Subject: Re: Kerberos testing... limited success.... packet dumps...large !
To: None <joda@pdc.kth.se>
From: Pete Vickers <pete.vickers@uk.adtranz.com>
List: tech-net
Date: 01/13/2001 16:38:07
Hi All,
sorry for the large post...maybe this is getting a bit OT ?
Anyway, packet dump is below:
>"Pete Vickers" <pete.vickers@uk.adtranz.com> writes:
>
>> Tcpdump captures packets to/from KDC:
>
>Can you mail the actual data, both from login and kinit?
>
>> any thoughts welcomed...
>
>Not that I have much hands-on experience with w2k...
>
>/Johan
Demonstration repeated as per previous post.
--------------------------------------------------------------------
Firstly from a [successfully] kinit:
% klist -v
klist: No ticket file: /tmp/krb5cc_1000
% kinit -e des-cbc-crc
ukpv0001@TRANSTEST's Password: *******
% klist -v
Credentials cache: FILE:/tmp/krb5cc_1000
Principal: ukpv0001@TRANSTEST
Cache version: 4
Server: krbtgt/TRANSTEST@TRANSTEST
Ticket etype: des-cbc-crc
Auth time: Jan 13 16:20:11 2001
End time: Jan 14 02:20:07 2001
Ticket flags: initial, pre-authenticated
Addresses: IPv4:172.16.96.155, IPv6:::1, IPv4:127.0.0.1
%
dump follows:
# tcpdump -s 9999999999 -x -X host 172.16.96.159 and not arp and not port
... 53 and not port 138
tcpdump: listening on fxp0
16:20:10.912010 ukdews0001.65165 > ukdesdc001.transtest.kerberos: v5
0x0000 4500 00de 13df 0000 4011 4cd5 ac10 609b E.......@.L...`.
0x0010 ac10 609f fe8d 0058 00ca 776f 6a81 bf30 ..`....X..woj..0
0x0020 81bc a103 0201 05a2 0302 010a a481 af30 ...............0
0x0030 81ac a007 0305 0000 0000 00a1 1530 13a0 .............0..
0x0040 0302 0101 a10c 300a 1b08 756b 7076 3030 ......0...ukpv00
0x0050 3031 a20b 1b09 5452 414e 5354 4553 54a3 01....TRANSTEST.
0x0060 1e30 1ca0 0302 0101 a115 3013 1b06 6b72 .0........0...kr
0x0070 6274 6774 1b09 5452 414e 5354 4553 54a5 btgt..TRANSTEST.
0x0080 1118 0f32 3030 3130 3131 3430 3232 3030 ...2001011402200
0x0090 375a a706 0204 562f 28de a805 3003 0201 7Z....V/(...0...
0x00a0 01a9 3b30 3930 0da0 0302 0102 a106 0404 ..;090..........
0x00b0 ac10 609b 3019 a003 0201 18a1 1204 1000 ..`.0...........
0x00c0 0000 0000 0000 0000 0000 0000 0000 0130 ...............0
0x00d0 0da0 0302 0102 a106 0404 7f00 0001 ..............
16:20:10.914361 ukdesdc001.transtest.kerberos > ukdews0001.65165:
0x0000 4500 00c1 2828 0000 8011 f8a8 ac10 609f E...((........`.
0x0010 ac10 609b 0058 fe8d 00ad 50f4 7e81 a230 ..`..X....P.~..0
0x0020 819f a003 0201 05a1 0302 011e a411 180f ................
0x0030 3230 3031 3031 3133 3136 3230 3131 5aa5 20010113162011Z.
0x0040 0502 0306 d1cd a603 0201 19a9 0b1b 0954 ...............T
0x0050 5241 4e53 5445 5354 aa1e 301c a003 0201 RANSTEST..0.....
0x0060 02a1 1530 131b 066b 7262 7467 741b 0954 ...0...krbtgt..T
0x0070 5241 4e53 5445 5354 ac47 0445 3043 302b RANSTEST.G.E0C0+
0x0080 a103 0201 0ba2 2404 2230 2030 1ea0 0302 ......$."0.0....
0x0090 0101 a117 0415 5452 414e 5354 4553 5470 ......TRANSTESTp
0x00a0 6574 652e 7669 636b 6572 7330 09a1 0302 ete.vickers0....
0x00b0 0102 a202 0400 3009 a103 0201 0fa2 0204 ......0.........
0x00c0 00 .
16:20:10.918242 ukdews0001.65159 > ukdesdc001.transtest.kerberos: v5
0x0000 4500 0121 13e5 0000 4011 4c8c ac10 609b E..!....@.L...`.
0x0010 ac10 609f fe87 0058 010d a90c 6a82 0101 ..`....X....j...
0x0020 3081 fea1 0302 0105 a203 0201 0aa3 4030 0.............@0
0x0030 3e30 3ca1 0302 0102 a235 0433 3031 a003 >0<......5.301..
0x0040 0201 01a2 2a04 28e7 7130 130b 0bc3 1330 ....*.(.q0.....0
0x0050 2180 003c 8cb6 831e a777 8e79 7486 6565 !..<.....w.yt.ee
0x0060 3325 8930 78cc 581a 8171 f79c c206 2ea4 3%.0x.X..q......
0x0070 81af 3081 aca0 0703 0500 0000 0000 a115 ..0.............
