Ethereal-users: Re: [Ethereal-users] MAPI decode / GLIB Error

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 8 May 2003 12:32:14 -0700
On Thu, May 08, 2003 at 07:12:05PM +0100, Alistair.McGlinchy@xxxxxxxxxxxxxxxxxxxxx wrote:
> This trace does not load in either ethereal or tethereal 0.9.11,  but can be
> read by WinDump. It also can be read by Ethereal 0.9.6, which recognises
> this as MAPI, but believes the 3rd frame is malformed.

Yes, the "actual count" field of the array of the second string in a
MAPI logon reply appears to be something other than a byte/character
count for that array, so the MAPI dissector is probably wrong there.

> I wonder if this could be a similar problem to what Richard Witt reported
> earlier?  

It might be.