Netconf Logs capture

savecancel

NETCONF goes over the wire so of course Wireshark can capture it.

In my experience, though, NETCONF is usually running over SSH and Wireshark cannot currently decrypt SSH - so you won't be able to see the NETCONF protocol.

If you happen to be using NETCONF over TLS then you're in more luck: if you can decrypt the TLS you'll be able to see the NETCONF.

See also an older question about this.