Bug #77: refactor dcerpc for dcerpc over smb decoding. - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #77

closed

refactor dcerpc for dcerpc over smb decoding.

Added by Kirby Kuehl almost 15 years ago. Updated almost 15 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Kirby Kuehl

Target version:

Affected Versions:

Effort:

Difficulty:

Label:

Description

Reworked the dcerpc parsing code so that we can utilize the same state machine and parsing code from both the dcerpc engine and the smb engine.
This patch incorporates all of Anoop's previous work and provides no externally visable changes.

Files

Download all files

0001-refactor-dcerpc-in-prep-for-dcerpc-over-smb.patch (249 KB) 0001-refactor-dcerpc-in-prep-for-dcerpc-over-smb.patch		Kirby Kuehl, 01/31/2010 10:50 AM
0002-dcerpc-refactoring.patch (5.11 KB) 0002-dcerpc-refactoring.patch		Kirby Kuehl, 01/31/2010 11:18 AM
0003-dcerpc-over-smb-for-transact.patch (10.7 KB) 0003-dcerpc-over-smb-for-transact.patch		Kirby Kuehl, 01/31/2010 02:56 PM