SMB2/Ioctl/Function/FILE_DEVICE_NAMED_PIPE/IOCTL_REQUEST_DCERPC ​

0x0011c017

此 SMB2/Ioctl function 通过对 named pipe 的 ioctl 调用来传输 DCE/RPC request/responses。

Device ​

SMB2/Ioctl/Function Device == FILE_DEVICE_NAMED_PIPE

Access ​

SMB2/Ioctl/Function Device == FILE_READ_WRITE_ACCESS

Function ​

SMB2/Ioctl/Function Function == 0x0005

Method ​

SMB2/Ioctl/Function Method == METHOD_NEITHER

In Data ​

面向连接的 DCE/RPC request PDU。

Out Data ​

面向连接的 DCE/RPC response PDU。

导入自 https://wiki.wireshark.org/SMB2/Ioctl/Function/FILE_DEVICE_NAMED_PIPE/IOCTL_REQUEST_DCERPC，时间为 2020-08-11 23:25:08 UTC

相关 Wireshark Wiki 页面 ​

• Wireshark Wiki 首页Home · 入门与使用
• DCE/RPCDCE/RPC · 全量归档
• SMB2/IoctlSMB2/Ioctl · 全量归档
• SMB2/Ioctl/FunctionSMB2/Ioctl/Function · 全量归档