OK, more resolution on the problem:
I updated the libpcap from cvs, and wireshark from svn today. Rebuilt, installed
libpcap. Rebuilt wireshark.
I added some debug print statements to pcap-usb-linux.c . It is definitely
successful in opening the "plain binary interface". It doesn't use the fast mmap
interface.
But my understanding is that I should get the full packets.
What I see from Wireshark on the packet is
No. Time Source Destination Protocol Info
18 0.001973 USB
URB_BULK[Packet size limited during capture]
Frame 18 (16 bytes on wire, 8 bytes captured)
Arrival Time: Sep 22, 2008 11:39:35.512329000
[Time delta from previous captured frame: 0.001973000 seconds]
[Time delta from previous displayed frame: 0.001973000 seconds]
[Time since reference or first frame: 0.067863000 seconds]
Frame Number: 18
Frame Length: 16 bytes
Capture Length: 8 bytes
[Frame is marked: True]
[Protocols in frame: usb]
USB URB
URB id: 0x00000000dcd08b00
URB type: URB_COMPLETE ('C')
URB transfer type: URB_BULK (3)
Endpoint: 0x01
Device: 115
URB bus id: 3
Device setup request: not present ('-')
[Packet size limited during capture: USB truncated]
0000 00 00 00 00 00 00 00 00 ........
