Files
roro9stack/site/content/howto/lora-capture.md
T
twislaandClaude Opus 5.5 8ba41f72b6 LoRa Scanner: a MeshCore preset, and its packets read
- MeshCore joins the presets (EU/UK Narrow: 869.618 MHz, 62.5 kHz, SF8,
  CR 4/8, sync 0x12), after the Meshtastic ones so stored choices keep
  their number; `lora preset MeshCore` on the console
- lib/meshcore reads what MeshCore sends in clear: header, path, and a
  node's advert (name, kind, key, position)
- the list row, the details, a Capture's viewer and the console echo read
  a packet by the sync word it was received on
- the bandwidth is printed as 62.5, not 62

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0162FokPdvY2KsS4NBfwyWPk
2026-10-09 20:30:29 +02:00

1.5 KiB

+++ title = "Capture LoRa packets and open them in Wireshark" description = "Record what the radio hears into a pcap file, then read it on a computer." weight = 6 [extra] tag = "LoRa Scanner" +++

The radio only listens: nothing is transmitted. You need the Cap LoRa-1262 and an SD card.

  1. Open the LoRa Scanner. The Status Bar shows L while the radio listens.
  2. Pick a preset with p. The Scanner offers the 7 Meshtastic presets allowed in EU868 (LongFast is the default) and MeshCore.
  3. Wait for packets. Each line is a packet: the time, RSSI and SNR, and for a Meshtastic packet the sender, the receiver and the hops. Enter shows a packet's header and its bytes.
  4. Press c to start a capture. The Status Bar shows CAP. It keeps recording with the App closed.
  5. Press c again to stop.
  6. Get the file. It is in /captures/lora/, a .pcap with LoRaTap headers. In the Storage App you can already look at its packets; on a computer, open it in Wireshark.

What you will and will not see. Meshtastic's header is never encrypted, so who sent a packet and how far it hopped is visible. The message itself is encrypted with the channel's key, and the Scanner does not decrypt it.

Hearing nothing is normal if no node is in range, or if the preset does not match what the nodes nearby use. The Sweep (Tab) shows whether anything is on the air at all across 863 to 870 MHz.