Subject: Re: kerberosV with kerberosIV compatibility
To: Love <lha@stacken.kth.se>
From: Tracy J. Di Marco White <gendalia@iastate.edu>
List: tech-crypto
Date: 11/02/2000 05:51:47
}"Tracy J. Di Marco White" <gendalia@iastate.edu> writes:
}
}> }What are you trying to do. Get a krb4 ticket directly ?
}> 
}> What I'd most like to do is to login and get K5 & K4 tickets automatically.
}> Failing that, log in and get K5 tickets then be able to kinit -4 and get K4
}> tickets.  I don't necessarily have krb5.conf set up correctly to do that,
}> but I've gotten several different answers about how to set that up, and have
}> no idea which one is correct.
}
}The code uses the same function to get the hosts in the get-initial-ticket
}and convert-krb5-to-krb4-tickets. So it should just work. Can you tcpdump
}and see what servers you are trying to talk to ?
 
Sure, I'll put that at the end.

}> I'd also love to be able to use encrypted telnet between our standard K4
}> clients and NetBSD's K5/K4 enabled telnet(d).
}
}Then you'll need a srvtab, if you have a keytab it can be converted using
}`ktutil key2srvtab'.

I have both a keytab and a srvtab, and krb5.conf is set up:
[libdefaults]
        ticket_lifetime = 600
        default_realm = IASTATE.EDU
        default_tkt_enctypes = des-cbc-crc
        default_tgs_enctypes = des-cbc-crc
        krb4_srvtab = /etc/srvtab
        krb4_config = /etc/krb.conf
        krb4_realms = /etc/krb.realms

The 3 krb4 files are there.

Tracy J. Di Marco White
Project Vincent Systems Manager
gendalia@iastate.edu

tcpdump of doing kinit gendalia:

05:31:54.914502 bb.cc.iastate.edu.64845 > ns-1.iastate.edu.domain:  48368+ SRV ? _kerberos._udp.IASTATE.EDU. (44)
05:31:54.917421 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64845:  48368 2/1/2 (196)
05:31:54.917741 bb.cc.iastate.edu.64844 > ns-1.iastate.edu.domain:  48369+ SRV ? _kerberos._tcp.IASTATE.EDU. (44)
05:31:54.920607 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64844:  48369 2/1/2 (196)
05:31:54.920772 bb.cc.iastate.edu.64843 > ns-1.iastate.edu.domain:  48370+ SRV ? _kerberos._http.IASTATE.EDU. (45)
05:31:54.922909 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64843:  48370 NXDomain* 0/1/0 (101)
05:31:54.923569 bb.cc.iastate.edu.64842 > ns-1.iastate.edu.domain:  48371+ AAAA? kerberos-1.iastate.edu. (40)
05:31:54.925783 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64842:  48371* 0/1/0 (96)
05:31:54.925874 bb.cc.iastate.edu.64841 > ns-1.iastate.edu.domain:  48372+ A? kerberos-1.iastate.edu. (40)
05:31:54.929487 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64841:  48372* 1/5/6 A 129.186.0.0 (276)
05:31:54.929623 bb.cc.iastate.edu.64840 > kerberos-1.iastate.edu.kerberos:  v5
05:31:54.959043 arp who-has bb.cc.iastate.edu tell kerberos-1.iastate.edu
05:31:54.959062 arp reply bb.cc.iastate.edu is-at 0:90:27:dc:5e:30
05:31:54.960320 kerberos-1.iastate.edu.kerberos > bb.cc.iastate.edu.64840:  v5
05:31:55.140486 bb.cc.iastate.edu.64839 > ns-1.iastate.edu.domain:  17239+ PTR? 200.1.186.129.in-addr.arpa. (44)
05:31:55.144248 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64839:  17239* 1/5/6 (298)
05:31:55.145038 bb.cc.iastate.edu.64838 > ns-1.iastate.edu.domain:  17240+ PTR? 201.140.186.129.in-addr.arpa. (46)
05:31:55.150062 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64838:  17240* 1/5/6 (311)

tcpdump of doing kinit -4 gendalia:

05:33:06.828395 bb.cc.iastate.edu.64835 > ns-1.iastate.edu.domain:  60459+ SRV ? _kerberos._udp.IASTATE.EDU. (44)
05:33:06.831322 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64835:  60459 2/1/2 (196)
05:33:06.831649 bb.cc.iastate.edu.64834 > ns-1.iastate.edu.domain:  60460+ SRV ? _kerberos._tcp.IASTATE.EDU. (44)
05:33:06.835368 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64834:  60460 2/1/2 (196)
