Ethereal-users: Re: [Ethereal-users] 802.1q and W2K

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 22 Jul 2002 15:44:00 -0700
On Mon, Jul 22, 2002 at 01:50:47PM +0200, Leibe Gerhard ICN EN HC ID 63 wrote:
> I bet this question has been asked before ...
> Everything works fine except the 802.1p/q tag is just ignored.

Ignored by whom?  Ethereal?

And in what sense is it ignored?  Are the packets not showing up with the
VLAN header?  If so, the problem may be that you're sniffing on a VLAN
interface and that the driver is supplying to its clients - including
the networking stack and the WinPcap driver - packets that have been
made to look like regular Ethernet packets, with the VLAN header
removed.  You might have to sniff on the "raw Ethernet interface, rather
than the VLAN interface, if that's even possible, to see the raw network
traffic (I don't know if it's possible, or how to do it).