Note: For a generic switch, the ports don't matter - The switch will automatically learn the location of connected devices.Note: The PCs only have 1 interface, so you can’t connect the wire to the wrong port there.

Make your network look like the network above. Using the “Add a link” button on the left panel, wire up the network using virtual Ethernet cables.Drag an 'Ethernet Switch' onto the network diagram from the panel at left.Drag a “Mikrotik 6.x” router onto the network diagram from the panel at left.If prompted to 'Choose a server', select 'GNS3 VM'. Drag two “VPCS” (Virtual PCs) onto the blank network diagram from the panel at left.Create a “New Blank Project” and call it lab02.Contains the 'Ether2' port of the Router with IP address 172.16.20.254.Contains one VPC with IP address 172.16.20.1.CIDR address notation for subnet: 172.16.20.0/24.Don’t forget to stop the sniffer later, otherwise it will keep running until rebooted. That’s it! You should start to see frames streaming in on the Wireshark display. Next, configure the sniffer tool on the MikroTik box. For streaming wireless sniffer captures (interface wireless sniffer), make sure you have newest Wireshark and newest RouterOS.You may need to disable WCCP protocol in Wireshark (Analyze/Enabled Protocols), as that collides with TZSP and by default frames may be considered WCCP, not TZSP.

Make sure you accept UDP in Wireshark (as TZSP uses UDP to transport data).

To accept only TZSP traffic, Capture Filter like this can be used.

This may be a wired or wireless interface. To accept sniffer TZSP ( TaZmen Sniffer Protocol) stream, you have to set the configuration. I was using MacOS Sierra 10.12.5 Beta (16F67a) and Wireshark 2.2.1 (v2.2.1-0-ga6fbd27 from master-2.2), on a MacBook pro using a 802.11 ac card.įirst, launch Wireshark, and start a capture on the interface that’s connected to the MikroTik box. This was tested on RouterOS v6.38.5 (mipsbe), but it should work mostly the same everywhere. Wireshark is commonly used network protocol analyzer for Unix and Windows, it’s available for free download from project homepage.

Mikrotik wireshark capture