You will find NDR64 here: http://msdn.microsoft.com/en-us/library/cc243560%28PROT.13%29.aspx
Regards Neil -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of ronnie sahlberg Sent: Tuesday, December 15, 2009 9:24 AM To: naveen kumar Cc: [email protected] Subject: Re: [cifs-protocol] Regarding DCERPC Note, since I assume your question is in regard to DCE/RPC in a windows environment, the latest versions of Windows use a new type of transfer syntax called NDR64. This is different from normal NDR in a number of ways. I dont know off the top of my head where the documetns for that can be found, maybe Tridge knows? Otherwise, both samba4 and wireshark contains unmarshaller code to handle NDR/NDR64 so the deltas between NDR and NDR64 can be seen there in worst case. On Tue, Dec 15, 2009 at 6:56 PM, ronnie sahlberg <[email protected]> wrote: > http://www.opengroup.org/pubs/catalog/c706.htm > > On Tue, Dec 15, 2009 at 6:35 PM, naveen kumar <[email protected]> wrote: >> Hi, >> >> I need a complete DCERPC packet structure, I mean to say Iam decoding >> the DCERPC packet and I need to know about the header + data information. >> >> >> Thanks & Regards >> Naveen K >> >> _______________________________________________ >> cifs-protocol mailing list >> [email protected] >> https://lists.samba.org/mailman/listinfo/cifs-protocol >> >> > _______________________________________________ cifs-protocol mailing list [email protected] https://lists.samba.org/mailman/listinfo/cifs-protocol _______________________________________________ cifs-protocol mailing list [email protected] https://lists.samba.org/mailman/listinfo/cifs-protocol
