Wireshark-users: Re: [Wireshark-users] Filtering multiple VLAN tags
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Mon, 29 Sep 2008 11:40:46 -0600
On Thu, Sep 25, 2008 at 03:53:14PM -0500, NEWMAN Christopher wrote:

> I'm using tshark to parse a captured packet.  Most fields are easy to 
> grab, but I can't figure out how to grab both VLAN tags from a stacked 
> Ethernet frame.  The following command returns the inner (2nd) VLAN 
> ID:
>
>      tshark -r test.pcap -c 1 -T fields -e vlan.id

Do you have a *small* (1 packet is fine) capture file you are able to 
share with us so we can try it ourselves and possibly fix it?


Steve