0x0080 3013 a003 0201 01a1 0c30 0a1b 0875 6b70 0........0...ukp
0x0090 7630 3030 31a2 0b1b 0954 5241 4e53 5445 v0001....TRANSTE
0x00a0 5354 a31e 301c a003 0201 01a1 1530 131b ST..0........0..
0x00b0 066b 7262 7467 741b 0954 5241 4e53 5445 .krbtgt..TRANSTE
0x00c0 5354 a511 180f 3230 3031 3031 3134 3032 ST....2001011402
0x00d0 3230 3037 5aa7 0602 0456 2f28 dea8 0530 2007Z....V/(...0
0x00e0 0302 0101 a93b 3039 300d a003 0201 02a1 .....;090.......
0x00f0 0604 04ac 1060 9b30 19a0 0302 0118 a112 .....`.0........
0x0100 0410 0000 0000 0000 0000 0000 0000 0000 ................
0x0110 0001 300d a003 0201 02a1 0604 047f 0000 ..0.............
0x0120 01 .
16:20:10.921693 ukdesdc001.transtest.kerberos > ukdews0001.65159: v5
0x0000 4500 0543 282e 0000 8011 f420 ac10 609f E..C(.........`.
0x0010 ac10 609b 0058 fe87 052f 5882 6b82 0523 ..`..X.../X.k..#
0x0020 3082 051f a003 0201 05a1 0302 010b a222 0.............."
0x0030 3020 301e a103 0201 03a2 1704 1554 5241 0.0..........TRA
0x0040 4e53 5445 5354 7065 7465 2e76 6963 6b65 NSTESTpete.vicke
0x0050 7273 a30b 1b09 5452 414e 5354 4553 54a4 rs....TRANSTEST.
0x0060 1530 13a0 0302 0101 a10c 300a 1b08 756b .0........0...uk
0x0070 7076 3030 3031 a582 039f 6182 039b 3082 pv0001....a...0.
0x0080 0397 a003 0201 05a1 0b1b 0954 5241 4e53 ...........TRANS
0x0090 5445 5354 a21e 301c a003 0201 01a1 1530 TEST..0........0
0x00a0 131b 066b 7262 7467 741b 0954 5241 4e53 ...krbtgt..TRANS
0x00b0 5445 5354 a382 0361 3082 035d a003 0201 TEST...a0..]....
0x00c0 01a2 8203 5404 8203 5045 7b8b 9c10 336b ....T...PE{...3k
0x00d0 4b5e ebb6 ca5a a5db 61d6 c597 d637 29d9 K^...Z..a....7).
0x00e0 dc71 9a73 897f 556d d96a 48e7 d336 228a .q.s..Um.jH..6".
0x00f0 1124 1504 b7a1 54d6 9045 2943 d4b6 52aa .$....T..E)C..R.
0x0100 4e68 2c99 6c24 6514 83b2 384f 8254 4d60 Nh,.l$e...8O.TM`
0x0110 a283 5f9e afd8 51de 5e98 5eb0 6ac8 ef87 .._...Q.^.^.j...
0x0120 b400 614d 9413 61de a4ea ab92 0046 86e2 ..aM..a......F..
0x0130 2d53 b213 ccf0 d417 0a8c 2935 7b59 a12b -S........)5{Y.+
0x0140 b0dd 4c03 9a89 8bab 713e 24d0 9808 1266 ..L.....q>$....f
0x0150 43d9 e660 93a7 f164 2dca e495 7951 d9e1 C..`...d-...yQ..
0x0160 f41b ed4a de40 3fac 25ed 0fb0 8d5c 14ae ...J.@?.%....\..
0x0170 183f 9152 87a4 8659 df75 719a 44db e29c .?.R...Y.uq.D...
0x0180 e2a7 9a26 5e11 bdf0 78d8 1d7f 917a 1c56 ...&^...x....z.V
0x0190 68af 2063 a256 a789 89d7 9181 46dd 41ef h..c.V......F.A.
0x01a0 66ae 0c79 cf12 4e57 ebd9 fd7d 3a88 9179 f..y..NW...}:..y
0x01b0 dbf4 8042 ce94 592f 388b 57db 4050 f09a ...B..Y/8.W.@P..
0x01c0 9622 11b0 0dcc 89ca ec29 ac1b 8105 fb88 .".......)......
0x01d0 8e1d 1a6d 5a05 889d 3575 5242 9cc9 a7db ...mZ...5uRB....
0x01e0 6eff bcb9 19fb 3547 ca91 6a5b aca7 c415 n.....5G..j[....
0x01f0 9143 75d5 632f b813 a68b 4662 e6fb 07d5 .Cu.c/....Fb....
0x0200 bc1a bade f4cb adec 54ba 5020 5f06 9ec1 ........T.P._...
0x0210 dac6 b351 7ab1 b4c9 faaa 5d7d 15d4 27ef ...Qz.....]}..'.
0x0220 6ca7 2b45 aadb 89ec 8611 8cc1 f61f 022f l.+E.........../
0x0230 1eff 8abe 6cc1 f77f b6d6 3485 3c54 f2f8 ....l.....4.<T..
0x0240 aa69 3ec4 6528 abdd 2c87 e35e 4f1f cb95 .i>.e(..,..^O...
0x0250 d2ed f689 3055 808d 6cb1 e565 105c 1f81 ....0U..l..e.\..
