#Download wireshark source install
#Download wireshark source Patch

At present all P25 traffic is sent to the multicast address 224.0.0.1 so it should be visible on other computers on your subnet - this allows you to sniff in one place and monitor from another. To do so simply sniff on your computer's network interface and use the following capture filter: 'udp port 23456'. Now you've got a modified WireShark installed it should be a simple matter to start the receiver and use WireShark to capture its output.

#Download wireshark source install

If it compiles cleanly then you can install it as follows: To compile WireShark run the following commands: The standard build for wireshark requires that. Sudo apt-get install bison flex libgtk2.0-dev libpcap-dev These are a minimum set for Ubuntu/Debian based systems: You may need to install prerequisites beforehand.

#Download wireshark source Patch

Don't fret - the patches will probably work for your version but if it fails to apply you may need to download one an earlier version of WireShark for which we have a patch or make the changes manually using the existing patch as a guide. Of course, it is inevitable that you will download a WireShark version for which we haven't provided a patch. Patch -p1 < patches/wireshark-1.8.5.patch To do this the easiest way is to apply the appropriate patch. A few small changes also need to be made to the !WireShark tree outside of the plugins directory.

This adds the necessary code to WireShark for it to decode APCO P25 messages. Once you've downloaded the wireshark source tree, check out p25 plugin: (Remember your download directory may not be in ~/Downloads and the version number of WireShark you download maybe different to that used here). Tar xjvf ~/Downloads/wireshark-1.8.5.tar.bz2 To unpack the source tree you need to open a shell and execute the following commands: clang -cc1 -cc1 -triple x8664-pc-linux-gnu -analyze -disable-free -clear-ast-before-backend -disable-llvm-verifier -discard-value-names -main-file-name tvbuffbase64. Click on 'Source Code' to download the file. On that page you should be go to the 'Get WireShark' for the stable release (1.8.5 at the time of writing). The stable release of WireShark is available from the. You first need to obtain the source code for WireShark. If you want to sniff P25 traffic using WireShark then you'll need to patch the sources and rebuild it. The WireShark packet sniffer normally doesn't support APCO P25. See Wireshark for general installation and usage instructions related to Osmocom. The instructions on this wiki page are outdated, see #3531 to resolve this.