by

Windows Usb Sniffer

Active2 months ago

Free Serial Analyzer is a non-intrusive Serial Port sniffer and software RS-232/RS-422/RS-485 protocol analyzer for Windows. Using this freeware RS232/RS485/RS422 logic analyzer utility you'll be able to capture/display any data and commands transmitted via Serial Ports of your computer. USB Sniffer is a software tool that enables monitoring USB ports activity on a Windows machine. This simple app allows a user to capture USB traffic data and also provides full activity analytics for any USB device without plugging an additional hardware. Hi all, I used Wireshark many moons ago and need to return to the fold, but this time to sniff USB packets. I've installed USBpcap but there is no USB interface shown on Wireshark, just the Ethernet connections. I've looked at the documentation but can't find an idiot's how-to. The references to USB seem to be in the context of USB to Ethernet convertors.

USB protocol Analyzer is an easy to use USB Data Monitor for Windows. It offers simple, yet complete view for monitoring and analyzing activity of USB devices. USB Traffic Analyzer can intercept, record, display, and analyze incoming or outgoing data between any USB device plugged in your computer and applications. Download Wireless Network Sniffer for Windows 7/8/8.1/10. If you do not need to view Wi-Fi network packets or use a Wi-Fi network traffic sniffer, download Acrylic Wi-Fi Free, a free Wi-Fi network and channel sniffer for Windows that allows you to view all the wireless networks within reach. This version supports normal capture and monitor modes. USBPcap is an open-source USB sniffer for Windows. Download Digitally signed installer for Windows XP, Vista, 7, 8 and 10, both x86 and x64 is available at Github. A software-only analyzer can display host driver information but can't display low-level bus information. USB Sniffer is a free tool for monitoring USB traffic. It's based on an earlier project called USB Snoopy. USBPcap is an open-source USB analyzer for Windows. AGG Software has the Advanced USB Port Monitor.

From time to time, I need to dump USB traffic under Windows, mostly to support hardware under Linux, so my primary goal is to produce dump files for protocol analysis.

For USB traffic, it seems that SniffUsb is the clear winner.. It works under Windows XP (but not later) and has a much nicer GUI than earlier versions. It produces huge dump files, but everything is there.

However, my device is in fact a USB serial device, so I turned to Portmon which can sniff serial port traffic without the USB overhead.

Samuel Liew♦
47.7k37 gold badges121 silver badges180 bronze badges
dpavlindpavlin
8472 gold badges7 silver badges17 bronze badges

6 Answers

Personally, I'd use QEMU or KVM and instrument their USB passthrough code, and then use libusb to prototype the replacement driver in user space (this latter bit I've done before; writing USB device drivers in Python is fun!).

Peter Mortensen
14.5k19 gold badges89 silver badges118 bronze badges
Charles DuffyCharles Duffy
194k29 gold badges223 silver badges281 bronze badges

  1. Since people don't seem to realize it, Wireshark does monitor USB traffic and has a parser for it; but the catch is it only works under Linux. Wireshark on Windows will not do this.

  2. It may be possible to plug the USB device you want to monitor, along with a Linux machine (with Wireshark running) and your Windows machine and just use the USB device under Windows.

  3. Problem with the above? I don't know how the Linux machine or the Windows machine will detect each other.

Peter Mortensen
14.5k19 gold badges89 silver badges118 bronze badges
jamkomojamkomo

After five years waiting, now it's possible to sniff usb packets on windows

See http://desowin.org/usbpcap/tour.html for a quick tour. It works pretty well

albfanalbfan
9,1571 gold badge42 silver badges69 bronze badges

USBSnoop works too - and is free.

Or, you could buy a USB to Ethernet converter and use whatever network sniffer you prefer to see the data.

Maxime
5,9102 gold badges40 silver badges48 bronze badges
gbjbaanbgbjbaanb
46.5k10 gold badges92 silver badges139 bronze badges

Busdog, an open source project hosted on github, has worked well for me. It has a driver it installs to allow it to monitor USB communications. The config window allows you to reinstall or remove the device at any time.

You can select the USB device you want from an enumerated list. A nice feature is to have it automatically trace a new device that is plugged in:

Data communications to and from an SWR analyzer I was reverse engineering were captured flawlessly:

Windows Xp Usb Sniffer

Kurt FitznerKurt Fitzner

Microsoft Message Analyzer can capture USB traffic as well, if download Device and Log File parser from MS: link

Renat

Usb Analyzer Tool

Renat
3,7461 gold badge11 silver badges23 bronze badges

protected by Community♦Jul 6 '14 at 17:09

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).
Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged windowsusbsniffingusbserial or ask your own question.

USBPcap is an open-source USB Packet Capture tool for Windows that can be used together with Wireshark in order to analyse USB traffic without using a Virtual Machine.


Windows Usb Sniffer Tool

Currently, the live capture can be done on “standard input” capture basis: you write a magic command in cmd.exe and you get the Wireshark to capture raw USB traffic on Windows.

USBPcapDriver has three “hats”:

  • Root Hub (USBPCAP_MAGIC_ROOTHUB)
  • Control (USBPCAP_MAGIC_CONTROL)
  • Device (USBPCAP_MAGIC_DEVICE)

What you won’t see using USBPcap

As USBPcap captures URBs passed between functional device object (FDO) and physical device object (PDO) there are some USB communications elements that you will notice only in hardware USB sniffer.

These are:

  • Bus states (Suspended, Power ON, Power OFF, Reset, High Speed Detection Handshake)
  • Packet ID (PID)
  • Split transactions (CSPLIT, SSPLIT)
  • Duration of bus state and time used to transfer packet over the wire
  • Transfer speed (Low Speed, Full Speed, High Speed)

Usb Sniffer Windows Open Source

Moreover, you won’t see complete USB enumeration. You will only see the USB control transfer send to device after the device has been assigned its address.

There is also this to check out:

Faheem Saeed (August 5, 2011). Retrieved July 20, 2011. Archived from on January 18, 2012. Java download for mac.

– SnoopyPro – Windows USB Sniffer Tool

You can download USBPcap here:

Windows: USBPcapSetup-1.2.0.3.exe
Source: USBPcap-1.2.0.3.zip

Or read more here.