Wireshark-bugs: [Wireshark-bugs] [Bug 3501] New: Content of LINUX USB captured packets can't be
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sat, 30 May 2009 07:24:15 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3501

           Summary: Content of LINUX USB captured packets can't be displayed
           Product: Wireshark
           Version: SVN
          Platform: x86
        OS/Version: Ubuntu
            Status: NEW
          Severity: Major
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: salibeh@xxxxxxx


Build Information:
wireshark 1.3.0-SVN-28516

Copyright 1998-2009 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.16.1, with GLib 2.20.1, with libpcap 1.0.0, with libz
1.2.3.3, without POSIX capabilities, without libpcre, without SMI, without
c-ares, without ADNS, without Lua, without GnuTLS, without Gcrypt, without
Kerberos, without GeoIP, without PortAudio, without AirPcap.
NOTE: this build doesn't support the "matches" operator for Wireshark filter
syntax.

Running on Linux 2.6.25-2-386, with libpcap version 1.0.0.

Built using gcc 4.3.3.

--
(1) After compiling wireshark and libpcap, I had to enter the following
commands so that wireshark recognizse the one single usb interface i have on
the dell inspiron 3700 laptop.      
sudo mkdir -p /dev/bus/usb/.usbfs
sudo mount -t usbfs "" /dev/bus/usb/.usbfs
-obusmode=0700,devmode=0600,listmode=0644
sudo ln -s .usbfs/devices /dev/bus/usb/devices
sudo mount --rbind /dev/bus/usb /proc/bus/usb
sudo mount -t debugfs / /sys/kernel/debug && sudo modprobe usbmon

(2) Once I selected the usb interface for packet capture and display, I
received the following error message: 

An error occurred while reading from the file "/tmp/wiresharkXXXXfiyFK7": File
contains a record that's not valid.
(pcap: Linux USB file has a 39-byte packet, too small to have even a Linux USB
pseudo-header)

Note that every time I try to display the content of a captured USB packet, I
receive a similar error message with different number of bytes.
Emil Salib


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.