Daan

Hi.

I want to use Wireshark for sniffing USB traffic. For this I need the development version of libpcap, however the site (www.tcpdump.org) that provides it is down. What's going on? Where can I get the development version of libpcap?

__________________
OS's I use: Debian Lenny, Windows XP, Windows Vista

wje_lf

Um, if you'd googled libpcap, you could have had your answer five hours ago.

__________________
--
Bill

Old age and treachery will overcome youth and skill.

Daan

Hi wje_lf,

Thanks for your reply, but of course I've extensively Googled for libpcap before posting here. I'll elaborate on my problem:

From http://wiki.wireshark.org/CaptureSetup/USB:
"The latest libpcap CVS is required for capturing raw USB traffic; the latest libpcap release (0.9.8 ) does not include USB support."

At SourceForge.net: The libpcap project, to which you refer, I only find version 0.8.1, and no reference to any lipcap CVS or SVN.

www.tcpdump.org (also for libpcap) cannot be reached.

There's also TCPDUMP public repository, where there are intsructions on how to get the development version of libpcap via CVS, however, the CVS repository is located at cvs.tcpdump.org and it cannot be accessed.

But I did just now find a link there to the maling list where several people report problems similar to mine. I also find reports on dying machines that run tcpdump.org stuff.

I guess all I can do now is wait..

__________________
OS's I use: Debian Lenny, Windows XP, Windows Vista

wje_lf

... and your details are indeed quite helpful.

Good grief. I had no idea. You've probably googled this thing to death, and I really have nothing to add. The only thing you might wish to consider is going to wikipedia and seeing whether any of the links they provide at the bottom provide more links that could lead to the answer.

Sorry I couldn't be of more help.

__________________
--
Bill

Old age and treachery will overcome youth and skill.

Daan

Well, at least you put this thread back on top.
Next time I'll put my Google results for others to see.

__________________
OS's I use: Debian Lenny, Windows XP, Windows Vista

denniscox

Here you go...
TCPDUMP public repository

Most of the mirrors have older copies (0.9.1,0.9.4) - this one seems to have 0.9.8.

Daan

Thank you Dennis, but 0.9.8 is not sufficient, USB sniffing requires the latest CVS version (as it says at wireshark.org).

__________________
OS's I use: Debian Lenny, Windows XP, Windows Vista

wje_lf

Search for the word USB on this page. If that satisfies you, click through from that page to the libusb rpm download page.

__________________
--
Bill

Old age and treachery will overcome youth and skill.

Daan

Looks like usb is supported from libpcap 0.9.6 onwards, and not just > 0.9.8 Thanks for pointing that out, Bill! I'll see if I get it to work with wireshark and then contact wireshark.org to tell them so then can change it on their website. And I'll post here too to tell you if it works.

__________________
OS's I use: Debian Lenny, Windows XP, Windows Vista