MDSSVC: New DCE/RPC service dissector for Apple's Spotlight
This issue was migrated from bug 9950 in our old bug tracker.
Original bug information:
Reporter: Ralph Boehme
Status: RESOLVED FIXED
Product: Wireshark
Component: Dissection engine (libwireshark)
OS: All
Platform: All
Version: Git
Attachments:
0001-New-DCE-RPC-MDSSVC-make-dissect_spotlight-a-global-f.patch: Expose Spotlight dissector function
0002-New-DCE-RPC-MDSSVC-add-IDL-file-and-generated-dissec.patch: IDL and autogenerated code
0003-New-DCE-RPC-MDSSVC-call-AFP-Spotlight-dissector.patch: Manual edit to the dissector
spotlight-search.pcap: Spotlight search
afp-spotlight.pcap.pcapng: AFP Spotlight search
: Screen shot of spotlight dissection
: Screenshot of SMB Spotlight dissection