Table of Contents
Advertisement
2.2. Analysis Software
2.2.1. Analyzer
All industry standard analyzers are supported and can be used to perform the analysis.
Wireshark is recommended, and can be downloaded at wireshark.org.
To start capturing network data, launch the preferred network analyzer and select the ProfiShark device,
which should appear in the list of network interfaces.
2.2.2. Wireshark Extcap Tool
The Extcap Tool allows you to get high-resolution hardware timestamps in live Wireshark capture. It is
aimed to replace the dissector, as it provides hardware nanosecond timestamps without altering the
packets.
Windows
Copy both the extcap binary file and API .dll from the ProfiShark USB key's 'Windows\Extcap Tool
Wireshark' subfolder to the Wireshark 'Global Extcap' path. This path can be found in Wireshark through
the following menu path: Help -> About Wireshark -> Folders.
Restart Wireshark. A new capture interface will be displayed in the list of capture interfaces. Its name
should be in the form 'ProfiShark <MAC address>'. By capturing on this interface, you will get hardware
nanosecond timestamps in Wireshark.
Linux
Copy the extcap binary file from the ProfiShark USB key's '\Linux\Extcap Tool
Wireshark\profishark-extcap-linux64_1.0.tar.gz' archive to the Wireshark 'Global Extcap' path. This path can
be found in Wireshark through the following menu path: Help -> About Wireshark -> Folders.
Restart Wireshark. A new capture interface will be displayed in the list of capture interfaces. Its name
should be in the form 'ProfiShark <MAC address>'. By capturing on this interface, you will get hardware
nanosecond timestamps in Wireshark.
2.2.3. Wireshark Dissector
The ProfiShark dissector for Wireshark is used to properly display high-resolution timestamps in live
Wireshark capture without the Extcap Tool (see
3.2.2. Live Capture with Wireshark
Dissector).
Windows
Copy the 'profishark.dll' file from the ProfiShark USB key's 'Windows\Dissector Wireshark\dist' subfolder
corresponding to your Wireshark version and Windows version, to your Wireshark installation folder's
'plugins' subfolder.
For Wireshark 2.6 and later, the dll must be copied to the 'plugins\*\epan' folder.
26
Advertisement
Table of Contents
