I'm trying to diagnose a potential Active Directory authentication issue and, in the AS reply packet there seems to be a possible issue in the pre-authentication part. If I expand padata and expand PA-PW-SALT, I see a value string. If I expand that, I see NT Status: Unknown (0x41495341), Unknown: 0x2e434150 and Unknown: 0x4a2e4441. Interestingly, a similar AS-REP packet can be seen in the Wireshark example Kerberos trace. Is this a benign 'error'? What does it mean? Thanks. asked 12 Aug '11, 01:55  ian_uk1975 |
One Answer:
As a comparison I loaded the example capture in Network Monitor 3.4, and that shows the padata item is of type It would be nice if you could raise a bug report for this on the Wireshark Bugzilla answered 12 Aug '11, 02:33  grahamb ♦ |
Thanks for confirmation.
Bug raised #6234.
Can you make your "answer" into a further comment and mark the original answer as an answer.
Link to the bug item.
(converted your "answer" to a "comment" please see the FAQ for details. Could you also "accept" Graham's answer if it indeed answered your question?)