ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] Filtering multiple VLAN tags

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Mon, 29 Sep 2008 11:40:46 -0600
On Thu, Sep 25, 2008 at 03:53:14PM -0500, NEWMAN Christopher wrote:

> I'm using tshark to parse a captured packet.  Most fields are easy to 
> grab, but I can't figure out how to grab both VLAN tags from a stacked 
> Ethernet frame.  The following command returns the inner (2nd) VLAN 
> ID:
>
>      tshark -r test.pcap -c 1 -T fields -e vlan.id

Do you have a *small* (1 packet is fine) capture file you are able to 
share with us so we can try it ourselves and possibly fix it?


Steve