From a8efaf3a7e7146f4282c06c5e9ef7c238dde26eb Mon Sep 17 00:00:00 2001 From: Dale Lakes Date: Mon, 15 Oct 2018 16:47:10 -0400 Subject: [PATCH] Add DCE_RPC exchange_mapi operations to relevant consts.bro file New operations names and opnums come from the MSDN documentation and OpenChange Project. --- scripts/base/protocols/dce-rpc/consts.bro | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/scripts/base/protocols/dce-rpc/consts.bro b/scripts/base/protocols/dce-rpc/consts.bro index 80f7ea4e5e..7942661780 100644 --- a/scripts/base/protocols/dce-rpc/consts.bro +++ b/scripts/base/protocols/dce-rpc/consts.bro @@ -1431,6 +1431,11 @@ export { ["a4f1db00-ca47-1067-b31f-00dd010662da",0x07] = "EcRGetDCName", ["a4f1db00-ca47-1067-b31f-00dd010662da",0x08] = "EcRNetGetDCName", ["a4f1db00-ca47-1067-b31f-00dd010662da",0x09] = "EcDoRpcExt", + ["a4f1db00-ca47-1067-b31f-00dd010662da",0x0a] = "EcDoConnectEx", + ["a4f1db00-ca47-1067-b31f-00dd010662da",0x0b] = "EcDoRpcExt2", + ["a4f1db00-ca47-1067-b31f-00dd010662da",0x0c] = "EcUnknown0xC", + ["a4f1db00-ca47-1067-b31f-00dd010662da",0x0d] = "EcUnknown0xD", + ["a4f1db00-ca47-1067-b31f-00dd010662da",0x0e] = "EcDoAsyncConnectEx", # drsuapi ["e3514235-4b06-11d1-ab04-00c04fc2dcd2",0x00] = "DRSBind",