Capture Packets on Router's WAN
Having WAN packets would be helpful for support engineers to analyze issues about WAN connection. We can use Wireshark with Port Mirror function of the router to capture the packets on router's WAN. However, Port Mirroring will affect the router's performance, so we should always disable it when not doing packet capture.
To get the router's WAN packet, first, you need to install a packet sniffer tool (e.g., Wireshark) on your computer. Then, follow the steps below to do port mirroring.
1. Go to LAN >> LAN Port Mirror:
- Select Enable
- Select Mirror Port as the LAN port to which the computer is connected.
- Check Mirrored Tx Port and Mirrored Rx Port for the WAN interface we would like to capture the packets.
2. Run Wireshark on the computer (you might need to Run As Administrator), choose the network Interface to which the router is connected. Then, click Start.
3. We should see packets from the WAN interface.
4. After collecting the packets we need, click the stop button.
5. Save the file.
6. Disable Port Mirror function.
NOTE: For the Vigor Router that doesn't support LAN Port Mirror or WAN port as a mirrored port, please connect a hub between the ISP modem and Router's WAN port, and do the packet capture from the hub.
1. Go to WAN >> Switch >> Mirror:
- Check Enable
- Choose Mirroring Port to which the computer is connected
- Choose Mirrored Port as the WAN interface we would like to capture the packets.
2. Run Wireshark on the computer (you might need to Run As Administrator), choose the network Interface to which the router is connected. Then, click Start.
3. We should see packets from the WAN interface.
4. After collecting the packets we need, click the stop button.
5. Save the file.
6. Disable Port Mirror function.
Published On: 2016-07-06
Was this helpful?