This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi

I'm trying to capture cdp and lldp packets from my cisco 2960 switch. This works just fine on a desktop computer but if i try to do the same thing on my laptop wireshark never gets the cdp packets at all.

and i know it is being transmitted by the switch since my desktop works fine in the same network port and is able to display the cdp packets.

The laptop is a hp 6930p with an intel network card, desktop is also an intel network card.

Is it possibel that the network card or drivers somehow filter out the cdp multicast traffic and never forward it? any advice on how to fix this?

asked 21 Oct '11, 06:55

tobbe's gravatar image

tobbe
1111
accept rate: 0%


I see no reason why the laptop should not show the CDP packets. Have you got VPN software installed? They are notorious for messing up capturing. Are you able to see other multcast traffic (HSRP for instance)?

permanent link

answered 21 Oct '11, 07:12

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

thanks, i found the problem. mcafee host intrusion prevention software is interfering with the cdp packets. removing it makes the cdp packets show up correctly.

only vpn i have is the built in ms pptp.

(21 Oct '11, 07:25) tobbe
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×32
×27
×8
×7
×5

question asked: 21 Oct '11, 06:55

question was seen: 4,429 times

last updated: 21 Oct '11, 07:41

p​o​w​e​r​e​d by O​S​Q​A