>The strings in the negotiate TVB are not null terminated. They are fixed
>length strings, at least in the capture I have.
No strings in the data area of any NTLMSSP packets are null terminated.
The length is always specified in the header.
>I would be interested in seeing any capture where these strings are in
>UNICODE.
Can't be in unicode, because it's the first NTLMSSP packet. Unicode hasn't
yet been negotiated. That's why I don't check the flags first.
Here's the patch to fix the problem:
(See attached file: ethereal.patch)
----------------------------
Jim McDonough
IBM Linux Technology Center
Samba Team
6 Minuteman Drive
Scarborough, ME 04074
USA
jmcd@xxxxxxxxxx
jmcd@xxxxxxxxx
Phone: (207) 885-5565
IBM tie-line: 776-9984
Attachment:
ethereal.patch
Description: Binary data
