Wireshark · Wireshark-dev: [Wireshark-dev] Remote fieldbus capture "protocol"

[Erwin Rol <mailinglists@xxxxxxxxxxxx>]

Hey all,

I was wondering if there is a remote capture "protocol" that works on
Mac, Windows, and Linux? 

The idea I have is to use a small (and cheap) microcontroller like a
STM32F407 that can capture a fieldbus (RS485 based, etc.) and relay
that in realtime (realtime as in not storing it locally) to a PC
running Wireshark.

I could simply pack it in some UDP protocol and write a dissector for
that, but than I would loose my timing information, because it will be
the timing of wenn the UDP packet has been received and not the time of
when the fieldbus packet was received. 

Is there already anything out there that supports transporting capture
data (including timing) over Ethernet that works on all 3 major
platforms (rcap seems windows only, ssh seems linux only, and both are
to heavy to implement on a microcontroller).

Any info and ideas are welcome.

TIA,

Erwin