search

g-oikonomou / sensniff

Live Traffic Capture and Sniffer for IEEE 802.15.4 networks
BSD 3-Clause "New" or "Revised" License
89 stars 58 forks source link

Sensniff & foren6 #6

Closed arurke closed 8 years ago

arurke commented 9 years ago

Hi, not an issue, but you can label as question?

Have you tried combining CC2531 USB, sensniff and the foren6 tool? I am not sure about the correct configuration in foren6 for this, so I tried different source combinations: pcap file, FIFO file, directly from ttyACM1 etc. without any luck.

Regards, Andreas U.

g-oikonomou commented 9 years ago

I know of Foren6, but never tried to combine the two. Can Foren6 read PCAP from a FIFO? This is what sensniff does.

Might be worth pinging Laurent and Sébastien but I'm on mobile device and I cannot remember their GH aliases!

arurke commented 9 years ago

There is actually a separate source-type called "sensnif" but I cannot find any doc. around it. Also type snif for contiki-based sniffers, and then pcap for pcap-files. I think I went through all combinations of these and the pcap/non-pcap output from sensniff.

As you said, maybe @laurentderu or @sdawans can shed some light.

laurentderu commented 9 years ago

Foren6 is able to use any pcap source which behave like a FIFO, so it works with the sensniff application. However this mode is not optimal and sometimes the FIFO gets stuck and stops working.

In the develop branch of Foren6 we have added support for the raw sensniff protocol, meaning that you can directly interface Foren6 with a sniffer without the sensniff application. We should update the documentation and release it as it seems mature.

arurke commented 9 years ago

I believe I tested using the sensniff source-type (although I believe I was on the master branch) directly on the /dev/ttyACMx without any luck. I will re-visit this when I have time and test again, thanks for your feedback.

laurentderu commented 9 years ago

I will crosscheck too, maybe the top repository is referencing an older version of capture submodule.

arurke commented 8 years ago

I revisited this using latest sensniff and master branch of Foren6 - works like a charm on my CC1310em on SRF-board. I tried both using the sensniff device as source and also the pcap from sensniff.py (which also lets you watch real-time both in foren6 and wireshark (might come in handy)).