Conclusion

• ethereal is the perfect tool to analyze Active Directory network traffic

  • Excellent support of all AD protocols (including SMB and MSRPC)
  • The Kerberos decryption feature is a must-have tool

• Looking at Active Directory network protocols on the wire is required in many different situations

  • Troubleshooting issues
  • Active Directory internals digging
  • Network security auditing, including for penetration tests

• Easy to experiment!