Project

General

Profile

Actions
Copy link

Feature #2727

closed
EL SB

dcerpc: UUID to service name mapping

Feature #2727: dcerpc: UUID to service name mapping

Added by Eric Leblond over 7 years ago. Updated 6 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Shivani Bhardwaj
Target version:
9.0.0-beta1
Effort:
Difficulty:
medium
Label:

Description

Microsoft is proposing a DCERPC UID to name mapping. It is used by Zeek to allow mapping of UID to human understandable names (see https://github.com/bro/bro/blob/master/scripts/base/protocols/dce-rpc/consts.bro).

We could integrate that into dcerpc output to get more user friendly events.

Related issues 2 (1 open — 1 closed)

Related to Suricata - Feature #8523: dcerpc: map opnum to the function namesClosedShivani BhardwajActions
Related to Suricata - Feature #8767: dcerpc: user defined opnum uuid mapAssignedShivani BhardwajActions
Actions
Copy link

Also available in: PDF Atom