0x0260 6109 e3d8 0079 3615 e74a 17ea 1a75 ffb9 a....y6..J...u..
0x0270 c28d c6a8 76f1 af70 17b8 60e5 c9ec 6bf7 ....v..p..`...k.
0x0280 f9e5 17e0 33ad 5a47 3ba4 2134 a2b9 a630 ....3.ZG;.!4...0
0x0290 e348 63e4 d296 f9e4 1614 f3fa 0bf7 34d3 .Hc...........4.
0x02a0 2fd8 5e75 e985 681e 5623 f1ec 044f 8a62 /.^u..h.V#...O.b
0x02b0 9fc3 dd43 cf43 d83a 9408 8c77 45cc fac0 ...C.C.:...wE...
0x02c0 3c38 75c1 ca7a d29a 39ef 3d8b 56db 1823 <8u..z..9.=.V..#
0x02d0 5ccf e0ce 7a4b 5e99 666b 9775 4303 307d \...zK^.fk.uC.0}
0x02e0 6729 7893 226a c9dc 729d ca1b 3373 c46e g)x."j..r...3s.n
0x02f0 a7ea 49a8 a00d f783 d430 335f 65c9 b4ec ..I......03_e...
0x0300 db97 9f4e 3625 967b bf65 a4f7 f0b2 45da ...N6%.{.e....E.
0x0310 bd99 3e98 b717 ec6d 646e 3aaf 3a56 c3ca ..>....mdn:.:V..
0x0320 d7e7 332e ee1d 4181 fb15 b8bd b9f8 8871 ..3...A........q
0x0330 c6d0 6fe3 d266 5b6b d4a2 fc7a 1ddc 4c87 ..o..f[k...z..L.
0x0340 031c 1a60 c7de ac31 fde3 ff33 fc14 25c4 ...`...1...3..%.
0x0350 769e b3c6 2445 a4c8 8012 47ff 472f 7ac1 v...$E....G.G/z.
0x0360 74c3 b92b dfd0 4fab bcef 1c65 4547 b58f t..+..O....eEG..
0x0370 ae5e 171b f860 fff9 559f 7eac fb09 1f22 .^...`..U.~...."
0x0380 d4f9 0302 449d ce46 9bf5 dea3 56c1 6ac8 ....D..F....V.j.
0x0390 b72b 4ec4 9879 e67a 3a16 42c1 0d02 689b .+N..y.z:.B...h.
0x03a0 ed10 2d07 118a d798 97c4 f5eb 753b 7e26 ..-.........u;~&
0x03b0 3aef 7ad0 e7cf 1fd5 61d9 d971 a138 36c1 :.z.....a..q.86.
0x03c0 0915 afb0 f04d 03be ea1e 0caa 351c 8cc9 .....M......5...
0x03d0 825a 8f08 056f 695b 2b4b bf2d f992 4ea8 .Z...oi[+K.-..N.
0x03e0 b300 3dc5 b5ba 506b 02e5 7bdb 1f42 fa2a ..=...Pk..{..B.*
0x03f0 910f 9f61 c33e 8988 80c7 cb42 35d7 701a ...a.>.....B5.p.
0x0400 c259 ed24 bbbc 1475 0c82 ef5f f1ac 3154 .Y.$...u..._..1T
0x0410 7877 7295 16d7 a041 e3a6 8201 2630 8201 xwr....A....&0..
0x0420 22a0 0302 0101 a103 0201 01a2 8201 1404 "...............
0x0430 8201 1071 5d39 7b00 a42f 7205 0f2b 0357 ...q]9{../r..+.W
0x0440 c0e0 72d4 be4e e419 cc09 a834 0aab 0437 ..r..N.....4...7
0x0450 f49b 08fc 326f 85bc 1f4d b086 26a1 bb60 ....2o...M..&..`
0x0460 4d77 6689 edd5 4c35 4187 ac17 6986 e654 Mwf...L5A...i..T
0x0470 0e0a 9908 8790 f4d5 0076 d961 0eb0 8b80 .........v.a....
0x0480 b175 e7ff 4058 2fff e805 74c5 ab81 b8fc .u..@X/...t.....
0x0490 0a21 d7d4 3169 38f3 8338 276f 5462 8e4a .!..1i8..8'oTb.J
0x04a0 4533 9ee1 31f6 bf20 4127 544f cb7d f029 E3..1...A'TO.}.)
0x04b0 712b 128c 5104 b15b 511e 35ca c55b 2552 q+..Q..[Q.5..[%R
0x04c0 9990 4581 6265 ebce 545d c6b7 02e1 f4e8 ..E.be..T]......
0x04d0 2bc7 fcf3 2987 37c0 183d 4ae6 2bd7 b417 +...).7..=J.+...
0x04e0 4b00 58a0 06d5 0319 30a0 adaa 27f1 9684 K.X.....0...'...
0x04f0 b2f2 f271 3a74 a40f 807e df2d 75b8 3a0b ...q:t...~.-u.:.
0x0500 6d80 08dc 2cb4 19bb 8471 49b2 0a37 db3d m...,....qI..7.=
0x0510 9a87 0bc0 6cfe 237e 7b6d 191a 2221 86e8 ....l.#~{m.."!..
0x0520 76aa 054a c455 3168 3cea 4e41 6fd3 abaf v..J.U1h<.NAo...
