User Tools

Site Tools


howto:dumlcapture

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
howto:dumlcapture [2021/11/02 03:32]
czokie [1. Disable SIP]
howto:dumlcapture [2021/12/04 20:57] (current)
lawq Add m1 instructions
Line 1: Line 1:
-====== Capturing DUML ======+====== Capturing DUML - OSX ======
  
 Capturing DUML packets can be tricky if you are new to the scene. This page is designed to list some of the easy ways to capture DUML. It will grow over time as other people document other methods. Capturing DUML packets can be tricky if you are new to the scene. This page is designed to list some of the easy ways to capture DUML. It will grow over time as other people document other methods.
Line 9: Line 9:
 To capture DUML via the USB port, you need to capture data from an interface that is not normally accessible. Apple protects this interface to prevent key grabbers for example from capturing keyboard USB traffic. Once you are finished doing DUML capture work, you should re-enable SIP unless you are comfortable and understand the risks involved. The process to re-enable is the same as below, but change the word disable to enable. To capture DUML via the USB port, you need to capture data from an interface that is not normally accessible. Apple protects this interface to prevent key grabbers for example from capturing keyboard USB traffic. Once you are finished doing DUML capture work, you should re-enable SIP unless you are comfortable and understand the risks involved. The process to re-enable is the same as below, but change the word disable to enable.
  
 +M1 Mac:
 +  * Shutdown your Mac
 +  * Hold the power button until "Loading startup options." appears.
 +  * Click options, enter your password for your user
 +  * Again, enter your password to enter "recovery" mode
 +  * Click Utility >> Terminal, type "csrutil disable", click Enter.
 +  * Restart your Mac
 +
 +Intel Mac:
   * Restart your Mac   * Restart your Mac
   * Hold down Command-R to reboot into Recovery Mode   * Hold down Command-R to reboot into Recovery Mode
Line 59: Line 68:
 ==== 4. Set a display filter ==== ==== 4. Set a display filter ====
  
-  (frame.protocols == "usb" && usb.darwin.request_type == 1 && usb.bInterfaceClass == 0x0a && frame.len > 32) or dji_dumlv1+  (frame.protocols == "usb" && usb.darwin.request_type == 1 && usb.bInterfaceClass == 0x0a && frame.len > 32)
  
-This filter is designed to capture all valid dji_dumlv1 packets, but also to capture any poorly decoded packets to allow you to look at the cause of any problems with the dissectors.+This filter is designed to capture all POSSIBLE dji_dumlv1 packets that were not matched with the dissector. If you find any packetsyou should re-check previous steps to make sure the dissector is installed correctly and re-start WiresharkOnce you have tested, you can use the "real" packet filter
  
 +  dji_dumlv1
 +
 +This filter will display ONLY matched valid dji_dumlv1 packets.
 ==== 5. Set display columns ==== ==== 5. Set display columns ====
  
Line 68: Line 80:
  
   * Click Wireshark >> Preferences >> Appearance >> Columns   * Click Wireshark >> Preferences >> Appearance >> Columns
-  * Configure to your requirements. A sample layout is shown below.+  * Configure to your requirements. The default layout is shown below.
 {{:howto:preferences.png|}} {{:howto:preferences.png|}}
  
 +However, this looks shows Phantom 3 specific data. Unless you have a phantom, you might need to change this to suit your drone. Alternatively, you can use the generic settings shown below.
 +
 +{{:howto:preferences_generic.png|}}
howto/dumlcapture.1635823959.txt.gz ยท Last modified: 2021/11/02 03:32 by czokie