Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to sniff a USB port under Windows?

From time to time, I need to dump USB traffic under Windows, mostly to support hardware under Linux, so my primary goal is to produce dump files for protocol analysis.

For USB traffic, it seems that SniffUsb is the clear winner... It works under Windows XP (but not later) and has a much nicer GUI than earlier versions. It produces huge dump files, but everything is there.

However, my device is in fact a USB serial device, so I turned to Portmon which can sniff serial port traffic without the USB overhead.

like image 600
dpavlin Avatar asked Sep 22 '08 20:09

dpavlin


People also ask

How do you sniff a USB port?

To start analyzing (sniffing) a device, tick the box near the device name in the USB View and click the 'Start Capture' toolbar button (or select 'Capture' menu > 'Start Capture').

Can Wireshark detect USB?

Capturing USB traffic on Linux is possible since Wireshark 1.2. 0, libpcap 1.0. 0, and Linux 2.6. 11, using the Linux usbmon interface.

How do I monitor USB port activity?

USB Monitor Pro is a software tool allowing to monitor USB traffic, detect bugs and issues in the process of development of software, hardware and drivers for USB devices. The program helps to analyze thousands of packets and megabytes of binary information in order to trace and eliminate errors.


2 Answers

After five years waiting, now it's possible to sniff usb packets on windows

See http://desowin.org/usbpcap/tour.html for a quick tour. It works pretty well

like image 192
albfan Avatar answered Sep 29 '22 01:09

albfan


  1. Since people don't seem to realize it, Wireshark does monitor USB traffic and has a parser for it; but the catch is it only works under Linux. Wireshark on Windows will not do this.

  2. It may be possible to plug the USB device you want to monitor, along with a Linux machine (with Wireshark running) and your Windows machine and just use the USB device under Windows.

  3. Problem with the above? I don't know how the Linux machine or the Windows machine will detect each other.

like image 41
jamkomo Avatar answered Sep 28 '22 23:09

jamkomo