Wireshark-dev: Re: [Wireshark-dev] possibility of USB capture on windows

From: "DePriest, Jason R." <jrdepriest@xxxxxxxxx>
Date: Wed, 27 Feb 2008 20:43:23 -0600
On Tue, Feb 26, 2008 at 11:56 PM, JoJo jojo <> wrote:
> Hi everyone,
>
>  what is the current capability of wireshark, with
>  capturing all USB traffic on windows.
>
>  Capturing all usb needs to be stressed, not just ethernet over usb.
>
>  currently trying out wireshark as sniffUSB v1.8 or v2.0 don't work
>  quite right in all the situations.
>
>  which binaries to try, on windows? is using usbmon necessary on linux ?
>
>  tia
>
>  -JoJo

Yes, Wireshark can probably capture it:
http://www.wireshark.org/docs/dfref/u/usb.html and
http://wiki.wireshark.org/USB

USB can have poor timestamps:
http://www.wireshark.org/docs/wsug_html_chunked/ChAdvTimestamps.html

Not so good for Windows, better for Linux:
http://wiki.wireshark.org/CaptureSetup/USB

-Jason