Ethereal-dev: [Ethereal-dev] Re: Info on MS CLDAP wanted ...

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: ronnie sahlberg <ronniesahlberg@xxxxxxxxx>
Date: Wed, 7 Dec 2005 20:55:08 +0000
yes   the blob is not ASN1.

This can be solved by copying the code for it in the template file.

If you ASN2ETHify the LDAP dissector  I can copy the non-asn1 CLDAP
stuff over into the template.



On 12/7/05, Richard Sharpe <rsharpe@xxxxxxxxxxxxxxxxx> wrote:
> On Tue, 6 Dec 2005, ronnie sahlberg wrote:
>
> > Yes,   that document is the only one i am aware of that describes the
> > CLDAP protocol.
> >
> > There are some small errors in that document though but the ethereal
> > dissector should be ok.
> >
> >
> > It would be great if CLDAP was ASN2ETHified and still remain part of
> > the normal LDAP dissector.
>
> Well, the problem seems to be that the BLOB is not ASN.1 encoded?
>
> At least from looking at the code there is a bunch of non-ASN.1 stuff
> there.
>
> > In particular, the ntVer as part of the filter for the netlogon rpc is
> > not a string and all four bytes should be displayed. It should not
> > abort displaying the field just because there is a nul character there
> > "terminating the string".
> >
> > It is usually 4 characters 0x06 0x00 0x00 0x00   but other varients do
> > exist with a different value in the last octet.
> > The behaviour of CLDAP rpc does differ depending on the version here
> > and ethereal currently only displays the first octet since it is a
> > "string" and the second one is 0x00.
> >
> >
> >
> >
> >
> >
> > On 12/6/05, Guy Harris <gharris@xxxxxxxxx> wrote:
> >> Richard Sharpe wrote:
> >>
> >>> I am wondering whether or not we want the MS CLDAP stuff in a separate
> >>> dissector file, as it seems to contain minimal LDAP stuff (from looking
> >>> at the code)
> >>
> >> It's using standard connectionless LDAP (RFC 1798) with some sneaky
> >> piggybacking of stuff on top of it, so it uses the standard LDAP
> >> dissector with some special code to detect the special stuff they added.
> >>
> >>> So, does anyone have a link to a concise description of the MS CLDAP
> >> stuff?
> >>
> >> Well, there's the paper cited in the comments at the beginning of the
> >> LDAP dissector:
> >>
> >>
> ftp://www6.software.ibm.com/software/developer/library/os-ltc-filesystems/Liguorifinal.pdf
> >>
> >> (found by Googling for
> >>
> >>  "Anthony Liguori" "Active Directory Domain Controller Location Service"
> >>
> >> ).
> >>
> >> _______________________________________________
> >> Ethereal-dev mailing list
> >> Ethereal-dev@xxxxxxxxxxxx
> >> http://www.ethereal.com/mailman/listinfo/ethereal-dev
> >>
> >
> > _______________________________________________
> > Ethereal-dev mailing list
> > Ethereal-dev@xxxxxxxxxxxx
> > http://www.ethereal.com/mailman/listinfo/ethereal-dev
> >
>
> --
> Regards
> -------
> Richard Sharpe, rsharpe[at]richardsharpe.com, rsharpe[at]samba.org,
> sharpe[at]ethereal.com, http://www.richardsharpe.com
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>