This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

alt textalt textDear Sirs,

I'm capturing frames of Modbus RTU protocol through a RS485/USB converter using USBPcap plugin. The problem is that I want to see the frames in Modbus RTU protocol because it appears as USB encapsulated. Is it possible to change the protocol/encapsulated from USB to Modbus RTU? How?

Thank you in advanced

Regards,

Julio

asked 01 Mar '16, 00:10

JCada's gravatar image

JCada
6113
accept rate: 0%

edited 01 Mar '16, 00:19

Can you share a capture in a publicly accessible spot, e.g. CloudShark, Google Drive, Dropbox etc.?

(01 Mar '16, 02:01) grahamb ♦

@JCada, let me draw your attention to the fact that USB dissectors may need to "see" the enumeration phase in order to choose the proper sub-dissector for the (otherwise pretty generic) USB frame contents - in this case, the data must be dissected as serial communication over the prolific chip, which in turn may be dissected as Modbus RTU. I do not promise it will work, but try to capture the following way:

  1. stop the Modbus control application and gracefully unplug the USB Modbus adaptor

  2. start capturing on the relevant root hub (#2 in your case)

  3. plug the USB Modbus adaptor back to the same socket where it was before

  4. start the Modbus control application and capture the issue you are interested in

  5. stop the capture

  6. see whether it has helped

  7. if not, save and publish the capture as @grahamb has suggested, otherwise there is little chance you could get more help unless someone has exactly the same experience and has managed to solve it in the past.

(01 Mar '16, 03:29) sindy
Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×20

question asked: 01 Mar '16, 00:10

question was seen: 3,003 times

last updated: 01 Mar '16, 03:29

p​o​w​e​r​e​d by O​S​Q​A