3.2 Client Information
The PAC_CLIENT_INFO (section 2.7) structure is a simple structure that is not NDR-encoded.
-
00000500 00 49 .I 00000510 d9 0e 65 6a c6 01 08 00 6c 00 7a 00 68 00 75 00 ..ej....l.z.h.u.
In this example, the first field is the ClientId field that contains 0x01C66A65'0ED94900. This is the timestamp of the time the initial TGT used to request this ticket be issued. Following this field is the length of the name in bytes, 0x0008, and then an 8-byte, 4-character sequence of Unicode characters that make up the name of the client, or "lzhu".