05:33:06.835533 bb.cc.iastate.edu.64833 > ns-1.iastate.edu.domain:  60461+ SRV ? _kerberos._http.IASTATE.EDU. (45)
05:33:06.837652 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64833:  60461 NXDomain* 0/1/0 (101)
05:33:06.838321 bb.cc.iastate.edu.64832 > ns-1.iastate.edu.domain:  60462+ AAAA? kerberos-1.iastate.edu. (40)
05:33:06.841294 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64832:  60462* 0/1/0 (96)
05:33:06.841390 bb.cc.iastate.edu.64831 > ns-1.iastate.edu.domain:  60463+ A? kerberos-1.iastate.edu. (40)
05:33:06.845174 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64831:  60463* 1/5/6 A 129.186.0.0 (276)
05:33:06.845311 bb.cc.iastate.edu.64830 > kerberos-1.iastate.edu.kerberos:  v5
05:33:06.860808 kerberos-1.iastate.edu.kerberos > bb.cc.iastate.edu.64830:  v5
05:33:06.862702 bb.cc.iastate.edu.64829 > ns-1.iastate.edu.domain:  60464+ SRV ? _kerberos._udp.IASTATE.EDU. (44)
05:33:06.865530 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64829:  60464 2/1/2 (196)
05:33:06.865710 bb.cc.iastate.edu.64828 > ns-1.iastate.edu.domain:  60465+ SRV ? _kerberos._tcp.IASTATE.EDU. (44)
05:33:06.868550 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64828:  60465 2/1/2 (196)
05:33:06.868714 bb.cc.iastate.edu.64827 > ns-1.iastate.edu.domain:  60466+ SRV ? _kerberos._http.IASTATE.EDU. (45)
05:33:06.871457 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64827:  60466 NXDomain* 0/1/0 (101)
05:33:06.871674 bb.cc.iastate.edu.64826 > ns-1.iastate.edu.domain:  60467+ AAAA? kerberos-1.iastate.edu. (40)
05:33:06.874426 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64826:  60467* 0/1/0 (96)
05:33:06.874514 bb.cc.iastate.edu.64825 > ns-1.iastate.edu.domain:  60468+ A? kerberos-1.iastate.edu. (40)
05:33:06.878457 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64825:  60468* 1/5/6 A 129.186.0.0 (276)
05:33:06.878567 bb.cc.iastate.edu.64824 > kerberos-1.iastate.edu.kerberos: 
05:33:07.690568 bb.cc.iastate.edu.64823 > ns-1.iastate.edu.domain:  13066+ PTR? 200.1.186.129.in-addr.arpa. (44)
05:33:07.694064 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64823:  13066* 1/5/6 (298)
05:33:07.694876 bb.cc.iastate.edu.64822 > ns-1.iastate.edu.domain:  13067+ PTR? 201.140.186.129.in-addr.arpa. (46)
05:33:07.698490 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64822:  13067* 1/5/6 (311)
05:33:09.880229 bb.cc.iastate.edu.64821 > ns-1.iastate.edu.domain:  60469+ AAAA? kerberos-2.iastate.edu. (40)
05:33:09.882329 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64821:  60469* 0/1/0 (96)
05:33:09.882423 bb.cc.iastate.edu.64820 > ns-1.iastate.edu.domain:  60470+ A? kerberos-2.iastate.edu. (40)
05:33:09.886047 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64820:  60470* 1/5/6 A e63gb1-lo0.tele.iastate.edu (276)
05:33:09.886163 bb.cc.iastate.edu.64819 > kerberos-2.iastate.edu.kerberos: 
05:33:10.690397 bb.cc.iastate.edu.64818 > ns-1.iastate.edu.domain:  13068+ PTR? 33.0.186.129.in-addr.arpa. (43)
05:33:10.694029 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64818:  13068* 1/5/6 (313)
05:33:10.694304 bb.cc.iastate.edu.64817 > ns-1.iastate.edu.domain:  13069+ PTR? 152.78.186.129.in-addr.arpa. (45)
05:33:10.697868 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64817:  13069* 1/5/6 (310)
05:33:12.890237 bb.cc.iastate.edu.64816 > ns-1.iastate.edu.domain:  60471+ AAAA? windc1.iastate.edu. (36)
05:33:12.892519 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64816:  60471* 0/1/0 (92)
05:33:12.892607 bb.cc.iastate.edu.64815 > ns-1.iastate.edu.domain:  60472+ A? windc1.iastate.edu. (36)
05:33:12.896073 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64815:  60472* 1/5/6 A windc1.iastate.edu (272)
05:33:12.896183 bb.cc.iastate.edu.64814 > windc1.iastate.edu.kerberos: 
05:33:12.897057 bb.cc.iastate.edu.64814 > windc1.iastate.edu.kerberos: 
