Analyze USB Traffic with Wireshark
summary
Shows actual captures from a Zephyr-based device using USBPcap (URB-level) and OpenVizsla (link‑level) and compares what each reveals: thousands of startup frames and a 6k+ packet difference after filtering, host re‑asks and device “knocks” repeatedly, and link captures include PID/CRC that software sniffs omit. Demonstrates Wireshark’s improved USBLL dissector with transfer reassembly, explains when URB-level is sufficient and when packet-level traces are needed, and provides working capture files and slides for reproduction.
AI-written summary · about
chapters (9)
- 0:00Introduction to USB analysis
- 0:55USB architecture basics
- 3:25Evolution of USB standards
- 7:29Data transfer types
- 9:53USB device classes
- 10:44Traffic capture methods
- 18:51Understanding packet capture
- 23:13Live analysis demonstration
- 38:16Summary and conclusion
related talks
36mUSB Support in Zephyr OS
45mUSB Support in Zephyr OS
57mZephyr RTOS Debugging and Performance Analysis
08mHubBub: Contention-Based Side-Channel Attacks on USB Hubs
38mWriting Your Own Gadget with Zephyr OS
52mCANnectivity: Zephyr-based USB To CAN Adapter Firmware- 52mCANnectivity: Zephyr-based USB To CAN Adapter Firmware
- 38mWriting Your Own Gadget with Zephyr OS