Unknown Spooler RPC

[Steven French]

Does anyone know what spoolss RPC opnum 87 is?   Current Ethereal doesn't
decode it and Samba faults on it.

Transmission Control Protocol, Src Port: 1140 (1140), Dst Port: netbios-ssn (139), Seq: 2865198546, Ack: 2056805189
NetBIOS Session Service
SMB (Server Message Block Protocol)
SMB Pipe Protocol
DCE RPC
    Version: 5
    Version (minor): 0
    Packet type: Request (0x00)
    Packet Flags: 0x03
        .... ...1 = First Frag: Set
        .... ..1. = Last Frag: Set
        .... .0.. = Cancel Pending: Not set
        .... 0... = Reserved: Not set
        ...0 .... = Multiplex: Not set
        ..0. .... = Did Not Execute: Not set
        .0.. .... = Maybe: Not set
        0... .... = Object: Not set
    Data Representation: 10000000
        Byte order: Little-endian (1)
        Character: ASCII (0)
        Floating-point: IEEE (0)
    Frag Length: 1076
    Auth Length: 0
    Call ID: 13
    Alloc hint: 1052
    Context ID: 0
    Opnum: 87

01 ac a2 00 d0  b7 1d e1 a1 08 00 45 00   .P,.¬¢.Ð ·.á¡..E.
0010  04 ac 70 8a 40 00 80 06  01 a5 c0 a8 01 64 c0 a8   .¬p. at ... .¥À¨.dÀ¨
0020  01 68 04 74 00 8b aa c7  7e da 7a 98 5c 05 50 18   .h.t..ªÇ ~Úz.\.P.
0030  fd 05 bb 95 00 00 00 00  04 80 ff 53 4d 42 25 00   ý.»..... ..ÿSMB%.
0040  00 00 00 18 07 48 00 00  00 00 00 00 00 00 00 00   .....H.. ........
0050  00 00 01 00 04 05 64 00  00 25 10 00 00 34 04 00   ......d. .%...4..
0060  00 30 16 00 00 00 00 00  00 00 00 00 00 00 00 4c   .0...... .......L
0070  00 34 04 4c 00 02 00 26  00 57 73 3d 04 5c 50 49   .4.L...& .Ws=.\PI
0080  50 45 5c 00 00 00 05 00  00 03 10 00 00 00 34 04   PE\..... ......4.
0090  00 00 0f 00 00 00 1c 04  00 00 00 00 57 00 90 e0   ........ ....W..à
00a0  0a 00 0b 00 00 00 00 00  00 00 0b 00 00 00 5c 00   ........ ......\.
00b0  5c 00 73 00 6d 00 66 00  68 00 6f 00 6d 00 65 00   \.s.m.f. h.o.m.e.
00c0  31 00 00 00 00 00 b0 e0  0a 00 e8 03 00 00 00 00   1.....°à ..è.....
00d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ........ ........
00e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ........ ........
00f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ........ ........

I got this error when experimenting with/testing adding printers vs. 2.2.3a
vs the Windows 2000 command line printer administration tool.  Before
adding the printer driver remotely to Samba, I tried the command:
      rundll32 printui.dll,PrintUIEntry /o /c\\smfhome1 /ge

Which according to the help should list the per machine printer connections
to a remote server (Samba 2.2.3a or Head in this case).  The tool is an
interesting one.  See help below:

Usage: rundll32 printui.dll,PrintUIEntry [options] [@commandfile]
   /c[name] unc machine name if the action is on a remote machine
   /ge enum per machine printer connections
   /o display printer queue view"
(lots more options) etc.   and

Other interesting examples that are listed in this tool are:
   Enumerate per machine printer connections:
rundll32 printui.dll,PrintUIEntry /ge /c\\machine
   Add printer driver using inf:
rundll32 printui.dll,PrintUIEntry /ia /c\\machine /m "AGFA-AccuSet v52.3"
/h "Intel" /v "Windows 2000 or XP" /f %windir%\inf\ntprint.inf
   Add printer driver using inf:
rundll32 printui.dll,PrintUIEntry /ia /K /c\\machine /m "AGFA-AccuSet
v52.3" /h "Windows NT x86" /v 3
   Remove printer driver:
rundll32 printui.dll,PrintUIEntry /dd /c\\machine /m "AGFA-AccuSet v52.3"
/h "Intel" /v "Windows 2000 or XP"
   Remove printer driver:
rundll32 printui.dll,PrintUIEntry /dd /K /c\\machine /m "AGFA-AccuSet
v52.3" /h "Windows NT x86" /v 3
   Set printer as default:
rundll32 printui.dll,PrintUIEntry /y /n "printer"
etc.


Steve French
Senior Software Engineer
Linux Technology Center - IBM Austin
phone: 512-838-2294
email: sfrench at us.ibm.com