https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4664
--- Comment #4 from Guy Harris <guy@xxxxxxxxxxxx> 2010-04-12 19:28:17 PDT ---
I think the right fix might be
wiretap/pcap-common.c:
-> Get rid of pcap_read_linux_usb_pseudoheader() and everything that calls it.
Instead, when we read a packet in DLT_USB or DLT_USB_LINUX format, byte-swap
the multi-byte quantities in the packet data if we're reading from a
byte-swapped libpcap file or a byte-swapped section of a pcap-ng file. (See
the wireshark-dev discussion for why this is necessary; libpcap does the same
thing.)
epan/dissectors/packet-usb.c:
-> Don't look at the pseudo-header, just parse the raw packet data.
I.e., completely get rid of the Wiretap-level pseudo-header for USB.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.