 | 1 | initial version |
NETCONF goes over the wire so of course Wireshark can capture it.
In my experience, though, NETCONF is usually running over SSH and Wireshark cannot currently decrypt SSH - so you won't be able to see the NETCONF protocol.
If you happen to be using NETCONF over TLS then you're in more luck: if you can decrypt the TLS you'll be able to see the NETCONF.
See also an older question about this.
