Wireshark-users: [Wireshark-users] capturing USB data
I have seen a lot of guides that managed to get USB capture by using the command: sudo mount -t usbfs /dev/bus/usb /proc/bus/usb
However, when I try this command here is the result
mount: mount point /proc/bus/usb does not exist
I have libpcap-1.1.1 and tcpdump-4.1.1 installed. I patched libpcap to use /dev/bus/usb instead of /proc/bus/usb, I can read data from /dev/usbmonx and the usual /sys/kernel/debug/usb/usbmon/ entries are present.
--
Thomas Epperson
Build a man a fire, and he'll be warm for a day. Set a man on fire, and he'll be warm for the rest of his life. - Terry Pratchett.