https://github.com/seemoo-lab/wireshark-awdl

Wireshark Dissector for Apple Wireless Direct Link (AWDL) and Apple's CoreCapture logging framework. Note: the AWDL dissector is part of Wireshark 3.0!
https://github.com/seemoo-lab/wireshark-awdl

apple awdl wireshark-dissector

Last synced: 3 days ago
JSON representation

Wireshark Dissector for Apple Wireless Direct Link (AWDL) and Apple's CoreCapture logging framework. Note: the AWDL dissector is part of Wireshark 3.0!

• Host: GitHub
• URL: https://github.com/seemoo-lab/wireshark-awdl
• Owner: seemoo-lab
• License: other
• Created: 2018-07-16T06:47:45.000Z (over 6 years ago)
• Default Branch: wireshark-2.6.4-awdl
• Last Pushed: 2018-10-30T04:44:29.000Z (about 6 years ago)
• Last Synced: 2024-10-29T17:48:07.664Z (10 days ago)
• Topics: apple, awdl, wireshark-dissector
• Homepage: https://owlink.org
• Size: 352 MB
• Stars: 136
• Watchers: 17
• Forks: 12
• Open Issues: 1
• Metadata Files:
  • Readme: README.DECT
  • Changelog: ChangeLog
  • License: COPYING
  • Authors: AUTHORS

Awesome Lists containing this project

• awesome-network-stuff - **33**星

README

        
Description:

============

DECT pcap files can be obtained by using tools included with the linux

kernel driver for the Dosch-and-Amand COM-ON-AIR cards. The driver is

called com-on-air_cs.

Wireshark cannot directly record from the DECT HW, as the driver

currently lacks a virtual network interface.

There is ongoing work to change this (see this work by Patrick McHardy):

git clone git://git.kernel.org/pub/scm/linux/kernel/git/kaber/dect-2.6.git

git clone git://git.kernel.org/pub/scm/linux/kernel/git/kaber/libnl-dect.git

git clone git://git.kernel.org/pub/scm/libs/netlink/libnl.git

Also needed are a proper linktype value assigned by the libpcap team and

the proper patches for libpcap to support this (the value used in the

patch below is not officially assigned!):

git://git.kernel.org/pub/scm/linux/kernel/git/kaber/libpcap-dect.git

To nicely view DECT pcap files in wireshark, set up a custom layout:

Edit->Preferences...

  User Interface

    Colums

      No.      | Number

      Protocol | Protocol

      Frame    | Custom Column: dect.framenumber

      TA       | Custom Column: dect.cc.TA

      A-Field  | Custom Column: dect.cc.AField

      B-Field  | Custom Column: dect.cc.BField

  OK

Edit->Configuration Profiles...

  New

  Profile Name = dect

  OK