README.md

dji-firmware-tools communication dissector

Utility for analyzing communication in DJI drone interfaces via Wireshark.

Rationale

This is a packet dissector which allows you to view and analyze communication on interfaces within the DJI drones. The dissectors act as documentation on what is known about the DJI protocols, in form of simple LUA code.

Overview

What these dissectors can do:

• Show fields within DUML packets captured from a drone
• Show fields within packets stored in binary Flight Record DAT files
• Export KML file for visualizing the flight

Installing the dissectors to Wireshark allows analyzing the protocol commands in:

• PCap files created from pure DUML streams, ie UART communication between chips
• PCap files with dumps of USB/Ethernet communication with embedded DUML payloads, ie. WiFi connection between RC and a drone (for platforms which use that protocol)
• PCap files generated from DAT flight logs

Typically, you will capture the communication using either Wiresharks USB/ETH capture or using comm_*2pcap.py scripts. Then open the file in Wireshark.

Setup

A simple setup is required to use the new dissectors.

Copy the script files

Copy all the files LUA files (*.lua) and to the Wireshark profile directory. If you already different init.lua there, merge the content.

Copying files in Linux

The directory usually is ~/.config/wireshark. If unsure, check directories chapter in official documentation.

Copying files in Windows

The directory usually is C:\Users\<username>\AppData\Roaming\Wireshark. Check directories chapter in official documentation and a special chapter for Windows folders if unsure.

Start Wireshark

Now Wireshark will load the new scripts on startup. This will make it recognize the new protocols. In case of issues, refer to Wireshark documentation on LUA support.

Associate comm_*2pcap output to new dissector

Now we need setup Wireshark to associate the *.pcap files generated by comm_*2pcap.py capture script with proper protocol dissector.

First, it would be nice to have a list of existing payload protocol names. Find them by checking Proto () definitions within LUA files. You will find protocols for specific platforms, and more generic ones. There will also be distinction between communication protocols and flight record log protocols. You can list them using:

grep -R 'Proto [\(]' ./wireshark/

For example, you will get three different protocols for Phantom 3 drones: dji_p3, dji_p3_batt and dji_p3_flyrec; first is for DUML communication, second for battery-to-fc communication, and third for dissecting DAT logs. But you will also get generic DUML protocol dissector, dji_dumlv1. Now to associate the protocols with PCap files:

• Choose Edit | Preferences | Protocols

• Scroll down to DLT_USER

• Click Edit, create a new entry (‘+’) and set it up, similar to how it is shown below:

  • Select DLT_USER slot you prefer, 0-15; you will use that slot when creating PCap files

  • Associate the slot with the payload protocol you want, ie. dji_dumlv1

  • Repeat until you associate all the needed protocols

If you're using multiple DLT_USER dissectors, remember that you can set comm_*2pcap.py parameter to change the user slot while generating PCap file.

Update columns in list of packets (optional)

You may also want to setup Wireshark’s main display columns:

• Choose Edit | Preferences | Columns

• Setup columns similar to how it is shown below:

Having your own column definitions will greatly increase readability of the packets list, but you may want to wait until you know which columns you want.

Usage

After setup is complete, you can load pcap files and get results like this:

You can now analyze DJI communication protocols.