[Jean-Baptiste Marchand <Jean-Baptiste.Marchand@xxxxxx>]

Hello,

the current version of the LDAP dissector contains a typo in the
msgType array. As a consequence, an LDAP extended response is not
correctly identified. The attached patch fixes this. 

I've noticed that in a capture of an LDAP session protected by TLS. The
Start TLS mechanism for LDAP is described in RFC 2830 and uses LDAP
extended request/response messages.

A LDAP over TLS session starts with an Extended Request, containing the
OID for the Start TLS operation (1.3.6.1.4.1.1466.20037) (see the
attached capture, ldap_over_tls.cap). 

I plan to take a look at the possibility to call the SSL/TLS dissector,
once we've identified a LDAP over TLS session. 

Jean-Baptiste Marchand
-- 
Jean-Baptiste.Marchand@xxxxxx
Herv� Schauer Consultants
http://www.hsc.fr/

Index: packet-ldap.c
===================================================================
RCS file: /cvsroot/ethereal/packet-ldap.c,v
retrieving revision 1.54
diff -u -r1.54 packet-ldap.c
--- packet-ldap.c	25 Apr 2003 21:19:10 -0000	1.54
+++ packet-ldap.c	28 Apr 2003 11:59:17 -0000
@@ -168,7 +168,7 @@
   {LDAP_RES_DELETE, "Delete Result"},
   {LDAP_RES_MODRDN, "Modify RDN Result"},
   {LDAP_RES_COMPARE, "Compare Result"},
-  {LDAP_REQ_EXTENDED, "Extended Response"},
+  {LDAP_RES_EXTENDED, "Extended Response"},
   {0, NULL},
 };

Attachment: ldap_over_tls.cap
Description: Binary data