Wireshark · Wireshark-dev: Re: [Wireshark-dev] Windows 8 Mobile Broadband interface model interface types

[Pascal Quantin <pascal.quantin@xxxxxxxxx>]

2013/4/28 Roger Smith <irieblue@xxxxxx>

 Windows 8 added support for MBIM devices/network interfaces. Unfortunately these MBIM interfaces are not showing up as a selectable interface  in wireshark. Any idea on how to get this working?

MBIM interfaces  transport ip packets and are not wrapped in an Ethernet style frame. Essentially MBIM is a new interface type that adheres to the USB CDC NCM/MBIM Spec that has a pretty well defined headers. I need the ability to decode the packets across an MBIM connection.

Any idea how to get this working? MBIM is finally a standard that should replace RNDIS for USB network devices , but more important work on all platforms wire shark runs on.

Thx

Hi Roger,

WinPcap is still not able to capture packets coming from a MBIM device (due to the various reasons explained by Evan and Guy a few months ago), but if you use USBPcap (found here: http://desowin.org/usbpcap/ ) with a development release of Wireshark (found here: http://www.wireshark.org/download/automated/ ) you should be able to capture MBIM IP traffic (and MBIM control packets also) directly at USB level.

The setup is not as straightforward as clicking on button in Wireshark GUI, but by following the small tour found on http://desowin.org/usbpcap/tour.html you should be able to get things working rather easily.
That's the best alternative method we can offer for now while waiting for a more official support by WinPcap.

Best regards,
Pascal.