Ethereal-dev: Re: [Ethereal-dev] Re: dce rpc type packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jeff Davis <jdavis-ethereal@xxxxxxxxxxx>
Date: Mon, 27 Jan 2003 23:22:41 -0800
On Sunday 26 January 2003 09:09 pm, Jaime Fournier wrote:
> Just out of curiosity what are you trying to do with
> DCE? I wrote a lot of the DCERPC stuff that relatest
> to DFS, and have been working on a DCE client
> application. Just curious.
>

Well, to start off, I really didn't know anything about networking before I 
started (I'm not exaggerating much: I started off by reading documentation so 
I knew how, why and when to use socket(), connect(), bind(), etc. and I'm 
still not 100% confident).

Anyway, I could get some TCP communication going well (built a little 
client/server), but for some reason I was having trouble with UDP. So, I 
started using ethereal to see what was going where. Then I started seeing 
packets which I thought were UDP but ethereal called them DCERPC. Shortly 
after I came to the realization that it was DCERPC *over* UDP :)

So, I then started trying to mess with DCERPC, and then tried to hold my half 
of the conversation with a windows machine (I could call it reverse 
engineering I suppose). Appearently parts of the windows networking protocols 
use DCERPC for the UDP communication.

If your client is open source, I wouldn't mind looking at it, but I'm afraid I 
wouldn't immediately be a big help.

Regards,
	Jeff