0x0530 6eff 89a0 066a 6392 e1f0 1cf0 fc9e ef07 n....jc.........
0x0540 4156 7c AV|
548 packets received by filter
0 packets dropped by kernel
--------------------------------------------------------------------
Secondly, from an unsecfully login [via telnet]
tcpdump -s 9999999999 -x -X host 172.16.96.159 and not arp and not port
...53 and not port 138
tcpdump: listening on fxp0
16:14:50.538701 ukdews0001.65199 > ukdesdc001.transtest.kerberos: v5
0x0000 4500 00ea 12dc 0000 4011 4dcc ac10 609b E.......@.M...`.
0x0010 ac10 609f feaf 0058 00d6 fc6a 6a81 cb30 ..`....X...jj..0
0x0020 81c8 a103 0201 05a2 0302 010a a481 bb30 ...............0
0x0030 81b8 a007 0305 0000 0000 00a1 1530 13a0 .............0..
0x0040 0302 0101 a10c 300a 1b08 756b 7076 3030 ......0...ukpv00
0x0050 3031 a20b 1b09 5452 414e 5354 4553 54a3 01....TRANSTEST.
0x0060 1e30 1ca0 0302 0101 a115 3013 1b06 6b72 .0........0...kr
0x0070 6274 6774 1b09 5452 414e 5354 4553 54a5 btgt..TRANSTEST.
0x0080 1118 0f32 3030 3130 3131 3430 3231 3435 ...2001011402145
0x0090 305a a706 0204 3411 9785 a811 300f 0201 0Z....4.....0...
0x00a0 1002 0105 0201 0302 0102 0201 01a9 3b30 ..............;0
0x00b0 3930 0da0 0302 0102 a106 0404 ac10 609b 90............`.
0x00c0 3019 a003 0201 18a1 1204 1000 0000 0000 0...............
0x00d0 0000 0000 0000 0000 0000 0130 0da0 0302 ...........0....
0x00e0 0102 a106 0404 7f00 0001 ..........
16:14:50.541055 ukdesdc001.transtest.kerberos > ukdews0001.65199:
0x0000 4500 00e1 2736 0000 8011 f97a ac10 609f E...'6.....z..`.
0x0010 ac10 609b 0058 feaf 00cd 303a 7e81 c230 ..`..X....0:~..0
0x0020 81bf a003 0201 05a1 0302 011e a411 180f ................
0x0030 3230 3031 3031 3133 3136 3134 3530 5aa5 20010113161450Z.
0x0040 0502 0308 a6db a603 0201 19a9 0b1b 0954 ...............T
0x0050 5241 4e53 5445 5354 aa1e 301c a003 0201 RANSTEST..0.....
0x0060 02a1 1530 131b 066b 7262 7467 741b 0954 ...0...krbtgt..T
0x0070 5241 4e53 5445 5354 ac67 0465 3063 304b RANSTEST.g.e0c0K
0x0080 a103 0201 0ba2 4404 4230 4030 1ea0 0302 ......D.B0@0....
0x0090 0103 a117 0415 5452 414e 5354 4553 5470 ......TRANSTESTp
0x00a0 6574 652e 7669 636b 6572 7330 1ea0 0302 ete.vickers0....
0x00b0 0101 a117 0415 5452 414e 5354 4553 5470 ......TRANSTESTp
0x00c0 6574 652e 7669 636b 6572 7330 09a1 0302 ete.vickers0....
0x00d0 0102 a202 0400 3009 a103 0201 0fa2 0204 ......0.........
0x00e0 00 .
16:14:50.544342 ukdews0001.65193 > ukdesdc001.transtest.kerberos: v5
0x0000 4500 017e 12e2 0000 4011 4d32 ac10 609b E..~....@.M2..`.
0x0010 ac10 609f fea9 0058 016a dd05 6a82 015e ..`....X.j..j..^
0x0020 3082 015a a103 0201 05a2 0302 010a a381 0..Z............
0x0030 8f30 818c 304c a103 0201 02a2 4504 4330 .0..0L......E.C0
0x0040 41a0 0302 0103 a23a 0438 920f f358 3013 A......:.8...X0.
0x0050 47e4 cce1 eb01 f9f0 6601 90b2 37d1 49de G.......f...7.I.
0x0060 3ca2 ad17 dc56 f9f8 7ba3 456c 85a4 16be <....V..{.El....
0x0070 de02 a341 6efa 6fb6 9e23 cfe1 5d67 3002 ...An.o..#..]g0.
0x0080 b46c 303c a103 0201 02a2 3504 3330 31a0 .l0<......5.301.
0x0090 0302 0101 a22a 0428 e2b4 173e c815 858b .....*.(...>....
0x00a0 51f3 868f 3354 3212 b2a1 5621 6b83 450e Q...3T2...V!k.E.
0x00b0 e02e 07e9 3c44 1b0e 0ad8 1a11 bda8 69c2 ....<D........i.
0x00c0 a481 bb30 81b8 a007 0305 0000 0000 00a1 ...0............
0x00d0 1530 13a0 0302 0101 a10c 300a 1b08 756b .0........0...uk
0x00e0 7076 3030 3031 a20b 1b09 5452 414e 5354 pv0001....TRANST
0x00f0 4553 54a3 1e30 1ca0 0302 0101 a115 3013 EST..0........0.
