wireshark/README.DECT
Jörg Mayer 0eddecc248 Andreas Schuler <andreas (A) schulerdev.de>
Updates to the DECT dissector:
- using proto_tree_add_none_format()/proto_tree_add_item() instead of
  proto_tree_add_uint_format() where it makes sense
- fixed display of full slot data
- added some references to documentation
- cleaned up packet length checking
- put descrambled bfield-data in a tree
- cleaned up some afield items
- use custom columns instead adding all infos to COL_INFO
- add some more infos to the columns

Me:
- Replace proto_tree_add_none_format(..., strvar) by
  proto_tree_add_none_format(..., "%s", strvar).
- Fix an unused variable warning.

svn path=/trunk/; revision=33210
2010-06-11 16:11:42 +00:00

42 lines
1.3 KiB
Text

$Id$
Description:
============
DECT pcap files can be obtained by using tools coming with the linux
kernel driver for the Dosch-and-Amand COM-ON-AIR cards. The driver is
called com-on-air_cs.
Wireshark itself cannot directy record from the DECT HW, as the driver
currently lacks a virtual network interface.
There is ongoing work to change this (see this work by Patrick McHardy):
git clone git://git.kernel.org/pub/scm/linux/kernel/git/kaber/dect-2.6.git
git clone git://git.kernel.org/pub/scm/linux/kernel/git/kaber/libnl-dect.git
git clone git://git.kernel.org/pub/scm/libs/netlink/libnl.git
Also needed are a proper linktype value assigned by the libpcap team and
the proper patches for libpcap to support this (the value used in the
patch below is not officially assigned!):
git://git.kernel.org/pub/scm/linux/kernel/git/kaber/libpcap-dect.git
To nicely view DECT pcap files in wireshark, set up a custom layout:
Edit->Preferences...
User Interface
Colums
No. | Number
Protocol | Protocol
Frame | Custom Column: dect.framenumber
TA | Custom Column: dect.cc.TA
A-Field | Custom Column: dect.cc.AField
B-Field | Custom Column: dect.cc.BField
OK
Edit->Configuration Profiles...
New
Profile Name = dect
OK