I don't have suggestions for packages, typically it is more useful to write a program to break up the payload as you figure out the fields.
In this case, it sounds like the first four bytes might be a 'type' field (low byte first). The last four bytes might be one or more fields.
From here you would write a program to separate out the stream into the two types '0Bh' and '0Ch' (even just using grep if it is formatted into packets). This will give you a sequence of the 4 byte changing values. You would then look for patterns in the 4 bytes - slow changing values, bits which are normally zero, etc.
Sometimes simply plotting the values can give you clues as to a pattern.
Post a short section of the capture here, I'm sure people would have ideas.
Last edited by neonsignal; 05-14-2016 at 07:48 AM.
|