ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 12846] Live capture from USBPcap fails immediately

Date: Fri, 09 Sep 2016 06:22:34 +0000

Comment # 4 on bug 12846 from
> Simply click on the wheel icon, which is on the left of the USBPcap
> interface name
Grrr... I was clicking the text all the time :-)

> Not exactly: it's not a check box, but a tree when you can select one or
> several elements by clicking on them (you will see it when clicking on the
> icon). I'm almost sure that previously Wireshark was not sending the
> --devices parameter if nothing was selected

Maybe previously USBPcapCMD was simply not returning the --devices option in
the answer to --extcap-config? I understand the purpose of this option,
together with --capture-from-all-devices and --capture-from-new-devices, as a
substitution of a capture filter.

As for the tree display and handling: the description on the man page says

> multicheck (display a textbox for selecting multiple options, values as strings)

The list of tree items in my case is, on one root hub:
arg {number=99}{call=--devices}{display=Attached USB Devices}{tooltip=Select
individual devices to capture from}{type=multicheck}
value {arg=99}{value=1}{display=[1] Generic USB Hub}{enabled=true}
value {arg=99}{value=2}{display=[2] Validity Sensor
(VFS491)}{enabled=true}{parent=1}
value {arg=99}{value=3}{display=[3] Složené zařízení
USB}{enabled=true}{parent=1}
value {arg=99}{value=3_1}{display=HP HD Webcam
[Fixed]}{enabled=false}{parent=3}

On another root hub, it is:
arg {number=99}{call=--devices}{display=Attached USB Devices}{tooltip=Select
individual devices to capture from}{type=multicheck}
value {arg=99}{value=1}{display=[1] Velkokapacitní paměťové zařízení
USB}{enabled=true}
value {arg=99}{value=1_1}{display=General USB Flash Disk USB
Device}{enabled=false}{parent=1}

What is weird is that I cannot select the leaves in the trees (i.e. the "HP HD
Webcam [Fixed]" and the "General USB Flash Disk USB Device".


How do you visualize the command line parameters with which dumpcap invokes the
USBPcapCMD.exe?


You are receiving this mail because:
  • You are watching all bug changes.