
Revision History:
Stephan Mueller (t-stephm) 08-July-92
Extensions to support smbtrace in the redirector as well as the
server.
--*/
#ifndef _SMBTRACE_
#define _SMBTRACE_
//
// The shared memory has this structure in it, used to manage the
// table and other data shared by the kernel mode component and
// the appliction. It is passed back to the client after creation by the
// server during a FSCTL_???_START_SMBTRACE via an offset (pointer).
//
typedef struct _SMBTRACE_TABLE_HEADER {
ULONG HighestConsumed; // last table entry processed by app (queue head)
ULONG NextFree; // next free entry in table (queue tail)
BOOLEAN ApplicationStop; // when set, the application should halt
} SMBTRACE_TABLE_HEADER, *PSMBTRACE_TABLE_HEADER;
//
// The following stucture is one entry in the shared table of
// offsets to the received SMBs. The offsets are relative to the
// start of the shared memory section.
//
typedef struct _SMBTRACE_TABLE_ENTRY {
ULONG BufferOffset; // location of SMB from start of shared memory
ULONG SmbLength; // the length of the SMB
ULONG NumberMissed; // number of preceding SMBs that were missed
PVOID SmbAddress; // real address of original SMB, if available
} SMBTRACE_TABLE_ENTRY, *PSMBTRACE_TABLE_ENTRY;
//
// The following stucture is passed to the server when doing the
// FSCtl "FSCTL_???_START_SMBTRACE". It contains configuration
// information that will affect the way the NT server and Smbtrace
// will interact.
//
typedef struct _SMBTRACE_CONFIG_PACKET_REQ {
BOOLEAN SingleSmbMode; // T to block on DoneEvent, F for faster.
CLONG Verbosity; // how much data the app intends to decode
// indicates how much needs to be saved
ULONG BufferSize; // size of shared memory used to store SMBs
ULONG TableSize; // number of entries in the table
} SMBTRACE_CONFIG_PACKET_REQ, *PSMBTRACE_CONFIG_PACKET_REQ;
//
// Here is the response to that FSCTL.
//
typedef struct _SMBTRACE_CONFIG_PACKET_RESP {
ULONG HeaderOffset; // location of header from start of shared memory
ULONG TableOffset; // location of table from start of shared memory
} SMBTRACE_CONFIG_PACKET_RESP, *PSMBTRACE_CONFIG_PACKET_RESP;
//
// Well-known names for objects accessible to both the server/redirector
// and the Smbtrace application.
//
#define SMBTRACE_SRV_SHARED_MEMORY_NAME TEXT( "\\SmbTraceSrvMemory" )
#define SMBTRACE_SRV_NEW_SMB_EVENT_NAME TEXT( "\\SmbTraceSrvNewSmbEvent" )
#define SMBTRACE_SRV_DONE_SMB_EVENT_NAME TEXT( "\\SmbTraceSrvDoneSmbEvent" )
#define SMBTRACE_LMR_SHARED_MEMORY_NAME TEXT( "\\SmbTraceRdrMemory" )
#define SMBTRACE_LMR_NEW_SMB_EVENT_NAME TEXT( "\\SmbTraceRdrNewSmbEvent" )
#define SMBTRACE_LMR_DONE_SMB_EVENT_NAME TEXT( "\\SmbTraceRdrDoneSmbEvent" )
//
// Verbosity levels indicating how much data the SmbTrace application
// intends to decode, and consequently, how much data the server/redirector
// must preserve for it.
//
#define SMBTRACE_VERBOSITY_OFF 0
#define SMBTRACE_VERBOSITY_SINGLE_LINE 1
#define SMBTRACE_VERBOSITY_ERROR 2
#define SMBTRACE_VERBOSITY_HEADER 3
#define SMBTRACE_VERBOSITY_PARAMS 4
#define SMBTRACE_VERBOSITY_NONESSENTIAL 5
#endif // _SMBTRACE_
|
