Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Filtering multiple VLAN tags

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Mon, 29 Sep 2008 11:40:46 -0600
On Thu, Sep 25, 2008 at 03:53:14PM -0500, NEWMAN Christopher wrote:

> I'm using tshark to parse a captured packet.  Most fields are easy to 
> grab, but I can't figure out how to grab both VLAN tags from a stacked 
> Ethernet frame.  The following command returns the inner (2nd) VLAN 
> ID:
>
>      tshark -r test.pcap -c 1 -T fields -e vlan.id

Do you have a *small* (1 packet is fine) capture file you are able to 
share with us so we can try it ourselves and possibly fix it?


Steve