Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Capturing CAN packets

From: Anders Broman <anders.broman@xxxxxxxxxxxx>
Date: Mon, 23 Apr 2012 17:21:19 +0200
Hi,
How does this relate to the existing dissectors packet-socketcan.c and packet-canopen.c ?
Regards
Anders


From: wireshark-dev-bounces@xxxxxxxxxxxxx [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Joakim Wiberg
Sent: den 23 april 2012 17:13
To: wireshark-dev@xxxxxxxxxxxxx
Subject: [Wireshark-dev] Capturing CAN packets

Hi,

 

We have some interns that have written a dissector for CAN and is also have the possibility do dissect protocols running on CAN. To capture the CAN packets special hardware is required, for now they have a simple app that reads the CAN packets and encapsulates them into an Ethernet frame and passes it on to a NIC.

 

Today the CAN data is encapsulated as a in the 802.3 frames using the SNAP header on an unregistered oui. This is a similar to how BACnet MS/TP frames are captured on RS-485 and passes them on to Wireshark.

 

Is this CAN dissector that you could consider adding to Wireshark? If yes what would be the preferable way to encapsulate the CAN frames to have them passed on to Wireshark?

 

Thanks,

Joakim