Re: Extracting outer MAC Address

[Guy Harris <guy () alum mit edu>]

On Jan 18, 2015, at 10:00 PM, Rayne <hjazz6 () ymail com> wrote:

> Hi all,
>
> I have vlan packets that contain 2 Ethernet headers,

I.e., you have some form of VLAN other than an IEEE VLAN?

*IEEE* VLANs do not have two full Ethernet headers; they have a regular Ethernet header, with a destination address, a 
source address, and a type/length field, with the type/length field having a type value such as 0x8100 or 0x9100.  
That's followed by a VLAN header with a priority code point, drop eligible indicator, VLAN ID, and type field.

What sort of VLAN is this?  Can Wireshark dissect it?
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe