Ethereal-dev: Re: [ethereal-dev] New protocol or subtree?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 14 Oct 1999 16:14:04 -0700 (PDT)
> Yep. It's Transarc's version of RPC.

Well, the Andrew group at CMU's version of RPC, they being the folks who
originally did AFS; Transarc's DCE/DFS stuff, as opposed to their AFS
stuff, uses DCE RPC, for which, at some point, we may also want a
dissector, given that Microsoft RPC is essentially DCE RPC, and that a
pile of SMB stuff, including the domain controller stuff the Samba group
are now implementing, use MS RPC atop SMB.

(Doing DCE RPC "right" may be tricky, given that, if I remember
correctly, the byte order of packets is the byte order of the sender of
the packets, so there needs to be some way of inferring from the packet
contents the byte order.  If there are multi-byte numeric fields with a
limited set of valid values that are in all DCE RPC requests and
replies, it may be possible to infer the byte order by looking at those
fields.  For MS RPC, assuming that everybody's little-endian *might* do
the trick, although, given that there exist DCOM implementations for
various UNIXes, as I remember, I don't know whether there's a guarantee
that all MS RPC requests and replies are little-endian....

X11 has, if I remember correctly, a similar problem.)

> Since you mention ONC RPC - is there anything actively being done with
> it as far as ethereal goes? I saw some various things in the list
> archive, but nothing concrete. I'd love to see ethereal have added
> support for NIS and bootparams. 

The last I've seen is mail to the list from Uwe Girlich saying he plans
to do dissectors for ONC RPC and various dissectors atop it.