<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    Hi Mark,<br>
    <br>
    Sorry, I missed last night's request for this.  I have a number of
    Wireshark traces during my development of the OBDII ECU code, taken
    on a Raspberry Pi with a PICAN-2 interface attached.  They're saved
    in PCAPNG format, but I can load and resave them as needed, or take
    new ones if there's something in particular to capture.<br>
    <br>
    Any need at this point?<br>
    <br>
    Greg<br>
    <br>
    <br>
    <div class="moz-cite-prefix">Mark Webb-Johnson wrote:<br>
    </div>
    <blockquote type="cite"
      cite="mid:DF393CEB-F06E-4A48-8C05-8A9CBAFA0F6A@webb-johnson.net">
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      Tom,
      <div class=""><br class="">
      </div>
      <div class="">PCAP support is now in (for RE).</div>
      <div class=""><br class="">
      </div>
      <blockquote style="margin: 0 0 0 40px; border: none; padding:
        0px;" class="">
        <div class=""><font class="" face="Andale Mono"><span
              style="font-size: 14px;" class="">OVMS# re start</span></font></div>
        <div class=""><font class="" face="Andale Mono"><span
              style="font-size: 14px;" class="">OVMS# re serve format
              cap</span></font></div>
        <div class=""><font class="" face="Andale Mono"><span
              style="font-size: 14px;" class="">OVMS# re serve mode
              simulate</span></font></div>
        <div class=""><font class="" face="Andale Mono"><span
              style="font-size: 14px;" class=""><br class="">
            </span></font></div>
        <div class=""><font class="" face="Andale Mono"><span
              style="font-size: 14px;" class=""># Capture over Wifi to
              pcap</span></font></div>
        <div class=""><font class="" face="Andale Mono"><span
              style="font-size: 14px;" class="">$ nc OVMS.local 3000
              >my.pcap</span></font></div>
        <div class=""><font class="" face="Andale Mono"><span
              style="font-size: 14px;" class=""><br class="">
            </span></font></div>
        <div class=""><font class="" face="Andale Mono"><span
              style="font-size: 14px;" class=""># Replay pcap over Wifi</span></font></div>
        <div class=""><font class="" face="Andale Mono"><span
              style="font-size: 14px;" class="">$ nc OVMS.local 3000
              <my.pcap >/dev/null</span></font></div>
      </blockquote>
      <div class=""><br class="">
      </div>
      <div class="">Seems to work ok, but I only support big endian
        micro-second resolution pcaps (at the moment). You’d need to fix
        byte ordering in the pcap header record to be able to replay
        your existing pcaps into it.</div>
      <div class=""><br class="">
      </div>
      <div class="">I’ve tested some simulated captures, into Wireshark,
        and it seems fine for me. Will try in a real car tomorrow.
        Thanks for your help with the captures. Very helpful to see what
        is going on with a real example.</div>
      <div class=""><br class="">
      </div>
      <div class="">Regards, Mark.</div>
      <div class=""><br class="">
        <div>
          <blockquote type="cite" class="">
            <div class="">On 27 Apr 2018, at 1:58 PM, Tom Parker <<a
                href="mailto:tom@carrott.org" class=""
                moz-do-not-send="true">tom@carrott.org</a>> wrote:</div>
            <br class="Apple-interchange-newline">
            <div class="">
              <div class=""><a href="https://carrott.org/pcaps/"
                  class="" moz-do-not-send="true">https://carrott.org/pcaps/</a><br
                  class="">
                <br class="">
                These were captured with tcpdump and an USB can
                interface with slcan driver. I post processed them to
                byte swap the can ID with
<a class="moz-txt-link-freetext" href="https://carrott.org/git/leaf-can-dissector.git/blob/HEAD:/pcap-canid-endian-swap.py">https://carrott.org/git/leaf-can-dissector.git/blob/HEAD:/pcap-canid-endian-swap.py</a><br
                  class="">
                <br class="">
                I don't know why tcpdump and wireshark disagree on the
                byte order of the can id.<br class="">
                On Apr 27, 2018 5:24 PM, Mark Webb-Johnson
                <a class="moz-txt-link-rfc2396E" href="mailto:mark@webb-johnson.net"><mark@webb-johnson.net></a> wrote:<br class="">
                <blockquote type="cite" class=""><br class="">
                  <br class="">
                  Has anybody got an example of a PCAP format canbus
                  dump file? Some dump from a car in a suitable format
                  for loading into wireshark (pcap not pcapng).<br
                    class="">
                  <br class="">
                  If so, please eMail to me (<a class="moz-txt-link-abbreviated" href="mailto:mark@webb-johnson.net">mark@webb-johnson.net</a>) or
                  give me a link to where I can download from.<br
                    class="">
                  <br class="">
                  I need it to verify that OVMS can read/write to that
                  format.<br class="">
                  <br class="">
                  Thanks, Mark.<br class="">
                  <br class="">
                </blockquote>
              </div>
            </div>
          </blockquote>
        </div>
        <br class="">
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
OvmsDev mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OvmsDev@lists.openvehicles.com">OvmsDev@lists.openvehicles.com</a>
<a class="moz-txt-link-freetext" href="http://lists.openvehicles.com/mailman/listinfo/ovmsdev">http://lists.openvehicles.com/mailman/listinfo/ovmsdev</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>