Skip to content

A Wireshark Dissector for Laminar Research's X-Plane Flight Simulator

License

Notifications You must be signed in to change notification settings

Avacee/XPlane-Wireshark-Dissector-C

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

24 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

XPlane-Wireshark-Dissector-C

A Wireshark Dissector for Laminar Research's X-Plane Flight Simulator.

How to build this dissector into your own Wireshark.

To build Wireshark refer to these resources:

There are 2 options for integrating an X-Plane dissector into Wireshark:

  • As a plugin (quickest recompile during development)

    • Copy packet-xplane.c and CMakeLists.txt into wireshark\private_plugins\xplane
    • Copy wireshark\CMakeListsCustom.txt.example to wireshark\CMakeListsCustom.txt
    • Edit wireshark\CMakeListsCustom.txt and change private_plugins/foo to private_plugins/xplane and uncomment the line
    • Rerun from the cmake step.
  • Within the main libwireshark.dll dissector library

    • Copy packet-xplane.c into wireshark\epan\dissectors
    • Copy wireshark\epan\dissectors\CMakeListsCustom.txt.example to wireshark\epan\dissectors\CMakeListsCustom.txt
    • Edit wireshark\epan\dissectors\CMakeListsCustom.txt and change packet-foo.c to packet-xplane.c and uncomment the line.
    • Rerun from the cmake step.

For more information on writing wireshark dissectors refer to the wireshark\doc\README.subject files.

Just give me a .dll/.so to use.

Download the release that is appropriate for your version of Wireshark.
To find your version goto Menu->Help->About Wireshark->Wireshark and check the topmost line. Only the first 2 numbers (Major and Minor) are important. e.g. 3.4.
Copy the plugin into one of the following folders:

  • Wireshark's Personal_Plugins_Folder\epan\
  • Wireshark's Global_Plugins_Folder\epan\
  • Your wireshark\plugins\ version \epan\ folder.

I recommend the Personal_Plugins_Folder as this is not cleared by wireshark updates.
The folders can be found via Menu -> Help -> About Wireshark -> Folders -> Personal Plugins

Restart Wireshark if already running.
You can check Wireshark has loaded the plugin via Menu->Help->About Wireshark->Plugins Tab. The name will be xplane with a type of dissector.

Developed and tested on Windows 10+11 and Microsoft Visual Studio 2019/2022
Linux testing on Ubuntu 20.04.1 and WSL2 (Ubuntu and Debian)

Usage.

The proto declaration is "xplane" and the protofields have been added using the format xplane.$header$.$element$".
So to view only BECN packets the display filter will be "xplane.becn"
Conversely to see all packet except BECN (as there are so many) filter on "xplane && !xplane.becn"
To only see those DATA packets with an index of 0 (Frame Rate Info) filter on "xplane.data.index == 0"

TODO: