Frame 7736: Packet, 264 bytes on wire (2112 bits), 264 bytes captured (2112 bits)
    Encapsulation type: Ethernet (1)
    Arrival Time: Mar 19, 2019 03:23:57.951264000 UTC
    UTC Arrival Time: Mar 19, 2019 03:23:57.951264000 UTC
    Epoch Arrival Time: 1552965837.951264000
    [Time shift for this packet: 0.000000000 seconds]
    [Time delta from previous captured frame: 479.000 microseconds]
    [Time since reference or first frame: 1 hour, 39 minutes, 2.314498000 seconds]
    Frame Number: 7736
    Frame Length: 264 bytes (2112 bits)
    Capture Length: 264 bytes (2112 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ethertype:ip:tcp:ldap:spnego:spnego-krb5]
    Character encoding: ASCII (0)
Ethernet II, Src: Dell_c2:09:6a (a4:1f:72:c2:09:6a), Dst: Intel_57:2b:42 (64:32:a8:57:2b:42)
    Destination: Intel_57:2b:42 (64:32:a8:57:2b:42)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Dell_c2:09:6a (a4:1f:72:c2:09:6a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IPv4 (0x0800)
    [Stream index: 1]
Internet Protocol Version 4, Src: 10.0.90.9, Dst: 10.0.90.215
    0100 .... = Version: 4
    .... 0101 = Header Length: 20 bytes (5)
    Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
        0000 00.. = Differentiated Services Codepoint: Default (0)
        .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
    Total Length: 250
    Identification: 0x3971 (14705)
    010. .... = Flags: 0x2, Don't fragment
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    ...0 0000 0000 0000 = Fragment Offset: 0
    Time to Live: 128
    Protocol: TCP (6)
    Header Checksum: 0x83fd [validation disabled]
    [Header checksum status: Unverified]
    Source Address: 10.0.90.9
    Destination Address: 10.0.90.215
    [Stream index: 1]
Transmission Control Protocol, Src Port: 389, Dst Port: 49257, Seq: 1, Ack: 1776, Len: 210
    Source Port: 389
    Destination Port: 49257
    [Stream index: 101]
    [Stream Packet Number: 7]
    [Conversation completeness: Incomplete, DATA (15)]
        ..0. .... = RST: Absent
        ...0 .... = FIN: Absent
        .... 1... = Data: Present
        .... .1.. = ACK: Present
        .... ..1. = SYN-ACK: Present
        .... ...1 = SYN: Present
        [Completeness Flags: ··DASS]
    [TCP Segment Len: 210]
    Sequence Number: 1    (relative sequence number)
    Sequence Number (raw): 3357996887
    [Next Sequence Number: 211    (relative sequence number)]
    Acknowledgment Number: 1776    (relative ack number)
    Acknowledgment number (raw): 1022504588
    0101 .... = Header Length: 20 bytes (5)
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Accurate ECN: Not set
        .... 0... .... = Congestion Window Reduced: Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
        [TCP Flags: ·······AP···]
    Window: 256
    [Calculated window size: 65536]
    [Window size scaling factor: 256]
    Checksum: 0xe453 [unverified]
    [Checksum Status: Unverified]
    Urgent Pointer: 0
    [Timestamps]
        [Time since first frame in this TCP stream: 2.637000 milliseconds]
        [Time since previous frame in this TCP stream: 479.000 microseconds]
    [SEQ/ACK analysis]
        [iRTT: 561.000 microseconds]
        [Bytes in flight: 210]
        [Bytes sent since last PSH flag: 210]
    [Client Contiguous Streams: 1]
    [Server Contiguous Streams: 1]
    TCP payload (210 bytes)
    [PDU Size: 210]
Lightweight Directory Access Protocol
    LDAPMessage bindResponse(43) success
        messageID: 43
        protocolOp: bindResponse (1)
            bindResponse
                resultCode: success (0)
                matchedDN: <MISSING>
                errorMessage: <MISSING>
                serverSaslCreds […]: a181b53081b2a0030a0100a10b06092a864882f712010202a2819d04819a60819706092a864886f71201020202006f8187308184a003020105a10302010fa2783076a003020112a26f046d224cb1e010506e8200280a6261c0e8fe340180bbb418267e577e58c861c4f3e2e2
                Simple Protected Negotiation
                    negTokenTarg
                        negResult: accept-completed (0)
                        supportedMech: 1.2.840.48018.1.2.2 (MS KRB5 - Microsoft Kerberos 5)
                        responseToken […]: 60819706092a864886f71201020202006f8187308184a003020105a10302010fa2783076a003020112a26f046d224cb1e010506e8200280a6261c0e8fe340180bbb418267e577e58c861c4f3e2e2f76748752cd45e4a5fdb4b0d8cc04cfcf78118af94082098fff910984691ec
                        krb5_blob […]: 60819706092a864886f71201020202006f8187308184a003020105a10302010fa2783076a003020112a26f046d224cb1e010506e8200280a6261c0e8fe340180bbb418267e577e58c861c4f3e2e2f76748752cd45e4a5fdb4b0d8cc04cfcf78118af94082098fff910984691ec0fee
                            KRB5 OID: 1.2.840.113554.1.2.2 (KRB5 - Kerberos 5)
                            krb5_tok_id: KRB5_AP_REP (0x0002)
                            Kerberos
                                ap-rep
                                    pvno: 5
                                    msg-type: krb-ap-rep (15)
                                    enc-part
                                        etype: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
                                        cipher: 224cb1e010506e8200280a6261c0e8fe340180bbb418267e577e58c861c4f3e2e2f76748752cd45e4a5fdb4b0d8cc04cfcf78118af94082098fff910984691ec0feec3bfc292f9c30b56a858d96540de7250e26714a02b98cd6c8efc76c15ee0fc672d55ec61847114a2583f35