On Tue, 23 Aug 2011, Kai Schaetzl wrote:
Did you check if the GET headers don't already contain the credentials? If that page is identified as local intranet IE will send Windows logon credentials with default security zone settings.
I captured the session using "tcpdump -A ..." There's no indication that IE is offering any credentials whatsoever.