This is our old Q&A Site. Please post any new questions and answers at

With wireshark how can I monitor packets that are coming and going on the serial port of a Cisco router 3945?

asked 22 Apr '11, 14:48

lateris's gravatar image

accept rate: 0%

Hmm, I'm not sure it can be done with stock Wireshark. Won't you need to introduce a serial tap that understands HDLC or PPP? (not sure what you're using).

I'm pretty sure Wireshark has both dissectors included, but never having used it, I couldn't bet my life on it.

However, can't you just monitor the traffic from the Ethernet side? For the serial interface, you can track the errors etc. via show commands. Or is there something specific on the serial interface that you are trying to get at?

(23 Apr '11, 08:22) hansangb

You can monitor the traffic from the ethernet side, but in that case it is framed in ethernet. To get hdlc or ppp you will have to somehow tap on the serial side. Wireshark integrates nicely into GNS3 (even on serial links) if you are wanting to play around without a serial tap.

permanent link

answered 24 Apr '11, 18:40

Paul%20Stewart's gravatar image

Paul Stewart
accept rate: 6%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 22 Apr '11, 14:48

question was seen: 4,110 times

last updated: 24 Apr '11, 18:40

p​o​w​e​r​e​d by O​S​Q​A