I've often the problem, that I have the same traffic flow on diffrent vlans but in the same capture file. Than you get a lot of errors from the analysis engine that you have duplicate packets etc.
Is there a way to configure Wireshark to treat the same flow on diffrent vlans as diffrent flows in the analysis?
I know that I can split up the capture file in several smaller files filtered by vlan. This would solve the problem, but that's not what I want to do ;-)
asked 13 Sep '10, 17:49
There is already an enhancement request for this feature filed at bugzilla. There are more situations than just multiple vlans. However, I suspect the vlan case to be the most seen in the field (well, at least in the networks where I do troubleshooting), so fixing it first for vlan tagging only might be justified IMHO :-)
answered 15 Sep '10, 12:29
There is currently no configuration option to support that. The code would have to be changed so that:
answered 14 Sep '10, 03:41