Wireshark-users: [Wireshark-users] how can I see ESP packets
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Dave Braucht" <flatdog@xxxxxxxxxxxxx>
Date: Tue, 27 Oct 2009 14:16:16 -0700
I am troubleshooting an IPSec VPN pass-through issue on a firewall. I am using wireshark 1.2.1.
 
I want to be able to see the ESP packets. I don't care to decrypt them. I just want to see them in the capture. I see ISAKMP, but not my ESP.
 
Is there a setting that I need to enable to allow me to see the ESP packet (protocol 50)?
 
Thanks,
Dave