Ethereal-users: [Ethereal-users] Ethereal support for decoding DCERPC packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Yafit Cohen" <Yafitc@xxxxxxxxxxxxx>
Date: Wed, 14 Jul 2004 11:41:06 +0300
Hey,

It seems that Ethereal doesn't support DCERPC protocol in its "Decode As" protocol list;
I'm trying to read a tcpdump packet file of MS Exchange packets and decode the TCP packets as DCERPC, however, this protocol is not in the "Decode As" protocol list.
It's pretty weird since when using ethereal itself to capture the same MS Exchange packets it does decode these packets as DCERPC...

Is DCERPC decoding really not supported for offline packets or is there a chance i'm doing something wrong?
thanks in advance
Yafit
yafitc@xxxxxxxxxxxxx