Cisco HDLC capture setup

Some ISDN connections or T1/E1 or other high-speed serial lines might use Cisco HDLC encapsulation rather than PPP encapsulation.

Cisco HDLC capture setup

Capturing on a link to which the machine running Wireshark is connected

On some platforms, Wireshark supports capturing on a Cisco HDLC link to which the machine running Wireshark is connected, so that it can capture Cisco HDLC traffic that the machine in question sends and receives.

Linux

It should be possible to capture on serial links using Cisco HDLC. (XXX - will you see SLARP traffic?)

{Free,Net,Open,DragonFly}BSD

It should be possible to capture on serial links using Cisco HDLC. (XXX - will you see SLARP traffic?)

Capturing on a link between two "other" machines

Endace DAG Cards (Linux, FreeBSD, Windows)

It might be possible, on some operating systems, to attach a machine running Wireshark to a Cisco HDLC link between two other machines, using a DAG card from Endace Measurement Systems. You would need a version of libpcap or WinPcap that supports the DAG API, and would also have to have Endace's software for the DAG card providing that API installed. For libpcap, you'd probably have to install the DAG software and then download the libpcap source from the tcpdump.org Web site, configure, build, and install that software. The DAG cards are supported with libpcap only on Linux and FreeBSD. For further help on this you should contact Endace.

Logix Mocha Wan Card (Windows)

Logix Communications' Mocha Wan adapter can be used to capture traffic on a number of interface types, including HDLC. For further details you should contact Logix Communications.

CaptureSetup/CiscoHDLC