Wireshark-dev: Re: [Wireshark-dev] Does any know if tshark will automatically use encryption ke
Date: Wed, 1 Nov 2017 23:27:27 -0400
On Wed, Nov 01, 2017 at 06:12:20PM -0700, Richard Sharpe wrote:
> Can preferences be specified on the tshark command line?

I am not familiar with decrypting SMB, but recently dug into this for
setting similar options for the ssl keylog.

Try something like the following:
-o "kerberos.decrypt:TRUE" -o "kerberos.file:<path to your keytab file>"