ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] Patch: better decoding of NTLMSSP address list

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sat, 30 Aug 2003 18:08:38 -0700

On Saturday, August 23, 2003, at 8:50 AM, Devin Heitmueller wrote:

Attached is a patch to better decode the NTLMSSP address list found in the challenge packet. It fleshes out the decoding of the individual items to show how the type and lengths are determined.

Why are some offsets into the packet made 16 bits long? That runs the risk of rude surprises if they overflow 16 bits, unless NTLMSSP specifies module-64K arithmetic in that case.