Ethereal-dev: Re: [Ethereal-dev] DCERPC packets being decoded as DDTP Encyrpted.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Sun, 19 Jan 2003 13:32:17 -0800
On Sat, Jan 18, 2003 at 12:52:02PM -0800, Jaime Fournier wrote:
> I am seeing DCERPC CDS packets being decoded as DDTP
> encrypted payload.

That's because they're either going to or from the DDTP port, and the
DDTP dissector doesn't currently check stuff such as the version number
and reject packets that it doesn't consider valid.

I'll look at making it do so.