Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Does Packet Capture show VLANs

    Scheduled Pinned Locked Moved General pfSense Questions
    5 Posts 3 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JKnottJ
      JKnott
      last edited by

      I've been trying something with VLANs and want to see if tagged frames are appearing on the LAN. Packet Capture doesn't seem to show them, but Wireshark does. Is this a bug in Packet Capture or a "feature".

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      1 Reply Last reply Reply Quote 0
      • PippinP
        Pippin
        last edited by Pippin

        Maybe something to do with promiscuous mode.

        In Wireshark one can switch on/off promiscuous mode,
        Edit > Preferences > Capture

        https://en.wikipedia.org/wiki/Promiscuous_mode

        I gloomily came to the ironic conclusion that if you take a highly intelligent person and give them the best possible, elite education, then you will most likely wind up with an academic who is completely impervious to reality.
        Halton Arp

        JKnottJ 1 Reply Last reply Reply Quote 0
        • JKnottJ
          JKnott @Pippin
          last edited by

          @Pippin

          Promiscuous mode is for MAC addresses, not VLAN ID. For example, I commonly run Wireshark to monitor traffic. It has to be in promiscuous mode to capture packtets that are not from or for the computer I'm running Wireshark on. That capture will show the VLAN frames. The question is does Packet Capture look at all the LAN traffic? Or just the non-VLAN?

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          1 Reply Last reply Reply Quote 0
          • H
            heper
            last edited by

            capture on parent interfaces show vlan frames if level of detail is set high enough

            JKnottJ 1 Reply Last reply Reply Quote 1
            • JKnottJ
              JKnott @heper
              last edited by

              @heper

              That did it. Tnx.

              PfSense running on Qotom mini PC
              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
              UniFi AC-Lite access point

              I haven't lost my mind. It's around here...somewhere...

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.