Debugging Tools for Windows |
The !rpcexts.getendpointinfo extension searches the system's RPC state information for endpoint information.
!rpcexts.getendpointinfo -?
Windows 2000 | Unavailable |
Windows XP and later | Rpcexts.dll |
This extension can only be used with CDB or with user-mode WinDbg.
Here is an example:
Searching for endpoint info ...
PID CELL ID ST PROTSEQ ENDPOINT
-------------------------------------------------------------
00a8 0000.0001 01 NMP \PIPE\InitShutdown
00a8 0000.0003 01 NMP \PIPE\SfcApi
00a8 0000.0004 01 NMP \PIPE\ProfMapApi
00a8 0000.0005 01 LRPC OLE5
00a8 0000.0007 01 NMP \pipe\winlogonrpc
00c4 0000.0001 01 LRPC ntsvcs
00c4 0000.0003 01 NMP \PIPE\ntsvcs
00c4 0000.0008 01 NMP \PIPE\scerpc
00d0 0000.0001 01 NMP \PIPE\lsass
00d0 0000.0003 01 NMP \pipe\WMIEP_d0
00d0 0000.0006 01 LRPC policyagent
00d0 0000.0007 01 NMP \PIPE\POLICYAGENT
0170 0000.0001 01 LRPC epmapper
0170 0000.0003 01 TCP 135
0170 0000.0005 01 SPX 34280
0170 0000.0006 01 NB 135
0170 0000.0007 01 NB 135
0170 0000.000b 01 NMP \pipe\epmapper
01c0 0000.0001 01 NMP \pipe\spoolss
01c0 0000.0003 01 LRPC spoolss
01c0 0000.0007 01 LRPC OLE7
020c 0000.0001 01 LRPC OLE2
020c 0000.0005 01 LRPC senssvc
020c 0000.0007 01 NMP \pipe\tapsrv
020c 0000.0009 01 LRPC tapsrvlpc
020c 0000.000c 01 NMP \PIPE\ROUTER
020c 0000.0016 01 NMP \pipe\WMIEP_20c
0218 0000.0001 01 NMP \PIPE\winreg
022c 0000.0001 01 LRPC LRPC0000022c.00000001
022c 0000.0003 01 TCP 1041
022c 0000.0005 01 SPX 24576
022c 0000.0006 01 NMP \PIPE\atsvc
0294 0000.0001 01 LRPC OLE3
0378 0000.0001 01 LRPC OLE9
026c 0000.0001 01 TCP 1118
0344 0000.0001 01 LRPC OLE12
For a similar example using the DbgRpc tool, see Get RPC Endpoint Information.
For more information about debugging Microsoft Remote Procedure Call (RPC), see RPC Debugging.