ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 12846] Live capture from USBPcap fails immediately

Date: Fri, 09 Sep 2016 06:27:25 +0000

Comment # 5 on bug 12846 from
(In reply to Pavel Sindelka from comment #4)
> > Simply click on the wheel icon, which is on the left of the USBPcap
> > interface name
> Grrr... I was clicking the text all the time :-)
> 
> > Not exactly: it's not a check box, but a tree when you can select one or
> > several elements by clicking on them (you will see it when clicking on the
> > icon). I'm almost sure that previously Wireshark was not sending the
> > --devices parameter if nothing was selected
> 
> Maybe previously USBPcapCMD was simply not returning the --devices option in
> the answer to --extcap-config? I understand the purpose of this option,
> together with --capture-from-all-devices and --capture-from-new-devices, as
> a substitution of a capture filter

Multicheck was created for USBPcap so you can be sure its behavior did not
change. 

> 
> As for the tree display and handling: the description on the man page says
> 
> > multicheck (display a textbox for selecting multiple options, values as strings)
> 
> The list of tree items in my case is, on one root hub:
> arg {number=99}{call=--devices}{display=Attached USB Devices}{tooltip=Select
> individual devices to capture from}{type=multicheck}
> value {arg=99}{value=1}{display=[1] Generic USB Hub}{enabled=true}
> value {arg=99}{value=2}{display=[2] Validity Sensor
> (VFS491)}{enabled=true}{parent=1}
> value {arg=99}{value=3}{display=[3] Složené zařízení
> USB}{enabled=true}{parent=1}
> value {arg=99}{value=3_1}{display=HP HD Webcam
> [Fixed]}{enabled=false}{parent=3}
> 
> On another root hub, it is:
> arg {number=99}{call=--devices}{display=Attached USB Devices}{tooltip=Select
> individual devices to capture from}{type=multicheck}
> value {arg=99}{value=1}{display=[1] Velkokapacitní paměťové zařízení
> USB}{enabled=true}
> value {arg=99}{value=1_1}{display=General USB Flash Disk USB
> Device}{enabled=false}{parent=1}
> 
> What is weird is that I cannot select the leaves in the trees (i.e. the "HP
> HD Webcam [Fixed]" and the "General USB Flash Disk USB Device".

You can select the the sub element of a root USB (or at least it used to work). 

> 
> 
> How do you visualize the command line parameters with which dumpcap invokes
> the USBPcapCMD.exe?

I use a program name Process Explorer that (amongst things) can show you all
system calls.


You are receiving this mail because:
  • You are watching all bug changes.