i am trying to understand ldap protocol! i have read the RFC 4511 (i believe) about it. In order to understand it better, i wrote a program that reads from internet and writes to an output file.

I have issued the following ldapsearch command:

ldapsearch -x -h localhost -p 2000 -D ou=ufv,dc=br -w 123456

What i got on the output file was:

sioux@scallop$ hexdump -C o
00000000 30 1e 02 01 01 60 19 02 01 03 04 0c 6f 75 3d 75 |0....`......ou=u|
00000010 66 76 2c 64 63 3d 62 72 80 06 31 32 33 34 35 36 |fv,dc=br..123456|
00000020

I have the following understanding o f the protocol:

60 19 [02 01 [3] 04 0c [ou=ufv,dc=br] 80 06 [123456]]

What about the first "30 1e 02 01 01" ?

1e means the size is bigger than 30 and 2 bytes is specified ? Is it for the message id ? What about the rest of 27 bytes of message what is not accounted ?

Shoud it not account for the 27 bytes length ?

Thanks in advance.

BTW: what is the message id for the message sent ?