Re: [Ethereal-users] MAPI decode / GLIB Error

[Guy Harris <gharris@xxxxxxxxx>]

On Thu, May 08, 2003 at 07:12:05PM +0100, Alistair.McGlinchy@xxxxxxxxxxxxxxxxxxxxx wrote:
> This trace does not load in either ethereal or tethereal 0.9.11,  but can be
> read by WinDump. It also can be read by Ethereal 0.9.6, which recognises
> this as MAPI, but believes the 3rd frame is malformed.

Yes, the "actual count" field of the array of the second string in a
MAPI logon reply appears to be something other than a byte/character
count for that array, so the MAPI dissector is probably wrong there.

> I wonder if this could be a similar problem to what Richard Witt reported
> earlier?  

It might be.