Wireshark-dev: [Wireshark-dev] Wireshark and Kerberos keytabs?
From: Richard Sharpe <realrichardsharpe@xxxxxxxxx>
Date: Thu, 18 Jun 2020 13:52:05 -0700
Hi folks,

I am trying to look inside kerberos blobs, so I followed the instructions at:

https://wiki.samba.org/index.php/Keytab_Extraction

and ran this command to extract the keytab for the user involved:

ktpass.exe /out my.keytab /pass <password> /princ <user>@<realm>
/ptype KRB5_NT_PRINCIPAL /crypto all

However, the enc part is not being busted out for me.

Does anyone know how to do this?

-- 
Regards,
Richard Sharpe
(何以解憂?唯有杜康。--曹操)(传说杜康是酒的发明者)