From ff84e4faa382d8dd80a592eb12829aea2e075a9d Mon Sep 17 00:00:00 2001 From: Luciano Mammino Date: Wed, 25 Apr 2018 16:25:34 +0100 Subject: [PATCH] Update consts.bro Removed duplicated entries (`000001a0-0000-0000-c000-000000000046`, with `i=3, i=4`) and related comments line This change should make this file more readable and it will be easier to convert it to other formats (personally I found it out while I was trying to convert this to a JavaScript structure). --- scripts/base/protocols/dce-rpc/consts.bro | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/scripts/base/protocols/dce-rpc/consts.bro b/scripts/base/protocols/dce-rpc/consts.bro index d9e0993b03..80f7ea4e5e 100644 --- a/scripts/base/protocols/dce-rpc/consts.bro +++ b/scripts/base/protocols/dce-rpc/consts.bro @@ -149,10 +149,6 @@ export { # IActivation ["4d9f4ab8-7d1c-11cf-861e-0020af6e7c57",0] = "RemoteActivation", - # IRemoteSCMActivator - ["000001a0-0000-0000-c000-000000000046",3] = "RemoteGetClassObject", - ["000001a0-0000-0000-c000-000000000046",4] = "RemoteCreateInstance", - # nspi ["f5cc5a18-4264-101a-8c59-08002b2f8426",0] = "NspiBind", ["f5cc5a18-4264-101a-8c59-08002b2f8426",1] = "NspiUnbind", @@ -222,8 +218,8 @@ export { ["000001a0-0000-0000-c000-000000000046",0] = "QueryInterfaceIRemoteSCMActivator", ["000001a0-0000-0000-c000-000000000046",1] = "AddRefIRemoteISCMActivator", ["000001a0-0000-0000-c000-000000000046",2] = "ReleaseIRemoteISCMActivator", - #["000001a0-0000-0000-c000-000000000046",3] = "RemoteGetClassObject", - #["000001a0-0000-0000-c000-000000000046",4] = "RemoteCreateInstance", + ["000001a0-0000-0000-c000-000000000046",3] = "RemoteGetClassObject", + ["000001a0-0000-0000-c000-000000000046",4] = "RemoteCreateInstance", # netlogon ["12345678-1234-abcd-ef00-01234567cffb",0] = "NetrLogonUasLogon",