Is there a way of setting up winpcap to allow VLAN tag headers (802.1q) through? They seem to be removed by default. You would see the headers if you are tapped into the VLAN trunk link (i.e. core switch links).
See
http://wiki.ethereal.com/CaptureSetup_2fVLAN
for notes on capturing with libpcap/WinPcap on VLANs and getting the VLAN tag headers. (It's on the Ethereal Wiki, but it's not Ethereal-specific; it applies to *any* application using libpcap/WinPcap.)
At the bottom are the notes on doing so on Windows; it gives information on some Intel adapters, saying how to configure them to supply VLAN tags (which includes installing a special version of the driver).
I don't know whether any other drivers can do that - or *can't* do that. If you're not using one of those adapters, you'll have to research this on your own (including doing a Web search for information on this).
Note that the last paragraph in the Windows section says
Some other adaptes and their drivers might do so as well; if so, please add information about them here.
If you're using some other adapter, and either find out how to get the VLAN tags or find out that you *can't* get VLAN tags, please edit that page (it's on a Wiki, so it's fairly easy for anybody to edit it) so that others won't have to do the same research.
================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[email protected]/
To unsubscribe use mailto: [EMAIL PROTECTED]
==================================================================
