line.
+DCERPC binding strings
+----------------------
+
+When connecting to a dcerpc service you need to specify a binding
+string.
+
+The format is:
+
+ TRANSPORT:host:[flags]
+
+where TRANSPORT is either ncacn_np for SMB or ncacn_ip_tcp for RPC/TCP
+
+"host" is an IP or hostname or netbios name
+
+"flags" can include a SMB pipe name if using the ncacn_np transport or
+a TCP port number if using the ncacn_ip_tcp transport, otherwise they
+will be auto-determined.
+
+other recognised flags are:
+
+ sign : enable ntlmssp signing
+ seal : enable ntlmssp sealing
+ validate: enable the NDR validator
+ print: enable debugging of the packets
+ bigendian: use bigendian RPC
+
+
+For example, these all connect to the samr pipe:
+
+ ncacn_np:myserver
+ ncacn_np:myserver:samr
+ ncacn_np:myserver:samr,seal
+ ncacn_np:myserver:\pipe\samr
+ ncacn_np:myserver:/pipe/samr
+ ncacn_np:myserver[samr]
+ ncacn_np:myserver[\pipe\samr]
+ ncacn_np:myserver[/pipe/samr]
+ ncacn_np:myserver:[samr,sign,print]
+ ncacn_np:myserver:[\pipe\samr,sign,seal,bigendian]
+ ncacn_np:myserver:[/pipe/samr,seal,validate]
+
+ ncacn_ip_tcp:myserver
+ ncacn_ip_tcp:myserver:1024
+ ncacn_ip_tcp:myserver[1024]
+ ncacn_ip_tcp:myserver:[1024,sign,seal]
+
+
+
MSRPC
-----
- msrpc
+- use _p talloc varients
+
+don't zero structures! avoid ZERO_STRUCT() and talloc_zero()
GMT vs TZ in printout of QFILEINFO timezones