I have some perl scripts set up that operate on the raw frames output from tshark, (Wireshark command line) and I could easily feed it from any stream of frames/bytes. While it would be nice if WireShark could be made to work on USB capture, I'm really looking for an alternative way to grab the raw ethernet bytes.
However, I see that, on Windows, WinPcap/WireShark doesn't support Ethernet capture over USB. It was a cheap Chinese device bought on Ebay but now that I've found an appropriate driver, it works OK. I have a USB-Ethernet adapter to add a second Ethernet port to my laptop. I use WireShark to examine ethernet packet contents at the byte level (in/out of custom FPGA-based hardware). (Apologies: I uninstalled and reinstalled WinPcap and now I can see the extra interface! Suggestion found in Wireshark FAQ.
0 kommentar(er)