05:33:13.690339 bb.cc.iastate.edu.64813 > ns-1.iastate.edu.domain:  13070+ PTR? 1.6.186.129.in-addr.arpa. (42)
05:33:13.694050 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64813:  13070* 1/5/6 PTR  (303)
05:33:15.900195 bb.cc.iastate.edu.64812 > ns-1.iastate.edu.domain:  60473+ AAAA? windc2.iastate.edu. (36)
05:33:15.902556 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64812:  60473* 0/1/0 (92)
05:33:15.902643 bb.cc.iastate.edu.64811 > ns-1.iastate.edu.domain:  60474+ A? windc2.iastate.edu. (36)
05:33:15.906247 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64811:  60474* 1/5/6 A windc2.iastate.edu (272)
05:33:15.906353 bb.cc.iastate.edu.64810 > windc2.iastate.edu.kerberos: 
05:33:16.690332 bb.cc.iastate.edu.64809 > ns-1.iastate.edu.domain:  13071+ PTR? 2.6.186.129.in-addr.arpa. (42)
05:33:16.693851 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64809:  13071* 1/5/6 PTR  (303)
05:33:18.910191 bb.cc.iastate.edu.64808 > ns-1.iastate.edu.domain:  60475+ AAAA? windc2.iastate.edu. (36)
05:33:18.914226 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64808:  60475* 0/1/0 (92)
05:33:18.914313 bb.cc.iastate.edu.64807 > ns-1.iastate.edu.domain:  60476+ A? windc2.iastate.edu. (36)
05:33:18.917865 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64807:  60476* 1/5/6 A windc2.iastate.edu (272)
05:33:18.918047 bb.cc.iastate.edu.65485 > windc2.iastate.edu.kerberos: S 3509810037:3509810037(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 104838 0>
05:33:18.918685 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65485: S 270552141:270552141(0) ack 3509810038 win 17520 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 0> (DF)
05:33:18.918726 bb.cc.iastate.edu.65485 > windc2.iastate.edu.kerberos: . ack 1 win 17520 <nop,nop,timestamp 104838 0>
05:33:18.918800 bb.cc.iastate.edu.65485 > windc2.iastate.edu.kerberos: P 1:5(4) ack 1 win 17520 <nop,nop,timestamp 104838 0>
05:33:19.086725 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65485: . ack 5 win 17516 <nop,nop,timestamp 37718369 104838> (DF)
05:33:19.086760 bb.cc.iastate.edu.65485 > windc2.iastate.edu.kerberos: P 5:305(300) ack 1 win 17520 <nop,nop,timestamp 104838 0>
05:33:19.088833 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65485: P 1:5(4) ack 305 win 17216 <nop,nop,timestamp 37718369 104838> (DF)
05:33:19.170030 bb.cc.iastate.edu.65485 > windc2.iastate.edu.kerberos: . ack 5 win 17520 <nop,nop,timestamp 104839 37718369>
05:33:22.090040 bb.cc.iastate.edu.65485 > windc2.iastate.edu.kerberos: F 305:305(0) ack 5 win 17520 <nop,nop,timestamp 104844 37718369>
05:33:22.090231 bb.cc.iastate.edu.64806 > ns-1.iastate.edu.domain:  60477+ AAAA? windc1.iastate.edu. (36)
05:33:22.091023 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65485: . ack 306 win 17216 <nop,nop,timestamp 37718398 104844> (DF)
05:33:22.091093 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65485: F 5:5(0) ack 306 win 17216 <nop,nop,timestamp 37718398 104844> (DF)
05:33:22.091123 bb.cc.iastate.edu.65485 > windc2.iastate.edu.kerberos: . ack 6 win 17520 <nop,nop,timestamp 104844 37718398>
05:33:22.092453 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64806:  60477* 0/1/0 (92)
05:33:22.092542 bb.cc.iastate.edu.64805 > ns-1.iastate.edu.domain:  60478+ A? windc1.iastate.edu. (36)
05:33:22.095987 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64805:  60478* 1/5/6 A windc1.iastate.edu (272)
05:33:22.096138 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: S 3626852537:3626852537(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 104844 0>
05:33:22.096500 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: S 3626852537:3626852537(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 104844 0>
05:33:22.096680 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: S 3064510200:3064510200(0) ack 3626852538 win 17520 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 0> (DF)
