VLAN tags missing on monitor port
I'm using a XGS1250-12 and set up port 12 as mirrored port. That port is part of 4 VLANs and doesn't untag them on ingress. I'm using port 3 as monitor port to connect a laptop running wireshark. Port 3 is not part of any VLAN. When I capture the network traffic, I do see all the packets I'm interested in, but the packets that are part of a VLAN header have their VLAN tag removed in the pcap. I've double-checked by capturing on the physical interface of the sending machine and the VLAN tag are part of that pcap. How do I have to set up port mirroring to see the packets exactly as they arrive/leave the mirrored port?
Accepted Solution
-
Hi @RambaZamba
To provide accurate assistance, please help clarify the following:
- VLAN - Egress Rule on Port 12: Please share the VLAN setting on Port 12. We would like to know if it is configured to tag VLANs or leave them untagged for egress packets. Knowing this will help us understand packet handling.
- Additionally, are VLAN tags missing on both ingress and egress packets on your monitor PC, not just on ingress packets?
- Additionally, are VLAN tags missing on both ingress and egress packets on your monitor PC, not just on ingress packets?
- Wireshark Configuration: Ensure the VLAN ID column is enabled in Wireshark to verify the presence of VLAN tags on captured packets.
- Ensure the VLAN setting of NIC:
Thanks.
See how you've made an impact in Zyxel Community this year!
Nami
0 - VLAN - Egress Rule on Port 12: Please share the VLAN setting on Port 12. We would like to know if it is configured to tag VLANs or leave them untagged for egress packets. Knowing this will help us understand packet handling.
All Replies
-
You can't you see them as untagged
0 -
Hi @RambaZamba
To provide accurate assistance, please help clarify the following:
- VLAN - Egress Rule on Port 12: Please share the VLAN setting on Port 12. We would like to know if it is configured to tag VLANs or leave them untagged for egress packets. Knowing this will help us understand packet handling.
- Additionally, are VLAN tags missing on both ingress and egress packets on your monitor PC, not just on ingress packets?
- Additionally, are VLAN tags missing on both ingress and egress packets on your monitor PC, not just on ingress packets?
- Wireshark Configuration: Ensure the VLAN ID column is enabled in Wireshark to verify the presence of VLAN tags on captured packets.
- Ensure the VLAN setting of NIC:
Thanks.
See how you've made an impact in Zyxel Community this year!
Nami
0 - VLAN - Egress Rule on Port 12: Please share the VLAN setting on Port 12. We would like to know if it is configured to tag VLANs or leave them untagged for egress packets. Knowing this will help us understand packet handling.
Categories
- All Categories
- 415 Beta Program
- 2.4K Nebula
- 151 Nebula Ideas
- 98 Nebula Status and Incidents
- 5.7K Security
- 277 USG FLEX H Series
- 277 Security Ideas
- 1.4K Switch
- 74 Switch Ideas
- 1.1K Wireless
- 42 Wireless Ideas
- 6.4K Consumer Product
- 250 Service & License
- 395 News and Release
- 85 Security Advisories
- 29 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.6K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 74 Security Highlight