Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 3560] USB Packets in pcap-ng Files Not Dissected Properly

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3560


Tyson Key <tyson.key@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |tyson.key@xxxxxxxxx




--- Comment #4 from Tyson Key <tyson.key@xxxxxxxxx>  2009-06-22 04:29:33 PDT ---
(In reply to comment #3)
> Hi Tyson,
> 
> could you also attach a .pcap file which shows what you want to get?
> 
> Best regards
> Michael
> 

Hi Michael, 
Although I can't get precisely the same packets, attached is a dump in libpcap
format from the usbmon0 interface (it will most likely contain USB
Communications Device traffic, in an advanced phase, since I'm using a USB
HSDPA modem to post this)...

Here is what I expect to see from 3 packets in the attached file (coming after
I post the comment):

No.     Time        Source                Destination           Protocol Info
     37 0.000080    host                  35.0                  USB      CLEAR
FEATURE Request

Frame 37 (24 bytes on wire, 24 bytes captured)
USB URB
    URB id: 0x00000000e53b4580
    URB type: URB_SUBMIT ('S')
    URB transfer type: URB_CONTROL (2)
    Endpoint: 0x00
    Device: 35
    URB bus id: 2
    Device setup request: present (0)
    Data: present (0)
    URB status: Operation now in progress (-EINPROGRESS) (-115)
    URB length [bytes]: 0
    Data length [bytes]: 0
    [Response in: 38]
    [bInterfaceClass: Unknown (0xffff)]
    URB setup
        bmRequestType: 0x02
        bRequest: CLEAR FEATURE (1)
        wFeatureSelector: ENDPOINT HALT (0)
        wInterface: 131
        wLength: 0

No.     Time        Source                Destination           Protocol Info
     38 0.001038    35.0                  host                  USB      CLEAR
FEATURE Response

Frame 38 (24 bytes on wire, 24 bytes captured)
USB URB
    URB id: 0x00000000e53b4580
    URB type: URB_COMPLETE ('C')
    URB transfer type: URB_CONTROL (2)
    Endpoint: 0x00
    Device: 35
    URB bus id: 2
    Device setup request: not present ('-')
    Data: not present ('>')
    URB status: Success (0)
    URB length [bytes]: 0
    Data length [bytes]: 0
    [Request in: 37]
    [Time from request: 0.001038000 seconds]
    [bInterfaceClass: Unknown (0xffff)]

No.     Time        Source                Destination           Protocol Info
    733 0.000128    host                  35.4                  USB     
URB_BULK

Frame 733 (152 bytes on wire, 152 bytes captured)
USB URB
    URB id: 0x00000000e53b49a0
    URB type: URB_SUBMIT ('S')
    URB transfer type: URB_BULK (3)
    Endpoint: 0x04
    Device: 35
    URB bus id: 2
    Device setup request: not present ('-')
    Data: present (0)
    URB status: Operation now in progress (-EINPROGRESS) (-115)
    URB length [bytes]: 128
    Data length [bytes]: 128
    [Response in: 734]
    [bInterfaceClass: Unknown (0xffff)]
    Application Data: 21450002AC23104000400616985EC4A9E8453FB0B8E7AE00...

Coincidentally, I also notice a issues related to converting ERF files to
pcap-ng files (although they seem to be display-related Heisenbugs that go away
for the life of the open file session when you use "erf" as a display filter,
and protocols contained within don't appear in Statistics -> Protocol
Hierarchy), although I'll open that as a separate bug.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.