ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: [Wireshark-users] capturing USB data

From: Thomas Epperson <thomas.epperson@xxxxxxxxx>
Date: Sun, 29 Aug 2010 22:28:35 -0500
I have seen a lot of guides that managed to get USB capture by using the command: sudo mount -t usbfs /dev/bus/usb /proc/bus/usb
However, when I try this command here is the result

mount: mount point /proc/bus/usb does not exist

I have libpcap-1.1.1 and tcpdump-4.1.1 installed. I patched libpcap to use /dev/bus/usb instead of /proc/bus/usb, I can read data from /dev/usbmonx and the usual /sys/kernel/debug/usb/usbmon/ entries are present.

--
Thomas Epperson
Build a man a fire, and he'll be warm for a day. Set a man on fire, and he'll be warm for the rest of his life. - Terry Pratchett.