Ethereal-dev: Re: [Ethereal-dev] DCOM and DCE\RPC

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Tim Potter <tpot@xxxxxxxxx>
Date: Fri, 28 Apr 2006 00:58:15 +1000
On Thu, Apr 27, 2006 at 03:28:55PM +0100, Graham Bloice wrote:

> Folks,
> 
> I'm trying to resolve a really sticky issue with Microsoft's DCOM, in
> particular OPC.  Does anyone know of any software that can take the DCE/RPC
> payload and decode it further ?
> 
> Regards,
> 
> Graham Bloice

I think you're going to be pretty much out of luck, unless someone has
written a plugin for netmon.exe.  If you know the IDL and the NDR
marshalling rules sometimes you can often get an idea of what's going on 
just by staring at the packet.


Tim.