Is ikev2_decryption_table file limited (how many lines/connections could it contain)?
There is an opportunity to decrypt IPsec traffic (IKEv2+ESP):
https://www.wireshark.org/docs/wsug_h...
https://github.com/wireshark/wireshar...
https://github.com/rknall/wireshark/b...
So, the question is about how many IKEv2 tunnels can I put in file called "ikev2_decryption_table", is there some limit?
You may reach an unusable size (performance) before running out of room for the entries.
epan/dissectors/packet-isakmp.c:
epan/uat.h:
isakmp hashes some fields from the UAT so that helps performance but more memory.
epan/dissectors/packet-isakmp:
ikev2_key_hash = g_hash_table_new(ikev2_key_hash_func, ikev2_key_equal_func); for (i = 0; i < num_ikev2_uat_data; i++) { g_hash_table_insert(ikev2_key_hash, &(ikev2_uat_data[i].key), &(ikev2_uat_data[i])); /* Need find references to algorithms (as UAT table editing looses data not stored in file) */ ikev2_uat_data[i].encr_spec = ikev2_decrypt_find_encr_spec(ikev2_uat_data[i].encr_alg); ikev2_uat_data[i].auth_spec = ikev2_decrypt_find_auth_spec(ikev2_uat_data[i].auth_alg); }The answer is the size of unsigned type in C? So, maximum value accounts for 65535 or 4294967295 (depending on a system)?
32 bit system, 2^32-1 = 4,294,967,295
64 bit system 2^64-1 = 18,446,744,073,709,551,615