Ethereal-dev: Re: [Ethereal-dev] Is someone currently working on DCERPC / DCOM dissection?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Ronnie Sahlberg" <sahlberg@xxxxxxxxxxxxxxxx>
Date: Sat, 10 Aug 2002 21:06:51 +1000
Hi,
That sounds great.
I work from time to time on the dcerpc dissectors, a few others do as well.
I dont know of anyone doing work in that area at the moment.

I am curious: What improvement in generic dcerpc and ndr are you thinking
of?
(floating point? multidimensional arrays?)

If you plan to implement interfaces which are undocumented you may consider
embedding the known idl definitions in the sourcefile as a reference of the
interface.
See packet-dcerpc-srvsvc.c as an example.

best regards
    ronnie sahlberg

----- Original Message -----
From: "Ulf Lamping"
Subject: [Ethereal-dev] Is someone currently working on DCERPC / DCOM
dissection?


> Hi list!
>
> Is someone currently working on the dcerpc dissectors?
>
> I am writing extensions to the existing dcerpc code (from nightly CVS
snapshot),
> to dissect the DCOM protocol.
>
> This will include:
>
> -dissection of IRemUnknown
> -dissection of IRemoteActivation
> -dissection of IOXIDResolver
> -improvements in generic dcerpc and ndr dissection
>
> This will effect the existing files:
> -packet-dcerpc.c
> -packet-dcerpc-ndr.c
> -packet-dcerpc-remact.c
> -packet-dcerpc-oxid.c
>
> Is someone else currently working on this topic / files?