- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
I have Wireshark (v2.4.1) and Ostinato Network Traffic Generator (v0.6) installed on my laptop (Window 10 Pro version 1703, OS Build 15063.608) with Intel Ethernet Connection I219-LM. However I am not able to either receive or send VLAN tagged packets. Untagged packets are fine in both transmit and receiving directions.
I did not have such issue with my old laptop (Windows 7 Enterprise SP1, Intel 82579LM), I was able to use Wireshark to capture VLAN tagged frames and see the VLAN tag in the captured results, and I was able to send VLAN tagged frames using Ostinato or Linux tcpreplay.
I found a thread https://communities.intel.com/thread/22204 https://communities.intel.com/thread/22204, and added "MonitorMode" registry key using regedit.
In my case
- Setting the MonitorMode value to 1 did not help. Wireshark still could not receive tagged frames. Ostinato could not transmit tagged frames.
- Setting the MonitorMode value to 2 helped a bit. Wireshark could receive tagged frames, however the VLAN tag was stripped in the capture result. Ostinato could not transmit tagged frames.
My goals are 1) to see VLAN tags in the Wireshark capture result; 2) to use Ostinato or tcpreplay to send VLAN tagged frames.
System information -
System Model: Dell Latitude E7470
OS: Windows 10 Pro 10.0.15063 N/A Build 15063
Driver: Intel(R) Ethernet Connection I219-LM. Driver version: 12.13.17.7
I also installed the Intel® Network Adapter Driver from https://downloadcenter.intel.com/download/25016/Intel-Network-Adapter-Driver-for-Windows-10.
Any advice/suggestions are appreciated.
Regards,
Sam
Link Copied
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi SamZChen,
Thank you for posting in Wired Communities. Just to double check have you tried using the driver from Dell* as customized driver is recommended for the onboard NIC. I will also further check.
Regards,
Sharon
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Sharon,
I initially used the driver comes with the Dell laptop (I did not collect the version/driver information), and had the issue with VLAN tagged frames in both Rx and Tx directions. Then I downloaded and installed the Intel Network Adapter Driver from the link mentioned above, and the issue remained same. This morning I also downloaded and installed the driver from http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=D8VDT, the same issue still exists.
Thanks,
Sam
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi SamZChen,
Thank you for the additional information. I will check on this.
Regards,
Sharon
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi SamZChen,
You may try the newer Wireshark version to see if this will make any difference:
https://www.wireshark.org/docs/relnotes/wireshark-2.4.2.html
Please ensure the correct registry path is modified as stated in the article.
Use value 1 instead of 2. https://www.intel.com/content/www/us/en/support/articles/000005498/network-and-i-o/ethernet-products.html
Please try also using Dell driver with the monitor mode enabled.
Hope this helps.
Regards,
Sharon
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Sharon,
Thank you for the feedback.
Today I upgraded to the latest Wireshark version 2.4.2, tested both Intel driver and Dell driver, the "MonitorMode" was set according to the link you provided. The result is:
- Without MonitorMode in registry, or MonitorMode=0: Wireshark can capture VLAN tagged frames, but the VLAN information is stripped in the display.
- MonitorMode=1: Wireshark can not capture and display VLAN tagged frames (as if Wireshark does not receive those frames).
Regards,
Sam
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi SamZChen,
Thank you for the update. Can you also check with Wireshark* support for any possible setting?
Thanks,
Sharon
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Sharon,
I will try to check with Wireshark, however I doubt it is a Wireshark issue. I run a different network analyzer on the laptop, and the issue is the same - when the I219-LM Ethernet adapter registry includes the entry MonitorMode = 1, both Wireshark and the other network analyzer do not capture the VLAN tagged frames.
From other posts I could see the MonitorMode or MonitorModeEnabled approach worked successfully. It just somehow does not work for my case.
Regards,
Sam
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi SamZChen,
Thank you for the update and please do update me the feedback from Wireshark*. Can you share also what is the other network analyzer you used to check?
Thanks,
Sharon
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi SamZChen,
Please feel free to update me.
Thanks,
Sharon
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Sharon,
The other sniffer I tried on Windows 10 was from freenetworkanalyzer.com.
I could not resolve the issue on the Windows platform. However there is a workaround, using a USB-Ethernet Adapter, and let the Linux Virtual Box manages the device. This workaround works for me. Therefore it is not so urgent for me to get a solution that works with I219-LM on the Windows platform.
Thanks for your help,
Sam
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi SamZChen,
Thank you for the update and I am glad you manage to find the workaround.
Regards,
Sharon
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page