0x0100 1b06 6b72 6274 6774 1b09 5452 414e 5354 ..krbtgt..TRANST
0x0110 4553 54a5 1118 0f32 3030 3130 3131 3430 EST....200101140
0x0120 3231 3435 305a a706 0204 3411 9785 a811 21450Z....4.....
0x0130 300f 0201 1002 0105 0201 0302 0102 0201 0...............
0x0140 01a9 3b30 3930 0da0 0302 0102 a106 0404 ..;090..........
0x0150 ac10 609b 3019 a003 0201 18a1 1204 1000 ..`.0...........
0x0160 0000 0000 0000 0000 0000 0000 0000 0130 ...............0
0x0170 0da0 0302 0102 a106 0404 7f00 0001 ..............
16:14:50.547874 ukdesdc001.transtest.kerberos > ukdews0001.65193: v5
0x0000 4500 055b 273c 0000 8011 f4fa ac10 609f E..['<........`.
0x0010 ac10 609b 0058 fea9 0547 7dba 6b82 053b ..`..X...G}.k..;
0x0020 3082 0537 a003 0201 05a1 0302 010b a222 0..7..........."
0x0030 3020 301e a103 0201 03a2 1704 1554 5241 0.0..........TRA
0x0040 4e53 5445 5354 7065 7465 2e76 6963 6b65 NSTESTpete.vicke
0x0050 7273 a30b 1b09 5452 414e 5354 4553 54a4 rs....TRANSTEST.
0x0060 1530 13a0 0302 0101 a10c 300a 1b08 756b .0........0...uk
0x0070 7076 3030 3031 a582 03af 6182 03ab 3082 pv0001....a...0.
0x0080 03a7 a003 0201 05a1 0b1b 0954 5241 4e53 ...........TRANS
0x0090 5445 5354 a21e 301c a003 0201 01a1 1530 TEST..0........0
0x00a0 131b 066b 7262 7467 741b 0954 5241 4e53 ...krbtgt..TRANS
0x00b0 5445 5354 a382 0371 3082 036d a003 0201 TEST...q0..m....
0x00c0 03a2 8203 6404 8203 60b9 7b23 5235 dc63 ....d...`.{#R5.c
0x00d0 5c27 0eca f2ed a536 9033 61f2 3271 48ea \'.....6.3a.2qH.
0x00e0 1b24 6db1 5359 bc77 1bba eff4 3f20 96f1 .$m.SY.w....?...
0x00f0 46da 0168 f596 15f8 2328 daad ea43 0153 F..h....#(...C.S
0x0100 5610 eb6f 58ff f9fa d06c 4a2a 4f07 6ef0 V..oX....lJ*O.n.
0x0110 f5be 66dd a5e5 a8a4 f0be e463 b1e4 7aa5 ..f........c..z.
0x0120 81a9 ee9b e08b 1da9 a747 f37f 3dc9 f262 .........G..=..b
0x0130 1451 8853 1a6b 9e38 2d9a f7e5 792f 9f09 .Q.S.k.8-...y/..
0x0140 588a a05a db97 a21c 77a9 f0ca b800 1141 X..Z....w......A
0x0150 297a 2c0f f768 8e69 7836 758d 3840 1db0 )z,..h.ix6u.8@..
0x0160 7a55 b50b 54d3 827d 47e6 fe17 4aad cb4d zU..T..}G...J..M
0x0170 f654 2655 60b2 2289 ff16 a046 683d f71f .T&U`."....Fh=..
0x0180 d224 f766 8291 f98d 7be0 6e84 e9c3 d027 .$.f....{.n....'
0x0190 9f37 f2bd f547 450c 9ca7 2cb4 d741 c3e9 .7...GE...,..A..
0x01a0 6eb3 5bd0 065e c8fa 336e fe54 6db2 a5ec n.[..^..3n.Tm...
0x01b0 45bc aa20 42b0 cfd9 d899 939a e5d9 5d37 E...B.........]7
0x01c0 e61d d780 8797 714c 2045 4069 9da7 c68c ......qL.E@i....
0x01d0 51fa 9076 8599 b427 6b6e d61f 1b08 1ce4 Q..v...'kn......
0x01e0 0b59 6a38 60e0 157b 39e8 338a a721 0305 .Yj8`..{9.3..!..
0x01f0 b799 a53d 5067 cfb0 ffae df58 cc1e 3365 ...=Pg.....X..3e
0x0200 375a de11 b89b 9240 91ee 69d3 effd 669f 7Z.....@..i...f.
0x0210 3751 bba8 773f d89b ea3e a574 d849 5dec 7Q..w?...>.t.I].
0x0220 2311 5937 4f5f f37e ebfd 5efc ffad 6463 #.Y7O_.~..^...dc
0x0230 6f32 bfaa d846 273b 8600 a7ec c87f 5a8f o2...F';......Z.
0x0240 b4e4 d449 f9ab 6e96 9bd8 5a8e 1a51 76b5 ...I..n...Z..Qv.
0x0250 947a cb03 aac6 6843 b172 f98f 9e8c a763 .z....hC.r.....c
0x0260 0eff 21bd 0ca4 4cf5 ffc6 b92e 73b1 d29f ..!...L.....s...
0x0270 8c0d 6e34 0040 ec4b 9600 2d12 efb4 6c97 ..n4.@.K..-...l.
