Capturing kerberos traffic but not able to capture TGS-REQ ?
TGS-REP are getting captured but no TGS-REQ, any inputs for such case?
1 Answer
- Sort by
oldest newest most voted
0
Does the system have multiple interfaces/addresses? If so, it's quite possible that the TGS-REQs are sometimes arriving on different interfaces/addresses.
Your Answer
Please start posting anonymously - your entry will be published after you log in or create a new account.
This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.
Comments
Providing more information like how and where the capture has been taken, which devices are involved etc. would be helpful.
It’s one app which is configured for Kerberos with delegation, when we capture wire shark we can see TGS-rep but not TGS-REQ on one of the domain on other domains we can see REQ as well