[cifs-protocol] Regarding DCERPC

Neil B Martin neilm at thetestplace.co.uk
Tue Dec 15 13:20:22 MST 2009


You will find NDR64  here:
http://msdn.microsoft.com/en-us/library/cc243560%28PROT.13%29.aspx

Regards

Neil

-----Original Message-----
From: cifs-protocol-bounces at cifs.org [mailto:cifs-protocol-bounces at cifs.org]
On Behalf Of ronnie sahlberg
Sent: Tuesday, December 15, 2009 9:24 AM
To: naveen kumar
Cc: cifs-protocol at samba.org
Subject: Re: [cifs-protocol] Regarding DCERPC

Note, since I assume your question is in regard to DCE/RPC in a
windows environment,
the latest versions of Windows use a new type of transfer syntax called
NDR64.

This is different from normal NDR in a number of ways.
I dont know off the top of my head where the documetns for that can be
found, maybe Tridge knows?

Otherwise, both samba4 and wireshark contains unmarshaller code to
handle NDR/NDR64 so the deltas between NDR and NDR64 can be seen there
in worst case.




On Tue, Dec 15, 2009 at 6:56 PM, ronnie sahlberg
<ronniesahlberg at gmail.com> wrote:
> http://www.opengroup.org/pubs/catalog/c706.htm
>
> On Tue, Dec 15, 2009 at 6:35 PM, naveen kumar <k.naveen25 at gmail.com>
wrote:
>> Hi,
>>
>>        I need a complete DCERPC packet structure, I mean to say Iam
decoding
>> the DCERPC packet and I need to know about the header + data information.
>>
>>
>> Thanks & Regards
>> Naveen K
>>
>> _______________________________________________
>> cifs-protocol mailing list
>> cifs-protocol at cifs.org
>> https://lists.samba.org/mailman/listinfo/cifs-protocol
>>
>>
>
_______________________________________________
cifs-protocol mailing list
cifs-protocol at cifs.org
https://lists.samba.org/mailman/listinfo/cifs-protocol




More information about the cifs-protocol mailing list