Wireshark-bugs: [Wireshark-bugs] [Bug 8131] usb dissector fails to identify SCSI payload (MASSTO
Comment # 2
on bug 8131
from Guy Harris
(In reply to comment #1)
> There is no possibility to recognize that device as MassStorage.
According to
http://bobcopeland.com/blog/2011/07/my-pal-scsi/
"USB storage is a successful example of taking an existing protocol (SCSI
command set) and wholesale wrapping it in a different wire protocol. Each USB
storage transfer is initiated by the host sending a Command Block Wrapper (CBW)
— a 31-byte USB packet starting with ‘USBC’, typically containing a SCSI
command as a payload. Next, a block of data is transferred if this command
represents a read or write. Finally, the device completes the transaction by
sending a Command Status Wrapper (CSW), a 13-byte packet beginning with the
string ‘USBS’."
If that's the case, perhaps there should either be a dissector table that looks
at the 4 bytes in question or, if no USB spec indicates that those are a
protocol identifier field, a heuristic dissector list allowing a "USB mass
storage" dissector to look for USBC or USBS.
You are receiving this mail because:
- You are watching all bug changes.