Wireshark-dev: Re: [Wireshark-dev] USB

From: "Charles Lepple" <clepple@xxxxxxxxx>
Date: Tue, 3 Apr 2007 09:51:10 -0400

On 4/3/07, Jim Paris <jim@xxxxxxxx> wrote:

Given that I have real raw USB packets, any suggestions on what to do
to get those into Wireshark?  Could the existing USB dissector still
be useful or would this entail creating a whole new DLT_* type and
dissector?

To expand on what Guy said about constructing URBs, it's similar to
the way that Wireshark can reassemble a TCP stream from individual TCP
packets, or the way that fragmented packets are reassembled into full
packets for higher-level dissectors.

--
- Charles Lepple