s4-rpcserver: log unknown RPC calls at debug level 3

This was added as we are occasionally getting an encrypted unknown
netlogon call, and I'm having trouble looking at it in wireshark

diff --git a/source4/rpc_server/dcerpc_server.c b/source4/rpc_server/dcerpc_server.c
index f2edbf74c63b3120ad4e8f70ab9f60e1b1bb0d0e..9103923b3e99226d481e0a3e29213c966e6b4c08 100644 (file)
--- a/source4/rpc_server/dcerpc_server.c
+++ b/source4/rpc_server/dcerpc_server.c
@@ -978,6 +978,12 @@ static NTSTATUS dcesrv_request(struct dcesrv_call_state *call)
        /* unravel the NDR for the packet */
        status = context->iface->ndr_pull(call, call, pull, &call->r);
        if (!NT_STATUS_IS_OK(status)) {
+               if (call->fault_code == DCERPC_FAULT_OP_RNG_ERROR) {
+                       /* we got an unknown call */
+                       DEBUG(3,(__location__ ": Unknown RPC call %u on %s\n",
+                                call->pkt.u.request.opnum, context->iface->name));
+                       dump_data(3, pull->data, pull->data_size);
+               }
                return dcesrv_fault(call, call->fault_code);
        }