05:33:22.096949 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: S 3064510200:3064510200(0) ack 3626852538 win 17520 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 0> (DF)
05:33:22.096979 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: . ack 1 win 17520 <nop,nop,timestamp 104844 0>
05:33:22.097023 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: P 1:5(4) ack 1 win 17520 <nop,nop,timestamp 104844 0>
05:33:22.097320 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: . ack 1 win 17520 <nop,nop,timestamp 104844 0>
05:33:22.097560 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: P 1:5(4) ack 1 win 17520 <nop,nop,timestamp 104844 0>
05:33:22.259407 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: . ack 5 win 17516 <nop,nop,timestamp 6797957 104844> (DF)
05:33:22.259648 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: . ack 5 win 17516 <nop,nop,timestamp 6797957 104844> (DF)
05:33:22.259680 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: P 5:305(300) ack 1 win 17520 <nop,nop,timestamp 104845 0>
05:33:22.260605 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: P 5:305(300) ack 1 win 17520 <nop,nop,timestamp 104845 0>
05:33:22.261861 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: P 1:5(4) ack 305 win 17216 <nop,nop,timestamp 6797957 104845> (DF)
05:33:22.262118 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: P 1:5(4) ack 305 win 17216 <nop,nop,timestamp 6797957 104845> (DF)
05:33:22.370020 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: . ack 5 win 17520 <nop,nop,timestamp 104845 6797957>
05:33:22.370365 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: . ack 5 win 17520 <nop,nop,timestamp 104845 6797957>
05:33:25.270038 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: F 305:305(0) ack 5 win 17520 <nop,nop,timestamp 104851 6797957>
05:33:25.270218 bb.cc.iastate.edu.64804 > ns-1.iastate.edu.domain:  60479+ AAAA? kerberos-1.iastate.edu. (40)
05:33:25.270444 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: F 305:305(0) ack 5 win 17520 <nop,nop,timestamp 104851 6797957>
05:33:25.270589 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: . ack 306 win 17216 <nop,nop,timestamp 6797986 104851> (DF)
05:33:25.270757 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: F 5:5(0) ack 306 win 17216 <nop,nop,timestamp 6797986 104851> (DF)
05:33:25.270831 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: . ack 306 win 17216 <nop,nop,timestamp 6797986 104851> (DF)
05:33:25.271010 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65484: F 5:5(0) ack 306 win 17216 <nop,nop,timestamp 6797986 104851> (DF)
05:33:25.271037 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: . ack 6 win 17520 <nop,nop,timestamp 104851 6797986>
05:33:25.271370 bb.cc.iastate.edu.65484 > windc1.iastate.edu.kerberos: . ack 6 win 17520 <nop,nop,timestamp 104851 6797986>
05:33:25.272774 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64804:  60479* 0/1/0 (96)
05:33:25.272864 bb.cc.iastate.edu.64803 > ns-1.iastate.edu.domain:  60480+ A? kerberos-1.iastate.edu. (40)
05:33:25.276787 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64803:  60480* 1/5/6 A 129.186.0.52 (276)
05:33:25.276895 bb.cc.iastate.edu.64802 > kerberos-1.iastate.edu.kerberos: 
05:33:25.690713 bb.cc.iastate.edu.64801 > ns-1.iastate.edu.domain:  13072+ PTR? 52.0.186.129.in-addr.arpa. (43)
05:33:25.692918 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64801:  13072 NXDomain* 0/1/0 (119)
05:33:28.280189 bb.cc.iastate.edu.64800 > ns-1.iastate.edu.domain:  60481+ AAAA? kerberos-2.iastate.edu. (40)
05:33:28.282677 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64800:  60481* 0/1/0 (96)
05:33:28.282767 bb.cc.iastate.edu.64799 > ns-1.iastate.edu.domain:  60482+ A? kerberos-2.iastate.edu. (40)
