I have developed a python script to sniff the OpenThread network using the Nrf802154Sniffer() library, which generates a pcap file.
I used it with the nRF Sniffer hardware (nRF52840 DK and nRF52840 Dongle).
The problem is that in the pcap file generated, I found that there are packets that are not well analyzed, but in Wireshark it sniffs packets well.
Do you have any idea where this problem comes from.
thank you in advance
Best regards,
Ayoub GH
the problem is that when I sniff with a python script, the packets are not well analyzed. but when I use Wireshark the packets are well captured.
Attached is the screenshot of the Pcap file generated with the python script and the Wireshark capture.
in the attached photo the colored lines (orange, blue, green) in the python script should be like the colored lines in Wireshark.
We also note that the time corresponds well to what is captured by Wireshark, but the capture stops in the IEEE 802.15.4 layer instead of going to the CoAP layer
Note: the sniff with python and with Wireshark are launched at the same time
the problem is that when I sniff with a python script, the packets are not well analyzed. but when I use Wireshark the packets are well captured.
Attached is the screenshot of the Pcap file generated with the python script and the Wireshark capture.
in the attached photo the colored lines (orange, blue, green) in the python script should be like the colored lines in Wireshark.
We also note that the time corresponds well to what is captured by Wireshark, but the capture stops in the IEEE 802.15.4 layer instead of going to the CoAP layer
Note: the sniff with python and with Wireshark are launched at the same time
I've forwarded these to one of our WireShark experts. He replies that it works for him. What version of Wireshark are you running?
Here is the "failed" file at his end. Note that without encryption key, it is not possible to see CoAP content:
I use Wireshark version 3.4.6
For the encryption key here is the screenshot:
Best regards,
Ayoub GH
