[kusunoki@xxxxxxxxxxxxxxxxxxxxx]

Ethereal Can the windows version capture 802.1Q correctly? 
It tested. 
It seems that the portion of 802.1Q is missing in windows2K. 
The packet is not captured in windows XP. 
With the linux version, it is capturing correctly.

How is it in your environment?

win2K is Japanese and Professional version.
pcap is 2.2. ethereal version 0.9.2.

windows XP is Japanese, Professional version
pcap is 2.3 beta. ethereal is 0.9.2.

linux is Vine Linux 2.1. 
ethereal is 0.9.1.

--- windows 2K---
Frame 3 (98 on wire, 98 captured)
    Arrival Time: Mar 11, 2002 10:51:03.289699000
    Time delta from previous packet: 1.665721000 seconds
    Time relative to first packet: 3.700950000 seconds
    Frame Number: 3
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II
    Destination: 00:06:28:28:88:c0 (Cisco_28:88:c0)
    Source: 00:50:19:00:7d:5e (SPRING_00:7d:5e)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 192.168.230.1 (192.168.230.1), Dst Addr: 192.168.230.254 (192.168.230.254)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 84
    Identification: 0x0030
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 29
    Protocol: ICMP (0x01)
    Header checksum: 0x4f28 (correct)
    Source: 192.168.230.1 (192.168.230.1)
    Destination: 192.168.230.254 (192.168.230.254)
Internet Control Message Protocol
    Type: 8 (Echo (ping) request)
    Code: 0 
    Checksum: 0x4ef7 (correct)
    Identifier: 0x0001
    Sequence number: cf:2a
    Data (56 bytes)

Frame 4 (98 on wire, 98 captured)
    Arrival Time: Mar 11, 2002 10:51:03.290526000
    Time delta from previous packet: 0.000827000 seconds
    Time relative to first packet: 3.701777000 seconds
    Frame Number: 4
    Packet Length: 98 bytes
    Capture Length: 98 bytes
Ethernet II
    Destination: 00:50:19:00:7d:5e (SPRING_00:7d:5e)
    Source: 00:06:28:28:88:c0 (Cisco_28:88:c0)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 192.168.230.254 (192.168.230.254), Dst Addr: 192.168.230.1 (192.168.230.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 84
    Identification: 0x0030
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: ICMP (0x01)
    Header checksum: 0x6d27 (correct)
    Source: 192.168.230.254 (192.168.230.254)
    Destination: 192.168.230.1 (192.168.230.1)
Internet Control Message Protocol
    Type: 0 (Echo (ping) reply)
    Code: 0 
    Checksum: 0x56f7 (correct)
    Identifier: 0x0001
    Sequence number: cf:2a
    Data (56 bytes)


--- linux ------
Frame 71 (102 on wire, 102 captured)
    Arrival Time: Mar 11, 2002 12:51:09.316507000
    Time delta from previous packet: 0.022085000 seconds
    Time relative to first packet: 2.207854000 seconds
    Frame Number: 71
    Packet Length: 102 bytes
    Capture Length: 102 bytes
Ethernet II
    Destination: 00:06:28:28:88:c0 (Cisco_28:88:c0)
    Source: 00:50:19:00:7d:5e (SPRING_00:7d:5e)
    Type: 802.1Q Virtual LAN (0x8100)
802.1q Virtual LAN
    000. .... .... .... = Priority: 0
    ...0 .... .... .... = CFI: 0
    .... 0000 0000 1100 = ID: 12
    Type: IP (0x0800)
Internet Protocol, Src Addr: 192.168.230.1 (192.168.230.1), Dst Addr: 192.168.230.254 (192.168.230.254)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 84
    Identification: 0x0028
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 29
    Protocol: ICMP (0x01)
    Header checksum: 0x4f30 (correct)
    Source: 192.168.230.1 (192.168.230.1)
    Destination: 192.168.230.254 (192.168.230.254)
Internet Control Message Protocol
    Type: 8 (Echo (ping) request)
    Code: 0 
    Checksum: 0x4f20 (correct)
    Identifier: 0x0001
    Sequence number: cf:01
    Data (56 bytes)

Frame 72 (102 on wire, 102 captured)
    Arrival Time: Mar 11, 2002 12:51:09.317340000
    Time delta from previous packet: 0.000833000 seconds
    Time relative to first packet: 2.208687000 seconds
    Frame Number: 72
    Packet Length: 102 bytes
    Capture Length: 102 bytes
Ethernet II
    Destination: 00:50:19:00:7d:5e (SPRING_00:7d:5e)
    Source: 00:06:28:28:88:c0 (Cisco_28:88:c0)
    Type: 802.1Q Virtual LAN (0x8100)
802.1q Virtual LAN
    000. .... .... .... = Priority: 0
    ...0 .... .... .... = CFI: 0
    .... 0000 0000 1100 = ID: 12
    Type: IP (0x0800)
Internet Protocol, Src Addr: 192.168.230.254 (192.168.230.254), Dst Addr: 192.168.230.1 (192.168.230.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 84
    Identification: 0x0028
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: ICMP (0x01)
    Header checksum: 0x6d2f (correct)
    Source: 192.168.230.254 (192.168.230.254)
    Destination: 192.168.230.1 (192.168.230.1)
Internet Control Message Protocol
    Type: 0 (Echo (ping) reply)
    Code: 0 
    Checksum: 0x5720 (correct)
    Identifier: 0x0001
    Sequence number: cf:01
    Data (56 bytes)

-----------------------------------------
kusunoki@xxxxxxxxxxxxxxxx