0x0280 f732 1fa2 d460 70a7 f604 4ce6 cb89 e761 .2...`p...L....a
0x0290 b786 cb6f ca14 5fe1 2c59 8cda 3dc9 d648 ...o.._.,Y..=..H
0x02a0 2e31 3c2f 69f1 c418 1a78 508b b862 a14a .1</i....xP..b.J
0x02b0 2a80 85d2 601b 682b c4eb a007 9c88 5751 *...`.h+......WQ
0x02c0 3f55 33e1 a7d3 c8e5 08dc 0550 3544 7cac ?U3........P5D|.
0x02d0 1299 0d7f 5443 f06e f999 58e9 29a3 90e4 ....TC.n..X.)...
0x02e0 771e 363c 48d7 ad6c bbd4 021b c5f2 b00b w.6<H..l........
0x02f0 e1cf b80f 6e9f da85 2232 0856 ab4c b090 ....n..."2.V.L..
0x0300 3d79 6820 a000 ca06 459c b8a8 f594 fb75 =yh.....E......u
0x0310 a44a 6189 6a8f b2cb b053 1b48 530a 8245 .Ja.j....S.HS..E
0x0320 cc02 ada4 6951 c0a9 dedc e390 da1b 5b0b ....iQ........[.
0x0330 51b6 c5b4 cb75 40fa 2967 fedf ac99 038d Q....u@.)g......
0x0340 d676 dcc4 84d8 9e87 628b 6855 dc78 f071 .v......b.hU.x.q
0x0350 b607 769a c17d 0afe 1698 b522 a168 3e64 ..v..}.....".h>d
0x0360 be9b 63b8 9b27 7b1a f250 e03d 090b 7746 ..c..'{..P.=..wF
0x0370 5822 9d55 0313 9891 b737 d511 5cbf 0710 X".U.....7..\...
0x0380 e082 77b9 2dbc 7932 d34b de3b 52f4 bf06 ..w.-.y2.K.;R...
0x0390 e3bd aaf1 b916 6f45 6c16 b1e6 707e 1701 ......oEl...p~..
0x03a0 dc7e 18ec 4294 1e86 bf35 5474 2ded a899 .~..B....5Tt-...
0x03b0 f64a 97b7 ad23 8116 39e1 f9c1 50f3 70a9 .J...#..9...P.p.
0x03c0 c189 937c 340f a781 3ce6 391c d981 c3bc ...|4...<.9.....
0x03d0 2fab bcf8 3a97 a63b d659 59ad f4a4 ac35 /...:..;.YY....5
0x03e0 9032 8971 409f 4f0e b3d3 eb55 7ca3 43d4 .2.q@.O....U|.C.
0x03f0 1a74 1433 5be4 bae0 dfb2 8296 21e9 c145 .t.3[.......!..E
0x0400 b397 6fcc 5682 fb0b 7413 9a45 3568 ac6a ..o.V...t..E5h.j
0x0410 9d54 f036 6325 be02 9563 9719 0740 7b28 .T.6c%...c...@{(
0x0420 f40e a8bf 1ee7 489a 80a6 8201 2e30 8201 ......H......0..
0x0430 2aa0 0302 0103 a103 0201 01a2 8201 1c04 *...............
0x0440 8201 1881 4734 d63b a5cf 94ce edef 1d59 ....G4.;.......Y
0x0450 ca94 d667 dfa3 2851 b746 74b6 a70c 728a ...g..(Q.Ft...r.
0x0460 9b45 d989 7236 9418 d2ea 9afa 0453 afb5 .E..r6.......S..
0x0470 310f b9b9 2d98 c8e8 91ac e47e c160 9f00 1...-......~.`..
0x0480 aa43 de1c 38d0 c550 3963 fa4d a5e0 c3f3 .C..8..P9c.M....
0x0490 9f4b 21a7 9b59 9592 a7cd 880c 7ffc eba7 .K!..Y..........
0x04a0 a6fc 32f9 e1dc c8e1 2fa3 c0f4 0b09 e462 ..2...../......b
0x04b0 512e be06 0328 6cd5 c0a2 a5bc 0fd2 b797 Q....(l.........
0x04c0 4326 2a3a 2205 70bc 57be 11e8 36ec 96fd C&*:".p.W...6...
0x04d0 d4ed f425 7428 45ef 2bcb 8da4 f7d3 3bdd ...%t(E.+.....;.
0x04e0 ce1e 39eb 1dd5 127a 7428 7483 19aa c4e0 ..9....zt(t.....
0x04f0 b702 7398 3bbb f5f0 8973 a5cd d73e 3613 ..s.;....s...>6.
0x0500 48f3 10af 77c8 7c24 34b3 a001 3edd 2f1e H...w.|$4...>./.
0x0510 19ba 9b37 cc14 d6a7 3124 7522 4853 1c31 ...7....1$u"HS.1
0x0520 ccd6 c393 77d7 da6a 980a 170f 7944 9993 ....w..j....yD..
0x0530 3f6f c713 3bad b3f7 64c6 690a 3e8a 3304 ?o..;...d.i.>.3.
0x0540 90ee 508c 3cf9 e389 7fd3 4051 5c70 7339 ..P.<.....@Q\ps9
0x0550 268a 4cf5 d548 b92b a55c d9 &.L..H.+.\.
16:14:50.558054 ukdews0001.65175 > ukdesdc001.transtest.kerberos:
0x0000 4500 0576 12f4 0000 4011 4928 ac10 609b E..v....@.I(..`.
