Wireshark-dev: Re: [Wireshark-dev] Unaccounted bytes in USB header
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Paolo Abeni <paolo.abeni@xxxxxxxx>
Date: Sun, 15 Oct 2006 22:10:16 +0200
On Sun, 2006-10-15 at 20:10 +0200, Joerg Mayer wrote:
> 0000  00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 00   ................
>                                           ^^^^^^^^^^^
>   What do these bytes mean? -------------------|
> 
> 0010  0d 20                                             . 

Bug in libpcap sniffing code, I suppose ...  

Actually the USB data is provided by the Linux kernel in human readable
text string. The libpcap parsing code contained at least one bug, fixed
with a very recent patch. 

Because I wrote that code, I don't assume that current parsing code is
bug free :-( 

Anyway test like your will help to get it working :-)

Best regards, 
Paolo