Wireshark-users: Re: [Wireshark-users] Wireshark-users Digest, Vol 58, Issue 11
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Paula Dufour <psdufour@xxxxxxxxx>
Date: Sat, 12 Mar 2011 15:31:38 -0500

Message: 6
Date: Sat, 12 Mar 2011 14:44:35 -0500
From: john_dale@xxxxxxxxxx

John>Wireshark 1.4.4, reports malformed packet parsing filter in LDAP
searchRequest..  Is this a bug, or something I can work around?

John>Specifically, I get these errors messages:
John>Expert Info (Error/Undecoded): Found more than 200 filter elements.Giving up.
John> Expert Info (Error/Malformed): Malformed Packet (Exception occurred)
 
I've run accross this as well with other protocols not coming out the way they should.  When that happens, what I do is pick a frame with the conversation I'm interested in and use it as a filter.  Then I "decode as" LDAP.  What this does is incorporates any TCP continuation packets and it all seems to straighten out for me.
 
Paula Dufour