Wireshark-users: Re: [Wireshark-users] ldap traffic is not parsered properly

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Graeme Lunt" <graeme.lunt@xxxxxxxxx>
Date: Thu, 19 Oct 2006 08:34:04 +0200
Hi,

On 10/19/06, Xiaoguang Liu <syslxg@xxxxxxxxx> wrote:

Sorry for missing that info:
Version 0.99.4-SVN-19585 (SVN Rev 19585) on xp sp2


Basically you have a large LDAP PDU - I had been hit by this previously.

There is a LDAP preference (introduced in 19288)  to set the maximum
expected LDAP PDU size (default is 65535). If you set it to 100000
then Wireshark will decode your capture correctly - well it works for
me.

I'm not sure why the check is there - but maybe we should increase the
default maximum PDU size - or remove the check altogether?

Graeme