msdltw
import "github.com/TheManticoreProject/Manticore/windows/protocols/ms-dltw"
Index
type CDomainRelativeObjId
CDomainRelativeObjId is a domain-relative object identifier ([MS-DLTW] 2.2.5): the pairing of a VolumeID and an ObjectID that together locate a tracked file. In the protocol it names both a FileID (the birth droid) and a FileLocation (the current droid). Both members are transmitted inline in declaration order (Volume then Object), for a total of 32 octets on the wire.
type CDomainRelativeObjId struct {
Volume CVolumeId
Object CObjId
}
type CMachineId
CMachineId is a MachineID ([MS-DLTW] 2.2.4): the identifier of a computer that participates in link tracking. It is a fixed 16-octet field (the IDL member `char _szMachine[16]`) holding a null-terminated ASCII string that names the computer; unused trailing octets are zero. The array is transmitted inline under NDR (a fixed array carries no conformance/variance header).
type CMachineId struct {
Machine [16]byte
}
func NewCMachineId
func NewCMachineId(name string) CMachineId
NewCMachineId builds a CMachineId from a name, copying at most 15 octets so the fixed 16-octet field always retains a NUL terminator (matching the null-terminated ASCII string the wire format carries).
func (CMachineId) String
func (m CMachineId) String() string
String returns the machine name as a Go string, trimming at the first NUL terminator.
type CObjId
CObjId is an ObjectID ([MS-DLTW] 2.2.2): the identifier assigned to a file when it is first tracked, carried on the wire as a single 16-octet GUID (the IDL field _object).
The GUID is modeled on msdtyp.GUID rather than windows/guid.GUID because the latter’s trailing uint64 does not marshal to the required 16 octets under NDR. Use Object.GUID() / msdtyp.NewGUID to convert to and from windows/guid.GUID.
type CObjId struct {
Object msdtyp.GUID
}
func (CObjId) GUID
func (o CObjId) GUID() guid.GUID
GUID returns the ObjectID as a windows/guid.GUID for display and comparison.
type CVolumeId
CVolumeId is a VolumeID ([MS-DLTW] 2.2.3): the identifier assigned to a volume when link tracking begins on it, carried on the wire as a single 16-octet GUID (the IDL field _volume).
The GUID is modeled on msdtyp.GUID rather than windows/guid.GUID because the latter’s trailing uint64 does not marshal to the required 16 octets under NDR. Use Volume.GUID() / msdtyp.NewGUID to convert to and from windows/guid.GUID.
type CVolumeId struct {
Volume msdtyp.GUID
}
func (CVolumeId) GUID
func (v CVolumeId) GUID() guid.GUID
GUID returns the VolumeID as a windows/guid.GUID for display and comparison.