FYI After fixing this issue I took some notes about it and started a CLDAP entry in the wireshark.org wiki: http://wiki.wireshark.org/CLDAP Mike -- Michael B Allen PHP Active Directory SPNEGO SSO http://www.ioplex.com/