Re: [Ethereal-dev] Patch for uuid strings in dcerpc dissectors

["Ronnie Sahlberg" <ronnie_sahlberg@xxxxxxxxxxxxxx>]

Checked in with a small change to packet-dcerpc-ndr.c
I think it is more likely the uuid in dissect_ndr_uuid_t() is known to
ethereal and has a name
so that one instead gets the protoname instead of the uuid as the item
value.


From: "Jean-Baptiste Marchand
Subject: [Ethereal-dev] Patch for uuid strings in dcerpc dissectors


> Hello,
>
> the main dcerpc dissector uses the literal string "HMMM" to store uuid
> found in dcerpc packets. As a consequence, it is not possible to use
> display filters to filter, for example, dcerpc packets on object uuid.
>
> The attached patch tries to correct this. It modifies packet-dcerpc.c
> and packet-dcerpc-ndr.c, which contains the dissect_ndr_uuid_t()
> function, used by conversation manager and endpoint mapper dissectors
> when they need to extract uuids (dissect_ndr_uuid_t() used an empty
> string instead of "HMMM").