Wireshark · Wireshark-commits: [Wireshark-commits] rev 50901: /trunk/epan/dissectors/ /trunk/epan/dissectors/: packet-dcerpc.c

[morriss@xxxxxxxxxxxxx]

http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=50901

User: morriss
Date: 2013/07/25 06:18 PM

Log:
 From Dirk via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8952 :
 
 Microsoft describes a feature called Bind Time Feature Negotiation used in
 DCE/RPC Bind/BindAck PDUs. See http://msdn.microsoft.com/en-us/library/cc243715.aspx
 
 In the Bind PDU they encode 2 bits into the Transfer Syntax UUID. In the
 BindAck PDU they encode 2 bits into the result code. The attached patch
 dissects these two special bits. For the UUID I've simply added 4 UUIDs each
 with the same name; this works best with the DCE/RPC UUID lookup code. If
 Microsoft would ever introduce more bits we could change this to a better
 handling, since the current solution obviously doesn't scale.
 
 Apart from adding new hf_ and ett_ variables and using them, I've also renamed
 "Transport Syntax" to "Transfer Syntax", since the specifications only use
 "Transfer".

Directory: /trunk/epan/dissectors/
  Changes    Path               Action
  +39 -11    packet-dcerpc.c    Modified