Ethernet Products
Determine ramifications of Intel® Ethernet products and technologies
5220 Discussions

I219-LM: Wireshark can not see VLAN tag header and Ostinato can not send VLAN tagged frames

SChen115
Beginner
11,014 Views

Hello,

I have Wireshark (v2.4.1) and Ostinato Network Traffic Generator (v0.6) installed on my laptop (Window 10 Pro version 1703, OS Build 15063.608) with Intel Ethernet Connection I219-LM. However I am not able to either receive or send VLAN tagged packets. Untagged packets are fine in both transmit and receiving directions.

I did not have such issue with my old laptop (Windows 7 Enterprise SP1, Intel 82579LM), I was able to use Wireshark to capture VLAN tagged frames and see the VLAN tag in the captured results, and I was able to send VLAN tagged frames using Ostinato or Linux tcpreplay.

I found a thread https://communities.intel.com/thread/22204 https://communities.intel.com/thread/22204, and added "MonitorMode" registry key using regedit.

In my case

- Setting the MonitorMode value to 1 did not help. Wireshark still could not receive tagged frames. Ostinato could not transmit tagged frames.

- Setting the MonitorMode value to 2 helped a bit. Wireshark could receive tagged frames, however the VLAN tag was stripped in the capture result. Ostinato could not transmit tagged frames.

My goals are 1) to see VLAN tags in the Wireshark capture result; 2) to use Ostinato or tcpreplay to send VLAN tagged frames.

System information -

System Model: Dell Latitude E7470

OS: Windows 10 Pro 10.0.15063 N/A Build 15063

Driver: Intel(R) Ethernet Connection I219-LM. Driver version: 12.13.17.7

I also installed the Intel® Network Adapter Driver from https://downloadcenter.intel.com/download/25016/Intel-Network-Adapter-Driver-for-Windows-10.

Any advice/suggestions are appreciated.

Regards,

Sam

0 Kudos
11 Replies
idata
Employee
7,722 Views

Hi SamZChen,

 

 

Thank you for posting in Wired Communities. Just to double check have you tried using the driver from Dell* as customized driver is recommended for the onboard NIC. I will also further check.

 

 

Regards,

 

Sharon

 

0 Kudos
SChen115
Beginner
7,722 Views

Hi Sharon,

I initially used the driver comes with the Dell laptop (I did not collect the version/driver information), and had the issue with VLAN tagged frames in both Rx and Tx directions. Then I downloaded and installed the Intel Network Adapter Driver from the link mentioned above, and the issue remained same. This morning I also downloaded and installed the driver from http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=D8VDT, the same issue still exists.

Thanks,

Sam

0 Kudos
idata
Employee
7,722 Views

Hi SamZChen,

 

 

Thank you for the additional information. I will check on this.

 

 

Regards,

 

Sharon

 

0 Kudos
idata
Employee
7,721 Views

Hi SamZChen,

 

 

You may try the newer Wireshark version to see if this will make any difference:

 

https://www.wireshark.org/docs/relnotes/wireshark-2.4.2.html

 

 

Please ensure the correct registry path is modified as stated in the article.

 

Use value 1 instead of 2. https://www.intel.com/content/www/us/en/support/articles/000005498/network-and-i-o/ethernet-products.html

 

 

Please try also using Dell driver with the monitor mode enabled.

 

 

Hope this helps.

 

 

Regards,

 

Sharon
0 Kudos
SChen115
Beginner
7,722 Views

Hi Sharon,

Thank you for the feedback.

Today I upgraded to the latest Wireshark version 2.4.2, tested both Intel driver and Dell driver, the "MonitorMode" was set according to the link you provided. The result is:

- Without MonitorMode in registry, or MonitorMode=0: Wireshark can capture VLAN tagged frames, but the VLAN information is stripped in the display.

- MonitorMode=1: Wireshark can not capture and display VLAN tagged frames (as if Wireshark does not receive those frames).

Regards,

Sam

0 Kudos
idata
Employee
7,722 Views

Hi SamZChen,

 

 

Thank you for the update. Can you also check with Wireshark* support for any possible setting?

 

 

Thanks,

 

Sharon

 

0 Kudos
SChen115
Beginner
7,721 Views

Hi Sharon,

I will try to check with Wireshark, however I doubt it is a Wireshark issue. I run a different network analyzer on the laptop, and the issue is the same - when the I219-LM Ethernet adapter registry includes the entry MonitorMode = 1, both Wireshark and the other network analyzer do not capture the VLAN tagged frames.

From other posts I could see the MonitorMode or MonitorModeEnabled approach worked successfully. It just somehow does not work for my case.

Regards,

 

Sam
0 Kudos
idata
Employee
7,721 Views

Hi SamZChen,

 

 

Thank you for the update and please do update me the feedback from Wireshark*. Can you share also what is the other network analyzer you used to check?

 

 

Thanks,

 

Sharon

 

0 Kudos
idata
Employee
7,722 Views

Hi SamZChen,

 

 

Please feel free to update me.

 

 

Thanks,

 

Sharon

 

0 Kudos
SChen115
Beginner
7,721 Views

Hi Sharon,

The other sniffer I tried on Windows 10 was from freenetworkanalyzer.com.

I could not resolve the issue on the Windows platform. However there is a workaround, using a USB-Ethernet Adapter, and let the Linux Virtual Box manages the device. This workaround works for me. Therefore it is not so urgent for me to get a solution that works with I219-LM on the Windows platform.

Thanks for your help,

Sam

0 Kudos
idata
Employee
7,722 Views

Hi SamZChen,

 

 

Thank you for the update and I am glad you manage to find the workaround.

 

 

Regards,

 

Sharon

 

0 Kudos
Reply