Ask Your Question
0

Capturing kerberos traffic but not able to capture TGS-REQ ?

asked 2017-11-03 13:42:46 +0000

TGS-REP are getting captured but no TGS-REQ, any inputs for such case?

edit retag flag offensive close merge delete

Comments

Providing more information like how and where the capture has been taken, which devices are involved etc. would be helpful.

Uli gravatar imageUli ( 2017-11-03 20:09:11 +0000 )edit

It’s one app which is configured for Kerberos with delegation, when we capture wire shark we can see TGS-rep but not TGS-REQ on one of the domain on other domains we can see REQ as well

ninad.sawe@gmail.com gravatar image[email protected] ( 2017-11-03 20:17:06 +0000 )edit

1 Answer

Sort by » oldest newest most voted
0

answered 2018-07-30 00:20:23 +0000

wesmorgan1 gravatar image

Does the system have multiple interfaces/addresses? If so, it's quite possible that the TGS-REQs are sometimes arriving on different interfaces/addresses.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2017-11-03 13:42:46 +0000

Seen: 121 times

Last updated: Jul 30