ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] [DCE RPC] Incorrect dissection with CVS version 2004060315332

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Tue, 8 Jun 2004 07:13:38 -0700
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jean-baptiste is correct.
For some reason my preferences were not decoding it
properly so it looked like my change fixed it.
That change did not affect what he is seeing.
However I am unable to see what he is seeing with those last too packets.


On Tue, 08 Jun 2004 00:56:20 -0700 Ulf Lamping <ulf.lamping@xxxxxx> wrote:
>Ethereal development <ethereal-dev@xxxxxxxxxxxx> schrieb am 08.06.04
>06:01:35:
>>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Well the problem appears to be the change to add the activity
>id.
>>
>> http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-dcerpc.c.diff?r1=1.176&r2=1.177
>>
>> Once I reveresed this change it decodes the last two packets as
>EPM Map
>> as it should.
>>
>>
>
>I've introduced this change some time ago, as I had problems with
>the DCE-RPC connectionless conversation/defragmenting stuff, as some
>DCR-RPC fragments were incorrectly related to each other, which actually
>wasn't true.  See:
>
>http://www.ethereal.com/lists/ethereal-dev/200405/msg00530.html
>
>Adding the activity_id at the place mentioned fixed the problem,
> and I thought it was ok.
>
>As this seems to raise a new problem, I need some help on this now
>:-(
>
>Regards, ULFL
>_____________________________________________________________________
>Endlich SMS mit Bildern versenden! Das Bild selbst ist dabei gratis,

>>
>Sie bezahlen lediglich den Versand. http://freemail.web.de/?mc=021195
>
>_______________________________________________
>Ethereal-dev mailing list
>Ethereal-dev@xxxxxxxxxxxx
>http://www.ethereal.com/mailman/listinfo/ethereal-dev
-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 2.4

wkYEARECAAYFAkDFyPcACgkQFh/Ot+gyoF5mEgCgji9QedzBtBpq3n9RMccunHryfcIA
njVZ+h1uNDSAzzpobEZkP9wmEUMK
=Md3j
-----END PGP SIGNATURE-----