Project

General

Profile

Actions
Copy link

Feature #2727

open
EL SB

dcerpc: UUID to service name mapping

Feature #2727: dcerpc: UUID to service name mapping

Added by Eric Leblond over 7 years ago. Updated 3 days ago.

Status:
In Review
Priority:
Normal
Assignee:
Shivani Bhardwaj
Target version:
9.0.0-beta1
Effort:
low
Difficulty:
low
Label:

Description

Microsoft is proposing a DCERPC UID to name mapping. It is used by Zeek to allow mapping of UID to human understandable names (see https://github.com/bro/bro/blob/master/scripts/base/protocols/dce-rpc/consts.bro).

We could integrate that into dcerpc output to get more user friendly events.

Related issues 1 (1 open — 0 closed)

Related to Suricata - Feature #8523: dcerpc: map opnum to the function namesIn ReviewShivani BhardwajActions
Actions
Copy link

Also available in: PDF Atom