cancel
Showing results for 
Search instead for 
Did you mean: 

Wireshark capturing VPN traffic

SOLVED
CaseyH_
Contributor

Wireshark capturing VPN traffic

Is there a way to decrypt the traffic or something like for troubleshooting reasons?
when I capture from the client side, all I can see is the TLS packets, so it's proving difficult to troubleshoot the netflow.

Long story short... I have a external client's network that is having access issues with a particular program.

I've found there's a packet that's being sent from the server on our side, but it's not making it to the client.

so I'm trying to find a way to follow the traffic and definitively tell our client that the packet is being blocked on their side.

(i've got 50 other clients working as intended via our VPN, only this one does not)

If there's a good troubleshooting doc for access related issues -- I'd take that too, but all I can seem to find are articles for NC.

1 ACCEPTED SOLUTION

Accepted Solutions
braker_
Frequent Contributor

Re: Wireshark capturing VPN traffic

In wireshark, if you capture from your physical interface you will see the encrpyted packets however if you capture from the Juniper Network Virtual Adapter (Local Area Connection* ##) you should see the unencrypted packet.

View solution in original post

2 REPLIES 2
braker_
Frequent Contributor

Re: Wireshark capturing VPN traffic

In wireshark, if you capture from your physical interface you will see the encrpyted packets however if you capture from the Juniper Network Virtual Adapter (Local Area Connection* ##) you should see the unencrypted packet.

View solution in original post

CaseyH_
Contributor

Re: Wireshark capturing VPN traffic

ah...thanks.

Worked like a charm.

I think when I tried it last week, I was looking for an adapter called Pulse.

but if I remember right, I opened up Wireshark before connecting to Pulse and didn't see any other interfaces except my ethernet and wireless.

anyway.... thanks for the help Smiley Happy

now to prove this thing!