Hi, Ethereal now seems to dissect these two message types, so we get to see quite a bit of the stuff in Windows AD type authenticates. Regards ----- Richard Sharpe, rsharpe at ns.aus.com, rsharpe at samba.org, sharpe at ethereal.com