On Sun, Nov 03, 2002 at 09:37:12AM +1100, Ronnie Sahlberg wrote: > Checked in with a small change to packet-dcerpc-ndr.c > I think it is more likely the uuid in dissect_ndr_uuid_t() is known to > ethereal and has a name > so that one instead gets the protoname instead of the uuid as the item > value. Unfortunately, the result of "proto_registrar_get_name(hfindex)" is the name of the field being put into the protocol tree, not the name of the protocol corresponding to the UUID in question. You'd have to call a routine in "packet-dcerpc.c" to look up the name of the protocol corresponding to the UUID. (Unfortunately, you need the protocol version for that as well.)
Powered by MHonArc 2.6.10