Ask Your Question
0

Does Wireshark need admin rights/privileges to execute USB capture

asked 2018-08-07 18:17:21 +0000

Would like to know if Wireshark need admin rights/privileges to execute USB capture using USBPcap package.

Platform: Windows Wireshark version: Wireshark-2.0.3

edit retag flag offensive close merge delete

Comments

Is there a reason for using such an old version? The current stable version is 2.6.2, can you try that?

grahamb gravatar imagegrahamb ( 2018-08-08 11:08:01 +0000 )edit

I have added my custom protocol dissectors in this particular version and is working efficiently without issues. Wanted to capture USB packets, tried using the feature but observed that when executed it lists out the USB ports on that particular system, when tried to initiate capture, it fails with warning "no capture data" "empty pipe". So, wanted to know if there is permission issue involved, does this execution require admin privileges. Thank you.

kirankumarg.81 gravatar imagekirankumarg.81 ( 2018-08-08 16:10:04 +0000 )edit

Wireshark uses USBPCapCMD to run the captures, that should be installed for you, what happens if you try that from a command line? What version of USBPcap are you using?

grahamb gravatar imagegrahamb ( 2018-08-08 16:54:41 +0000 )edit

I tried capturing from the command line and it din't capture any packets, same behavior. I am using USB Pcap version 1.2.03. I recently upgraded to this version as the previous version was having issue with Windows-7 OS (Hotfix), USB ports were used to get unusable.

What does "that should be installed for you" means, can you please elaborate ?

Thanks.

kirankumarg.81 gravatar imagekirankumarg.81 ( 2018-08-08 17:09:09 +0000 )edit

I think that USBPcapCMD.exe should have been available as part of USBPcap install?

When you tried "capturing from the command line" what program did you use, tshark, dumpcap or USBPcapCMD?

grahamb gravatar imagegrahamb ( 2018-08-08 17:16:49 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2018-08-17 19:09:54 +0000

updated 2018-08-18 09:56:10 +0000

Jaap gravatar image

I got the answer from the developer of USB Pcap, please see the reply from the link - https://github.com/desowin/usbpcap/is...

Thank you.

edit flag offensive delete link more

Comments

For posterity, just in case the link dies, the answer is that yes, you need admin privs for USB captures using USBPcap.

grahamb gravatar imagegrahamb ( 2018-08-20 15:29:30 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2018-08-07 18:17:21 +0000

Seen: 150 times

Last updated: Aug 18