Ask Your Question

Capturing kerberos traffic but not able to capture TGS-REQ ?

asked 2017-11-03 13:42:46 +0000

ninad.sawe gravatar image

TGS-REP are getting captured but no TGS-REQ, any inputs for such case?

edit retag flag offensive close merge delete


Providing more information like how and where the capture has been taken, which devices are involved etc. would be helpful.

Uli gravatar imageUli ( 2017-11-03 20:09:11 +0000 )edit

It’s one app which is configured for Kerberos with delegation, when we capture wire shark we can see TGS-rep but not TGS-REQ on one of the domain on other domains we can see REQ as well

ninad.sawe gravatar imageninad.sawe ( 2017-11-03 20:17:06 +0000 )edit

1 Answer

Sort by » oldest newest most voted

answered 2018-07-30 00:20:23 +0000

wesmorgan1 gravatar image

Does the system have multiple interfaces/addresses? If so, it's quite possible that the TGS-REQs are sometimes arriving on different interfaces/addresses.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools


Asked: 2017-11-03 13:42:46 +0000

Seen: 526 times

Last updated: Jul 30 '18