Ethereal-users: Re: [Ethereal-users] Decoding Kerberos V4 packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: ronnie sahlberg <ronniesahlberg@xxxxxxxxx>
Date: Thu, 24 Feb 2005 10:52:42 +1100
When i implemented support for Kerberos 4  (which is NOT encoded with BER)
i had access to only very few krb4 packets. Since the "spec" for the
packetformat
for the ancient krb4 is "incomplete"   I only implemetnted dissection
of those packet type I could verify by a real trace.

Currently krb4 ONLY dissects
KDC_REQUEST
KDC_REPLY
APPL_REQUEST

If you can send me example captures of other packet types which are
not decoded yet   I can look into adding dissection of them.

> kdc. My guess is that since few people use V4, the decode of that packet
> format is buggy...
Yes,  it is a rare protocol and that is why the dissection is incomplete.



On Wed, 23 Feb 2005 16:06:47 -0500, Pierre Goyette
<pierre@xxxxxxxxxxxxxxxx> wrote:
> The problem is not regarding encrypted telnet traffic or something, the
> problem is that Ethereal can decode a Kerberos V5 service ticket request
> and response but cannot decode a Kerberos V4 service ticket request and
> response. This is the request which goes from a client workstation to a
> kdc. My guess is that since few people use V4, the decode of that packet
> format is buggy...
> 
> Pierre
> 
> -----Original Message-----
> From: ethereal-users-bounces@xxxxxxxxxxxx
> [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Patrick
> Sent: Wednesday, February 23, 2005 12:39 PM
> To: Ethereal user support
> Subject: Re: [Ethereal-users] Decoding Kerberos V4 packets
> 
> Ahh, I see. I'm still not 100% sure I understand thou. If you do see the
> info from a kerberos packet, then wont it be encrypted? So whats the
> point of seeing encrypted data?
> 
> Makes sense that you would at least want to see the basic stuff like
> packet size, destination and source addresses, etc... does it even show
> you that for a kerberos packet?
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>