This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Some information is wrong:

  • "The latest libpcap from the main Git branch is required..." -> libpcap 1.1.1 or newer would be correct.
  • Setup for Linux >= 2.6.21 : Not only "mount -t usbfs /dev/bus/usb /proc/bus/usb", I also needed a "modprobe usbmon"
  • "8. On Linux, startup a USB-enabled version of Wireshark" -> "8. On Linux, startup Wireshark..."

Is this the right place for my tip ?

asked 08 Oct '10, 04:50

Gerd's gravatar image

Gerd
36226
accept rate: 100%

1

The setup is probably more complicated than that.

For example, libpcap 1.1.1 will first try scanning /sys/bus/usb/devices for devices, and will only scan /proc/bus/usb if it can't open /sys/bus/usb/devices.

In addition, as Gerald noted in answer to your earlier question, he was able to capture from usbmon1 on Ubuntu 10.04 (Linux kernel 2.6.32-24) without having to do anything special.

What needs to be done may differ from kernel version to kernel version and might differ from distribution and distribution version to distribution/distribution version.

(08 Oct '10, 19:31) Guy Harris ♦♦

Well, it's a Wiki, by definition a resource to be edited by the community. So go ahead and hack it yourself; but "Please don't pee in the pool".

permanent link

answered 08 Oct '10, 05:28

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Now it's done.

(09 Oct '10, 11:36) Gerd
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×2

question asked: 08 Oct '10, 04:50

question was seen: 1,543 times

last updated: 09 Oct '10, 11:36

p​o​w​e​r​e​d by O​S​Q​A