Ubuntu 16.04 USB接口抓包

安装

1.安装wireshark

sudo apt-get install wireshark

2.加载usbmon模块

sudo modprobe usbmon

3.检查usb中是否有usbmon

sudo ls /sys/kernel/debug/usb/

4.usbmon识别到的USB接口

sudo ls /sys/kernel/debug/usb/usbmon

LSUSB

使用lsusb命令查看当前设备的USB设备

Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 026: ID 040e:f63a MCCI 
Bus 001 Device 003: ID 0000:0538  
Bus 001 Device 025: ID 15ba:002a Olimex Ltd. ARM-USB-TINY-H JTAG interface
Bus 001 Device 002: ID 413c:2113 Dell Computer Corp. 
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub

抓包

我要抓的是

Bus 001 Device 026: ID 040e:f63a MCCI 

1.打开wireshark

sudo wireshark

2.选中usbmon1代表抓取Bus 001的报文

在抓取的报文中有Devices: 26即为我们要抓的USB设备报文