ndrdump - DCE/RPC Packet Parser and Dumper

       This utility is part of the Samba[1] suite, which is developed by the global SambaTeam[2].

       ndrdump was written by Andrew Tridgell.

       This manpage was written by Jelmer Vernooij.

       ndrdump tries to parse the specified filename using Samba's parser for the specified pipe and format. The
       third argument should be either in, out or structdepending on whether the data should be parsed as a
       request, reply or a public structure.

       Running ndrdump without arguments will list the pipes for which parsers are available.

       Running ndrdump with one argument will list the functions and public structures that Samba can parse for
       the specified pipe.

       The primary function of ndrdump is debugging Samba's internal DCE/RPC parsing functions. The file being
       parsed is usually one exported by wiresharks “Export selected packet bytes” function.

       The context argument can be used to load context data from the request packet when parsing reply packets
       (such as array lengths).

       ndrdump - DCE/RPC Packet Parser and Dumper

        1. Samba
           http://www.samba.org/

        2. Samba Team
           http://www.samba.org/samba/team/

Samba 4.0                                          06/19/2025                                         NDRDUMP(1)

       wireshark, pidl

ndrdump [-c context] {pipe} {format} {in|out|struct} {filename}

       ndrdump [pipe]

       ndrdump

       This man page is correct for version 4.0 of the Samba suite.