On Fri, Jan 14, 2005 at 11:54:36AM +0200, Andriy Gapon
wrote:> Are there any tools to decode encrypted part of isakmp provided that
> identities of both peers are known to me and that I am able to observe
> the whole exchange ?
man 8 isakmpd:
%%%
-L Enable IKE packet capture. When this option is given, isakmpd
will capture to file an unencrypted copy of the negotiation pack-
ets it is sending and receiveing. This file can later be read by
tcpdump(8) and other utilities using pcap(3).
%%%
Regards,
BMS