Re: [BUG] pcap-usb-linux.c

[Jean-Louis <jelot-tcpdump () jelot it>]

Guy Harris ha scritto:
> On Nov 24, 2008, at 1:27 PM, Tyson Key wrote:
>
> > Hi, any chance that a "usbany" (or similar) pseudo-device could be
> >  added in a future version to capture on all USB buses, similar to
> > the standard "any" device for non-USB interfaces?
>
> The "any" device works in Linux because you can open a PF_PACKET
> socket and not bind it to a particular interface, so it receives
> packets from all interfaces rather than one particular interface.
>
> A "usbany" device would be implemented in the USB capture module in
> the Linux kernel in a similar fashion.  I don't know whether it will
> appear in any future version of the Linux kernel.

module of kernel 2.6.26 has this capability

for bin and mmapped access "usbany" is /dev/usbmon0
for text access "usbany" is /sys/kernel/debug/usbmon/0u

usb_platform_finddevs() don't handle this special device, because he
scan /proc/bus/usb/ and this "anydevice" don't is a regular bus

obviously "usbany" can be added, but is necessary change also
usb_read_linux() and usb_activate() for handling new "u" format, (now is
used "t" format, but this is deprecated and "anydevice" don't has "t"
format... /sys/kernel/debug/usbmon/0t is absent)
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.