Wireshark on HP Procurve switch

I'm trying to run Wireshark 1.6.5 to monitor all VLAN traffic going to the web by IP address through an HP Procurve 4208vl switch. The PC running Wireshark is in a switch port set to monitor the LAN-side switch port of the web filter.

I see packets, but only from one VLAN. I set the port I'm using with the Wireshark PC (Port 1) to monitor the web filter LAN-side switch port (port 2). I can go into the switch config and change port 2 to VLAN-A (192.168.1.0) and see only the 192.168.1.0 traffic. If I change the port to 192.168.2.0 untagged I only see 192.168.2.0 traffic.

How can I configure the Procurve to see all VLAN traffic on the monitor port?
IntPackAsked:
Who is Participating?
 
Frank MayerConnect With a Mentor Technical Voip SupportCommented:
Hi check the documentation here:
http://www.hp.com/rnd/support/manuals/4200vl.htm
When wading though the manuals i found you can only mirror one VLAN directly with the 4200 switch. So what you should do is mirroring per port and mirror those ports you want to look at to the designated port. It is described in the above manuals.
0
 
jburgaardConnect With a Mentor Commented:
I must admit I have not tryed this, but I am confident
on the procurve-port leading to sniffer you must tag all vlans you want to look at and
the NIC must be able to handle the tagged packets.
http://wiki.wireshark.org/CaptureSetup/VLAN 

HTH
0
 
IntPackAuthor Commented:
Thanks for the help. This is what I thought it was going to be but I just didn't find it in the manual.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.