Is it possible to correctly display the transport layer protocol, such as tcp/udp? and all those operations for tcp/udp still works. asked 11 Sep '15, 16:49  xwz7611 |
One Answer:
According to the Wiki, yes. I have never tried it... Please read "Attempt to detect/decode NULL encrypted ESP payloads" in the Wiki and try the ESP Option "Attempt to detect/decode NULL encrypted ESP payloads" ++ UPDATE ++ It works. I've just tested it with a pcap (ESP null encryption) that is posted here: Regards answered 12 Sep '15, 12:56  Kurt Knochner ♦ edited 12 Sep '15, 12:59 |
