Capture Packets on Router's LAN

Capturing LAN packets can help support engineers analyze issues between a LAN host or server and the router. We can use Wireshark together with the LAN Port Mirror function to capture packets from the router's LAN port.

1. Download and install Wireshark on a computer for packets capturing, and connect the computer to one of the router's LAN port.

 

2. Set up LAN Port Mirror. Go to LAN >> LAN Port Mirror:

  1. Select Enable
  2. Choose Mirror Port as the LAN port to where the computer running Wireshark is connecting.
  3. Choose Mirrored Tx Port and Mirror Rx Port as the LAN port to where the traffic we'd like to monitor is on.
a screenshot of DrayOS LAN Port Mirror

3. Run Wireshark (as administrator), double-click the network Interface connecting to the router.

4. We should see the packets from another LAN port.

5. Wait until you got the packet you need, then click the stop button.

6. Save the file.

7. Disable LAN Port Mirror.

1. Navigate to Configuration > LAN > LAN Port Mirror.

  • Toggle Enabled to activate the port mirroring feature.
  • Select Port2, Port3, or Port4 as the destination port for Mirror Packets to.
  • In the Mirrored Source section:

  • Toggle Enable Fast Path if you want to captured the accelerated packets.
  • Toggle Slow Path if you want to mirror regular traffic.
  • Select the Mirrored Port from which traffic will be mirrored.
  • Click Apply to save the settings.
  • 2. Launch Wireshark on the computer connected to the Mirror Packets To port. (you may need to run it as Administrator.) Select the network interface that connects to the router, then click Start to begin capturing packets.

    3. We should see packets originating from or passing through the mirrored LAN port appearing in the packet capture.

    4. After collecting the packets we need, click the stop button.

    5. Save the file.

    6. After completing the packet capture, disable the Port Mirror function to resume normal operation.

    1. Go to LAN >> Switch >> Mirror:

    • Check Enable
    • Choose Mirroring Port to which the computer is connected
    • Choose Mirrored Port as the LAN interface we would like to capture the packets.
    a screenshot of Vigor3900

    2. Run Wireshark on the computer (you might need to Run As Administrator), choose the network Interface to which the router is connected. Then, click Start.

    a screenshot of Wireshark

    3. We should see packets from the LAN interface.

    a screenshot of Wireshark

    4. After collecting the packets we need, click the stop button.

    a screenshot of Wireshark

    5. Save the file.

    a screenshot of Wireshark

    6. Disable Port Mirror function.

    a screenshot of Vigor3900

    Published On:2016-07-06 

    Share

    Was this helpful?   

    book icon

    Knowledge Base