Wireshark is a premier, open source, Ethernet packet sniffer with a BACnet decoder.
Why can't I see my BACnet Traffic on Wireshark?
Unless Wireshark is running on one of the nodes of interest, it will only receive broadcasts. It cannot 'see' the directed traffic between two other nodes.
There are a few ways to see this traffic
- Run Wireshark on one of the nodes that is sending or receiving the BACnet traffic - and you probably cannot do this, even if you know which node it is.
- Modify your Ethernet switch settings to mirror all packets out of a single port which your test PC running Wireshark get plugged into. This is the industry standard way of doing this.