Wireshark-users: Re: [Wireshark-users] Wireshark for layer 2 ATM traffic?
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sat, 10 Jul 2010 15:07:33 -0700
On Jul 10, 2010, at 2:41 PM, Kok-Yong Tan wrote:

> Question:  Can wireshark be used to get any data that would reveal  
> the cause of the dropped ADSL2 connection considering no layer 3  
> traffic is flowing and only layer 2 ATM traffic is (supposedly) flowing?

If the problem is at the ADSL layer, the first thing you'd need to do is find some way of capturing traffic at the ATM layer to and from your ADSL modem.  That's not a Wireshark issue - that's a hardware issue, and would require either

	1) some sort of passive tap on the ADSL connection

or

	2) some way to get the ADSL modem to put out copies of the ATM traffic on some port

or something such as that.

If you can find a solution to that problem for whatever particular ADSL modem you have, we can then see how that could be wired into, say, libpcap and Wireshark.