05:33:28.286593 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64799:  60482* 1/5/6 A oak-186-162.stures.iastate.edu (276)
05:33:28.286700 bb.cc.iastate.edu.64798 > kerberos-2.iastate.edu.kerberos: 
05:33:28.690333 bb.cc.iastate.edu.64797 > ns-1.iastate.edu.domain:  13073+ PTR? 162.186.186.129.in-addr.arpa. (46)
05:33:28.693985 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64797:  13073* 1/5/6 (319)
05:33:31.290185 bb.cc.iastate.edu.64796 > ns-1.iastate.edu.domain:  60483+ AAAA? windc1.iastate.edu. (36)
05:33:31.292428 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64796:  60483* 0/1/0 (92)
05:33:31.292516 bb.cc.iastate.edu.64795 > ns-1.iastate.edu.domain:  60484+ A? windc1.iastate.edu. (36)
05:33:31.296057 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64795:  60484* 1/5/6 A windc1.iastate.edu (272)
05:33:31.296162 bb.cc.iastate.edu.64794 > windc1.iastate.edu.kerberos: 
05:33:31.297022 bb.cc.iastate.edu.64794 > windc1.iastate.edu.kerberos: 
05:33:34.300187 bb.cc.iastate.edu.64793 > ns-1.iastate.edu.domain:  60485+ AAAA? windc2.iastate.edu. (36)
05:33:34.302418 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64793:  60485* 0/1/0 (92)
05:33:34.302505 bb.cc.iastate.edu.64792 > ns-1.iastate.edu.domain:  60486+ A? windc2.iastate.edu. (36)
05:33:34.306050 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64792:  60486* 1/5/6 A windc2.iastate.edu (272)
05:33:34.306155 bb.cc.iastate.edu.64791 > windc2.iastate.edu.kerberos: 
05:33:37.310182 bb.cc.iastate.edu.64790 > ns-1.iastate.edu.domain:  60487+ AAAA? windc2.iastate.edu. (36)
05:33:37.312348 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64790:  60487* 0/1/0 (92)
05:33:37.312434 bb.cc.iastate.edu.64789 > ns-1.iastate.edu.domain:  60488+ A? windc2.iastate.edu. (36)
05:33:37.315906 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64789:  60488* 1/5/6 A windc2.iastate.edu (272)
05:33:37.316057 bb.cc.iastate.edu.65483 > windc2.iastate.edu.kerberos: S 4175282825:4175282825(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 104875 0>
05:33:37.316730 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65483: S 274856427:274856427(0) ack 4175282826 win 17520 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 0> (DF)
05:33:37.316764 bb.cc.iastate.edu.65483 > windc2.iastate.edu.kerberos: . ack 1 win 17520 <nop,nop,timestamp 104875 0>
05:33:37.316806 bb.cc.iastate.edu.65483 > windc2.iastate.edu.kerberos: P 1:5(4) ack 1 win 17520 <nop,nop,timestamp 104875 0>
05:33:37.460634 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65483: . ack 5 win 17516 <nop,nop,timestamp 37718552 104875> (DF)
05:33:37.460667 bb.cc.iastate.edu.65483 > windc2.iastate.edu.kerberos: P 5:305(300) ack 1 win 17520 <nop,nop,timestamp 104875 0>
05:33:37.462733 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65483: P 1:5(4) ack 305 win 17216 <nop,nop,timestamp 37718552 104875> (DF)
05:33:37.570019 bb.cc.iastate.edu.65483 > windc2.iastate.edu.kerberos: . ack 5 win 17520 <nop,nop,timestamp 104875 37718552>
05:33:40.470064 bb.cc.iastate.edu.65483 > windc2.iastate.edu.kerberos: F 305:305(0) ack 5 win 17520 <nop,nop,timestamp 104881 37718552>
05:33:40.470344 bb.cc.iastate.edu.64788 > ns-1.iastate.edu.domain:  60489+ AAAA? windc1.iastate.edu. (36)
05:33:40.470792 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65483: . ack 306 win 17216 <nop,nop,timestamp 37718582 104881> (DF)
05:33:40.470945 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65483: F 5:5(0) ack 306 win 17216 <nop,nop,timestamp 37718582 104881> (DF)
05:33:40.470976 bb.cc.iastate.edu.65483 > windc2.iastate.edu.kerberos: . ack 6 win 17520 <nop,nop,timestamp 104881 37718582>
05:33:40.472657 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64788:  60489* 0/1/0 (92)
05:33:40.472762 bb.cc.iastate.edu.64787 > ns-1.iastate.edu.domain:  60490+ A? windc1.iastate.edu. (36)
