NDRDUMP(1)

💖 NDRDUMP 💖

okay bestie, welcome to the manual page for ndrdump — that's section 1 of the man pages, the System Administration tools corner of the world. it's the DCE/RPC Packet Parser and Dumper and it is lowkey iconic. let's get into it 🦋

---

✨ NAME ✨

ndrdump — DCE/RPC Packet Parser and Dumper. that's the whole vibe. parsing packets, dumping packets, serving cunt 💅

---

🌸 SYNOPSIS 🌸

ndrdump [-c context] {pipe} {format} {in|out|struct} {filename}

ndrdump [pipe]

ndrdump

three whole moods, and honestly? each one eats.

---

🎀 DESCRIPTION 🎀

so here's the tea, bestie. ndrdump tries to parse the filename you hand it, using Samba's own parser for the pipe and format you specified. the third argument has to be one of in, out or struct, depending on whether the data should be parsed as a request, a reply, or a public structure. pick wisely, no pressure (there is pressure) 🙈

run ndrdump with no arguments at all and it will list all the pipes that have parsers available. a little menu, a little snack, we love to see it ✨

run ndrdump with one argument and it will list the functions and public structures that Samba can parse for that specified pipe. so basically: ndrdump with one arg is the "what can u even do" era.

the primary function of ndrdump — the main character energy, the reason it exists — is debugging Samba's internal DCE/RPC parsing functions. the file you're parsing is usually one that got exported by wireshark's "Export selected packet bytes" function. that's the pipeline, that's the workflow, that's the lore 🫶

and the context argument? that one's for loading context data from the request packet when you're parsing reply packets — stuff like array lengths. so the reply packet knows what the request was on about. communication, babes. it's giving healthy relationship 💜

---

👑 VERSION 👑

this man page is correct for version 4.0 of the Samba suite. yes we're on 4.0 and yes it's still serving.

---

🌈 SEE ALSO 🌈

• wireshark
• pidl

the besties, the collaborators, the supporting cast 💖

---

⭐ AUTHOR ⭐

this utility is part of the Samba[1] suite, which is developed by the global Samba Team[2]. a whole squad, a whole movement, we love a collective 🔥

ndrdump was written by Andrew Tridgell.

this manpage was written by Jelmer Vernooij.

shoutout to both of them, fr fr, absolute legends, they ate and left no crumbs 💅

---

📎 NOTES 📎

1. Samba http://www.samba.org/
2. Samba Team http://www.samba.org/samba/team/

---

and that's the whole page, bestie!! written for Samba 4.0, dated 09/09/2026 — so like, this is the Samba 4.0 era, 09/09/2026 edition, and it's a keeper. go parse something, you've got this 💖✨🎀🦋🌸💅🫶