Wireshark · Ethereal-dev: Re: [Ethereal-dev] Re: Info on MS CLDAP wanted ...

[Richard Sharpe <rsharpe@xxxxxxxxxxxxxxxxx>]

On Tue, 6 Dec 2005, ronnie sahlberg wrote:

> Yes,   that document is the only one i am aware of that describes the
> CLDAP protocol.
>
> There are some small errors in that document though but the ethereal
> dissector should be ok.
>
>
> It would be great if CLDAP was ASN2ETHified and still remain part of
> the normal LDAP dissector.

Well, the problem seems to be that the BLOB is not ASN.1 encoded?

At least from looking at the code there is a bunch of non-ASN.1 stuff 
there.

> In particular, the ntVer as part of the filter for the netlogon rpc is
> not a string and all four bytes should be displayed. It should not
> abort displaying the field just because there is a nul character there
> "terminating the string".
>
> It is usually 4 characters 0x06 0x00 0x00 0x00   but other varients do
> exist with a different value in the last octet.
> The behaviour of CLDAP rpc does differ depending on the version here
> and ethereal currently only displays the first octet since it is a
> "string" and the second one is 0x00.
>
>
>
>
>
>
> On 12/6/05, Guy Harris <gharris@xxxxxxxxx> wrote:
> > Richard Sharpe wrote:
> >
> > > I am wondering whether or not we want the MS CLDAP stuff in a separate
> > > dissector file, as it seems to contain minimal LDAP stuff (from looking
> > > at the code)
> >
> > It's using standard connectionless LDAP (RFC 1798) with some sneaky
> > piggybacking of stuff on top of it, so it uses the standard LDAP
> > dissector with some special code to detect the special stuff they added.
> >
> > > So, does anyone have a link to a concise description of the MS CLDAP
> > stuff?
> >
> > Well, there's the paper cited in the comments at the beginning of the
> > LDAP dissector:
> >
> >  ftp://www6.software.ibm.com/software/developer/library/os-ltc-filesystems/Liguorifinal.pdf
> >
> > (found by Googling for
> >
> >  "Anthony Liguori" "Active Directory Domain Controller Location Service"
> >
> > ).
> >
> > _______________________________________________
> > Ethereal-dev mailing list
> > Ethereal-dev@xxxxxxxxxxxx
> > http://www.ethereal.com/mailman/listinfo/ethereal-dev
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev

--
Regards
-------
Richard Sharpe, rsharpe[at]richardsharpe.com, rsharpe[at]samba.org,
sharpe[at]ethereal.com, http://www.richardsharpe.com