nexmon – Blame information for rev 1
?pathlinks?
Rev | Author | Line No. | Line |
---|---|---|---|
1 | office | 1 | Description: |
2 | ============ |
||
3 | DECT pcap files can be obtained by using tools included with the linux |
||
4 | kernel driver for the Dosch-and-Amand COM-ON-AIR cards. The driver is |
||
5 | called com-on-air_cs. |
||
6 | |||
7 | Wireshark cannot directly record from the DECT HW, as the driver |
||
8 | currently lacks a virtual network interface. |
||
9 | |||
10 | There is ongoing work to change this (see this work by Patrick McHardy): |
||
11 | git clone git://git.kernel.org/pub/scm/linux/kernel/git/kaber/dect-2.6.git |
||
12 | git clone git://git.kernel.org/pub/scm/linux/kernel/git/kaber/libnl-dect.git |
||
13 | git clone git://git.kernel.org/pub/scm/libs/netlink/libnl.git |
||
14 | Also needed are a proper linktype value assigned by the libpcap team and |
||
15 | the proper patches for libpcap to support this (the value used in the |
||
16 | patch below is not officially assigned!): |
||
17 | git://git.kernel.org/pub/scm/linux/kernel/git/kaber/libpcap-dect.git |
||
18 | |||
19 | To nicely view DECT pcap files in wireshark, set up a custom layout: |
||
20 | |||
21 | Edit->Preferences... |
||
22 | User Interface |
||
23 | Colums |
||
24 | |||
25 | No. | Number |
||
26 | Protocol | Protocol |
||
27 | Frame | Custom Column: dect.framenumber |
||
28 | TA | Custom Column: dect.cc.TA |
||
29 | A-Field | Custom Column: dect.cc.AField |
||
30 | B-Field | Custom Column: dect.cc.BField |
||
31 | OK |
||
32 | |||
33 | |||
34 | Edit->Configuration Profiles... |
||
35 | New |
||
36 | Profile Name = dect |
||
37 | OK |
||
38 | |||
39 |