PG1X WIKI

My Knowledge Base

User Tools

Site Tools


tech:network:wireshark:capture-ieee802.1q-frame-with-wireshark:capture-ieee802.1q-frame-with-wireshark

This is an old revision of the document!


Capture IEEE802.1Q Frame with Wireshark

Windows

Intel Network Adapter

Identify Intel Wired Ethernet Driver

SSU

Download and execute Intel System Support Utility for Windows (SSU).

check Networking only

find correct interface and change dropdown Detailed View.

But I can't identify accuracy driver… may be e1e ???

My Sniffer Isn't Seeing VLAN, 802.1q, or QoS Tagged Frames

Driver	e1i63x64.sys
e1g, e1e, e1y

Configure Registry

Before configure registry, make sure registry BACKUP!!

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}\00nn

this may correct one.

right click and select New → DWORD (32-bit) Value

MonitorModeEnabled = 1

reboot system.

not working!!!

delete MonitorModeEnabled

create MonitorMode = 1.

rebooting.

works fine… my interface driver is listed in…? fantasy.

e1c, e1d, e1k, e1q, e1r, ixe, ixn, ixt

anyway, I can view 802.1Q frame with Wireshark on Windows attached interface…

If you can't see 802.1Q frame each value, try to set both of MonitorModeEnabled, MonitorMode.

tech/network/wireshark/capture-ieee802.1q-frame-with-wireshark/capture-ieee802.1q-frame-with-wireshark.1573421039.txt.gz · Last modified: 2019/11/11 06:23 by wnoguchi