Ethereal-users: RE: [Ethereal-users] Support for ESP follow tcp stream

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Chris Weber" <chrisw@xxxxxxxxxxx>
Date: Sat, 8 Nov 2003 11:27:43 -0800
Yes! I mean IP Encapsulating Security Payload from RFC 2406.  Since it
encapsulates the TCP header information, Ethereal cannot follow the TCP
stream.  However, since ESP has it's own system of sequence numbers, I was
wondering if someone wrote a plugin to follow that stream
Thanks!

-----Original Message-----
From: Guy Harris [mailto:guy@xxxxxxxxxxxx] 
Sent: Friday, November 07, 2003 12:05 PM
To: Chris Weber
Cc: ethereal-users@xxxxxxxxxxxx
Subject: Re: [Ethereal-users] Support for ESP follow tcp stream


On Nov 7, 2003, at 11:18 AM, Chris Weber wrote:

> Anybody know of a plugin or way for Ethereal Win32 to support the 
> "follow TCP stream" option for the ESP protocol?

The "Follow TCP Stream" option is "supported" for all protocols that run
atop TCP, in the sense that it'll show you the payload from the TCP session.

If by "ESP" you mean the IP Encapsulating Security Payload from RFC 2406,
unless there'a way to run that over TCP, there's nothing to support in
"Follow TCP Stream".