Added some readme info about Wireshark, extcap, and DLTs.
This commit is contained in:
@@ -195,4 +195,17 @@ Locate the extcap search path.
|
|||||||
Copy the mstpcap.exe to that folder, which may not exist.
|
Copy the mstpcap.exe to that folder, which may not exist.
|
||||||
Restart Wireshark, and look for "BACnet MS/TP on COMx" interfaces.
|
Restart Wireshark, and look for "BACnet MS/TP on COMx" interfaces.
|
||||||
Configure the interface to change baud rate.
|
Configure the interface to change baud rate.
|
||||||
Capture directly from the interface.
|
Capture directly from the interface.
|
||||||
|
|
||||||
|
==== Developer Info about Wireshark ExtCap ====
|
||||||
|
|
||||||
|
BACnet MS/TP uses a DLT (data link type) requested from and
|
||||||
|
approved by libPCAP development team, which is 165. Wireshark
|
||||||
|
includes a dissector that decodes the MS/TP packets when they
|
||||||
|
use the DLT for MS/TP. Other DLTs exist for other types, and
|
||||||
|
there are also DLTs set aside as USER DLTs.
|
||||||
|
|
||||||
|
See the following URLs for information about ExtCap:
|
||||||
|
https://github.com/wireshark/wireshark/blob/master/doc/README.extcap
|
||||||
|
https://github.com/wireshark/wireshark/blob/master/doc/extcap_example.py
|
||||||
|
https://wiki.wireshark.org/Development/Extcap
|
||||||
|
|||||||
Reference in New Issue
Block a user