<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Analyzing VPN Traffic — API & Tool Reference

> Quick reference for tools, commands, and APIs used in analyzing-vpn-traffic.

## Tools


### `wg`

WireGuard management utility

**Usage:**
```bash
wg show [interface]
```

**Key Flags:**
  - `show: display config`
  - `set: modify interface`
  - `genkey/pubkey: key generation`
  - `dump: machine-readable output`

---

### `openvpn`

OpenVPN tunnel daemon

**Usage:**
```bash
openvpn --config <file>
```

**Key Flags:**
  - `--show-ciphers: list ciphers`
  - `--show-tls: list TLS ciphers`
  - `--test-crypto: test crypto`

---

### `strongswan`

IPsec VPN implementation

**Usage:**
```bash
ipsec statusall
```

**Key Flags:**
  - `statusall: show all SAs`
  - `reload: reload config`
  - `listalgs: supported algorithms`

---


## Integration Notes

- All tools should be run with least-privilege access appropriate to the task
- Log all tool invocations for audit trail
- Validate tool output before acting on results
- Cross-reference findings with multiple tools where possible

## See Also

- Parent skill: [Network Security](../../../SKILL.md)
- Technique SKILL.md: [../SKILL.md](../SKILL.md)
