honeybee
Oct 24, 2016
view24474
view2
0
Goto Top

Wireshark: Anzeige von VLAN-Tags

GermansolvedQuestionMonitoringNetworks
Hallo,

wo finde ich die VLAN-Tags in Wireshark? Ich versuche gerade, eine Station von einer Hyper-V-VM aus anzupingen. Ping funktioniert. Ich möchte die VLAN-ID sehen. Irgendwie finde ich sie im Ethernet-Frame nicht...
comment-contentCommentShareShare
Share on Facebook Share on Twitter Share on Reddit Share on Linkedin

Content-Key: 318950

Url: https://administrator.de/contentid/318950

Printed on: April 26, 2024 at 14:04 o'clock

2 Comments
Latest comment
Goto Top
Member: michi1983
Solution michi1983 Oct 24, 2016 at 08:48:31 (UTC)
Goto Top
Hallo,

Auszug aus dem Wireshark Wiki:

Windows

Windows has no built-in support mechanisms for VLANs. There aren't separate physical and VLAN interfaces you can capture from, unless a specialized driver that adds such support is present.

So whether you see VLAN tags in Wireshark or not will depend on the network adapter you have and on what it and its driver do with VLAN tags.

Most "simple" network adapters (e.g. widely used Realtek RTL 8139) and their drivers will simply pass VLAN tags to the upper layer to handle these. In that case, Wireshark will see VLAN tags and can handle and show them.

Some more sophisticated adapters will handle VLAN tags in the adapter and/or the driver. This includes some Intel adapters and, as far as i know, Broadcom gigabit chipsets (NetXtreme / 57XX based chips). Moreover, it is likely that cards that have specialized drivers will follow this path as well, to prevent interference from the "real" driver.

Gruß
Member: aqui
Solution aqui Oct 24, 2016 at 10:13:19 (UTC)
Goto Top
Wenn du eine Intel Karte oder Chipset hast, kannst du das ganz einfach in der Registry aktivieren:
http://www.intel.com/content/www/us/en/support/network-and-i-o/ethernet ...
Das funktioniert bei allen Intel Chipsets und Winblows Versionen fehlerlos.
Was andere Adapter anbetrifft findest du hier Infos:
https://wiki.wireshark.org/CaptureSetup/VLAN

Das Ergebnis sieht dann so aus (Tagged Frame mit VLAN 11):

dot1q
heart1
GermansolvedQuestionMonitoringNetworks