How to increase the USB snap/buffer length to capture bigger packages?
I need to capture the data for a USB application that uses packages of size 1048603 bytes. Of these, only 65535 bytes are saved into the pcap-file, thus not giving me what I wan and need, unfortunately.
I've tried increasing the values in the extcap.___usbpcapN.bufferlen and extcap.___usbpcapN.snaplen fields under the advanced options, but this doesn't give the desired result either.
Is this possible at all, or? At the moment I'm using Wireshar 3.0.5 (v3.0.5-0-g752a55954770) on Windows 10 with USBPcap 1.3.0 (what current version of Wireshark installs when doing a fresh install).
I've also tried running both tshark and USBPcapCMD from the command line using passing values for the -snaplen / -B -s and whatnot commands, but I still end up with not managing to achieve what I need for this application.
What value did you try for the snaplen? According to Wireshark source code wiretap/wtap.h header file, you should at least be able to capture up to 1,048,576 bytes. That will apparently still be too small for your needs, but it should get you a lot closer to your goal. If you really need more than that, then I'd recommend opening up a Wireshark bug report to request that limit be increased.