Analyzing CAN Packet with Wireshark

Have you ever wondered what the “nervous system” of a modern vehicle actually looks like? As cars transition from simple mechanical machines to software-defined vehicles, the protocols they use have evolved from basic CAN to high-speed, structured frameworks.

Today, I’m sharing a specialized Controller Area Network (CAN) packet capture that provides a rare look at four critical automotive communication pillars in one place:

  • CAN FD (Flexible Data-Rate): The high-speed evolution of CAN, allowing payloads up to 64 bytes.
  • AUTOSAR NM (Network Management): The logic that coordinates how ECUs (Electronic Control Units) wake up and go to sleep.
  • AUTOSAR CanIf (CAN Interface): The abstract layer that handles how PDU (Protocol Data Units) are mapped to hardware.
  • Mixed Traffic: A variety of packets captured directly from real vehicle protocols.

Why This Capture?

Most public datasets are either massive (GBs of data) or purely “Classic CAN.” This package is different:

  1. Compact & Clean: With only 32–34 packets, you won’t get lost. You can analyze every single frame in under 10 minutes.
  2. Educational: It’s a perfect “primer” for students or engineers learning to use tools like Wireshark, CANoe, or SavvyCAN.
  3. Modern Standards: It specifically features CAN FD and AUTOSAR, which are the current industry standards for Euro 6/EV platforms.

What’s Inside?

Inside the .pcap (or .asc/.log) file, you will find:

  • Standard CAN vs. CAN FD Frames: Notice the bit-rate switching and the larger 64-byte payloads.
  • NM (Network Management) PDU: Watch how nodes signal their “ready to sleep” or “keep alive” status.
  • Interface Layer Interaction: See how data is encapsulated before it hits the physical wire.

How to Analyze

To get the most out of this data, I recommend opening it in Wireshark.

Pro Tip: If you have the specific DBC (Database CAN) file for your project, you can load it into Wireshark or SavvyCAN to decode these hex values into human-readable signals like Engine RPM or Steering Angle.

Download the Package

Ready to dive in? Use the link below to download the https://wiki.wireshark.org/CANopen

🚀 Download the CAN FD & AUTOSAR Packet Capture (File Size: < 1MB | Format: .pcap / .log)

https://wiki.wireshark.org/CANopen