Because wireshark has got a DOCSIS dissector i assume, that it should be possible to catch that docsis traffic 'out of the cable'.

Cable Modem Mac Sniffing Download Software

Jan 26, 2010. A cable monitor command that forwards packets on the cable interface to the Ethernet interface(for use by external analyzers) is only available on Cisco broadband routers on CMTS (like Cisco uBRxxxx). Wireshark DOCSIS dissector is only for that kind of usage. Docsis use RF interface to transmit Ethernet packets, i.e. Ethernet packets are translated into radio frequency signals that sent to the.

Not necessarily. Wireshark can read captures in many different file formats, and some of them contain packet types that the mechanisms that libpcap/WinPcap use can't capture.

Cable Modem Mac Address

In the case of DOCSIS, that was added to Wireshark because some Cisco 'cable modem termination systems' (CMTS) for the 'head end' of cable modem networks (i.e., for use at the cable company's site) can take DOCSIS packets, wrap them in Ethernet low-level framing (no Ethernet header, just the raw octets of a DOCSIS packet, preceded by an Ethernet preamble and start frame delimiter and terminated by an Ethernet FCS), and put them out on an Ethernet. Support was added to libpcap/WinPcap to, when capturing on an Ethernet device, use a link-layer header type of DOCSIS rather than Ethernet, and Wireshark can read those files.

Sadly, I don't know of any cable modems that support the same mechanism that the Cisco CMTSes do.

Cable Modem Mac Sniffing Downloads

Cable Modem Mac Sniffing Download Windows 10

The 'sniffing cable modems' video that pops up when I do a search is the one by Guy Martin; the slides from that talk speak of using a DVB-C card to capture traffic in one direction and a USRP device to capture traffic in the other direction, but don't give any details. Guy Martin definitely knows about Wireshark, and the slides have his e-mail address; he might have some advice on hardware to use to sniff cable modem traffic.