Wireshark · Wireshark-users: Re: [Wireshark-users] Sniffing Cisco VPN packets

[Ulf Lamping <ulf.lamping@xxxxxx>]

George A. Kantsios wrote:
> Need a little help and appreciate any guidance and direction you can offer.  I am trying to sniff packets before and after a cisco VPN adapter on a Windows XP box. When I sniff the VPN adapter I see the unencrypted packets.  When I sniff the physical network device, I get almost no traffic, even when I send a huge file over the network?  Why can't I see the encrypted packets
Well, given the fact that there were lot's of problems with VPN software 
(incl. Cisco VPN) reported - from not seeing any interfaces to crashing 
various software parts, I would say you can be glad that you see any 
traffic at all ...

See http://wiki.wireshark.org/CaptureSetup/InterferingSoftware for some 
more details and http://wiki.wireshark.org/CaptureSetup in general.

Regards, ULFL