Project

General

Profile

Actions

Feature #5413

closed

DCERPC logging is not easy to use in analysis

Added by Eric Leblond 7 months ago. Updated 3 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:

Description

The dcerpc part of smb events have the dcerpc uudi in one event and the opnum in another event. This is not convenient as a full understanding of the dcerpc request needs to be build upon 2 events.


Related issues 2 (2 open0 closed)

Related to Feature #4175: dcerpc: higher level loggingNewCommunity TicketActions
Related to Bug #5814: smb: duplicate interface fields loggedIn ReviewJason IshActions
Actions #1

Updated by Victor Julien 7 months ago

Actions #2

Updated by Victor Julien 3 months ago

  • Status changed from In Progress to Closed
  • Target version changed from TBD to 7.0.0-beta1
Actions #3

Updated by Jason Ish 3 days ago

  • Related to Bug #5814: smb: duplicate interface fields logged added
Actions

Also available in: Atom PDF