13 - Analysis and Troubleshooting of IPsec VPNs with Wireshark

The title of this class is: "Analysis and Troubleshooting of IPsec VPNs" and was taught by Jean-Paul Archier. This was recorded on September 16th online.
sharkfestus.wireshark.org
Subscribe to our channel for tons of free Wireshark educational content. To attend a live SharkFest and to learn Wireshark with packet analysis experts, visit: sharkfest.wireshark.org.
SharkFest™, launched in 2008, is a series of annual educational conferences staged in various parts of the globe and focused on sharing knowledge, experience and best practices among the Wireshark® developer and user communities.
SharkFest attendees hone their skills in the art of packet analysis by attending lecture and lab-based sessions delivered by the most seasoned experts in the industry. Wireshark core code contributors also gather during the conference days to enrich and evolve the tool to maintain its relevance in ensuring the productivity of modern networks.
SharkFest’s aim is to support ongoing Wireshark development, to educate and inspire current and future generations of computer science and IT professionals responsible for managing, troubleshooting, diagnosing and securing legacy and modern networks, and to encourage widespread use of the free analysis tool. Per Gerald Combs, Wireshark project Founder …“Wireshark is a tool and a community. My job is to support both."

[@felipegrings9357]

This is art! Clear explanation. Step by step. Well-structured speech. Awesome. Thank you for this masterpiece, and congrats on your knowledge.

[@WireSharkFest]

Thanks for watching!

[@engbmwa]

Many thanks

[@jayantsharma5968]

Really appreciate these SharkFest videos, so much info and step by step explanation.

[@WireSharkFest]

Thanks for watching and the kind words, jayant!

[@mmrs1786]

Great love it

[@WireSharkFest]

Glad to hear!

[@surajsandhu2005]

Thanks for great info! Why are the ISAMKP message #3 and #4 are using port 4500 instead of 500 in example_IKEv2_NONAT.pcap?

[@WireSharkFest]

Thanks for the question, it’s much easier to get an answer on our discord server: discord.gg/ts9GZCjGj5

[@micomono333]

Are those configuration profiles that you use available for download somewhere?

[@WireSharkFest]

Check out the retrospective page: sharkfestus.wireshark.org/sf21

[@grownupshinchan5028]

Where we can get the wireshark profiles used for this session.

[@WireSharkFest]

Here's a link: sharkfest.wireshark.org/retrospective/sfus/sf21us/

[@RJ-uf3cr]

Hello, I have a question, device A is sending ESP packet but Device B is unable to receive the ESP packet, is there any issue in ISP end?

[@WireSharkFest]

Hi RJ, thanks for the question - feel free to ask on the Wireshark Discord server (discord.com/invite/ts9GZCjGj5) or on ask.wireshark.org! It'll be much easier to get an answer there.

[@jaimealvarez4566]

Thank you for this video, can you share the configuration profile you used to decryp the IKE_AUTH Initiator request.

[@WireSharkFest]

Feel free to ask this question in the Wireshark Discord server, it's much more likely to get a response there! discord.com/invite/ts9GZCjGj5