wireshark 2.0.1 and nRFsniffer

RE: wireshark 2.0.1 and nRFsniffer

SRA — Tue, 23 Jan 2018 00:20:38 GMT

Still working on it? Trying to get Wireshark 2.5 up and it's not going great.

RE: wireshark 2.0.1 and nRFsniffer

SRA — Mon, 22 Jan 2018 22:15:26 GMT

Hey any update on this? I had Wireshark 2.4.x running great. Removed it to install 2.5 because BLE5 opcodes weren't supported and now can't get anything to run. Pressing w in Sniffer doesn't launch WS, pipes aren't found, DLT_User10=157 doesn't seem to do anything. I wondrer if there is a new command to launch directly from command line that will do it, one that doesn't specify pipes?

RE: wireshark 2.0.1 and nRFsniffer

Stig — Wed, 14 Dec 2016 13:09:39 GMT

As of today the development version of Wireshark does ignore loading the copied nordic_ble.dll. This should remove the warnings from Wireshark when starting a capture.

RE: wireshark 2.0.1 and nRFsniffer

Martin Roa Villescas — Wed, 02 Nov 2016 12:29:04 GMT

Still working on it?

RE: wireshark 2.0.1 and nRFsniffer

Julien — Wed, 10 Aug 2016 11:40:23 GMT

Hello,

Wireshark support for version 2.0.x is definitelly in progress. The latest devloppement build here already support the nordic_BLE metadata. The pluggin dissector that was needed for versions 1.10.x has been fully integrated into wireshark sources and is not needed anymore. This means any Wireshark version above 2.3.0 (at the day of this post we are at 2.1.1 only) will nativelly support nordic_ble metadata.

For the "simple user" with NRFsniffer1.0.1 here is a basic help on how to use wireshark 2.3.0 or more (note it will be simplified if Nordic does an update of it's nRFsniffer):

open the sniffer
open wireshark
go to capture->options->manage interfaces...->pipes
add \\.\pipe\wireshark_nordic_ble in the field
press OK and start the capture on this interface (for me I have to press several times for it to work)

For the first time only you open Wireshark:

go to edit->preferences->protocols->DLT_USER
edit the encapsulation table and add "user10 (DLT=157)" with "nordic_ble" in payload protocol field.

Message for Nordic people: Please do an update to nRFsniffer so that the tool does not copy the dll anymore for Wireshark versions 2.3.0 and above. This is a realy easy update but will help a lot for long term support of BLE.

Thank you to Wireshark people that have integrated the plugin and for theyr great job on this tool.

info sources

=====================================

EDIT July 2017 => new release 2.4.0 of wireshark has easier procedure

For the "simple user" with NRFsniffer1.0.1 here is a basic help on how to use wireshark 2.4.0 or more (note it could be simplified if Nordic does an update of it's nRFsniffer):

open the sniffer
press w as explained in docuementation

For the first time only you open Wireshark:

go to edit->preferences->protocols->DLT_USER
edit the encapsulation table and add "user10 (DLT=157)" with "nordic_ble" in payload protocol field.

RE: wireshark 2.0.1 and nRFsniffer

Julien — Fri, 12 Feb 2016 10:05:09 GMT

Thank you for answer

RE: wireshark 2.0.1 and nRFsniffer

Hung Bui — Wed, 10 Feb 2016 11:28:00 GMT

Hi Julien,

We are working on the new release of the sniffer that may support wireshark 2.x, but I don't know when it will be ready. For now please use wireshark v1.10 you can find it here.