[cifs-protocol] Regarding DCERPC
ronniesahlberg at gmail.com
Tue Dec 15 02:23:50 MST 2009
Note, since I assume your question is in regard to DCE/RPC in a
the latest versions of Windows use a new type of transfer syntax called NDR64.
This is different from normal NDR in a number of ways.
I dont know off the top of my head where the documetns for that can be
found, maybe Tridge knows?
Otherwise, both samba4 and wireshark contains unmarshaller code to
handle NDR/NDR64 so the deltas between NDR and NDR64 can be seen there
in worst case.
On Tue, Dec 15, 2009 at 6:56 PM, ronnie sahlberg
<ronniesahlberg at gmail.com> wrote:
> On Tue, Dec 15, 2009 at 6:35 PM, naveen kumar <k.naveen25 at gmail.com> wrote:
>> I need a complete DCERPC packet structure, I mean to say Iam decoding
>> the DCERPC packet and I need to know about the header + data information.
>> Thanks & Regards
>> Naveen K
>> cifs-protocol mailing list
>> cifs-protocol at cifs.org
More information about the cifs-protocol