CAN Interface - Live Stream CAN Bus & OBD2 Data in Wireshark

Need a low cost CAN interface to stream CAN bus or OBD2 data to your PC?

If so, the CLX000 is a great choice - and offers one major advantage:

Wireshark integration!

The CLX000 lets you stream data in real-time directly into Wireshark
- the #1 open source network protocol analyzer.

This gives you tons of features out-the-box - and below we show how to get started!

CAN Bus Module car vehicle CAN Bus Analyzer

To see the CLX000 & Wireshark in action, check out our 2 min video above!

Example Use Cases for CAN Interfaces

Live-streaming CAN bus data via the CLX000 has many uses - below we list some of the main examples:

OBD diagnostics CAN interface


Monitoring raw or e.g. OBD2 converted CAN bus data in real-time is useful in identifying issues - in particular those related to physical events that you can control while reviewing the CAN bus data effects live.

CAN Reader Vehicle Reverse Engineering CAN Bus Data Interface


If you're not the vehicle/ machine OEM, you may neeed to reverse engineer proprietary CAN data - here, a CAN bus sniffer like the CLX000 is a vital tool, while our Wireshark plugin offer the tailor-fit 'CAN Live' feature.

Car Prototype Optimization Engine Dyno Test Bench CAN Bus Interface


Effective vehicle prototype development demand high performance data visualization in real-time. The CLX000 CAN interface lets you easily stream DBC converted data (i.e. physical values) to your PC, enabling fast tweaking and optimization.

CAN Bus Protocol USB2CAN LEAF Kvaser Alternative Integration App Code Script


You may want to utilize your live CAN data in applications without using e.g. Wireshark's GUI. Here, the CLX000 provides a machine-friendly streaming format that you can easily integrate into your custom scripts. See our Product Manual for details.

Why Use The CLX000 & Wireshark for CAN Streaming?

A lot of CAN bus interfaces exist on the market - below we list some major benefits of the CLX000 & Wireshark combo:

We also recommend checking out some of our customer reviews!

Get Started - How to Stream CAN Data in Wireshark

To get started streaming CAN bus data, you'll need the following:

To get started, follow below steps:

  1. Install Wireshark 2.4 (enable 'Wireshark 1' during install)
  2. Power your CLX000 via the CAN bus, then connect it via USB to your PC
  3. Open CANvas, go to LIVE STREAM DATA, click 'Connect Logger' and 'Start'

Requesting OBD2 Data: If you want to stream OBD2 data, you'll need to configure your CLX000 to request specific OBD2 PIDs. See our OBD2 data logger guide for details on how to set this up in a few clicks.

You're now streaming raw CAN bus protocol data in Wireshark:

CAN Interface Wireshark Stream Data Live

Further, if you're streaming OBD2 data you can right-click a frame and choose 'Decode As/OBD-II (CSS Electronics)'.

You're now streaming human-readable OBD2 data (here OBD2 Vehicle Speed in km/h):

CAN Interface Wireshark Stream Data Live OBD2


Below we list some of the powerful features available in Wireshark using the CLX000 and our free plugin:



Our Wireshark plugin lets you real-time convert your raw CAN data using your own DBC files (incl. J1939 DBC file support). This is a powerful feature as you'll be able to analyse/plot physical values from e.g. your car, truck, tractor or machine in real-time. For more, see our guide to Wireshark DBC conversion.



For reverse engineering and car hacking, our Wireshark plugin enables the powerful 'CAN Live' trace view. This shows a single row for each CAN ID and colorizes changes in the data bytes of each ID in real-time. It provides an excellent tool for linking CAN IDs to physical events - and identifying bit/byte positions of proprietary CAN bus signals. For more, see our CAN bus sniffing intro.



You can easily adapt Wireshark's column structure. To remove a column, just right-click and click "Remove Columns". To add a data field as a column, right click it in the details pane and choose "Apply as Column".

This is particularly useful for adding columns with OBD2/DBC physical values, min, max, names etc. You can rename the columns "Column Preferences".



To graphically plot converted OBD2 data in real-time, OBD2-decode your data and go to 'Statistics/IO Graph'. Here you can add up to 5 graphs. First, enable 'View as time of day' under X-axis. Under Y-axis, set the Unit to "Advanced...". In the Calc field, choose AVG(*) and in the field to the right write "obd-ii.mode01_" - doing so opens a drop-down from which you can choose various Mode 01 parameters. Once you've selected one, hit "Graph" to plot it. This also works with e.g. J1939 DBC files, where you can plot converted CAN bus signals in real-time.



You can also easily add conditional formatting. For example, if you need to quickly spot the occurrence of a particular CAN message or physical value in your stream, colorization is extremely powerful. By right-clicking a field in the middle part of the window you can e.g. color all occurrences red where a specific CAN message contains a specific range of data bytes. In the OBD2 context you can e.g. color Vehicle Speed yellow when the ‘Converted value’ goes above 50 km/h and red when above 60 km/h (cf. the figure).



Filters let you truly gain control over your data flows. To add filters, the fastest way is to right-click a data field in the details pane and select 'Apply as Filter'. This will update the upper left text field and you can now edit the details to fit your needs.

Say you’re streaming both the OBD2 "requests" (ID 7DF) and "responses" (ID 7E8) and want to look only at the latter? Simply write “ == 0x000007e8” in the filter. It’ll turn green to show that it’s valid and you can click enter - voila! Using the “Expression…” button, you can also build far more advanced filters using various relational operators.



Wireshark lets you easily save your stream session data in various custom formats (incl. *.CSV, *.TXT, *.JSON, *.PCAP, *.C, *.PS and more). Further, you can apply filters to your data and only save the visible selection.



With the plugin, you can load CLX000 log files that you've e.g. recorded in standalone mode (i.e. without a PC). This lets you use all the Wireshark features on your CLX000 log files, incl. OBD2/DBC conversion. It's also very useful in combination with the ability to export to custom formats.

Note that for large/many log files, CANvas is more effective for DBC conversion.

Ready to start streaming your CAN bus data?
Then get your CLX000 CAN interface below!

Liked this article? Please share!


We use cookies to improve our site (see our privacy policy)