Hi. Attached is a replacement for packet-kerberos.c It is not production quality yet but passes most of my dissection tests. At the very earliest it might be checked in after the next release has been issued, to let it have time to cook in the cvs tree for a while before it gets released to the public. Attached for those adventorous enough to try it.
Later it will be split in two parts : packet-ber.c for the asn.1 ber helpers (lightly modelled after the ones for asn.1/per in packer-per.c) and packet-kerberos.c for the kerberos part. This very early prototype version contains code to dissect most, but not all, of the data the existing dissector can handle. It also can dissect one thing the existing one can not, namely one of the preauthentication blobs. woohoo there are a LOT of cosmetic updates required, moving things around etc. changing a gboolean in the source will make ethereal also dissect and display the internal ber framing fields like the class, p/c, tag and length parts of a asn.1/ber encoded value. it is off by default. Those adventourous, please test and report bugs/misdissections. The goal is to refactor kerberos and asn.1/ber so it gets easier to manipulate the data in kerberos pdus. I would really really like to 1, get kerberos/ber updated 2, provide a mechanism to add keytab files to ethereal 3, if keytab file is present: decrypt and dissect the encrypted blobs 4, pick the session key and other stuff from the encrypted kerberos blobs 5, pass session key to smb and dcerpc so dealed transfers can be decrypted and dissected. 1 is finished soon and this is a prototype for it. 2 would need new code and input from people knowing the internal structure of keytab files. 3, lets worry about that when we get there... example captures with non-encrypted blobs or constructs not yet dissected will be welcome. i can only test those i have examples of. example captures displaying dissection bugs are also welcome. _______________________________________________ Ethereal-dev mailing list [EMAIL PROTECTED] http://www.ethereal.com/mailman/listinfo/ethereal-dev
