Hi! IMHO there is a bug in ethereal-0.9.5 when dissecting DCE RPC Map request/response. In file packet-dcerpc-epm.c in function epm_dissect_tower_data <<<clipboard>>>> proto_id = tvb_get_guint8(tvb, offset); proto_tree_add_uint(tr, hf_epm_tower_proto_id, tvb, offset, 1, proto_id); <<<skip>>>> offset += len; <<<end>>> I think here should be offset+=1;
This displays UUID incorrectly. Sergei Shokhor Software Engineer uRoam Inc. www.uroam.com
