[cifs-protocol] Regarding DCERPC
Neil B Martin
neilm at thetestplace.co.uk
Tue Dec 15 13:20:22 MST 2009
You will find NDR64 here:
From: cifs-protocol-bounces at cifs.org [mailto:cifs-protocol-bounces at cifs.org]
On Behalf Of ronnie sahlberg
Sent: Tuesday, December 15, 2009 9:24 AM
To: naveen kumar
Cc: cifs-protocol at samba.org
Subject: Re: [cifs-protocol] Regarding DCERPC
Note, since I assume your question is in regard to DCE/RPC in a
the latest versions of Windows use a new type of transfer syntax called
This is different from normal NDR in a number of ways.
I dont know off the top of my head where the documetns for that can be
found, maybe Tridge knows?
Otherwise, both samba4 and wireshark contains unmarshaller code to
handle NDR/NDR64 so the deltas between NDR and NDR64 can be seen there
in worst case.
On Tue, Dec 15, 2009 at 6:56 PM, ronnie sahlberg
<ronniesahlberg at gmail.com> wrote:
> On Tue, Dec 15, 2009 at 6:35 PM, naveen kumar <k.naveen25 at gmail.com>
>> I need a complete DCERPC packet structure, I mean to say Iam
>> the DCERPC packet and I need to know about the header + data information.
>> Thanks & Regards
>> Naveen K
>> cifs-protocol mailing list
>> cifs-protocol at cifs.org
cifs-protocol mailing list
cifs-protocol at cifs.org
More information about the cifs-protocol