Hi,
I had a problem to recognize SMB NamedPipe packet between
srvsvc/NetrShareEnum and winreg/OpenKey. They both have Pipe protocol
code 0x26(TransNmPipe) in Trans packet, and both have opnum 15 in DCE
RPC packet. Is there a way to find out whether the packet contains
SRVSVC or WINREGpacket from some field?
Thank you
Mike
