To start the process, start Network Monitor and capture some data through the
following process:
NOTE
During the data capture, the application that is to be tested for UUID transmittal must
be run against the server in question. Also, systems with multiple network cards need
to choose which network to scan.
1. Open Network Monitor (Start, Administrative Tools, Network Monitor).
2. Click on Capture, Start, as shown in Figure 15.9.
3. After the application has been run, and enough time has passed to capture all the
packets that hit the server, click Capture, Stop and View.
After the capture is complete, look through the packet Description for ones that start with
c/o RPC Bind: UUID, similar to what is shown in Figure 15.10. Look for each of the UUIDs
that were requested by the server, and take note of them for use in the custom RPC protocol
definition.
FIGURE 15.8 Installing Network Monitor.
425
15
Creating Server Publishing Rules
FIGURE 15.9 Capturing packets with Network Monitor.
FIGURE 15.10 Looking for RPC UUIDs in Network Monitor traffic.
426 CHAPTER 15 Securing RPC Traffic
TIP
Because the UUID needs to be entered without typos, it may be wise to cut and paste
the results of Network Monitor into Notepad, so that it can be used later in the creation
of the RPC protocol definition.
Pages:
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677