https://gitlab.com/wireshark/wireshark

Wireshark's official code repository. You can keep the releases coming by donating at https://wiresharkfoundation.org/donate/.
https://gitlab.com/wireshark/wireshark

packet capture protocol analysis tshark wireshark

Last synced: 6 days ago
JSON representation

Wireshark's official code repository. You can keep the releases coming by donating at https://wiresharkfoundation.org/donate/.

• Host: gitlab.com
• URL: https://gitlab.com/wireshark/wireshark
• Owner: wireshark
• License: gpl-2.0+
• Created: 2018-08-10T20:58:07.700Z (about 6 years ago)
• Default Branch: master
• Last Synced: 2024-10-20T09:45:52.908Z (20 days ago)
• Topics: packet capture, protocol analysis, tshark, wireshark
• Stars: 1,127
• Forks: 1,224
• Open Issues: 986
• Metadata Files:
  • Readme: README.DECT
  • Changelog: ChangeLog
  • Contributing: CONTRIBUTING.md
  • License: COPYING
  • Code of conduct: CODE_OF_CONDUCT.adoc

Awesome Lists containing this project

• awesome-mysql - Wireshark - a protocol analyzer that can decode the MySQL protocol. (Analysis)

README

        
Description:

============

DECT pcap files can be obtained by using tools included with the linux

kernel driver for the Dosch-and-Amand COM-ON-AIR cards. The driver is

called com-on-air_cs.

Wireshark cannot directly record from the DECT HW, as the driver

currently lacks a virtual network interface.

There is ongoing work to change this (see this work by Patrick McHardy):

git clone git://git.kernel.org/pub/scm/linux/kernel/git/kaber/dect-2.6.git

git clone git://git.kernel.org/pub/scm/linux/kernel/git/kaber/libnl-dect.git

git clone git://git.kernel.org/pub/scm/libs/netlink/libnl.git

Also needed are a proper linktype value assigned by the libpcap team and

the proper patches for libpcap to support this (the value used in the

patch below is not officially assigned!):

git://git.kernel.org/pub/scm/linux/kernel/git/kaber/libpcap-dect.git

To nicely view DECT pcap files in wireshark, set up a custom layout:

Edit->Preferences...

  User Interface

    Columns

      No.      | Number

      Protocol | Protocol

      Frame    | Custom Column: dect.framenumber

      TA       | Custom Column: dect.cc.TA

      A-Field  | Custom Column: dect.cc.AField

      B-Field  | Custom Column: dect.cc.BField

  OK

Edit->Configuration Profiles...

  New

  Profile Name = dect

  OK