dSPACE V2Gshark Wireshark Plugin

Overview

This Wireshark plugin allows to analyze and decode packets between electric vehicles (EV) and charging stations (EVSE), also known as V2G messages.

ISO 15118-2 Overview

Features

Overview

Supports decoding of:
- V2GTP layer (Vehicle to Grid Transport Protocol)
- SAP messages (Supported App Protocol)
- SDP messages (SECC Discovery Protocol)
- DIN 70121 messages
- ISO 15118-2 messages
- ISO 15118-20 messages (preliminary support)
Additional analysis features:
- Validation of V2G messages according to XSD specification
- Certificate information details for Plug & Charge (PnC)
- Live TLS decryption
- LLC diagnostics via HomePlug AV packets for sniffer and debug packets
Automatic schema detection
- Detect schema automatically in case of missing SDP or SAP
Color filter for V2G packets
Filter buttons for V2G packets
Wireshark I/O Graph support for V2G packets

Live TLS Decryption

The plugin processes a TLS master secret disclosure packet after handshake to decode the following V2G session.
The disclosure message is a UDP packet within the source port range 49152-65535 (see Wireshark protocol settings) containing the ASCII string CLIENT_RANDOM <32-byte client random> <48-byte master secret> as payload data (TLS 1.2). This disclosure message has to be sent from one of the communication partners in a testing environment.
For TLS 1.3 decryption you have to provide different secrets: CLIENT_HANDSHAKE_TRAFFIC_SECRET, SERVER_HANDSHAKE_TRAFFIC_SECRET, EXPORTER_SECRET, CLIENT_TRAFFIC_SECRET_<number>, SERVER_TRAFFIC_SECRET_<number>. You can send one UDP packet for each secret or combine the secrets in one UDP packet (separated by line breaks).
In order to autodecrypt charging sessions using non-GUI versions of Wireshark (e.g. tshark), the full PCAP must be parsed twice. This is because there is no matching redissection trigger available in the Wireshark API.

Wireshark I/O Graph

This optional feature updates the Wireshark I/O Graph preferences to display a V2G session. The graph can be accessed via 'Statistics' -> 'I/O Graphs' (shortcut: Alt + S + I).
The graph displays the data in 1 second intervals. This can be changed using the drop down menu at the bottom.
To simplify the visualisation, some V2G related signals (e.g., MaxVoltage) are disabled by default. They can be enabled using the check boxes in the selection view.
Click on a packet in the graph to inspect it in the Wireshark main window. Press the SPACE key to activate a helper line on the graph if you need more precision.

Requirements

Wireshark (64 bit) 3.5.0 or higher
Operating Sytems:
- Windows 7 or higher
- Linux x64 (see Limitations)
- Mac OS currently not supported

Installation notes

The installer can be downloaded from GitHub Releases
To use the plugin without installer, download the zipped files from GitHub Releases and copy its content manually into your Wireshark installation or into your personal plugin directory (Windows: %appdata%/wireshark/, Linux: ~/.local/lib/wireshark/). The filter buttons, color filter and I/O Graph configuration must be added manually in this case.
When updating Wireshark, please reinstall the plugin to avoid any warnings
Not compatible with other V2G dissector plugins. Please uninstall these plugins before installing dsV2Gshark.
Not compatible with 32 bit versions of Wireshark.
Updates of the plugin can be performed directly without uninstalling the old version.
Installation size is about 10 MB
Supports normal and portable version of Wireshark
Filter buttons and color filters will be installed for the current user only. In multi-user environments, the plugin must be installed for each user to enable these two optional features.

Limitations

ISO 15118-20 is not fully supported yet
- please let us know if you encounter incorrectly decoded packets
Linux
- No installer, see Installation Notes. Make sure you have read permissions for all files.
- Filter buttons and color filters must be added manually
- I/O graph must be configured manually
- The libraries you find in GitHub Releases are built for Lua 5.2. However, some Linux distributions (e.g. Fedora 39 and below) still use Lua 5.1. In that case, you will need to built the libaries yourself using the following commands:
```
export LUAFLAGS="-I$(pkg-config --variable=includedir lua51)"
cd V2G_Libraries
./build_all_linux.sh
```
  The built libraries can then be found in V2G_Libraries\CertificateInfos\bin and V2G_Libraries\V2GDecoder\bin.

Support

If you encounter any problems, feel free to open an issue or contact us at support@dSPACE.de
We appreciate all contributions, from reporting bugs to implementing new features

Further notes

When sniffing V2G communication, lost packets may occur, which cause corrupted TCP/TLS sessions. In that case, it may help to activate the option to ignore Message Authentication Code (MAC) check failures in the Wireshark TLS protocol settings.
This option can be found under Wireshark Preferences - Protocols - TLS
This plugin was built and tested with Wireshark 4.2.5
The EXI decoding is based on cbExiGen