Wireshark shows some vpn servers a UDP and othersAS OPENVPN, UDP would be unencrypted, Correct?

First time here? Check out the FAQ!

asked Feb 26 '18

BillyRam
1

updated Oct 26 '18

cmaynard

11115 ●12 ●321 ●166 https://www.igt.com/

Some of the VPN servers I connect to Wireshark shows UDP and others OPENVPN. From the same provider. I opened a detailed service ticket with them but all I got was an email explaining the difference between UDP and TCP. Thanks.

add a comment

1 Answer

Sort by » oldest newest most voted

answered Feb 26 '18

Anders

5023 ●103 ●58

updated Feb 26 '18

Wireshark has two ways of "selecting" next protocol on UDP,TCP or SCTP ports. One is if the dissector register for a port the second is a "heuristic" which looks into the packet and try to see if it's a packet for this protocol. So if a packet shows up as UDP it just means that there is no protocol dissector assigned to this port and no heuristic claimed the packet. The default port of OpenVPN is 1194 so only packets on that port will be claimed by the dissecor.

link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: Feb 26 '18

Seen: 729 times

Last updated: Feb 26 '18

Wireshark shows some vpn servers a UDP and othersAS OPENVPN, UDP would be unencrypted, Correct? savecancel

1 Answer