Wireshark Preferences on windows 64 Bits

Question

Hi,

I'm using Wireshark 1.8.3 on Windows 7 64 Bits. I'm trying to specify Kerberos keytab file in the Wireshark-->Edit-->Preferences-->Protocols-->krb5. But the Wireshark GUI does not show the keytab filename path or parameter; I just see Reassemble Kerberos over TCP parameter.

following the wiki, It should be possible to specify a keytab : "Specifying the keytab file to use You can specify the filename of the keytab file to use in the KRB5 preferences."

Any Idea how to specify a keytab in the GUI?

Thank you for your help.

Vincent.

Answer 1

The Help -> About dialog for the 64-bit Windows version of 1.8.3 says:

Compiled (64-bit) with GTK+ 2.24.10, with Cairo 1.10.2, with Pango 1.30.0, with
GLib 2.32.2, with WinPcap (4_1_2), with libz 1.2.5, without POSIX capabilities,
with SMI 0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS
2.12.18, with Gcrypt 1.4.6, without Kerberos, with GeoIP, with PortAudio
V19-devel (built Oct  2 2012), with AirPcap.

Note the "without Kerberos" - the 64-bit Windows version of Wireshark 1.8.3 doesn't include a Kerberos library, so there's no support for reading keytab files.

The 32-bit version says:

Compiled (32-bit) with GTK+ 2.24.10, with Cairo 1.10.2, with Pango 1.30.0, with
GLib 2.32.2, with WinPcap (4_1_2), with libz 1.2.5, without POSIX capabilities,
with SMI 0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS
2.12.18, with Gcrypt 1.4.6, with MIT Kerberos, with GeoIP, with PortAudio
V19-devel (built Oct  2 2012), with AirPcap.

It is built with Kerberos, so it will support reading keytab files. If you switch to a 32-bit version, you will be able to read a keytab file.

(The problem is probably that we don't have a 64-bit version of the Kerberos library with which to link Wireshark.)

Answer 2

0	Maybe this similar question helps? answered 12 Nov '12, 12:34 Jasper ♦♦ 23.8k●5●51●284 accept rate: 18%