IEEE 1394 (marketed as FireWire and i.Link) capture support is not currently available to libpcap on any platforms. On OHCI-based cards (most IEEE 1394 cards sold), promiscuous mode is not supported, however it is supported on PCILynx-based cards.

Some isosyncronous mode traffic can be captured with a "standard" OHCI card on Linux with the dumpiso utility supplied with lib1394raw. However, Wireshark cannot read dumpiso files.

Description of the isodump (used by dumpiso) format (from man dumpiso)

IEEE_1394 (last edited 2008-04-12 17:50:41 by localhost)