This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

i installed wireshark (64bits) on my macbook pro(2011 edition). but i found i couldn't see vlan tag information. every packets were UNtagged. :(

any idea?

asked 29 May '12, 08:34

itsmecho's gravatar image

itsmecho
1112
accept rate: 0%


Are you capturing by connecting the Macbook to the span port of a switch? Or are you trying to monitor the traffic originating and terminating on the Mac?

The VLAN tag is only part of the switched network packets, not the source or destination endpoint packets.

permanent link

answered 29 May '12, 15:30

inetdog's gravatar image

inetdog
16717
accept rate: 14%

I'm trying to capture vlan tagged packets from switch by port mirroring (SPAN)

(29 May '12, 19:06) itsmecho

Take a look at this question: (http://ask.wireshark.org/questions/10868/adding-vlan-tag-on-wireshark-capture) And confirm that A. The span port of your switch is including VLAN tags, and B. The NIC in your Macbook is not stripping the VLAN tags or rejecting VLAN tagged packets.

(29 May '12, 23:13) inetdog

What network interface are you capturing on? en0, or some other interface? If it's some other interface, try capturing on en0.

permanent link

answered 31 May '12, 11:09

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×108
×66
×17

question asked: 29 May '12, 08:34

question was seen: 4,485 times

last updated: 31 May '12, 11:09

p​o​w​e​r​e​d by O​S​Q​A