Added some readme info about Wireshark, extcap, and DLTs.

This commit is contained in:
skarg
2017-08-24 19:16:45 +00:00
parent 0c39a8edaf
commit 4599d725f6
+14 -1
View File
@@ -195,4 +195,17 @@ Locate the extcap search path.
Copy the mstpcap.exe to that folder, which may not exist.
Restart Wireshark, and look for "BACnet MS/TP on COMx" interfaces.
Configure the interface to change baud rate.
Capture directly from the interface.
Capture directly from the interface.
==== Developer Info about Wireshark ExtCap ====
BACnet MS/TP uses a DLT (data link type) requested from and
approved by libPCAP development team, which is 165. Wireshark
includes a dissector that decodes the MS/TP packets when they
use the DLT for MS/TP. Other DLTs exist for other types, and
there are also DLTs set aside as USER DLTs.
See the following URLs for information about ExtCap:
https://github.com/wireshark/wireshark/blob/master/doc/README.extcap
https://github.com/wireshark/wireshark/blob/master/doc/extcap_example.py
https://wiki.wireshark.org/Development/Extcap