2 ms·

If you are able to capture a flow from begin to end, you can use something like the entropy of the flow to guess if a tunnel is encrypted or not..

• vgb2k18 3y ago
  If you capture beginning to end, look inside packet #1 :)