From: Jian Gu (guxiaojian@gmail.com)
Date: Fri Mar 28 2008 - 20:49:13 ART
This is not true, when you run Ethereal or Wireshark on a NIC, it turns the
NIC to promiscuous mode, NIC card will not know whether the Ethernet frames
it receives are tagged or not.
The reason you don't see VLAN tags in capture software is because SPAN on
Cisco switches only copies only Layer 2 Ethernet frames, SPAN does not copy
source trunk port ISL or 802.1Q tags. You can configure destination ports as
trunks to send locally tagged traffic to the traffic analyzer.
On Fri, Mar 28, 2008 at 9:33 AM, Joseph Brunner <joe@affirmedsystems.com>
wrote:
> You need a nic card which doesn't strip them off... try the INTEL instead
> of
> the broadcom cards or search the hacki site to get the model.
>
> Joe
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> Sadiq Yakasai
> Sent: Friday, March 28, 2008 10:16 AM
> To: Cisco certification
> Subject: VLAN Tag on Wirieshark capture
>
> Hi Guys,
>
> Please how can I view the VLAN tags on a wireshark capture for dot1q
> frames?
>
> I have done the capture, but the information I see when the capture
> application decodes all the information but doesnt not include the
> VLAN tags of the actual frames.
>
> I know there has to be a way to get this information, but just not
> seeing it. I have done a few seaches online and cant lay a finger on
> any useful information.
>
> Any help would be highly appreciated.
>
> Thanks!!
>
> Sadiq
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Tue Apr 01 2008 - 07:53:54 ART