This wiki has been migrated to and is now deprecated. Please use that site instead.
Differences between revisions 4 and 5
Revision 4 as of 2005-09-07 18:43:22
Size: 2862
Editor: 200-153-170-80
Revision 5 as of 2005-09-07 19:19:21
Size: 2213
Editor: GeraldCombs
Deletions are marked like this. Additions are marked like this.
Line 55: Line 55:

 == this is my text ==

[ | indian xxx movies.]
[ | livecam north carolina beach]
[ | alta gay sites]
[ | free creampie porn downloads]
[ | hot lesbians in thongs]
[ | travesti newsletter]
[ | hot ass and pussy]
[ | women tickling men tied wrestling bondage]
[ | girls peeing pants in public]
[ | hairy nude women for free]

Lightweight Directory Access Protocol (LDAP)

The Lightweight Directory Access Protocol: The protocol accessing data from directory services like [ OpenLDAP], [ Microsoft Active Directory], [ Netscape Directory Server] or [ Novell eDirectory].


LDAP was developed as simple access protocol for ["X.500"] databases.

Protocol dependencies

  • ["TCP"]/["UDP"]: Typically, LDAP uses ["TCP"] or ["UDP"] as its transport protocol. The well known TCP and UDP port for LDAP traffic is 389.
  • ["SSL"]/["TLS"]: LDAP can also be tunneled through ["SSL"]/["TLS"] encrypted connections. The well known TCP port for ["SSL"] is 636 while ["TLS"] is negotiated within a plain ["TCP"] connection on port 389.

Example traffic

TODO: - Add example traffic here (as plain text or Ethereal screenshot).


The LDAP dissector is (fully functional).

Preference Settings

TODO: - Add links to preference settings affecting how LDAP is dissected.

Example capture file

attachment:SampleCaptures/ldap-controls-dirsync-01.cap Sample LDAP PDU with DIRSYNC CONTROLS

attachment:SampleCaptures/ldap-krb5-sign-seal-01.cap Sample GSSAPI-KRB5 signed and sealed LDAP PDU

Display Filter

A complete list of LDAP display filter fields can be found in the [ LDAP display filter reference]

  • Show only the LDAP based traffic:


Capture Filter

You cannot directly filter LDAP protocols while capturing. However, if you know the ["TCP"] port used (see above), you can filter on that one.

  • Capture LDAP traffic over the default port (389):

     tcp port 389 


LDAP (last edited 2013-05-30 16:06:57 by SakeBlok)