Wireshark-bugs: [Wireshark-bugs] [Bug 8600] New: SMTP dissector: improve AUTH handling (NTLM and
Date: Sun, 21 Apr 2013 19:50:34 +0000
Bug ID 8600
Summary SMTP dissector: improve AUTH handling (NTLM and elementary PLAIN mechanism)
Classification Unclassified
Product Wireshark
Version SVN
Hardware All
OS All
Status UNCONFIRMED
Severity Enhancement
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter uh@heilmeier.eu

Created attachment 10629 [details]
sample capture for PLAIN mechs

Build Information:

--
The current version of the SMTP dissector only decodes the 'AUTH LOGIN'
mechanism.

I tried to implement the decoding of the NTLM and the PLAIN mechanism.

The NTLM mechanism is finished (as far as I can see).
For the PLAIN mechanism the decoding of the username and password is still
missing. Here I have some problems with the NULL character as delimiter inside
the base64 string.

Unfortunately I can only provide a sample for the PLAIN mechanism.
All my NTLM captures contains confidentially data which I can't share.


You are receiving this mail because:
  • You are watching all bug changes.