mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 22:58:20 +00:00
620cd671ba
This adds previously-missing support for "Alter Context" request/response PDUs (initial patch contributed by Mark Fernandez). Also, context ID arguments were added to dce_rpc_bind, dce_rpc_request, and dce_rpc_response in order to properly track what endpoint/operation a given opnum maps to.
15 lines
615 B
Text
15 lines
615 B
Text
dce_rpc_bind :: fid == 0
|
|
dce_rpc_bind :: ctx_id == 0
|
|
dce_rpc_bind :: uuid == e3514235-4b06-11d1-ab04-00c04fc2dcd2
|
|
dce_rpc_bind :: fid == 0
|
|
dce_rpc_bind :: ctx_id == 1
|
|
dce_rpc_bind :: uuid == e3514235-4b06-11d1-ab04-00c04fc2dcd2
|
|
dce_rpc_bind :: fid == 0
|
|
dce_rpc_bind :: ctx_id == 2
|
|
dce_rpc_bind :: uuid == e3514235-4b06-11d1-ab04-00c04fc2dcd2
|
|
dce_rpc_bind_ack :: fid == 0
|
|
dce_rpc_bind_ack :: sec_addr == \PIPE\drsuapi
|
|
dce_rpc_alter_context :: fid == 0
|
|
dce_rpc_alter_context :: ctx_id == 0
|
|
dce_rpc_alter_context :: uuid == e3514235-4b06-11d1-ab04-00c04fc2dcd2
|
|
dce_rpc_alter_context_resp :: fid == 0
|