Dear all, I wouls like to do some captures off double tag trafic. Does anybody knows if wireshark will capture and decode the traffic. If it is, a special config is needed? Thanks a lot, asked 01 Feb '11, 08:00 ori |
2 Answers:
Capture depends on your network hardware/driver. Dissection is not a problem. answered 01 Feb '11, 15:02 Jaap ♦ |
Yes, I've done this many times. If you want to use a capture filter or display filter we are doubling up on the vlan filter to nail down a specific Q-in-Q VLAN. I'm not sure if there is another (easier?) way, but this works well: capture filter for Q-in-Q VLAN 506.100: vlan 506 and vlan 100 display filter for Q-in-Q VLAN 506.100: vlan.id == 506 && vlan.id == 100 answered 02 Mar '11, 08:37 Bababooey |
hi i need to capture a qinq via wireshark but i didnt see it ? i have a dell laptop latitude d400