Ask Your Question

Wireshark shows some vpn servers a UDP and othersAS OPENVPN, UDP would be unencrypted, Correct?

asked 2018-02-26 03:52:06 +0000

Some of the VPN servers I connect to Wireshark shows UDP and others OPENVPN. From the same provider. I opened a detailed service ticket with them but all I got was an email explaining the difference between UDP and TCP. Thanks.

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2018-02-26 10:02:23 +0000

Anders gravatar image

updated 2018-02-26 11:24:56 +0000

Wireshark has two ways of "selecting" next protocol on UDP,TCP or SCTP ports. One is if the dissector register for a port the second is a "heuristic" which looks into the packet and try to see if it's a packet for this protocol. So if a packet shows up as UDP it just means that there is no protocol dissector assigned to this port and no heuristic claimed the packet. The default port of OpenVPN is 1194 so only packets on that port will be claimed by the dissecor.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2018-02-26 03:52:06 +0000

Seen: 34 times

Last updated: Feb 26