Is there a crypto package which can be used to decrypt packets for display?

In particular I'm interested in the GCM format.

Thanks.

Thanks for the reply. It was hard to get started (ie I could have used a "top level" overview of how all the parts fit together), but IONinja is a very powerful tool.

Thanks for the log.StdRecordCode.Break info. I just skimmed over Break when examining the class thinking it had to do with a spacing async line. It is exactly the code I needed.

I'm using a converter (for what I'm doing a filter would be fine) and have managed to get from to

My converter is pretty small. In relevant part it is

switch (recordCode) {
	
	case log.StdRecordCode.TxRx:
            // filter out polls
            if (*(uint8_t const *)p == 0x03)
                return true;
            inFrame = true;
            return false;

        case I2cSpiTapLogRecordCode.SpiStop:
            if (inFrame)
                return inFrame = false;
            return true;
        
        case I2cSpiTapLogRecordCode.SpiStart:
            return true;
            
	default:
		return false; // don't convert other records
	}

And while it is close enough for my purposes, I would like to know how I can get rid of the "SS High" messages. I had to leave them in so that the individual SPI frames would not be all joined together as one big blob of data.

I am just wondering if there is a message I can send from the converter to cause pending data to be written out without generate a record as the "SS High" (or a write("\n")) would.

Thanks.

After poking around in the scripts/plugins directory, I can see various ways to attack the problem.

Using the filter, I am able to filter out the stop/start messages with "I2cSpiTapLogRecordCode.Spi{Start,Stop}". However if I delete both of them, I get no packet boundaries between SPI packets. I assume I need to use a more powerful tool than filter if I want delete the message, but cause a the packet to be emitted. I assume that's a "converter".

I should be able to filter out the "polls" using filter, but I have no idea what the format of the data passed via the void * pointer is. Is there documentation on this?

So I guess the two pieces of information that would help me are:

1. What is the format of the data for the TxRx packets. Does the data change when the "swap" button is active, or is that done by a UI filter.

2. How does one signal to the generic TxRx formatter that a packet has ended and to emit current buffer. I would do this in a "converter" when I get the SpiStop code. (And just absorb the SpiStart code.)

3. Are the messages and data formats passed by the "I2C / SPI Tap" documented? That would be most helpful.

Thanks.

I am monitoring an SPI link using the TAP. The device under test requires "polling" using a command of "0x03" to determine device ready before actually transferring data. There can be hundreds (or even thousands) of unproductive polls before the device is ready.

I added a TX/RX Filter with the intention of removing the nonproductive transactions, but I can't figure out how to "configure" it. When I go to the configuration panel, I see "TX/RX Filter" listed, but only "Show TX/Show RX" buttons.

Also, is it possible to filter out the "SS high" / "SS low" messages? There's only 1 device on the link so I already know the select goes low/high for each packet.

Thanks.