THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question

Revision history  [back]

Revision 2
cmaynard's avatar
11.1k
cmaynard
updated 2018-11-15 23:53:11 +0000

If you have messages in your traces that describe the SPI/keys, you could write a dissector for those messages and call esp_sa_record_add_from_dissector() (see https://code.wireshark.org/review/gitweb?p=wireshark.git;a=blob;f=epan/dissectors/packet-ipsec.h).

Revision 1
MartinM's avatar
197
MartinM
answered 2018-11-15 22:04:38 +0000

If you have messages in your traces that describe the SPI/keys, you could write a dissector for those messages and call esp_sa_record_add_from_dissector() esp_sa_record_add_from_dissector() (see https://code.wireshark.org/review/gitweb?p=wireshark.git;a=blob;f=epan/dissectors/packet-ipsec.h).