I just pushed some changes to the GSSAPI and Kerberos analyzers in the master branch. Bro
is now handling kerberos carried over GSSAPI although I don't think there is any
script support for how it's used yet so it's likely you won't see any
change in your krb.log. If anyone sees any trouble, let me know.
International Computer Science Institute
(Bro) because everyone has a network