1 | initial version |
These might just be non-DCE RPC packets misidentified as DCE RPC because the heuristics Wireshark uses to recognize DCE RPC packets can get false positives (no heuristic is perfect), and those packets just happen to have the same values in certain locations that DCE RPC packets do.