accientally hit the post command....
43 2.046083 10.8.35.22 10.12.2.94 TCP 74 kerberos > 53245 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1 TSval=878789915 TSecr=23443430 44 2.046095 10.12.2.94 10.8.35.22 TCP 66 53245 > kerberos [ACK] Seq=1 Ack=1 Win=14608 Len=0 TSval=23443430 TSecr=878789915 45 2.046161 10.12.2.94 10.8.35.22 KRB5 352 AS-REQ 46 2.046521 10.8.35.22 10.12.2.94 TCP 60 kerberos > 53244 [RST, ACK] Seq=198 Ack=212 Win=0 Len=0 47 2.047470 10.8.35.22 10.12.2.94 KRB5 207 KRB Error: KRB5KDC_ERR_KEY_EXP NT Status: STATUS_PASSWORD_MUST_CHANGE
the contents of packet 47 are...
NT Status: STATUS_PASSWORD_MUST_CHANGE
and then a few packets later it I see
56 2.048958 10.8.35.22 10.12.2.94 KRB5 253 KRB Error: KRB5KDC_ERR_PREAUTH_REQUIRED
then it says password invalid
accientally hit the post command....
43 2.046083 10.8.35.22 10.12.2.94 TCP 74 kerberos > 53245 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1 TSval=878789915 TSecr=23443430 PASSWORD_ MUST_CHANGE
44 2.046095 10.12.2.94 10.8.35.22 TCP 66 53245 > kerberos [ACK] Seq=1 Ack=1 Win=14608 Len=0 TSval=23443430 TSecr=878789915
45 2.046161 10.12.2.94 10.8.35.22 KRB5 352 AS-REQ
46 2.046521 10.8.35.22 10.12.2.94 TCP 60 kerberos > 53244 [RST, ACK] Seq=198 Ack=212 Win=0 Len=0
47 2.047470 10.8.35.22 10.12.2.94 KRB5 207 KRB Error: KRB5KDC_ERR_KEY_EXP NT Status: STATUS_
the contents of packet 47 are...
NT Status: STATUS_ PASSWORD_ MUST_CHANGE
and then a few packets later it I see
56 2.048958 10.8.35.22 10.12.2.94 KRB5 253 KRB Error: KRB5KDC_ ERR_PREAUTH_ REQUIRED
then it says password invalid