Message: 6
Date: Sat, 12 Mar 2011 14:44:35 -0500
From: john_dale@xxxxxxxxxx
John>Wireshark 1.4.4, reports malformed packet parsing filter in LDAP
searchRequest.. Is this a bug, or something I can work around?
John>Specifically, I get these errors messages:
John>Expert Info (Error/Undecoded): Found more than 200 filter elements.Giving up.
John> Expert Info (Error/Malformed): Malformed Packet (Exception occurred)
I've run accross this as well with other protocols not coming out the way they should. When that happens, what I do is pick a frame with the conversation I'm interested in and use it as a filter. Then I "decode as" LDAP. What this does is incorporates any TCP continuation packets and it all seems to straighten out for me.
Paula Dufour
