THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Does Wireshark need admin rights/privileges to execute USB capture

Would like to know if Wireshark need admin rights/privileges to execute USB capture using USBPcap package.

Platform: Windows Wireshark version: Wireshark-2.0.3

kirankumarg.81's avatar
1
kirankumarg.81
asked 2018-08-07 18:17:21 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Is there a reason for using such an old version? The current stable version is 2.6.2, can you try that?

grahamb's avatar grahamb (2018-08-08 11:08:01 +0000) edit

I have added my custom protocol dissectors in this particular version and is working efficiently without issues. Wanted to capture USB packets, tried using the feature but observed that when executed it lists out the USB ports on that particular system, when tried to initiate capture, it fails with warning "no capture data" "empty pipe". So, wanted to know if there is permission issue involved, does this execution require admin privileges. Thank you.

kirankumarg.81's avatar kirankumarg.81 (2018-08-08 16:10:04 +0000) edit

Wireshark uses USBPCapCMD to run the captures, that should be installed for you, what happens if you try that from a command line? What version of USBPcap are you using?

grahamb's avatar grahamb (2018-08-08 16:54:41 +0000) edit

I tried capturing from the command line and it din't capture any packets, same behavior. I am using USB Pcap version 1.2.03. I recently upgraded to this version as the previous version was having issue with Windows-7 OS (Hotfix), USB ports were used to get unusable.

What does "that should be installed for you" means, can you please elaborate ?

Thanks.

kirankumarg.81's avatar kirankumarg.81 (2018-08-08 17:09:09 +0000) edit

I think that USBPcapCMD.exe should have been available as part of USBPcap install?

When you tried "capturing from the command line" what program did you use, tshark, dumpcap or USBPcapCMD?

grahamb's avatar grahamb (2018-08-08 17:16:49 +0000) edit
add a comment see more comments

1 Answer

0

I got the answer from the developer of USB Pcap, please see the reply from the link - https://github.com/desowin/usbpcap/is...

Thank you.

kirankumarg.81's avatar
1
kirankumarg.81
answered 2018-08-17 19:09:54 +0000
Jaap's avatar
13.7k
Jaap
updated 2018-08-18 09:56:10 +0000
edit flag offensive 0 remove flag delete link

Comments

For posterity, just in case the link dies, the answer is that yes, you need admin privs for USB captures using USBPcap.

grahamb's avatar grahamb (2018-08-20 15:29:30 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer