[Guy Harris <guy@xxxxxxxxxxxx>]

On Sep 19, 2003, at 10:29 AM, Tamhankar, Arundhati wrote:

> I wish to captire traffic on 2 vlans which go to a router. However I 
> can see
> traffic on just 1 vlan. I am connected to the router via a hub. Do I 
> have to
> make any changes in my ethereal config so that I can vew both the 
> vlans?
>
> I do not see a VLAN tag. I can see only 1 type (0x0800) which is IP.

You're probably capturing on a device that's bound to the VLAN from 
which you're seeing traffic, so it's forwarding only traffic on that 
VLAN, and doing so after removing the VLAN tag.

If you have more than one network device that shows up in the 
"Interface:" combo box, try capturing on one of the other ones *if* it 
sounds as if it's also a device for your NIC.

If that doesn't work, or if there's only one network device, you'd have 
to ask the WinPcap developers about this:

	http://winpcap.polito.it/contact.htm

It is not necessarily the case that you *can* capture raw traffic, 
rather than just traffic on your VLAN, on Windows.  (The BSDs, and 
Linux, might not have this limitation, as they create interface devices 
for the physical interfaces, in addition to possibly creating devices 
for VLANs.)