Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] how can I see ESP packets

From: "Dave Braucht" <flatdog@xxxxxxxxxxxxx>
Date: Tue, 27 Oct 2009 14:16:16 -0700
I am troubleshooting an IPSec VPN pass-through issue on a firewall. I am using wireshark 1.2.1.
 
I want to be able to see the ESP packets. I don't care to decrypt them. I just want to see them in the capture. I see ISAKMP, but not my ESP.
 
Is there a setting that I need to enable to allow me to see the ESP packet (protocol 50)?
 
Thanks,
Dave