Bug #77: refactor dcerpc for dcerpc over smb decoding. - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #77

closed

KK KK

refactor dcerpc for dcerpc over smb decoding.

Bug #77: refactor dcerpc for dcerpc over smb decoding.

Added by Kirby Kuehl about 16 years ago. Updated about 16 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Kirby Kuehl

Target version:

Affected Versions:

Effort:

Difficulty:

Label:

Description

Reworked the dcerpc parsing code so that we can utilize the same state machine and parsing code from both the dcerpc engine and the smb engine.
This patch incorporates all of Anoop's previous work and provides no externally visable changes.

Files

Download all files

0001-refactor-dcerpc-in-prep-for-dcerpc-over-smb.patch (249 KB) 0001-refactor-dcerpc-in-prep-for-dcerpc-over-smb.patch		Kirby Kuehl, 01/31/2010 10:50 AM
0002-dcerpc-refactoring.patch (5.11 KB) 0002-dcerpc-refactoring.patch		Kirby Kuehl, 01/31/2010 11:18 AM
0003-dcerpc-over-smb-for-transact.patch (10.7 KB) 0003-dcerpc-over-smb-for-transact.patch		Kirby Kuehl, 01/31/2010 02:56 PM