Ask Your Question
0

Do I Need to Turn Off My VPN to See My Activity Stream Correctly?

asked 2019-08-24 05:58:10 +0000

BartStarr gravatar image

Whenever I capture my activity stream with Wireshark and my VPN is running I see a bunch of OpenVPN's, Do I need to turn of the VPN to see the true activity?

edit retag flag offensive close merge delete
add a comment

1 Answer

Sort by ยป oldest newest most voted
0

answered 2019-08-24 09:26:00 +0000

grahamb gravatar image

You're probably capturing on your "external" interface and so will only see the encrypted VPN traffic.

The VPN will usually create a separate interface you can capture on, and that that interface will have the plain traffic.

What OS are you running?

edit flag offensive delete link more

Comments

It becomes tricky when you have split tunneling. I usually identify the destination ip and then match it against the routing table "route print" to check which interface I need to capture on.

bluewolf1984 gravatar imagebluewolf1984 ( 2019-08-24 10:43:24 +0000 )edit

I am running the latest version of Windows 10. (I'm also using the Wireshark 101 book).

BartStarr gravatar imageBartStarr ( 2019-08-24 16:09:59 +0000 )edit

OK, so which interface are you capturing on? Probably easiest to list the interfaces from the command line with:

path\to\tshark.exe -D

replacing path\to with the actually path, likely to be C:\Program Files\Wireshark.

grahamb gravatar imagegrahamb ( 2019-08-24 16:31:06 +0000 )edit

Thank you for answering me. I believe I am over my head and need to take some tutorials prior to the Wireshark one. Again, thank you.

BartStarr gravatar imageBartStarr ( 2019-08-24 18:38:36 +0000 )edit
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2019-08-24 05:58:10 +0000

Seen: 758 times

Last updated: Aug 24 '19