Re: [ethereal-users] An RPC question...

[Guy Harris <gharris@xxxxxxxxxxxx>]

On Thu, Jun 08, 2000 at 11:42:02AM -0400, Brett Jensen wrote:
> I'm currently developping software to communicate with MS outlook ...
> and I'm monitoring the data sent between MS exchange and MS outlook ->
> I'm pretty sure that RPC calls are used to communicate between the two.
> So - ethereal is helping out quite a bit - I get a lot more info from it
> than I can from tcpdump anyway!  I was wondering if ethereal understands
> the SUN RPC calls, or the MS RPC calls or both?

Ethereal understands Sun (ONC) RPC, and some of the protocols that run
atop it (e.g., NFS, NIS, mount, portmapper/rpcbind); however, it
currently doesn't understand DCE RPC (of which Microsoft's RPC library
is an implementation, although I don't know if they've made any
incompatible changes).

Exchange and Outlook, if they're using any form of RPC, are almost
certainly using MS RPC, not ONC RPC.

Microsoft's Network Monitor packet analyzer program understands at least
some MS RPC, although whether it understands the MS RPC used by Exchange
and Outlook is another matter.  A "basic" version of Network Monitor
comes with NT 4.0 Server (and probably NT 5.0^H^H^H^H^H^HW2K Server); a
fancier version, which supports promiscuous mode and may dissect more
protocols, comes with System Management Server.