Ethereal (www.ethereal.com) has a Kerberos dissector, which is pretty useful; if even dissects GSS-API tokens embedded in SMB and DCE RPC PDUs... -- Luke -- Luke Howard | PADL Software Pty Ltd | www.padl.com