Analysing fullduplex traffic from network TAPs

Question

Hello Forum

i would like to analyze raw-traffic sent/forwarded from a fullduplex-TAP (eg IXIOS, Niagara or DATACOM). Those TAPs do forward the monitored traffic on 2 links to the analyzing station (equipped with
a dual interface network card, e.g. Endace DAG).

Question: Does Wireshark support such RAW-traffic?

Thank you very much for every feedback!

Joe

Answer 1

First you can start here: https://wiki.wireshark.org/CaptureSetup/Ethernet

Does Wireshark support such raw traffic?

If you mean with this question: Is it able to capture simultaneously on more than one interface with Wireshark. Then the answer is yes. I think since Version 1.8 it is possible.