I have A usb network adaptor in a Tomtom navigation device I want to monitor from when it is plugged in, but of course if you unplug it the live capture stops and when u plug it back in data already flows before you can start capture, so need to set it up to capture as soon as it is plugged in, is this possible ? asked 02 Jun '11, 12:38  Evan Berry |
2 Answers:
If you are using Linux, you might be able to use answered 02 Jun '11, 13:26  cmaynard ♦♦ |
And if you are using Linux, you could try capturing on the "any" device, which should deliver packets from all network devices, so, if a new device is plugged in, Wireshark (or tcpdump or...) should see packets from the device as soon as it starts delivering them to the networking stack. answered 02 Jun '11, 16:49  Guy Harris ♦♦ |
