On Wed, 8 Jan 2014, tatxarata wrote: > Oops.. my bad... > > It seems like wireshark misses some data while capturing on usbmon > device. According to LBA addresses in subsequent SCSI commands it looks > like on a request of 240 sectors host really gets from device 240 > sectors. On the other hand for each such request in the capture exists > only one URB_BULK packet with data and the size of this data covers only > 120 sectors (61440 bytes). As a consequence size of capture file is > about twice less than size of files transferred to create this capture. > > In my previous examinations I've took into account only size of URB_BULK > packets and missed out the difference between subsequent LBA addresses. > > For such URB_BULK packets wireshark states "URB length: 122880", "Data > length: 61440". Reading of Documentation/usb/usbmon.txt didn't clarified > for me what does this mean. Whether this is limitation of usbmon or a > feature of wireshark. You may get better results if instead of Wireshark, you use the text interface for usbmon as described in the the usbmon.txt file. Alan Stern -- To unsubscribe from this list: send the line "unsubscribe linux-usb" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html