Re: OpenVPN traffic

[David Howe <DaveHowe.Pentest () googlemail com>]

Jack Carrozzo wrote:
> Some people use static keys (quite a few in my experience). In that
> case, if you can get the keyfile you're all set.

Sure. and in this test case I have access to the server pem files too,
but its getting "inside the envelope" to see the otherwise unencrypted
traffic inside the tunnel I am having problems with. There appear to be
no analysis tools out there at all to look at the traffic - and I mean
at all, not even a wireshark "this is an openvpn key packet" basic
dissector.

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------