This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

usb.urb_type values?

The usb.urb_type is described as "URB type" "String" in the manual http://www.wireshark.org/docs/dfref/u/usb.html. This is very helpful. But now, I want to see only host-do-device requests. usb.urb_type == URB_SUBMIT blocks everything.

filtering

asked 25 Mar '11, 04:50

valentin
6●1●1●3
accept rate: 0%

edited 25 Mar '11, 05:00

3 Answers:

0	Try: `usb.urb_type contains "S"` answered 25 Mar '11, 07:14 cmaynard ♦♦ 9.4k●10●38●142 accept rate: 20%

I have changed the format of this field from a "String" to an "Unsigned 8-bit integer", so starting with Wireshark 1.5.1, you will be able to filter using usb.urb_type == 83 or usb.urb_type == 0x53 or by using usb.urb_type == URB_SUBMIT as you tried to do before. This will also apply to any of the automated builds, r36331 or later. Until then, you can use usb.urb_type contains "S", as I mentioned earlier.

answered 25 Mar '11, 12:02

cmaynard ♦♦
9.4k●10●38●142
accept rate: 20%

0	you can also usb[8] == 53 answered 03 Aug '11, 10:08 terxx 1 accept rate: 0%