Revision history  [back]

NETCONF goes over the wire so of course Wireshark can capture it.

In my experience, though, NETCONF is usually running over SSH and Wireshark cannot currently decrypt SSH - so you won't be able to see the NETCONF protocol.

If you happen to be using NETCONF over TLS then you're in more luck: if you can decrypt the TLS you'll be able to see the NETCONF.

See also an older question about this.