This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to capture LACP packets with wireshark

0
1

I am using Wireshark ver 1.8.3 but unable to capture LACP packets. Can you please tell me step by step procedure to capture LACP using Wireshark

asked 12 Oct '12, 21:46

chirantan's gravatar image

chirantan
1121
accept rate: 0%


2 Answers:

0

What is your system and your NIC driver? LACP is done at the driver level. So maybe, you don't see those packets, because the driver strips those packets before they arrive at wireshark.

Regards
Kurt

answered 13 Oct '12, 01:28

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

0

I've done a few test captures (a year back or so) to see how LACP worked, and used copper 1GBit TAPs to do that - I can't remember exactly if I used Wireshark for the actual capturing process; it may have been one of our big Network General S6000 devices.

Using a SPAN port instead of a TAP can be problematic because you do not know if the switch will mirror the packets correctly, and maybe (as Kurt said) your NIC will not accept them.

answered 13 Oct '12, 12:11

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

edited 13 Oct '12, 12:12

Please provide the step by step procedure to make setting of Wireshark in order to capture LACP packets,

If any perticular filter setting is required then kindly let me know.

(14 Oct '12, 00:54) chirantan

I can try to setup a test connection this week and give you more details, but it will take a while.

(14 Oct '12, 13:29) Jasper ♦♦