Note, since I assume your question is in regard to DCE/RPC in a windows environment, the latest versions of Windows use a new type of transfer syntax called NDR64.
This is different from normal NDR in a number of ways. I dont know off the top of my head where the documetns for that can be found, maybe Tridge knows? Otherwise, both samba4 and wireshark contains unmarshaller code to handle NDR/NDR64 so the deltas between NDR and NDR64 can be seen there in worst case. On Tue, Dec 15, 2009 at 6:56 PM, ronnie sahlberg <[email protected]> wrote: > http://www.opengroup.org/pubs/catalog/c706.htm > > On Tue, Dec 15, 2009 at 6:35 PM, naveen kumar <[email protected]> wrote: >> Hi, >> >> I need a complete DCERPC packet structure, I mean to say Iam decoding >> the DCERPC packet and I need to know about the header + data information. >> >> >> Thanks & Regards >> Naveen K >> >> _______________________________________________ >> cifs-protocol mailing list >> [email protected] >> https://lists.samba.org/mailman/listinfo/cifs-protocol >> >> > _______________________________________________ cifs-protocol mailing list [email protected] https://lists.samba.org/mailman/listinfo/cifs-protocol
