This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Interface for Zigbee (jennic)

0

Dear Sir,

I have wireless sensor network which work on IEEE 802.15.4 which i use Jennic JN51349 evaluation board

I set the microcontroller as sniffer, and i run the sniffer server, and then i make an interface ( Microsoft Loopback adapter)

but when I running the wireshark for capture and analyze the data,, I got no data capture by wire shark when I see the interface details, there is no packet received

why it happened? is there any wrong setting that i set?

thanks a lot best Regards

asked 19 May '13, 08:10

paxdhe's gravatar image

paxdhe
1111
accept rate: 0%


2 Answers:

1

I presume you are using the Jennic plugin for Wireshark as detailed in their Application Note AN1115?

Are you sure you are using the correct version of Wireshark (1.6.5) and have set up your system exactly as described in the AN? Did you follow the guidance in the note:

Note: The loopback adaptor will not become visible in Wireshark until after Windows has been rebooted.

What version of WinPCap do you have installed? WinPCap is responsible for providing the interface list and performing the capture and may have changed if you aren't using the version distributed with Wireshark 1.6.5.

You may have more success asking your question in the Jennic (NXP) forums as the plugin is their code.

answered 20 May '13, 04:16

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

I follow the note AN-1115

the Ms loopback adapter visible in wireshark,

but when I check the status in Loopback adapter the sent but not received to

how can?

I try ask in NXP jennic forum,, and follow the instruction,, but not succed,, no data received into loopback adapter

thanks

(21 May '13, 08:17) paxdhe

Your "answer" has been converted to a comment as that's how this site works. Please read the FAQ for more information.

Are you running any AV or VPN software on the capturing machine? They have been found in the past to interfere with capturing.

(21 May '13, 09:12) grahamb ♦

sorry,

how to rebooted the capturing machine?

I use Wireshark 1.9.2

I have few VPn connection ,, when I running the wire shark I try to disable the LAN ethernet and Wireless Ethernet

So, what are the problem in my setup ?

(22 May '13, 00:23) paxdhe

@paxdhe, Yet again I have had to convert your "answer" to a comment, please take time to read the FAQ and learn to use this site to your best advantage.

Your best chance of success is to follow the instructions in AN-1115 exactly as written. That means using Wireshark 1.6.5, rebooting the XP machine after adding the Loopback Adaptor and all the other fine instructions in the Application note.

(22 May '13, 01:16) grahamb ♦

0

and then i make an interface ( Microsoft Loopback adapter)

WinPcap cannot (properly) capture traffic on a loopback interface.

http://www.winpcap.org/misc/faq.htm#Q-13
http://wiki.wireshark.org/CaptureSetup/Loopback

You can try to capture the traffic with Microsoft Network Monitor then use Wireshark to analyze it.

Regards
Kurt

answered 20 May '13, 03:33

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Can You Guide Me how to use Microsoft Neetwork monitor,, then analyze it with wireshark?

Thanks Best regards

(21 May '13, 10:49) paxdhe

@paxdhe,

Your "answer" has been converted to a comment (again) as that's how this site works. Please read the FAQ for more information.

You'll find operating instructions for Network Monitor on the Microsoft site. Make the required capture and save it from NM and then open the capture in Wireshark.

You didn't answer the questions in my answer above:

Are you using the correct version of Wireshark (1.6.5)? Have you rebooted the capturing machine after adding the loopback adaptor? Do you have any AV or VPN software running on the capturing machine?

(21 May '13, 15:17) grahamb ♦