05:33:40.476896 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64787:  60490* 1/5/6 A windc1.iastate.edu (272)
05:33:40.477071 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: S 4291783628:4291783628(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 104881 0>
05:33:40.477478 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: S 4291783628:4291783628(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 104881 0>
05:33:40.477668 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: S 3068882161:3068882161(0) ack 4291783629 win 17520 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 0> (DF)
05:33:40.477937 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: S 3068882161:3068882161(0) ack 4291783629 win 17520 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 0> (DF)
05:33:40.477968 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: . ack 1 win 17520 <nop,nop,timestamp 104881 0>
05:33:40.478017 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: P 1:5(4) ack 1 win 17520 <nop,nop,timestamp 104881 0>
05:33:40.478335 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: . ack 1 win 17520 <nop,nop,timestamp 104881 0>
05:33:40.478421 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: P 1:5(4) ack 1 win 17520 <nop,nop,timestamp 104881 0>
05:33:40.633175 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: . ack 5 win 17516 <nop,nop,timestamp 6798140 104881> (DF)
05:33:40.633417 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: . ack 5 win 17516 <nop,nop,timestamp 6798140 104881> (DF)
05:33:40.633452 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: P 5:305(300) ack 1 win 17520 <nop,nop,timestamp 104881 0>
05:33:40.634357 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: P 5:305(300) ack 1 win 17520 <nop,nop,timestamp 104881 0>
05:33:40.635621 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: P 1:5(4) ack 305 win 17216 <nop,nop,timestamp 6798140 104881> (DF)
05:33:40.635891 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: P 1:5(4) ack 305 win 17216 <nop,nop,timestamp 6798140 104881> (DF)
05:33:40.770025 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: . ack 5 win 17520 <nop,nop,timestamp 104882 6798140>
05:33:40.770357 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: . ack 5 win 17520 <nop,nop,timestamp 104882 6798140>
05:33:43.640050 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: F 305:305(0) ack 5 win 17520 <nop,nop,timestamp 104887 6798140>
05:33:43.640276 bb.cc.iastate.edu.64786 > ns-1.iastate.edu.domain:  60491+ AAAA? kerberos-1.iastate.edu. (40)
05:33:43.640466 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: F 305:305(0) ack 5 win 17520 <nop,nop,timestamp 104887 6798140>
05:33:43.640607 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: . ack 306 win 17216 <nop,nop,timestamp 6798170 104887> (DF)
05:33:43.640768 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: F 5:5(0) ack 306 win 17216 <nop,nop,timestamp 6798170 104887> (DF)
05:33:43.640869 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: . ack 306 win 17216 <nop,nop,timestamp 6798170 104887> (DF)
05:33:43.640997 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65482: F 5:5(0) ack 306 win 17216 <nop,nop,timestamp 6798170 104887> (DF)
05:33:43.641025 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: . ack 6 win 17520 <nop,nop,timestamp 104887 6798170>
05:33:43.641389 bb.cc.iastate.edu.65482 > windc1.iastate.edu.kerberos: . ack 6 win 17520 <nop,nop,timestamp 104887 6798170>
05:33:43.642634 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64786:  60491* 0/1/0 (96)
05:33:43.642734 bb.cc.iastate.edu.64785 > ns-1.iastate.edu.domain:  60492+ A? kerberos-1.iastate.edu. (40)
05:33:43.646306 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64785:  60492* 1/5/6 A himagiri.cs.iastate.edu (276)
05:33:43.646416 bb.cc.iastate.edu.64784 > kerberos-1.iastate.edu.kerberos: 
