Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge branch 'topic/foxds/dcerpc_ms-oaut' of ssh://github.com/fox-ds/zeek

Browse source 
* 'topic/foxds/dcerpc_ms-oaut' of ssh://github.com/fox-ds/zeek:
  Added four new opnum mappings for MS-OAUT IDispatch methods
This commit is contained in:
Robin Sommer 2021-09-16 11:15:14 +02:00
commit 6c128a21e1
3 changed files with 15 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

8
CHANGES
View file

@ -1,3 +1,11 @@
4.2.0-dev.169 | 2021-09-16 11:15:14 +0200
* Added four new opnum mappings for MS-OAUT IDispatch methods. (FOX-DS)
* Reformat docs in addrs.zeek to fix doc generation. (Tim
Wojtulewicz, Corelight)
4.2.0-dev.165 | 2021-09-14 18:39:34 -0700
* still more nit-squashing (Vern Paxson, Corelight)

2
VERSION
View file

@ -1 +1 @@
4.2.0-dev.165
4.2.0-dev.169

6
scripts/base/protocols/dce-rpc/consts.zeek
View file

@ -2197,6 +2197,12 @@ export {
["5422fd3a-d4b8-4cef-a12e-e87d4ca22e90",0x08] = "GetCAPropertyInfo",
["5422fd3a-d4b8-4cef-a12e-e87d4ca22e90",0x09] = "Ping2",
# IDispatch - MSDN Ref: OLE Automation Protocol [ms-oaut]
["00020400-0000-0000-c000-000000000046",0x03] = "GetTypeInfoCount",
["00020400-0000-0000-c000-000000000046",0x04] = "GetTypeInfo",
["00020400-0000-0000-c000-000000000046",0x05] = "GetIDsOfNames",
["00020400-0000-0000-c000-000000000046",0x06] = "Invoke",
# IDMNotify - MSDN Ref: Disk Mgmt Remote Protocol [ms-dmrp]
["d2d79df7-3400-11d0-b40b-00aa005ff586",0x00] = "ObjectsChanged",