On Fri, May 24, 2002 at 07:48:04AM +1000, Ronnie Sahlberg wrote: > I checked in an initial DCERPC MAPI stub dissector. > Perhaps we should now remove packet-mapi.c ?
Sounds good to me. The only issue I can think of is that MAPI uses connection-oriented RPC, so I think that means that MAPI traffic won't be identified as such unless a bind request was captured. However, I have the impression MAPI might always use port 1065; if so, perhaps there should be a mechanism to explicitly indicate that a particular port number is used for a particular DCE RPC service?
