This wiki has been migrated to and is now deprecated. Please use that site instead.
Differences between revisions 10 and 11
Revision 10 as of 2008-05-19 15:38:18
Size: 3234
Editor: host222
Comment: added screenshot
Revision 11 as of 2008-05-19 15:52:05
Size: 3112
Editor: SteveKarg
Comment: added sample capture
Deletions are marked like this. Additions are marked like this.
Line 27: Line 27:
XXX - Add a simple example capture file to the SampleCaptures page and link from here (see below). Keep this file short, it's also a good idea to gzip it to make it even smaller, as Wireshark can open gzipped files automatically. Here is a simple example capture file of some BACnet services generated by the BACnet Stack at SourceForge:
Line 29: Line 29:
 * [[attachment:SampleCaptures/PROTO.pcap]]  * [[attachment:bacnet-stack-services.cap]]


BACnet, the ASHRAE building automation and control networking protocol, has been designed specifically to meet the communication needs of building automation and control systems for applications such as heating, ventilating, and air-conditioning control, lighting control, access control, and fire detection systems. The BACnet protocol provides mechanisms by which computerized equipment of arbitrary function may exchange information, regardless of the particular building service it performs. As a result, the BACnet protocol may be used by head-end computers, general-purpose direct digital controllers, and application specific or unitary controllers with equal effect.

The BACnet protocol specifies transport over a number of datalink layers including ARCNET, MS/TP (RS-485), PTP (RS-232), LonTalk, and Ethernet. BACnet also specifies communication over UDP/IP which is known as BACnet/IP. Other datalink layers are proposed.


XXX - add a brief description of BACnet history

Protocol dependencies

  • UDP: BACnet/IP uses UDP as its transport protocol. The default UDP port for BACnet traffic is 47808 (0xBAC0), but depending on the project specification other ports are also possible.

  • LLC: BACnet Ethernet uses LLC as its transport protocol. For BACnet traffic, DSAP is 0x82, SSAP is 0x82.

  • ARCNET: BACnet ARCNET uses ARCNET as its transport protocol.

  • MSTP: BACnet MS/TP uses either MSTP natively, or from the Cimetrics U+4, SNAP as its transport protocol.

Example traffic



The BACnet dissector is fully functional.

Preference Settings

The dissector has no preference settings.

Example capture file

Here is a simple example capture file of some BACnet services generated by the BACnet Stack at SourceForge:

There are some sample BACnet capture files at:

Display Filter

A complete list of BACnet display filter fields can be found in the BACnet NPDU display filter reference, BACnet APDU display filter reference, and BVLC display filter reference

  • Show only the BACnet based traffic:
     bacnet || bvlc || bacapp

Capture Filter

You cannot directly filter BACnet protocols while capturing. However, if you know the TCP port used (see above), you can filter on that one.

  • Capture only the BACnet/IP traffic over the default port (47808):
     udp port 47808


Protocols/bacnet (last edited 2012-08-08 00:56:38 by GuyHarris)