So whether you see VLAN tags in Wireshark or not will depend on the network adapter you have and on what its and its driver do with VLAN tags. There aren’t separate physical and VLAN interfaces you can capture from, unless a specialised driver that adds such support is present. Windows has no built-in support mechanisms for VLANs. The following is taken from the Wireshark website: They are inconsistent in their implementation of third party drivers. Of course, the bigger problem is Microsoft Windows. For Cisco SPAN, this varies from platform to platform so probably best to enable the SPAN port as a trunk to be sure.
Some port mirroring solutions need the mirror port as well as the mirrored port to be a trunk enabled. The first is that the port mirror also needs to be configured as a trunk. Turns out that there are a two things that need to be considered here. A colleague was attempting to capture packets on a trunk interface from a switch and wasn’t seeing the VLAN tags on the sniffer.
0 kommentar(er)
