Not seeing String Descriptor Requests when capturing with USBPcap on Windows 10

asked 2023-02-24 19:26:59 +0000

flexsource gravatar image

updated 2023-02-28 14:39:12 +0000

WIn 10 Enterprise. WIreshark 4.0.3. Device: 100% functional apparently VID 0483. PID 5740. ST micro controller as CDC device using VCP. I see DEVICE DESC request and response. I see CONFIG request for 9 bytes and response. I see second CONFIG REQUEST for ALL bytes this time and the expected response.I see STATUS request and response. I see a THIRD (Surprise) CONFIG DESC request and that same response. I see SET CONFIG. I see SET INTERFACE and lastly I see line coding requests and responses. BUT ---- I DO see the expected string information when Windows Device manager. As in iProduct and the text is readable in Device manager under DETAIL- Bus Reported Device Description. It is the expected TEXT. I tried using Wireshark native and USBPcapCMD by itself and then viewing the PCAP file with Wireshark. Also don't see Microsoft specific descriptor requests. Device descriptor response shows non-zero values for all 3 of iManufacturer, iProduct and iSerialNumber index values. JUST LIKE I HAVE THEM SET IN FIRMWARE

NO REQUESTS FOR STRING DESCRIPTORS SHOW UP in Wireshark but Windows gets the data... Baffled.....

I see where a near identical question about this was asked in November of 2017. I've already tried the response it got and have no better results. I plugged my phone in. I SEE STRING DESCRIPTOR REQUESTS AND RESPONSES. So Wireshark WILL show them. The chief baffling thing with the other device is why I dont see the STRING DESCRIPTOR REQUEST OR RESPONSE traffic in Wireshark but the PC shows that it gets the string data in Device manager. I even changed the string in firmware in the device and got "FREDS_BAR_AND_GRILL" in Device manager just like I typed it in to the micro. ??? I'm going to make another forensic level sifting of what Wireshark DOES see and report from the device just to make sure.

Any insight appreciated. Even some that would be rather embarrassing to me would be okay...

Help?

edit retag flag offensive close merge delete