I am trying to capture and decode email message body (client App is Outlook 2010 and server is Exchange server 2003), wireshark capture packets with "DCERPC" protocol and reassemble data packets, but can't decode App protocol, that is MAPI. How can i decode App data from DCERPC Stub-Data field? asked 15 Jan '12, 01:20 mohammadmot |