Wireshark-dev: [Wireshark-dev] Usb dissectors, usb.protocol is always 0x000000
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "[AvataR]" <public.avatar@xxxxxxxxx>
Date: Fri, 23 Oct 2015 17:50:12 +0300
Hi list.

I wrote trivial dissector (in lua, if it's matters) for MTP protocol
for own use. Now I have a problem - how to apply it just for these
packets.

I reviewed sources and found out, that there is usb.protocol
dissection table. I even found Still Image protocol in wireshark
sources. The problem is, that for my captures Protocol is always 0x0.
To find this I make right click on packet, and on USB Protocol page I
there is labels like - Class = 0x0, Subclass = 0x0, Protocol = 0x0.

I tried to make full records in linux using /dev/usbmon and in windows
using USBCap. Result is the same.

Because my device have several endpoints which talks different
protocols I couldn't apply dissector to the whole device.

So.. What should I do?