05:33:43.690778 bb.cc.iastate.edu.64783 > ns-1.iastate.edu.domain:  13074+ PTR? 112.68.186.129.in-addr.arpa. (45)
05:33:43.694091 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64783:  13074* 1/4/4 (247)
05:33:46.650190 bb.cc.iastate.edu.64782 > ns-1.iastate.edu.domain:  60493+ AAAA? kerberos-2.iastate.edu. (40)
05:33:46.652465 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64782:  60493* 0/1/0 (96)
05:33:46.652553 bb.cc.iastate.edu.64781 > ns-1.iastate.edu.domain:  60494+ A? kerberos-2.iastate.edu. (40)
05:33:46.656137 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64781:  60494* 1/5/6 A larch-187-90.stures.iastate.edu (276)
05:33:46.656245 bb.cc.iastate.edu.64780 > kerberos-2.iastate.edu.kerberos: 
05:33:46.690354 bb.cc.iastate.edu.64779 > ns-1.iastate.edu.domain:  13075+ PTR? 90.187.186.129.in-addr.arpa. (45)
05:33:46.694179 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64779:  13075* 1/5/6 (319)
05:33:49.660187 bb.cc.iastate.edu.64778 > ns-1.iastate.edu.domain:  60495+ AAAA? windc1.iastate.edu. (36)
05:33:49.662936 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64778:  60495* 0/1/0 (92)
05:33:49.663023 bb.cc.iastate.edu.64777 > ns-1.iastate.edu.domain:  60496+ A? windc1.iastate.edu. (36)
05:33:49.666547 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64777:  60496* 1/5/6 A windc1.iastate.edu (272)
05:33:49.666654 bb.cc.iastate.edu.64776 > windc1.iastate.edu.kerberos: 
05:33:49.667545 bb.cc.iastate.edu.64776 > windc1.iastate.edu.kerberos: 
05:33:52.670190 bb.cc.iastate.edu.64775 > ns-1.iastate.edu.domain:  60497+ AAAA? windc2.iastate.edu. (36)
05:33:52.672368 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64775:  60497* 0/1/0 (92)
05:33:52.672455 bb.cc.iastate.edu.64774 > ns-1.iastate.edu.domain:  60498+ A? windc2.iastate.edu. (36)
05:33:52.675939 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64774:  60498* 1/5/6 A windc2.iastate.edu (272)
05:33:52.676043 bb.cc.iastate.edu.64773 > windc2.iastate.edu.kerberos: 
05:33:55.680466 bb.cc.iastate.edu.64772 > ns-1.iastate.edu.domain:  60499+ AAAA? windc2.iastate.edu. (36)
05:33:55.682620 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64772:  60499* 0/1/0 (92)
05:33:55.682707 bb.cc.iastate.edu.64771 > ns-1.iastate.edu.domain:  60500+ A? windc2.iastate.edu. (36)
05:33:55.686191 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64771:  60500* 1/5/6 A windc2.iastate.edu (272)
05:33:55.686353 bb.cc.iastate.edu.65481 > windc2.iastate.edu.kerberos: S 525274633:525274633(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 104912 0>
05:33:55.687017 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65481: S 279202746:279202746(0) ack 525274634 win 17520 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 0> (DF)
05:33:55.687049 bb.cc.iastate.edu.65481 > windc2.iastate.edu.kerberos: . ack 1 win 17520 <nop,nop,timestamp 104912 0>
05:33:55.687095 bb.cc.iastate.edu.65481 > windc2.iastate.edu.kerberos: P 1:5(4) ack 1 win 17520 <nop,nop,timestamp 104912 0>
05:33:55.834527 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65481: . ack 5 win 17516 <nop,nop,timestamp 37718736 104912> (DF)
05:33:55.834562 bb.cc.iastate.edu.65481 > windc2.iastate.edu.kerberos: P 5:305(300) ack 1 win 17520 <nop,nop,timestamp 104912 0>
05:33:55.836637 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65481: P 1:5(4) ack 305 win 17216 <nop,nop,timestamp 37718736 104912> (DF)
05:33:55.970018 bb.cc.iastate.edu.65481 > windc2.iastate.edu.kerberos: . ack 5 win 17520 <nop,nop,timestamp 104912 37718736>
05:33:58.840035 bb.cc.iastate.edu.65481 > windc2.iastate.edu.kerberos: F 305:305(0) ack 5 win 17520 <nop,nop,timestamp 104918 37718736>
05:33:58.840213 bb.cc.iastate.edu.64770 > ns-1.iastate.edu.domain:  60501+ AAAA? windc1.iastate.edu. (36)
05:33:58.840672 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65481: . ack 306 win 17216 <nop,nop,timestamp 37718766 104918> (DF)
