Wireshark · Ethereal-dev: Re: [Ethereal-dev] a few things for dcerpc

[Guy Harris <gharris@xxxxxxxxx>]

On Sun, Nov 18, 2001 at 07:44:51PM -0500, Todd Sabin wrote:
> Here's a patch (and a new file) for some dcerpc stuff.  It does the
> following:
> 
> o Modifies the dcerpc handoff to subdissectors slightly.  It also
> needs to pass the data representation to the subdissector.  Also, if
> no subdissector is found, it puts a "Stub data" entry in the tree.
> 
> o Adds optional TCP desegmentation to the dcerpc layer.  Note that
> dcerpc has it's own ability to fragment PDUs.  This isn't for dealing
> with that, but with the case of a single PDU being broken over more
> than one TCP segment.
> 
> o Adds a little bit of dissection to packet-dcerpc-epm.c.  Mainly just
> proof of concept for the dcerpc handoff stuff.  (Writing this is how I
> realized the need for the drep.)
> 
> o Adds packet-dcerpc-ndr.c, which will contain NDR dissection routines
> for use by subdissectors.

Checked in, with modifications so that

	1) it only does desegmentation when running directly on top of
	   TCP;

	2) it should handle multiple DCERPC PDUs inside a TCP segment.