https://github.com/hujun-open/ipsecintcp_wireshark_plugin

A wireshark plugin to decode IPsec packet(IKE/ESP) encapsulated in TCP (RFC8229)
https://github.com/hujun-open/ipsecintcp_wireshark_plugin

ipsec tcp-encapsulation wireshark-plugin

Last synced: about 2 months ago
JSON representation

A wireshark plugin to decode IPsec packet(IKE/ESP) encapsulated in TCP (RFC8229)

• Host: GitHub
• URL: https://github.com/hujun-open/ipsecintcp_wireshark_plugin
• Owner: hujun-open
• License: apache-2.0
• Created: 2022-02-17T17:10:09.000Z (over 3 years ago)
• Default Branch: main
• Last Pushed: 2022-02-17T17:12:24.000Z (over 3 years ago)
• Last Synced: 2025-04-10T05:45:27.092Z (6 months ago)
• Topics: ipsec, tcp-encapsulation, wireshark-plugin
• Language: Lua
• Homepage:
• Size: 4.88 KB
• Stars: 0
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# A wireshark lua plugin for IPsec in TCP (RFC8229)

This is a wireshark plugin to decode IKE/ESP packet encapsulated in TCP according to RFC8229;

## Installation

Copy the wireshark_ipsectcp_plugin.lua file into wireshare lua plugin folder, then either restart wireshark or ctrl+shift+L to load the plugin.

By default,this plugin will decode any TCP packet has either src or dst port == 4500; for other TCP port, you could use wireshare "Decode As..." menu