Display Filter Reference: USB Mass Storage

Protocol field name: usbms

Versions: 1.0.0 to 2.6.1

Back to Display Filter Reference

Field name Description Type Versions
usbms.dCBWCBLength CDB Length Unsigned integer, 1 byte 1.0.0 to 2.6.1
usbms.dCBWDataTransferLength DataTransferLength Unsigned integer, 4 bytes 1.0.0 to 2.6.1
usbms.dCBWFlags Flags Unsigned integer, 1 byte 1.0.0 to 2.6.1
usbms.dCBWLUN LUN Unsigned integer, 1 byte 1.0.0 to 2.6.1
usbms.dCBWSignature Signature Unsigned integer, 4 bytes 1.0.0 to 2.6.1
usbms.dCBWTag Tag Unsigned integer, 4 bytes 1.0.0 to 2.6.1
usbms.dCBWTarget Target Unsigned integer, 1 byte 2.0.0 to 2.6.1
usbms.dCSWDataResidue DataResidue Unsigned integer, 4 bytes 1.0.0 to 2.6.1
usbms.dCSWSignature Signature Unsigned integer, 4 bytes 1.0.0 to 2.6.1
usbms.dCSWStatus Status Unsigned integer, 1 byte 1.0.0 to 2.6.1
usbms.setup.bRequest bRequest Unsigned integer, 1 byte 1.0.0 to 2.6.1
usbms.setup.maxlun Max LUN Unsigned integer, 1 byte 1.0.0 to 2.6.1
usbms.setup.wIndex wIndex Unsigned integer, 2 bytes 1.0.0 to 2.6.1
usbms.setup.wLength wLength Unsigned integer, 2 bytes 1.0.0 to 2.6.1
usbms.setup.wValue wValue Unsigned integer, 2 bytes 1.0.0 to 2.6.1
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More