This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hello, I have a Tata photon plus (EC1260) device. How can I use wireshark in combination with this device

Thank you

asked 30 Dec '12, 05:01

Bharathi's gravatar image

Bharathi
1111
accept rate: 0%

edited 24 Jul '13, 12:34

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196


As you did not mention your OS, I assume Windows, as there is only Tata Photon software for Windows.

Well, on Windows, you can only capture traffic of that device, if WinPcap is able to identify ('see') the USB device. That really depends on the driver of the device.

So, please try this:

  • Plug in the USB device
  • Install Wireshark
  • the WinPcap service should be started now. Please check with the following command:

sc query npf

You should see

STATE : 4 RUNNING

  • Connect to the internet with the Tata Dialer software
  • Run dumpcap in a DOS window

dumpcap -D -M

If you can see the device in the output of dumpcap (identify it by its IP address), then you can (most certainly) capture traffic on it (read the Wirshark Wiki how to do that).

If you can't see the device, and the NPF service is running (sc command above), then you are (most certainly) out of luck, as WinPcap does not detect that kind of device.

BTW: Please also read the USB Capture wiki.

http://wiki.wireshark.org/CaptureSetup/USB

UPDATE: On Ubuntu the USB 3G modem will be used as a serial connection /dev/ttyUSB0. So, you should be able to capture traffic on it, as mentioned in the USB sniffing wiki for Linux.

If that does not work, you can still try one of the serial port sniffers (no pcap output!).

http://linux.die.net/man/1/slsnif
http://jpnevulator.snarl.nl/
http://freecode.com/projects/linuxserialsniffer
http://code.google.com/p/uscmon/

Regards
Kurt

permanent link

answered 30 Dec '12, 14:56

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 31 Dec '12, 01:55

Thank You. I should have specified that I am using Ubuntu 12.04 as my OS. Im sorry about not having done that.

(31 Dec '12, 01:20) Bharathi

well, are you able to connect to the internet with that device on Ubuntu? If so, do you see any new ethernet interface (eth1, eth2)? If yes, then just capture on eth1,eth2. If there is no new ethernet device, you can still try to capture data on the USB bus. Please read the USB wiki I already mentioned.

If you cannot connect to the internet on Ubuntu, then there is no need to capture data, as there will be none ;-)

(31 Dec '12, 01:30) Kurt Knochner ♦

see my UPDATE in the answer.

(31 Dec '12, 01:56) Kurt Knochner ♦

On Linux, if your 3G modem is connected to the Internet, there will probably be a PPP device of some sort for it. You can capture on that.

permanent link

answered 24 Jul '13, 14:21

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×154
×1

question asked: 30 Dec '12, 05:01

question was seen: 3,416 times

last updated: 24 Jul '13, 14:21

p​o​w​e​r​e​d by O​S​Q​A