Wireshark shows some vpn servers a UDP and othersAS OPENVPN, UDP would be unencrypted, Correct?

asked 2018-02-26 03:52:06 +0000

updated 2018-10-26 17:23:56 +0000

11115 ●11 ●317 ●165 https://www.igt.com/

Some of the VPN servers I connect to Wireshark shows UDP and others OPENVPN. From the same provider. I opened a detailed service ticket with them but all I got was an email explaining the difference between UDP and TCP. Thanks.

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2018-02-26 10:02:23 +0000

Anders

5023 ●97 ●58

updated 2018-02-26 11:24:56 +0000

Wireshark has two ways of "selecting" next protocol on UDP,TCP or SCTP ports. One is if the dissector register for a port the second is a "heuristic" which looks into the packet and try to see if it's a packet for this protocol. So if a packet shows up as UDP it just means that there is no protocol dissector assigned to this port and no heuristic claimed the packet. The default port of OpenVPN is 1194 so only packets on that port will be claimed by the dissecor.

edit flag offensive delete link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2018-02-26 03:52:06 +0000

Seen: 580 times

Last updated: Feb 26 '18

Wireshark shows some vpn servers a UDP and othersAS OPENVPN, UDP would be unencrypted, Correct? edit

1 Answer