usbmon

A Linux kernel module which can snoop and output USB communications traffic. The output produced by usbmon can be examined by using utilities such as usbdump, USBMon or Wireshark.

The v4l-utils tree provides the parse_tcpdump_log.pl script to directly talk with usbmon, parsing the result into a format feasible for analysis.

Also see

• usbmon2usbsnoop - a perl script that convert's usbmon output into usbsnoop log file format (thereby making the data compatible for use with, for example, usbreplay)

External Links

• kernel documentation
• The usbmon: USB monitoring framework article
• USBMon - an old java program that can interface with the output from the usbmon kernel module; unfinished ? see: the notes on this page and those from this article on USB snooping under Linux
• Wireshark - a more polished way to interface, via libpcap, with the usbmon kernel module's output; see the Wireshark wiki page's regarding USB: here and here