Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

answered 2018-11-15 22:04:38 +0000

MartinM gravatar image

If you have messages in your traces that describe the SPI/keys, you could write a dissector for those messages and call esp_sa_record_add_from_dissector() (see https://code.wireshark.org/review/gitweb?p=wireshark.git;a=blob;f=epan/dissectors/packet-ipsec.h).

click to hide/show revision 2
No.2 Revision

updated 2018-11-15 23:53:11 +0000

cmaynard gravatar image

If you have messages in your traces that describe the SPI/keys, you could write a dissector for those messages and call esp_sa_record_add_from_dissector() esp_sa_record_add_from_dissector() (see https://code.wireshark.org/review/gitweb?p=wireshark.git;a=blob;f=epan/dissectors/packet-ipsec.h).