Sniffer

[Salzman, Noah]

Andrew,

Any of the Sniffer(tm) products from Network Associates will tell you when a
packet is ESP or AH.  I'm not to familiar with the decodes (or IPCOMP for
that matter) but I don't think it is possible to know when IPCOMP has been
used for an IPsec connection.

Go to www.sniffer.com for more info or to
http://www.nai.com/asp_set/buy_try/try/products_evals.asp for an evaluation
copy.

  Noah Salzman
     noah at pgp.com
     PGP QA Manager
     408.346.5186



-----Original Message-----
From: Wightman,Andrew [mailto:andrew.wightman at GARTNER.COM]
Sent: Friday, February 25, 2000 12:16 PM
To: VPN at SECURITYFOCUS.COM
Subject: Sniffer


Does anyone know if a method or tool that will verify encryption on a data
stream? I am trying to verify that data is encrypted and not compressed.

Please let me know if you do.

Thanks,
Andy

_________________________________

Andrew Wightman
Sr. Network Analyst
GartnerGroup Inc.
andrew.wightman at gartner.com
408.468.8662

VPN is sponsored by SecurityFocus.COM

VPN is sponsored by SecurityFocus.COM