0x0010 ac10 609f fe97 0058 0562 1b1c 6c82 0556 ..`....X.b..l..V
0x0020 3082 0552 a103 0201 05a2 0302 010c a382 0..R............
0x0030 0494 3082 0490 3082 048c a103 0201 01a2 ..0...0.........
0x0040 8204 8304 8204 7f6e 8204 7b30 8204 77a0 .......n..{0..w.
0x0050 0302 0105 a103 0201 0ea2 0703 0500 0000 ................
0x0060 0000 a382 03af 6182 03ab 3082 03a7 a003 ......a...0.....
0x0070 0201 05a1 0b1b 0954 5241 4e53 5445 5354 .......TRANSTEST
0x0080 a21e 301c a003 0201 01a1 1530 131b 066b ..0........0...k
0x0090 7262 7467 741b 0954 5241 4e53 5445 5354 rbtgt..TRANSTEST
0x00a0 a382 0371 3082 036d a003 0201 03a2 8203 ...q0..m........
0x00b0 6404 8203 60b9 7b23 5235 dc63 5c27 0eca d...`.{#R5.c\'..
0x00c0 f2ed a536 9033 61f2 3271 48ea 1b24 6db1 ...6.3a.2qH..$m.
0x00d0 5359 bc77 1bba eff4 3f20 96f1 46da 0168 SY.w....?...F..h
0x00e0 f596 15f8 2328 daad ea43 0153 5610 eb6f ....#(...C.SV..o
0x00f0 58ff f9fa d06c 4a2a 4f07 6ef0 f5be 66dd X....lJ*O.n...f.
0x0100 a5e5 a8a4 f0be e463 b1e4 7aa5 81a9 ee9b .......c..z.....
0x0110 e08b 1da9 a747 f37f 3dc9 f262 1451 8853 .....G..=..b.Q.S
0x0120 1a6b 9e38 2d9a f7e5 792f 9f09 588a a05a .k.8-...y/..X..Z
0x0130 db97 a21c 77a9 f0ca b800 1141 297a 2c0f ....w......A)z,.
0x0140 f768 8e69 7836 758d 3840 1db0 7a55 b50b .h.ix6u.8@..zU..
0x0150 54d3 827d 47e6 fe17 4aad cb4d f654 2655 T..}G...J..M.T&U
0x0160 60b2 2289 ff16 a046 683d f71f d224 f766 `."....Fh=...$.f
0x0170 8291 f98d 7be0 6e84 e9c3 d027 9f37 f2bd ....{.n....'.7..
0x0180 f547 450c 9ca7 2cb4 d741 c3e9 6eb3 5bd0 .GE...,..A..n.[.
0x0190 065e c8fa 336e fe54 6db2 a5ec 45bc aa20 .^..3n.Tm...E...
0x01a0 42b0 cfd9 d899 939a e5d9 5d37 e61d d780 B.........]7....
0x01b0 8797 714c 2045 4069 9da7 c68c 51fa 9076 ..qL.E@i....Q..v
0x01c0 8599 b427 6b6e d61f 1b08 1ce4 0b59 6a38 ...'kn.......Yj8
0x01d0 60e0 157b 39e8 338a a721 0305 b799 a53d `..{9.3..!.....=
0x01e0 5067 cfb0 ffae df58 cc1e 3365 375a de11 Pg.....X..3e7Z..
0x01f0 b89b 9240 91ee 69d3 effd 669f 3751 bba8 ...@..i...f.7Q..
0x0200 773f d89b ea3e a574 d849 5dec 2311 5937 w?...>.t.I].#.Y7
0x0210 4f5f f37e ebfd 5efc ffad 6463 6f32 bfaa O_.~..^...dco2..
0x0220 d846 273b 8600 a7ec c87f 5a8f b4e4 d449 .F';......Z....I
0x0230 f9ab 6e96 9bd8 5a8e 1a51 76b5 947a cb03 ..n...Z..Qv..z..
0x0240 aac6 6843 b172 f98f 9e8c a763 0eff 21bd ..hC.r.....c..!.
0x0250 0ca4 4cf5 ffc6 b92e 73b1 d29f 8c0d 6e34 ..L.....s.....n4
0x0260 0040 ec4b 9600 2d12 efb4 6c97 f732 1fa2 .@.K..-...l..2..
0x0270 d460 70a7 f604 4ce6 cb89 e761 b786 cb6f .`p...L....a...o
0x0280 ca14 5fe1 2c59 8cda 3dc9 d648 2e31 3c2f .._.,Y..=..H.1</
0x0290 69f1 c418 1a78 508b b862 a14a 2a80 85d2 i....xP..b.J*...
0x02a0 601b 682b c4eb a007 9c88 5751 3f55 33e1 `.h+......WQ?U3.
0x02b0 a7d3 c8e5 08dc 0550 3544 7cac 1299 0d7f .......P5D|.....
0x02c0 5443 f06e f999 58e9 29a3 90e4 771e 363c TC.n..X.)...w.6<
0x02d0 48d7 ad6c bbd4 021b c5f2 b00b e1cf b80f H..l............
0x02e0 6e9f da85 2232 0856 ab4c b090 3d79 6820 n..."2.V.L..=yh.
0x02f0 a000 ca06 459c b8a8 f594 fb75 a44a 6189 ....E......u.Ja.
