Hi all, I use ethereal to track some kerberos authentication on windows. I notice there are two consecutive trips of TGS-REQ and TGS-REP. I thought it should be only one. However the realm of both TGS-REQ are different. One is cifs and another one is krbtgt. What does it indicate? Thanks Joe