[Todd Sabin <tas@xxxxxxxxxxx>]

ulf.lamping@xxxxxx writes:

> Hi!
> 
> I think, it could base upon the DCE-RPC dissector, already running quite
> good.
> 

There's still a fair bit to be done with the base dce-rpc dissector
before trying to handle DCOM would be feasible.  It needs to keep
track of conversations and bindings to UUIDs, and then have a handoff
table based on the interface UUID, similar to the way the sunrpc
dissector works.

Once that's done, then something like the idl2eth for GIOP could, in
theory, be written for dce-rpc .idl files, and possibly DCOM .idls,
too.  That'd be ideal, but is probably quite a ways off.

Another big improvement would be getting the SMB dissector to handoff
the appropriate stuff to packet-dcerpc.

The first step above (getting to the handoff stage) is on my to-do
list, but feel free to pitch in.  :)


Todd