Hi Maxim,
sorry, but the dump does not make a lot of sense. All that I can tell is
that the end of this dump looks like some SearchResultEntry :
30 2B
04 0E
msTSManagingLS
31 19
04 17
00455-001-9680336-84768
30 1E
04 12
msTSLicenseVersion
31 08
04 06
33 39 33 32 31 36
30 27
04 0E
msRSEpireDate
31 15
04 13
20170506060320.000Z
30 22
04 0B
whenChanged
31 13
04 11
20170307060321.0Z
30 17
04 0A
uSNChanged
31 09
04 07
1409108
30 4B
04 11
d i s t i n g u i s h e d N a m e
31 36
04 34
CN=keycoll,OU=Service,OU=Holding,dc=company,DC=local
And that there is a SearchResultDone at the very end :
30 0E
02 01 03
e(65) 07 SearchResultDone
0A 01 00
04 00
04 00
A0 00
but everything before is pretty much garbage (with some 2bytes chars in it.)
What would be valuable is to capture some PDU with Wireshark. That would
be much better.
--
Emmanuel Lecharny
Symas.com
directory.apache.org
