New answers tagged packet-capture
It seems the vlan filter shifts the packet contents.... http://www.christian-rossow.de/articles/tcpdump_filter_mixed_tagged_and_untagged_VLAN_traffic.php
WireShark sits too low in the network stack to have any information on which processes sent or received traffic. The trick is to know something about what you're looking for - it shouldn't take that long to isolate traffic by Source IP, Destination IP, Source Port or Destination Port.
Top 50 recent answers are included