Decrypt control dtls/tls connection

[Kanan Huseynli]

Hi there,

is there a way to decrypt control traffic? As being "routing guy" it is always interested to see what type of information is exchanged in routing protocol, what packet types routing protocol has (omp in case of sd-wan), but since OMP runs over TLS/DTLS we normally cant see its packet header. I did research but most blog/forum information explains decryption method for we traffic in different OS. TLS/DTLS in sd-wan is not web traffic hence i couldnt decrypt using well-known methods.

did anyone try this type of decryption?

thanks in advance,

[svemulap@cisco.com]

Hi Kanan - 

Your understanding is right.  Yes, for a routing person, we all want to see the info.   But, currently there is a no way to see decrypted packet.   Using vManage packet capture feature, we can get a pcap file, but this is after the encryption has happened internal to the box. 

Same applies if fia method is used on the SD-WAN XE device or tcpdump on vEdge device.

HTH.