Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

These might just be non-DCE RPC packets misidentified as DCE RPC because the heuristics Wireshark uses to recognize DCE RPC packets can get false positives (no heuristic is perfect), and those packets just happen to have the same values in certain locations that DCE RPC packets do.