05:33:58.840831 windc2.iastate.edu.kerberos > bb.cc.iastate.edu.65481: F 5:5(0) ack 306 win 17216 <nop,nop,timestamp 37718766 104918> (DF)
05:33:58.840859 bb.cc.iastate.edu.65481 > windc2.iastate.edu.kerberos: . ack 6 win 17520 <nop,nop,timestamp 104918 37718766>
05:33:58.842314 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64770:  60501* 0/1/0 (92)
05:33:58.842404 bb.cc.iastate.edu.64769 > ns-1.iastate.edu.domain:  60502+ A? windc1.iastate.edu. (36)
05:33:58.846308 ns-1.iastate.edu.domain > bb.cc.iastate.edu.64769:  60502* 1/5/6 A windc1.iastate.edu (272)
05:33:58.846456 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: S 646900403:646900403(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 104918 0>
05:33:58.846827 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: S 646900403:646900403(0) win 16384 <mss 1460,nop,wscale 0,nop,nop,timestamp 104918 0>
05:33:58.847002 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: S 3073424143:3073424143(0) ack 646900404 win 17520 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 0> (DF)
05:33:58.847255 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: S 3073424143:3073424143(0) ack 646900404 win 17520 <mss 1460,nop,wscale 0,nop,nop,timestamp 0 0> (DF)
05:33:58.847284 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: . ack 1 win 17520 <nop,nop,timestamp 104918 0>
05:33:58.847327 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: P 1:5(4) ack 1 win 17520 <nop,nop,timestamp 104918 0>
05:33:58.847661 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: . ack 1 win 17520 <nop,nop,timestamp 104918 0>
05:33:58.847733 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: P 1:5(4) ack 1 win 17520 <nop,nop,timestamp 104918 0>
05:33:59.006922 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: . ack 5 win 17516 <nop,nop,timestamp 6798324 104918> (DF)
05:33:59.007180 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: . ack 5 win 17516 <nop,nop,timestamp 6798324 104918> (DF)
05:33:59.007212 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: P 5:305(300) ack 1 win 17520 <nop,nop,timestamp 104918 0>
05:33:59.008118 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: P 5:305(300) ack 1 win 17520 <nop,nop,timestamp 104918 0>
05:33:59.009380 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: P 1:5(4) ack 305 win 17216 <nop,nop,timestamp 6798324 104918> (DF)
05:33:59.009643 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: P 1:5(4) ack 305 win 17216 <nop,nop,timestamp 6798324 104918> (DF)
05:33:59.170034 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: . ack 5 win 17520 <nop,nop,timestamp 104919 6798324>
05:33:59.170387 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: . ack 5 win 17520 <nop,nop,timestamp 104919 6798324>
05:34:02.010041 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: F 305:305(0) ack 5 win 17520 <nop,nop,timestamp 104924 6798324>
05:34:02.010400 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: F 305:305(0) ack 5 win 17520 <nop,nop,timestamp 104924 6798324>
05:34:02.010543 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: . ack 306 win 17216 <nop,nop,timestamp 6798354 104924> (DF)
05:34:02.010694 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: F 5:5(0) ack 306 win 17216 <nop,nop,timestamp 6798354 104924> (DF)
05:34:02.010785 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: . ack 306 win 17216 <nop,nop,timestamp 6798354 104924> (DF)
05:34:02.010945 windc1.iastate.edu.kerberos > bb.cc.iastate.edu.65480: F 5:5(0) ack 306 win 17216 <nop,nop,timestamp 6798354 104924> (DF)
05:34:02.010980 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: . ack 6 win 17520 <nop,nop,timestamp 104924 6798354>
05:34:02.011337 bb.cc.iastate.edu.65480 > windc1.iastate.edu.kerberos: . ack 6 win 17520 <nop,nop,timestamp 104924 6798354>