CANSNIFFER(1)
π CANSNIFFER
okay bestie, so this is the manual page for cansniffer, and it lives in section 1 of the User Commands of the manual β the β¨ one and only β¨ cansniffer, version 2023.03-1build1. she's cute, she's volatile, she's here to watch your CAN bus like it's her fave reality show π¦
πΈ NAME
cansniffer β like, the manual page for cansniffer 2023.03-1build1? that's her, that's the girl π
β¨ SYNOPSIS
cansniffer [can-interface]
π DESCRIPTION
cansniffer β a volatile CAN content visualizer. yes, volatile. she does not remember, she does not keep receipts, she just shows you the vibes in real time π no cap.
π OPTIONS
she has options. so many options. iconic behaviour honestly:
-qβ quiet mode, aka all IDs deactivated. she is on mute bestie, not a single ID is making noise.-r <name>β readsniffset.namefrom a file. loading your settings like a saved playlist π-eβ fix extended frame format output, no auto detect. you tell her what the frame format is, she doesn't guess.-bβ start her off in binary mode.-8β start in binary mode β this one's for EFF on 80 chars.-Bβ start in binary mode with gap β careful, this one exceeds 80 chars! π-cβ color changes. rainbow-ify the deltas π-f <mode>β CAN FD mode, choose ur fighter:0= OFF1= ON2= auto detect- default:
2
-t <time>β timeout for ID display, in[x10ms], default:500, or0= OFF. she'll let an ID linger, then she moves on (as she should).-h <time>β hold marker on changes, in[x10ms], default:100.-l <time>β loop time (display), in[x10ms], default:20.-?β print this help text. she'll hand you the whole menu.
pro tip bestie: use the interface name any to receive from all can-interfaces. she's not picky, she's everywhere π«Ά
π commands that can be entered at runtime:
the group chat is LIVE. type these while she's running:
q<ENTER>β quit. bye babes πb<ENTER>β toggle binary / HEX-ASCII output.8<ENTER>β toggle binary / HEX-ASCII output (small for EFF on 80 chars).B<ENTER>β toggle binary with gap / HEX-ASCII output (exceeds 80 chars!).c<ENTER>β toggle color mode. rainbows on, rainbows off.@<ENTER>β toggle ASCII output (disabled for CAN FD by default).<SPACE><ENTER>β force a clear screen. a little palate cleanser β¨#<ENTER>β notch currently marked/changed bits (can be used repeatedly). it's giving scrapbooking πΈ*<ENTER>β clear notched marked.rMYNAME<ENTER>β read settings file (filter/notch).wMYNAME<ENTER>β write settings file (filter/notch).a<ENTER>β enable 'a'll SFF CAN-IDs to sniff.n<ENTER>β enable 'n'one SFF CAN-IDs to sniff.A<ENTER>β enable 'A'll EFF CAN-IDs to sniff.N<ENTER>β enable 'N'one EFF CAN-IDs to sniff.+FILTER<ENTER>β add CAN-IDs to sniff.-FILTER<ENTER>β remove CAN-IDs to sniff.
FILTER can be a single CAN-ID or a CAN-ID/Bitmask:
π single SFF 11 bit IDs:
+1F5<ENTER> - add SFF CAN-ID 0x1F5
-42E<ENTER> - remove SFF CAN-ID 0x42E
π single EFF 29 bit IDs:
+18FEDF55<ENTER> - add EFF CAN-ID 0x18FEDF55
-00000090<ENTER> - remove EFF CAN-ID 0x00000090
π CAN-ID/Bitmask SFF:
-42E7FF<ENTER> - remove SFF CAN-ID 0x42E (using Bitmask)
-500700<ENTER> - remove SFF CAN-IDs 0x500 - 0x5FF
+400600<ENTER> - add SFF CAN-IDs 0x400 - 0x5FF
+000000<ENTER> - add all SFF CAN-IDs
-000000<ENTER> - remove all SFF CAN-IDs
π CAN-ID/Bitmask EFF:
-0000000000000000<ENTER> - remove all EFF CAN-IDs
+12345678000000FF<ENTER> - add EFF CAN IDs xxxxxx78
+0000000000000000<ENTER> - add all EFF CAN-IDs
so like, if (id & filter) == (sniff-id & filter) the action (+/-) is performed β which is quite easy when the filter is 000 resp. 00000000 for EFF. match made in bitwise heaven π
and that's the whole page, bestie. this was cansniffer version 2023.03-1build1, dated December 2025 β stay nosy, stay sniffing, and may your bus always be legible πΈππ¦ no cap, periodt.
π¦ where this page comes from
- ubuntu resolute: can-utils 2023.03-1build1 Β· GPL-2.0-only
- ubuntu stonking: can-utils 2023.03-1build1 Β· GPL-2.0-only
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms