How to monitor VPN traffic with Wireshark on Windows 7?

Question

I'm running Wireshark 1.6.7 (latest available release) x64 on Windows 7 x64.
I only have a single network card on this computer, and Wireshark shows only it as an available adapter to capture packets on.

If I establish a VPN connection (using Windows' built-in VPN client), Wireshark:

doesn't show any additional adapter to capture packets on, and
doesn't see any network traffic flowing through the VPN tunnel.

How can I monitor the traffic on a VPN connection using Wireshark on Windows 7?

score 5 · Accepted Answer · answered Apr 16 '12 at 19:09

5

Looks like it's not possible at all :-(

http://www.winpcap.org/misc/faq.htm#Q-5

answered Apr 16 '12 at 19:09

Massimo

70,200
57
200
323

score 3 · Answer 2 · answered Jul 16 '15 at 03:34

3

Not useful for all scenarios, but one workaround is to run Virtualisation. Run your VPN on your host, and then run the traffic and wireshark capture on the Guest machine

answered Jul 16 '15 at 03:34

user2463938

131
1

score -1 · Answer 3 · edited Apr 13 '17 at 12:14

-1

It's not possible to capture PPP/VPN traffic with Wireshark on Win7 OS. How can I configure Wireshark to list my dial up connection as a possible capture interface?

Maybe you can try this tool; http://www.splunk.com/product

edited Apr 13 '17 at 12:14

Community

1

answered Apr 16 '12 at 19:00

Vitali Tikaev

58
5

2

Useful, but -1 for spamming. That product looks in no way like a network sniffer. – Massimo Apr 18 '12 at 06:16

How to monitor VPN traffic with Wireshark on Windows 7?

3 Answers3