following a trace on WS, from a PCAP written by another prog.

asked 2019-09-16 08:24:03 +0000

apku04
1 ●1 ●1 ●1

Hi,

A short description of my setup:

A Raspberry-pi with a LoRa receiver, here I am continuously dumping the received LoRaWan packets to a PCAP file, after each received packet I write the content to a PCAP file and fflush the buffer.

The PCAP file is stored on a samba folder on the RPi.

The shared folder is accessed by a windows PC, where wireshark is opend.

What I am looking for is to view the LoRa capturing in real-time from my wireshark.

Problem: As you might already have guessed, then this is not working I need to close and reopen the file each time I need the latest capture. I dont know if this (real-time monitoring) is possible or am i missing something / some feature that might help me out here?

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2019-09-16 08:32:13 +0000

SYN-bit

18344 ●9 ●301 ●255 https://SYN-b.it

You can use sshdump to capture live from a network interface on a different system. Does that suit your needs?

edit flag offensive delete link

Comments

sound like a plan, let me try this out, i need to learn a bit about this extcap feature on wireshark :) and thanks for your input

apku04 ( 2019-09-16 09:26:02 +0000 )edit

You're welcome... and yes, I need to explore the extcap feature some more too, as I only know that it exists and is useful, but I have not played with it yet (shame on me ;-))

SYN-bit ( 2019-09-16 09:59:17 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2019-09-16 08:24:03 +0000

Seen: 220 times

Last updated: Sep 16 '19

following a trace on WS, from a PCAP written by another prog. edit