On Thu, 14 Nov 2013, vichy wrote: > hi all: > I have some questions: > 1. if I need to capture all the data host capture from bus, usb mon > binary can reach this goal? Yes. > 2. if #1 is Yes. from usb mon text I need > a. compile kernel with usbmon support > b. access /dev/usbmonx > c. feed the binary file to wireshark. > in b), shall we write a user mode program? No, just use the usbmon program. However, it creates a text file, not a binary file. You can't feed the output to wireshark. If you want binary output that wireshark can use, you have to run a different program like tcpdump or dumpcap. > if so, is there any sample flow I can reference? See the README file and the man page that are part of the usbmon package: http://people.redhat.com/zaitcev/linux/usbmon-6.tar.gz > 3. if #1 is No, is there any default kernel config can do that? > or I should write memcpy by hand in urb_complete? > > Thanks for your help Alan Stern -- To unsubscribe from this list: send the line "unsubscribe linux-usb" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html