OS X / nRF Sniffer v2 / Wireshark 2.5.0 Crash

RE: OS X / nRF Sniffer v2 / Wireshark 2.5.0 Crash

Gambanishu — Thu, 04 Jul 2024 18:38:25 GMT

Guys (at Nordic, or Wireshark, or whatever)

This was already an issue 6 years ago. It still crashes. The internet is full of people looking at it stupid, as far as I can see it has never worked. Can you please look into this issue. It looks pretty bad on Nordic Semi that their stuff just plain and simple doesn't work. There is this desktop app , that nRF Connect whatever full of apps. I don't get why that doesn't have a sniffer. The we wouldn't need wireshark at all.

RE: OS X / nRF Sniffer v2 / Wireshark 2.5.0 Crash

mstrouse — Mon, 07 May 2018 15:13:44 GMT

So we've come to a bit of a stop here ... There appears to be a fix for the crash at capture start, but there is now an unresolved crash at capture stop. May be an incompatibility between the version of Qt that ships with El Cap, and the version of Qt that Wireshark is built against. Just not sure at this point. Any other thoughts?

RE: OS X / nRF Sniffer v2 / Wireshark 2.5.0 Crash

mstrouse — Mon, 07 May 2018 15:10:07 GMT

So I've tried this, and it works (it's what I was using before I tried to upgrade to the new V2 of the sniffer. Not sure that helps much ... it's a much older version of wireshark, and uses a 3rd party interface (from RK)...

RE: OS X / nRF Sniffer v2 / Wireshark 2.5.0 Crash

David Edwin — Fri, 04 May 2018 07:28:26 GMT

Can you try the OS X Sniffer for BTLE which uses the native serial driver for OS X ? This should give us some more clues on the issue.

RE: OS X / nRF Sniffer v2 / Wireshark 2.5.0 Crash

mstrouse — Thu, 03 May 2018 15:16:15 GMT

Update. So this appears to have been a legitimate bug in Wireshark (see the bug url above to follow). For those that are having crashing / stability issues when first starting capture, this may be a good fix. Not sure when / if / how this will get pushed out to a release build and / or which version(s). Will update again when I know more.

RE: OS X / nRF Sniffer v2 / Wireshark 2.5.0 Crash

mstrouse — Fri, 27 Apr 2018 19:52:21 GMT

Tried it, same result. Looks like it might be a bug in Wireshark.

RE: OS X / nRF Sniffer v2 / Wireshark 2.5.0 Crash

David Edwin — Fri, 27 Apr 2018 14:15:44 GMT

2.4.6 is what I have mentioned.

RE: OS X / nRF Sniffer v2 / Wireshark 2.5.0 Crash

mstrouse — Thu, 26 Apr 2018 19:10:33 GMT

And one more for those that want to follow ... bugs.wireshark.org/.../show_bug.cgi

RE: OS X / nRF Sniffer v2 / Wireshark 2.5.0 Crash

mstrouse — Thu, 26 Apr 2018 17:17:51 GMT

And another update. I have posted a similar question to the Wireshark forums ... for those that want to follow along: ask.wireshark.org/.../

RE: OS X / nRF Sniffer v2 / Wireshark 2.5.0 Crash

mstrouse — Thu, 26 Apr 2018 16:41:23 GMT

Update .. I have now also tried a pca10040 board ... same result ... crash on capture start.

RE: OS X / nRF Sniffer v2 / Wireshark 2.5.0 Crash

mstrouse — Thu, 26 Apr 2018 15:33:30 GMT

So, no joy ... tried the patched python files, and it still crashes when I start the capture. I did not do a "diff" on the 2 file sets, so I have no idea what the patched set might have done differently. And again, if I remove the nordic files form the extcap dir, the crashing goes away ... I feel that it's got to be something related to the nordic python code, and/or perhaps pyserial.

RE: OS X / nRF Sniffer v2 / Wireshark 2.5.0 Crash

mstrouse — Thu, 26 Apr 2018 15:22:37 GMT

A quick update ... I can "see" and interact with the dongle using pyserial (and it's included example program mintterm.py) ... So I suspect that pyserial might not be the issue. Will keep digging.

RE: OS X / nRF Sniffer v2 / Wireshark 2.5.0 Crash

mstrouse — Thu, 26 Apr 2018 15:20:29 GMT

I have not tried this yet (am about to) ... any idea of how one would normally roll back pyserial to an earlier version? Manually delete and then re-install?

RE: OS X / nRF Sniffer v2 / Wireshark 2.5.0 Crash

mstrouse — Thu, 26 Apr 2018 15:18:33 GMT

So I didn't specifically state this in my original post, but I have tried Wireshark 2.4.2 and 2.4.5 ... same result ... crash.

RE: OS X / nRF Sniffer v2 / Wireshark 2.5.0 Crash

David Edwin — Thu, 26 Apr 2018 14:55:09 GMT

Try the patched python files posted in this answer.

RE: OS X / nRF Sniffer v2 / Wireshark 2.5.0 Crash

homeslashbjrn — Thu, 26 Apr 2018 12:38:47 GMT

Same problem for me, using the following configuration

Mac OS 10.11.6 El Capitan
Python 2.7.10
pyserial 3.4
SEGGER J-Link V6.16c
Wireshark 2.4.5 (v2.4.5-0-g153e867)

Haven't managed to get it work. As far as I remember, downgrading pyserial (regarding this topic) isn't working either.

RE: OS X / nRF Sniffer v2 / Wireshark 2.5.0 Crash

David Edwin — Thu, 26 Apr 2018 08:58:49 GMT

Wireshark 2.5.x is an unstable line, this is the naming convention used by wireshark , where the odd numbers are unstable and the even numbers are stable.

So 2.4.x is stable while 2.5.x is unstable.

You should be using Wireshark 2.4.x line and the 2.4.6 is the latest version I have successfully used. I have used pre-built binaries from the Wireshark website.

**Always use the pre-built versions of Wireshark, we do not support user built versions of Wireshark**

**Use version 2.4.6 binaries as downloaded from the Wireshark website.**