Johannes Bauer wrote:
One question, though: How did you find out that bInterfaceClass
corresponds to the usb.bulk table? I've poked around some in the
sourcecode of wireshark, but did not find that reference.
All in all, that bInterfaceClass is quite mysterious to me anyways
because it does not appear to be a "real" field in the sense of it is
not part of the dump. Even if I create an empty packet with all fields
set to 0 (except for the URB type and URB transfer type fields), the
bInterfaceClass is 0xffff. I do not know where wireshark processes that.
See the code in epan/dissectors/packet-usb.c .....
