This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

how to capture vlan tag on osx 10.6 (lion)?

0

i installed wireshark (64bits) on my macbook pro(2011 edition). but i found i couldn't see vlan tag information. every packets were UNtagged. :(

any idea?

asked 29 May '12, 08:34

itsmecho's gravatar image

itsmecho
1●1●1●2
accept rate: 0%

2 Answers:

0

Are you capturing by connecting the Macbook to the span port of a switch? Or are you trying to monitor the traffic originating and terminating on the Mac?

The VLAN tag is only part of the switched network packets, not the source or destination endpoint packets.

answered 29 May '12, 15:30

inetdog's gravatar image

inetdog
167●1●7
accept rate: 14%

I'm trying to capture vlan tagged packets from switch by port mirroring (SPAN)

(29 May '12, 19:06) itsmecho

Take a look at this question: (http://ask.wireshark.org/questions/10868/adding-vlan-tag-on-wireshark-capture) And confirm that A. The span port of your switch is including VLAN tags, and B. The NIC in your Macbook is not stripping the VLAN tags or rejecting VLAN tagged packets.

(29 May '12, 23:13) inetdog

0

What network interface are you capturing on? en0, or some other interface? If it's some other interface, try capturing on en0.

answered 31 May '12, 11:09

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k●3●35●196
accept rate: 19%