This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hello Forum

i would like to analyze raw-traffic sent/forwarded from a fullduplex-TAP (eg IXIOS, Niagara or DATACOM). Those TAPs do forward the monitored traffic on 2 links to the analyzing station (equipped with
a dual interface network card, e.g. Endace DAG).

Question: Does Wireshark support such RAW-traffic?

Thank you very much for every feedback!

Joe

asked 15 Oct '15, 09:13

joseph123's gravatar image

joseph123
119912
accept rate: 0%

edited 15 Oct '15, 09:14


First you can start here: https://wiki.wireshark.org/CaptureSetup/Ethernet

Does Wireshark support such raw traffic?
If you mean with this question: Is it able to capture simultaneously on more than one interface with Wireshark. Then the answer is yes. I think since Version 1.8 it is possible.

permanent link

answered 15 Oct '15, 09:56

Christian_R's gravatar image

Christian_R
1.8k2625
accept rate: 16%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×40
×36

question asked: 15 Oct '15, 09:13

question was seen: 1,313 times

last updated: 15 Oct '15, 09:56

p​o​w​e​r​e​d by O​S​Q​A