[Wireshark-users] Capture cellular modem traffic

[Eli Greenhut]

Hello All,

 

My system under test  includes a cellular modem connected to a computer.

The modem itself is composed from the driver (inside the computer. . .) and
the physical modem (outside the computer. . .) .The modem is connected to
the computer with USB cable. 

I'm interested to monitor the traffic going out through the modem. 

 

Does the traffic captured by wireShark is before the driver or after the
driver?

 

Appreciate your help.

 

Eli 

QA manager

 

 

___
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users

Re: [Wireshark-users] Capture cellular modem traffic

[Guy Harris]

Eli Greenhut wrote:

 Does the traffic captured by wireShark is before the driver or after the 
 driver?

Before the driver.

On Windows, Wireshark uses WinPcap to capture packets, and, on various 
UN*Xes, it uses libpcap.  WinPcap includes its own driver, which 
connects to the networking code above the network device driver (it 
plugs into the top half of the NDIS mechanism, and networking drivers 
plug into the bottom half), and the mechanisms libpcap uses either 
plug into the networking code above the network device drivers or get 
packets supplied by the driver.

You won't, for example, see raw GSM/UMTS/cdmaOne/cdma2000/etc. radio 
traffic, if that's what you're trying to see.
___
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users