Hi, I am a newer to USB development,and now I am learning the usb communicate protocol.
After searching the mailing list , I got two usefull informations: 1. https://developer.apple.com/library/content/qa/qa1370/_index.html 2. https://lists.apple.com/archives/usb/2017/Jun/msg00004.html But in `Technical Q&A QA1370`,Q: What Development Tools should I use and Where can I get them? is out of date. The second link really works except the logging service. According to this post https://lists.apple.com/archives/usb/2017/Jun/msg00004.html. I have downloaded the latest nightly build.But don't working. ( Wireshark: Version 2.5.0-2027-g786a73b8 (v2.5.0rc0-2027-g786a73b8) Wireshark 2.5.0-2027-g786a73b8 Intel 64.dmg https://www.wireshark.org/download/automated/osx/Wireshark%202.5.0-2027-g786a73b8%20Intel%2064.dmg MacOS: 10.12.6 (16G1036) ) How should I do USB packet capture in macOS 10.12.6 ? Thanks in advance. Re: USB packet capture coming in future macOS Subject: Re: USB packet capture coming in future macOS From: email@hidden Date: Mon, 19 Jun 2017 11:13:46 -0700 Delivered-to: email@hidden Delivered-to: email@hidden Just a quick update to this thread. With macOS High Sierra you can use Wireshark to capture USB traffic. The interface needs to be manually brought up/down to enable/disable packet capture for the specific controller via ifconfig (where you can also see a list of available interfaces). I don??t believe there is a ??released?? version of Wireshark with this support yet but you can download a nightly build here: https://www.wireshark.org/download/automated/osx/ <https://www.wireshark.org/download/automated/osx/>. The capture interfaces are named based on the underlying controller type followed by the bus number: $ ifconfig EHC26: flags=0<> mtu 0 XHC20: flags=0<> mtu 0 EHC29: flags=0<> mtu 0 $ ioreg -w0 -rc AppleUSBHostController +-o XHC1@14000000 <class AppleUSBXHCILPTH, id 0x10000029c, registered, matched, active, busy 0 (1179 ms), retain 128> +-o EHC2@1a000000 <class AppleUSBEHCIPCI, id 0x1000002a4, registered, matched, active, busy 0 (400 ms), retain 80> +-o EHC1@1d000000 <class AppleUSBEHCIPCI, id 0x1000002dd, registered, matched, active, busy 0 (330 ms), retain 80> The format above is <name>@<location> where the most significant byte of the location is the bus number. For example, if the device your interested in is connected to the XHCI controller XHC1@14000000 then you would enable packet capture via "sudo ifconfig XHC20 up?? and disable via ??sudo ifconfig XHC20 down??. Once the interface is up then Wireshark will be able to capture/decode/filter USB traffic for that controller. ??scott > On Apr 17, 2017, at 9:43 AM, email@hidden wrote: > > Hi, > > The request was approved and the packet format can be found here: > http://www.tcpdump.org/linktypes/LINKTYPE_USB_DARWIN.html > <http://www.tcpdump.org/linktypes/LINKTYPE_USB_DARWIN.html>. Support for > decoding LINKTYPE_USB_DARWIN has also been submitted to Wireshark: > https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commitdiff;h=62d78199eee5d239b826442c6edd95aeeef1540b > > <https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commitdiff;h=62d78199eee5d239b826442c6edd95aeeef1540b>. > > Unfortunately, at this time, there is no support for packet capture in macOS. > > ??scott > > > > >> On Apr 15, 2017, at 4:01 AM, Roland King <email@hidden >> <mailto:email@hidden>> wrote: >> >> Was there ever anything more on this? The original link went quiet in >> December, I don??t know if the DLT was ever approved/issued or if the tool >> made it into a version of OSX. I could do with that this week. >> >>> On 16 Feb 2017, at 02:49, Brendan Shanks <email@hidden >>> <mailto:email@hidden>> wrote: >>> >>> Great news: looks like a USB packet capture solution is in the works for a >>> future (probably the next) version of macOS. >>> >>> "We??ve been working to provide developers with a software packet capture >>> solution for USB transfers at Apple. To that end, I have implemented a >>> solution which uses BPF and is libpcap compatible..." >>> >>> http://seclists.org/tcpdump/2016/q4/23 >>> <http://seclists.org/tcpdump/2016/q4/23> >>> >>> Clicking through the thread (which goes into January) has more info on the >>> header format and other details. >>> >>> >>> Brenda
_______________________________________________ Do not post admin requests to the list. They will be ignored. Usb mailing list ([email protected]) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/usb/archive%40mail-archive.com This email sent to [email protected]
