Wireshark · Ethereal-users: Re: [Ethereal-users] DCERPC over SMB, DCERPC over TCP

[ronnie sahlberg <ronniesahlberg@xxxxxxxxx>]

DCE/RPC over SMB  and DCE/RPC over TCP are both so called ncacn_
transports and are thus both connectionoriented   thus they are
identical as far as the DCE/RPC layer is concerned.

DCE/RPC over UDP is different however since it is connectionless and
therefore use completely different PDU structures and mechanisms in
the DCE/RPC layer.




On 22 Oct 2004 11:53:07 +0200, Nicolas WILCZAK <wilczak@xxxxxxxxx> wrote:
> Hi,
> I'm trying to know if it exists some difference in DCERPC protocol
> encapsuled by SMB or TCP. I'm  trying  to identify Micro$oft Exchange
> packets...
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>