Re: VLAN Tag on Wirieshark capture

From: Sadiq Yakasai (sadiqtanko@gmail.com)
Date: Mon Mar 31 2008 - 10:08:53 ART


Hi all,

So I and a colleague have managed to get to the bottom of it. When you
do enable the NIC to support the VLAN tagging (by having the right
driver and editing the correct information in the registry) the card
starts to process the VLAN Tag information correctly.

Now, as for wether you will be able to see this information on your
capture software depends on what method of capture you are using and
what image you are using as well. While some IOS images would allow
you to use the "replicate encapsulation" keywords on the SPAN
sessions, others don't. This enables you to throw the frames including
the VLAN Tags to the capture software and be able to see this
information. Unfortunately, my IOS image doesn't have this option.

Another option is to insert your sniffer PC behind a HUB between the
link where the interesting traffic is. This is the method I am using
now and it works!

Thanks for all your input guys!! Hope this helps others interested in this.

Sadiq



This archive was generated by hypermail 2.1.4 : Tue Apr 01 2008 - 07:53:55 ART