https://devzone.nordicsemi.com/f/nordic-q-a/76773/sniffer-nrf-802-15-4-paquets-live-with-python-scriptHello, I want to capture 802.15.4 nRF packets with a python script using the pyshark library and an nRF52840 DK sniffer and an nRF52840 Dongle. the problem is that when I launch my python script I receive 0 packets. on the other hand on Wiresharken-USTelligent Community 13Mon, 28 Jun 2021 14:43:33 GMThttps://devzone.nordicsemi.com/thread/317519?ContentTypeID=1Mon, 28 Jun 2021 14:43:33 GMT137ad170-7792-4731-bb38-c0d22fbe4515:015a7689-7030-4ede-ad56-b613a236d156kacper.szewenko<p>Hi,</p> <p>Unfortunately, I have never used pyshark with LiveCapture API for sniffing packets, but I think you can use the existing implementation of 802.15.4 sniffer:&nbsp;<a href="https://github.com/NordicSemiconductor/nRF-Sniffer-for-802.15.4">https://github.com/NordicSemiconductor/nRF-Sniffer-for-802.15.4</a></p> <p>You can use the <em>extcap_cature</em>&nbsp;API method giving the path to the output pcap file, comport, channel, and metadata to start sniffing. It reads the packets straight from the serial port and creates the .pcap file for logging purposes. Then this file can be opened in python and can be taken into parsing through pyshark&nbsp;- I am using pyshark API:&nbsp;</p> <div><pre class="ui-code" data-mode="text">capture = CaptureFromPipe(pipe=pcap_file_pipe)</pre></div> <div></div> <div> <div>Moreover, pyshark is a wrapper for Tshark and Tshark needs to have a configuration file with the master key to properly decode the packets. In case of running it under Linux the file should be in the directory:</div> <div><pre class="ui-code" data-mode="text">~/.config/wireshark/ieee802154_keys</pre></div> <div></div> <div> <div>and it should contain the master key, e.g. of the file:</div> <div><pre class="ui-code" data-mode="text"># This file is automatically generated, DO NOT MODIFY. &quot;00112233445566778899aabbccddeeff&quot;,&quot;0&quot;,&quot;Thread hash&quot;</pre></div> </div> <div></div> </div> <div></div><div style="clear:both;"></div>