Ethereal-users: RE: [ethereal-users] LDAP Dissector

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Wed, 23 Aug 2000 17:47:26 -0500

Yep, you found a bug. Thanks for the trace file; that really helped.

In parse_filter_substrings, the string pointer is NULL, and string_length is 0,
but the dissector
doesn't check that. Guy, do you want to take a look at that, since you have more
experience with the ASN.1 string
functions? Or I could take a look at it later tonight (it's quitting time in the
Central timezone. :)

About the LDAPv3... if no one on ethereal-dev stands up and says "I'm working on
it", then there's
currently no plans to do it; most developers add protocols when they have the
need to analyze them.
There's no over-all plan for protocol support. But perhaps someone will stand up
and say "I'll work on that."

--gilbert

"Mark Symons" <msymons@xxxxxxxxxxxxxxxxxx> on 08/23/2000 05:15:50 PM

To:   ethereal-users@xxxxxxxx
cc:    (bcc: Gilbert Ramirez/Tivoli Systems)
Subject:  RE: [ethereal-users] LDAP Dissector




I previously asked about Ethereal Support for LDAP v3 Referals.

I was pointed to the LDAP dissector comment:

>* This is not a complete implementation. It doesn't
>* handle the full version 3, more specifically, it
>* handles only the commands of version 2, but any
>* additional characteristics of the ver3 command are
>* supported. It's also missing extensible search filters.

I had missed that...the perils with working only with the Win32 Binaries!

Is there any chance that the LDAP dissector might support LDAP v3 in the
future?  It really would be very useful.

Part from enhancements, I think I might have also found a bug in Ethereal
v0.8.10.  I am running on NT v4.0 SP6a, with the
20000416 version of GTK+ and WinPcap v2.02.

I attach a packet capture that was an attempt to query an LDAP server for
"CN contains anything".  Ignoring the fact that some Search Entries appear
to be duplicates, the problem is with packet #6, the Search Request.
Attempting to view it in Ethereal causes a Dr Watsons crash:

    Exception: access violation (0xc0000005), Address: 0x004e49c0

I can duplicate this crash on multiple PCs.

Any ideas?

Thanks

Mark Symons
Ipswitch, Inc
Augusta, GA


Attachment: ldap-crash.cap
Description: Binary data