Using a vlans file in profile

asked 2019-08-12 00:10:37 +0000

Ross Jacobs
71 ●3 ●32 ●13

updated 2019-08-12 00:31:01 +0000

Problem

I am trying to get VLAN resolution to work in both wireshark and tshark using a SampleCaptures vlan pcap. This pcap contains all sorts of vlans, including a vlan 7.

Description

Tested on Macos (v3.0.3), Linux (v2.6.8).

I have a vlan_profile folder in ~/.config/wireshark/profiles that contains this vlans file:

7 native

Using tshark, the name resolution is to "<7>".

bash$ tshark -r vlan.cap -Nv -C vlan_profile -T fields -e vlan.id_name -Y "vlan.id==7" -2 -o "nameres.vlan_name:true"
<7>
<7>
<7>
<7>
<7>

Using Wireshark configured with the vlan_profile profile, I get no packet results when filtering by not vlan.id_name matches "<[0-9]+>" and vlan.id_name. When using Wireshark, I have the "Resolve VLAN IDs" checkmark checked in Preferences.

Question

How is the vlans file used for vlan resolution?

edit retag flag offensive close merge delete

add a comment

Comments

I see this problem on both 2.6.8 AND 3.0.2, but moving the vlans file to ~/.config/wireshark fixed. Can you provide the fixing commit/link to it to the commit?

Ross Jacobs ( 2019-08-12 13:22:09 +0000 )edit

Possibly change 33378 and a follow on 33384. These changes don't appear to have been backported.

grahamb ( 2019-08-12 13:47:39 +0000 )edit

Thanks Graham! I can rebuild to v3.1.0

Ross Jacobs ( 2019-08-12 19:24:26 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Using a vlans file in profile

Problem

Description

Question

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Using a vlans file in profile edit

Problem

Description

Question

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Using a vlans file in profile