Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

pen-test logo Penetration Testing mailing list archives

Re: VPN protocols
From: Chris Kuethe <chris.kuethe () gmail com>
Date: Wed, 22 Dec 2004 10:48:57 -0700
On Wed, 22 Dec 2004 09:04:16 -0800, John Forristel (SunGard-Chico)
<John.Forristel () sungardbi-tech com> wrote:

GRE and ESP are protocols, not ports, so they are transported through on
configured ports.  In Cisco, you permit gre and esp through for the VPN
traffic.


No, they are not transported on configured ports. They are transported
via IP, and your IP stack is informed of this by the 10th byte of the
IP header. In tcpdump parlance:

(ip[9] = 47) GRE
(ip[9] = 50) ESP

-- 
GDB has a 'break' feature; why doesn't it have 'fix' too?

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]