Hello,
I would like to be able to capture all traffic on a PPTP VPN connection, including the traffic that is first sent and received when the "ppp0" interface comes up.
Unfortunately, it seems that the "ppp0" virtual interface is not created on the system until the PPTP connection is established. I would like to find a way to make the "ppp0" interface be present but unconnected, similar to how I capture all traffic for a Wi-Fi interface that is not associated to an AP, so that I can start traffic capture before the interface is set to the "up" or "connected" state, allowing me to capture ALL traffic at the start of a connection. Is there some way to do this? I took a look at the "pppd" man page but nothing was leaping out at me.
Thanks for any help,
Smith
