Ask Your Question

Revision history [back]

USBPcap on Windows: capturing descriptors

Wireshark's USB protocol analysis needs to see device descriptors in order to function properly. The usual technique for ensuring that they are present in a capture is to plug in a USB device after the capture has already started. The problem is that my USB device is soldered to a board underneath a gasket-sealed aluminum block riding on a card with near-0 clearance inside two layers of sheet-metal chassis each with a zillion screws. I would much prefer to find a way to re-enumerate the device (or otherwise provoke it to dump descriptors) from software.

I have tried disabling and re-enabling the device in Device Manager, but I still don't see the enumeration process in the USBPcap dump.

Does anyone have a trick to share?

Thanks!