I have Wireshark (v2.4.1) and Ostinato Network Traffic Generator (v0.6) installed on my laptop (Window 10 Pro version 1703, OS Build 15063.608) with Intel Ethernet Connection I219-LM. However I am not able to either receive or send VLAN tagged packets. Untagged packets are fine in both transmit and receiving directions.
I did not have such issue with my old laptop (Windows 7 Enterprise SP1, Intel 82579LM), I was able to use Wireshark to capture VLAN tagged frames and see the VLAN tag in the captured results, and I was able to send VLAN tagged frames using Ostinato or Linux tcpreplay.
In my case
- Setting the MonitorMode value to 1 did not help. Wireshark still could not receive tagged frames. Ostinato could not transmit tagged frames.
- Setting the MonitorMode value to 2 helped a bit. Wireshark could receive tagged frames, however the VLAN tag was stripped in the capture result. Ostinato could not transmit tagged frames.
My goals are 1) to see VLAN tags in the Wireshark capture result; 2) to use Ostinato or tcpreplay to send VLAN tagged frames.
System information -
System Model: Dell Latitude E7470
OS: Windows 10 Pro 10.0.15063 N/A Build 15063
Driver: Intel(R) Ethernet Connection I219-LM. Driver version: 126.96.36.199
I also installed the Intel® Network Adapter Driver from https://downloadcenter.intel.com/download/25016/Intel-Network-Adapter-Driver-for-Windows-10.
Any advice/suggestions are appreciated.
Thank you for posting in Wired Communities. Just to double check have you tried using the driver from Dell* as customized driver is recommended for the onboard NIC. I will also further check.
I initially used the driver comes with the Dell laptop (I did not collect the version/driver information), and had the issue with VLAN tagged frames in both Rx and Tx directions. Then I downloaded and installed the Intel Network Adapter Driver from the link mentioned above, and the issue remained same. This morning I also downloaded and installed the driver from http://www.dell.com/support/home/us/en/19/drivers/driversdetails?driverId=D8VDT, the same issue still exists.
You may try the newer Wireshark version to see if this will make any difference:
Please ensure the correct registry path is modified as stated in the article.
Use value 1 instead of 2. https://www.intel.com/content/www/us/en/support/articles/000005498/network-and-i-o/ethernet-products.html
Please try also using Dell driver with the monitor mode enabled.
Hope this helps.
Thank you for the feedback.
Today I upgraded to the latest Wireshark version 2.4.2, tested both Intel driver and Dell driver, the "MonitorMode" was set according to the link you provided. The result is:
- Without MonitorMode in registry, or MonitorMode=0: Wireshark can capture VLAN tagged frames, but the VLAN information is stripped in the display.
- MonitorMode=1: Wireshark can not capture and display VLAN tagged frames (as if Wireshark does not receive those frames).
I will try to check with Wireshark, however I doubt it is a Wireshark issue. I run a different network analyzer on the laptop, and the issue is the same - when the I219-LM Ethernet adapter registry includes the entry MonitorMode = 1, both Wireshark and the other network analyzer do not capture the VLAN tagged frames.
From other posts I could see the MonitorMode or MonitorModeEnabled approach worked successfully. It just somehow does not work for my case.
The other sniffer I tried on Windows 10 was from freenetworkanalyzer.com.
I could not resolve the issue on the Windows platform. However there is a workaround, using a USB-Ethernet Adapter, and let the Linux Virtual Box manages the device. This workaround works for me. Therefore it is not so urgent for me to get a solution that works with I219-LM on the Windows platform.
Thanks for your help,