Wireshark-dev: Re: [Wireshark-dev] dumpcap broken on mac?
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 14 May 2018 03:13:03 -0700
On May 14, 2018, at 3:09 AM, Guy Harris <guy@xxxxxxxxxxxx> wrote:

> On May 14, 2018, at 3:04 AM, Guy Harris <guy@xxxxxxxxxxxx> wrote:
> 
>> But what's XHC20?
> 
> Oh, USB:
> 
> 	https://lists.apple.com/archives/usb/2017/Jun/msg00004.html

And pcap-bpf.c probably needs to ifconfig them up and down, just as we need to create and destroy the USB capture devices on FreeBSD:

	For example, if the device your interested in is connected to the XHCI controller XHC1@14000000 then you would enable packet capture via "sudo ifconfig XHC20 up” and disable via “sudo ifconfig XHC20 down”.