George A. Kantsios wrote:
Need a little help and appreciate any guidance and direction you can offer. I am trying to sniff packets before and after a cisco VPN adapter on a Windows XP box. When I sniff the VPN adapter I see the unencrypted packets. When I sniff the physical network device, I get almost no traffic, even when I send a huge file over the network? Why can't I see the encrypted packets
Well, given the fact that there were lot's of problems with VPN software
(incl. Cisco VPN) reported - from not seeing any interfaces to crashing
various software parts, I would say you can be glad that you see any
traffic at all ...
See http://wiki.wireshark.org/CaptureSetup/InterferingSoftware for some
more details and http://wiki.wireshark.org/CaptureSetup in general.
Regards, ULFL
