According to the Wikipedia page to which I added a link in your question, "Electrically, NMEA 2000 is compatible with the Controller Area Network ("CAN Bus") ...", so, if it uses CAN as the link layer, whatever mechanisms can be used to capture CAN traffic should work for NMEA 2000 as well.
On Linux, libpcap supports capturing on CAN interfaces, so you could capture traffic going to and from the machine; I don't know whether it supports passive sniffing or not.
On Windows, apparently a company named 8devices has an extcap module that can be used to capture CAN traffic using their USB2CAN devices. They may also support it on Linux, although that might require additional software (libpcap changes, extcap module) from a third party.
As for dissecting the traffic, Wireshark can dissect CAN traffic, but might not support dissecting the rest of the NMEA 2000 stack. There's no person or persons responsible for developing Wireshark dissection capabilities - new protocol support is added if somebody decides to write code for the protocol - so somebody will be developing it only if they decide to do that.
NMEA is something I once had a casual interest in - see Bug 6155.
Before anyone could reasonably write a dissector for this traffic, protocol specs and sample capture files are a must. Even with those things, there are no guarantees that anyone would write one, but that'd be the first step. The protocol specification may be publicly available, in which case a link to it would be helpful.
I no longer have the free time I used to enjoy, so please don't expect any commitment from me personally ... but on the other hand, it's not entirely out of the question that I might work on something like this either. Maybe opening a Wireshark Bug Report with links to specs, sample packet captures would be a good start.
Asked: 2020-06-20 23:34:33 +0000
Seen: 1,470 times
Last updated: Jun 21 '20
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
