Wireshark · Wireshark-dev: [Wireshark-dev] USB support

[John R. Hogerhuis <jhoger@xxxxxxxxx>]

Hi,

I've been using the USB support in Wireshark/libpcap. I get lots of truncated
messages which makes it hard to make use of.

I have a recent Linux kernel 2.6.24-19, which I believe supports the binary data
format for the kernel usbmon support. Further, my understanding is that through
the binary data interface, the packets should not be truncated.

So what could be the issue? Does libpcap not support the binary interface yet?

Thanks,

-- John.