Ethereal-dev: Re: [Ethereal-dev] packet-dcerpc-reg.c patch for shutdown + one morent status co

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jim McDonough <jmcd@xxxxxxxxxx>
Date: Mon, 27 Oct 2003 15:13:16 -0500



>>This patch adds dissection of the shutdown, shutdownex, and abortshutdown
>>commands within the winreg pipe. It also adds one more nt status code to
>>packet-dcerpc-smb.c that is often returned from abortshutdown.
>Checked in.

FYI, the same exact commands occur over the \PIPE\initshutdown pipe (UUID
894de0c0-0d55-11d3-a322-00c04fa321a1, version 1) on later versions of
windows, with opnums 0 (initshutdown), 1 (abortshutdown) and 2,
(initshutdownex).  I'd submit a new file, packet-dcerpc-initshutdown.c, but
IBM hasn't given me permission to submit a new file :-(

So if someone else feels like contributing that, it would be great.  My
hands are tied on this, though.  Sorry.

----------------------------
Jim McDonough
IBM Linux Technology Center
Samba Team
6 Minuteman Drive
Scarborough, ME 04074
USA

jmcd@xxxxxxxxxx
jmcd@xxxxxxxxx

Phone: (207) 885-5565
IBM tie-line: 776-9984