Updated mstpcap documentation.

This commit is contained in:
skarg
2013-09-23 19:28:45 +00:00
parent fcf26c9198
commit 6ff62a6cd7
+24 -14
View File
@@ -5,7 +5,8 @@ and saves the packets to a file in Wireshark PCAP format for
the BACnet MS/TP dissector to read. The filename has a date and time the BACnet MS/TP dissector to read. The filename has a date and time
code in it, and will contain up to 65535 packets. A new file code in it, and will contain up to 65535 packets. A new file
will be created at each 65535 packet interval. The tool can will be created at each 65535 packet interval. The tool can
be stopped by using Control-C. be stopped by using Control-C. The tool can also pipe its output
to Wireshark to be monitored in real-time.
Here is a sample of the tool running (use CTRL-C to quit): Here is a sample of the tool running (use CTRL-C to quit):
D:\code\bacnet-stack>bin\mstpcap.exe com54 38400 D:\code\bacnet-stack>bin\mstpcap.exe com54 38400
@@ -14,12 +15,12 @@ mstpcap: Using \\.\COM54 for capture at 38400 bps.
mstpcap: saving capture to mstp_20110413134119.cap mstpcap: saving capture to mstp_20110413134119.cap
1156 packets 1156 packets
==== MS/TP Frame Counts ==== ==== MS/TP Frame Counts ====
MAC Tokens PFM RPFM DER Postpd DNER TestReq TestRsp MAC Device Tokens PFM RPFM DER Postpd DNER TestReq TestRsp
0 188 4 0 0 0 0 0 0 0 - 188 4 0 0 0 0 0 0
2 189 0 0 0 0 0 0 0 2 - 189 0 0 0 0 0 0 0
3 189 9 0 0 0 0 0 0 3 - 189 9 0 0 0 0 0 0
7 189 60 0 0 0 0 0 0 7 - 189 60 0 0 0 0 0 0
35 188 140 0 0 0 0 0 0 35 - 188 140 0 0 0 0 0 0
Node Count: 5 Node Count: 5
==== MS/TP Usage and Timing Maximums ==== ==== MS/TP Usage and Timing Maximums ====
@@ -37,12 +38,12 @@ D:\code\bacnet-stack>bin\mstpcap.exe --scan mstp_20110413134119.cap
Scanning mstp_20110413134119.cap Scanning mstp_20110413134119.cap
1156 packets 1156 packets
==== MS/TP Frame Counts ==== ==== MS/TP Frame Counts ====
MAC Tokens PFM RPFM DER Postpd DNER TestReq TestRsp MAC Device Tokens PFM RPFM DER Postpd DNER TestReq TestRsp
0 188 4 0 0 0 0 0 0 0 - 188 4 0 0 0 0 0 0
2 189 0 0 0 0 0 0 0 2 - 189 0 0 0 0 0 0 0
3 189 9 0 0 0 0 0 0 3 - 189 9 0 0 0 0 0 0
7 189 60 0 0 0 0 0 0 7 - 189 60 0 0 0 0 0 0
35 188 140 0 0 0 0 0 0 35 - 188 140 0 0 0 0 0 0
Node Count: 5 Node Count: 5
==== MS/TP Usage and Timing Maximums ==== ==== MS/TP Usage and Timing Maximums ====
@@ -65,6 +66,8 @@ The statistics can be emitted from a file using the "--scan" option.
The MS/TP Frame counts use the following abbreviations: The MS/TP Frame counts use the following abbreviations:
Device = Device ID when an I-Am is seen in a capture (trigger with Who-Is).
Tokens = number of Token frames sent from this MAC address. Tokens = number of Token frames sent from this MAC address.
PFM = number of Poll-For-Master frames sent from this MAC address. PFM = number of Poll-For-Master frames sent from this MAC address.
@@ -145,7 +148,6 @@ to be 300 baud.
So to capture at 76800 baud type: mstpcap.exe COM2 300 So to capture at 76800 baud type: mstpcap.exe COM2 300
Linux (used with Debian Lenny and Fedora 15) Linux (used with Debian Lenny and Fedora 15)
http://www.connecttech.com/KnowledgeDatabase/kdb309.htm http://www.connecttech.com/KnowledgeDatabase/kdb309.htm
As root: As root:
@@ -175,3 +177,11 @@ will actually capture at 76800 baud. (76923)
Just navigate (cd bin) to bin folder in the project and type: Just navigate (cd bin) to bin folder in the project and type:
$ ./mstpcap $ ./mstpcap
==== Named Pipe direct to Wireshark ====
Use the named pipe option to send the capture output directly to Wireshark.
On Windows, use \\.\pipe\wireshark as the name, and set that name as the
interface name in Wireshark. On Linux, the named pipe name can be just about
any file name, such as /tmp/wireshark. See:
http://wiki.wireshark.org/CaptureSetup/Pipes