VLAN capture setup

OS: windows 7

Adapter: Intel

Yuan Lee, Application Engineer, ICG, Advantech,, 2014/11/17

1. Open regedit

Start search [regedit]

2. HKEY_LOCAL_MACHINE

The HKEY_LOCAL_MACHINE subtree contains information about the local

computer system, including hardware and operating system data, such as bus type,

system memory, device drivers, and startup control parameters.

3. HKEY_LOCAL_MACHINE\SYSTEM

The subkeys in the HKEY_LOCAL_MACHINE\SYSTEM key store entries for

the current control set and for other control sets that can be used, or have been

used, to run Windows. Windows maintains at least two control sets to ensure that

the system always starts.

4. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001

The ControlSet00n subkeys represent a control set for the system.

The numbered ControlSet00n subkeys, such as ControlSet001 and

ControlSet002, contain control sets that can be used to start and run Windows.

Most systems have two numbered control sets, an original and a backup copy of

a control set that has been used to start the system successfully, but the system

can maintain as many as four control sets. Windows maintains backup copies so

that you can undo configuration changes that might otherwise prevent you from

starting the system.

Windows identifies the control set that was last used successfully, the current

control set , and the default control set. These designations are stored in the

Select subkey.

Windows automatically maintains the control sets and selects one of them when

the system starts. It bases this selection on settings in the Select subkey and on

the success or failure of system startup. When the system starts, users can also

select the LastKnownGood control set during the boot loader procedure.

All the numbered control set subkeys, including the one that appears in the

CurrentControlSet subkey, can have the same subkeys and entries. In this

reference, these subkeys are entries are listed under the CurrentControlSet

subkey.

5. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control

The Control subkey and its subkeys contain entries that control system startup,

such as the subsystems to load and the size and location of paging files .

Activation method

You must restart the system before any changes in the Control subkey take effect.

6. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\

{4D26E972-E325-11CE-BFC1-08002BE10318}

Network Adapter

Class=Net

{Class-GUID}={4D26E972-E325-11CE-BFC1-08002BE10318}

7. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\

{4D26E972-E325-11CE-BFC1-08002BE10318}\000n

Device-number (000n)

A Device-number (000n) subkey represents a particular device.

The Device-number (000n) subkeys in your registry are named by ascending,

4-digit numeric codes, beginning with 0000. Each subkey represents a particular

device that is an instance of the class. These subkeys store data that applies only

to that device.

The numbers of the subkeys are determined by the order in which the devices

were enumerated to your system. They are not intrinsic to the device.

Because the Device-number (000n) subkeys are hardware specific, their contents

vary widely. The Device-number (000n) subkeys on your computer might look

quite different from the attributes described in this reference.

Get the Network-adapter device-number

1. Click Start > Control Panel.

2. Click System and Security.

3. Under System, click Device Manager.

4. Click the pointer symbol in front of Network Adapters to expand the section.

5. Right-click the network adapter.

6. Click Properties.

7. Click Details tab

8. Choose Driver Key under Property

9. Value shows the Device number

{4d36e972-e325-11ce-bfc1-08002be10318}\0007

8. Create a new Dword under

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\

{4D26E972-E325-11CE-BFC1-08002BE10318}\000n

Value name: MonitorMode

Value data: 1

Base: Hexadecimal

Value name depends on Adapter Driver

Adapter Driver Registry Key

e1g, e1e, e1y MonitorModeEnable

e1c, e1d, e1k, e1q, e1r, ixe, ixn, ixt MonitorMode

When creating or changing registry dword MonitorModeEnabled, set the dword

value to one of the following:

•0 - disabled (Do not store bad packets, Do not store CRCs, Strip 802.1Q vlan tags)

•1 - enabled (Store bad packets. Store CRCs. Do not strip 802.1Q vlan tags)

When creating or modifying registry dword MonitorMode, set the dword value

to one of the following options:

•0 - disabled (Do not store bad packets, Do not store CRCs, Strip 802.1Q vlan

tags)

•1 - enabled (Receive bad/runt/invalid CRC packets. Leave CRCs attached to the

packets. Do not strip VLAN tags and ignore packets sent to other VLANs as per

normal operation.)

To understand which driver to use

1. Click Start > Control Panel.

2. Click System and Security.

3. Under System, click Device Manager.

4. Click the pointer symbol in front of Network Adapters to expand the section.

5. Right-click the network adapter.

6. Click Properties.

7. Click Driver tab

8. Click driver details

9. Driver files show the driver which to use

9. Restart the system.

10. Reference: www.intel.com, msdn.microsoft.com