Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-dev: [Ethereal-dev] Hardware addresss resolution should consider VLAN tag?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Wed, 29 Jun 2005 13:07:16 +0200 (CEST)
Hello list,

Recently I've gone bananas over debugging a network device that uses
untagged and 802.1Q tagged Ethernet frames in subsequent phases of its
startup procedure. Since there was something broken in the IP stack I had
to work with the hardware address columns. I used the resolved variant, to
get an idea what happend in the IP stack. What I ended up with was
resolved addresses from the untagged part of the capture in the VLAN
tagged part of the capture. It also erred on the disply of the source
address of the ARP messages.

So the question is: should the hardware address resolution consider the
802.1Q VLAN tag?

(more issues regarding hardware address resolution and a detailed example
capture are available, if desired)

Greetings,
Jaap