Folks:
Problem:
---------
I'm using ethereal v0.8.19 to decode LDAP packets. Some LDAP requests
return Search Entry results that have a packet size greater than the
Fast Ethernet MTU of 1500. If I have a Search Entry resulting in a
length of 3,200 bytes long, the minimum number of packets returned will
be 3. The LDAP dissector will be used on the first LDAP packet and it
will decode the LDAP format up to the end of the packet.
Assuming: Length Packet: 1 = 1500, Length Packet: 2 = 1500, and Length
of Packet: 3 = 200
The message summary info for the first packet will be: "MsgID=xxx
MsgType= Search Entry[Malformed Frame]"
Then 2nd and 3rd packets will display: "Invalid LDAP packet" - resulting
in no LDAP decode
In actuality all 3 packets are correct. The LDAP dissector does not seem
have the ability to span across multiple packets for dissection.
Question:
----------
What needs to be done to allow the LDAP dissector to decode large LDAP
results (> 1500 MTU) that span across multiple ethernet packets?
--
_ - - _ _ - - _
. . . .
. . . Ronald W. Henderson
. . . ~ * ~ . Chief Technology Officer
. . .* * . UNIFIED Technologies, Inc.
.* . *. * . Rensselaer Technology Park
. * .* . *. 105 Jordan Road
. * * . . . Troy, N.Y. 12180
. " " . . (518) 283-1003 Phone
. . . . (518) 283-1189 Fax
- _ - - _ - rwh@xxxxxxxxxxxxxxx
--------------------------------------------------------------------