0x0300 6a8f b2cb b053 1b48 530a 8245 cc02 ada4 j....S.HS..E....
0x0310 6951 c0a9 dedc e390 da1b 5b0b 51b6 c5b4 iQ........[.Q...
0x0320 cb75 40fa 2967 fedf ac99 038d d676 dcc4 .u@.)g.......v..
0x0330 84d8 9e87 628b 6855 dc78 f071 b607 769a ....b.hU.x.q..v.
0x0340 c17d 0afe 1698 b522 a168 3e64 be9b 63b8 .}.....".h>d..c.
0x0350 9b27 7b1a f250 e03d 090b 7746 5822 9d55 .'{..P.=..wFX".U
0x0360 0313 9891 b737 d511 5cbf 0710 e082 77b9 .....7..\.....w.
0x0370 2dbc 7932 d34b de3b 52f4 bf06 e3bd aaf1 -.y2.K.;R.......
0x0380 b916 6f45 6c16 b1e6 707e 1701 dc7e 18ec ..oEl...p~...~..
0x0390 4294 1e86 bf35 5474 2ded a899 f64a 97b7 B....5Tt-....J..
0x03a0 ad23 8116 39e1 f9c1 50f3 70a9 c189 937c .#..9...P.p....|
0x03b0 340f a781 3ce6 391c d981 c3bc 2fab bcf8 4...<.9...../...
0x03c0 3a97 a63b d659 59ad f4a4 ac35 9032 8971 :..;.YY....5.2.q
0x03d0 409f 4f0e b3d3 eb55 7ca3 43d4 1a74 1433 @.O....U|.C..t.3
0x03e0 5be4 bae0 dfb2 8296 21e9 c145 b397 6fcc [.......!..E..o.
0x03f0 5682 fb0b 7413 9a45 3568 ac6a 9d54 f036 V...t..E5h.j.T.6
0x0400 6325 be02 9563 9719 0740 7b28 f40e a8bf c%...c...@{(....
0x0410 1ee7 489a 80a4 81ae 3081 aba0 0302 0103 ..H.....0.......
0x0420 a281 a304 81a0 42b3 58fb 6906 866f 4d86 ......B.X.i..oM.
0x0430 6705 4211 f552 42b4 cf58 e19f 4acc 1484 g.B..RB..X..J...
0x0440 d1ae 934d 9dc5 7c66 f116 a7ea e4bd 5223 ...M..|f......R#
0x0450 69a9 76ef e1b2 47c6 7fcb 2a31 dc8e 0045 i.v...G...*1...E
0x0460 463e 104c 5564 4541 24a5 deee d90b a22c F>.LUdEA$......,
0x0470 a175 caf5 e5b3 d23e 93fa e46d cabf ae3c .u.....>...m...<
0x0480 9175 1662 3f0d 625d 1ffd 6ebb 9790 52e5 .u.b?.b]..n...R.
0x0490 596c 36d7 b43a d7f1 0649 1f83 526a 15e3 Yl6..:...I..Rj..
0x04a0 c7c0 ffbe af8b ef2b 3ac6 3667 0f01 4c8c .......+:.6g..L.
0x04b0 82a6 c84c d1b9 7a4f 8ce4 3344 1d7d a409 ...L..zO..3D.}..
0x04c0 ef1d 1d95 e012 a481 ad30 81aa a007 0305 .........0......
0x04d0 0000 0000 00a2 0b1b 0954 5241 4e53 5445 .........TRANSTE
0x04e0 5354 a327 3025 a003 0201 01a1 1e30 1c1b ST.'0%.......0..
0x04f0 0468 6f73 741b 1475 6b64 6577 7330 3030 .host..ukdews000
0x0500 312e 7472 616e 7374 6573 74a5 1118 0f31 1.transtest....1
0x0510 3937 3030 3130 3130 3030 3030 305a a706 9700101000000Z..
0x0520 0204 f270 fb25 a811 300f 0201 1002 0105 ...p.%..0.......
0x0530 0201 0302 0102 0201 01a9 3b30 3930 0da0 ..........;090..
0x0540 0302 0102 a106 0404 ac10 609b 3019 a003 ..........`.0...
0x0550 0201 18a1 1204 1000 0000 0000 0000 0000 ................
0x0560 0000 0000 0000 0130 0da0 0302 0102 a106 .......0........
0x0570 0404 7f00 0001 ......
16:14:50.559043 ukdesdc001.transtest.kerberos > ukdews0001.65175:
0x0000 4500 0076 274e 0000 8011 f9cd ac10 609f E..v'N........`.
0x0010 ac10 609b 0058 fe97 0062 aed6 7e58 3056 ..`..X...b..~X0V
0x0020 a003 0201 05a1 0302 011e a411 180f 3230 ..............20
0x0030 3031 3031 3133 3136 3134 3530 5aa5 0502 010113161450Z...
0x0040 0308 f519 a603 0201 0fa9 0b1b 0954 5241 .............TRA
0x0050 4e53 5445 5354 aa1e 301c a003 0201 02a1 NSTEST..0.......
0x0060 1530 131b 066b 7262 7467 741b 0954 5241 .0...krbtgt..TRA
0x0070 4e53 5445 5354 NSTEST
478 packets received by filter
0 packets dropped by kernel
--------------------------------------------------------------------
again, any ideas great appreciated.
Pete