emuxevans/whsniff

Whsniff is a command line utility that interfaces TI CC2531 USB dongle with Wireshark for capturing and displaying IEEE 802.15.4 traffic at 2.4 GHz.

A packet converter for sniffing IEEE 802.15.4 wireless sensor networks

This repository is a part of the HomeWSN project.

Whsniff is a command line utility that interfaces TI CC2531 USB dongle with Wireshark for capturing and displaying IEEE 802.15.4 traffic at 2.4 GHz.

This utility only works on Linux (including OpenWrt). For Windows download and install the SmartRF Packet Sniffer from TI website.

Whsniff reads the packets from TI CC2531 USB dongle with sniffer_fw_cc2531 firmware, converts to the PCAP format and writes to the standard output(stdout).

Building (Linux)

• Install libusb-1.0-0-dev:

$ sudo apt-get install libusb-1.0-0-dev

• Download the latest release in tarball from github and untar it. Then build and install whsniff.

$ curl -L https://github.com/homewsn/whsniff/archive/v1.1.tar.gz | tar zx
$ cd whsniff-1.1
$ make
$ sudo make install

Building (OpenWrt)

• Install OpenWrt buildroot.
• Add the following line to the feeds.conf.default in the OpenWrt buildroot:

src-git homewsn https://github.com/homewsn/homewsn.openwrt.packages.git

• This feed should be included and enabled by default in the OpenWrt buildroot. To install all its package definitions, run:

$ ./scripts/feeds update homewsn
$ ./scripts/feeds install -a -p homewsn

• The packages should now appear in menuconfig. You can find whsniff in the Network menu.

How to use (Locally)

• Connect CC2531 USB dongle to your Linux PC.

• Open a terminal session on the desktop where you have Wireshark installed and enter the following commands:

$ wireshark -k -i <( path/to/whsniff -c channel_number )
or
$ path/to/whsniff -c 25 | wireshark -k -i -
or
$ mkfifo /tmp/pipes/whsniff
$ path/to/whsniff -c 25 > /tmp/pipes/whsniff

• You can also save the output to a file to analyze it later using wireshark:

$ path/to/whsniff -c 25 > filename.pcap

How to use (Remotely)

• Connect CC2531 USB dongle to remote Linux PC or OpenWrt device, then start whsniff remotely with ssh from the desktop where you have Wireshark installed.

• For Linux open a terminal session on the desktop and enter the following command:

$ ssh [email protected] "whsniff -c 25" | wireshark -k -i -

where 192.168.1.202 is an IP address of the computer where dongle is connected.

• For Windows install PuTTY with extension plink.exe from PuTTY Download Page, then open a command prompt window and enter the following command:

> "C:\Program Files\PuTTY\plink.exe" -ssh -pw password [email protected] whsniff -c 25 | "C:\Program Files\Wireshark\wireshark.exe" -k -i -

where password is a root password and 192.168.1.202 is an IP address of the computer where dongle is connected.

License

GNU GPL v 2.0