USBPcap Live Capture

[David Walters]

I am running USBPcap version 1.2.0.3 and Wireshark Version 2.4.2 (v2.4.2-0-gb6c63ae086) to do a live capture.  When I run the command:

"C:\Program Files\USBPcap\USBPcapCMD.exe" -d \\.\USBPcap3 -o - | "C:\Program Files\Wireshark\Wireshark.exe" -k -i -

I get the following output: Selected capture options result in empty capture.

Running USBPCapCMD and saving to a file works fine and selecting USBPcap3 works fine.

I am running Windows 8.1 

Anyone have success running it live on Windows 8.1?

[Tomasz Moń]

On Thu, Dec 21, 2017 at 4:09 PM David Walters <dwalt...@gmail.com> wrote:
> I am running USBPcap version 1.2.0.3 and Wireshark Version 2.4.2 (v2.4.2-0-gb6c63ae086) to do a live capture. When I run the command:
> "C:\Program Files\USBPcap\USBPcapCMD.exe" -d \\.\USBPcap3 -o - | "C:\Program Files\Wireshark\Wireshark.exe" -k -i -

To capture from all devices on given roothub add the -A option, so the
commandline says:
"C:\Program Files\USBPcap\USBPcapCMD.exe" -d \\.\USBPcap3 -A -o - |

"C:\Program Files\Wireshark\Wireshark.exe" -k -i -

It is preferred to use USBPcap as extcap (copy USBPcapCMD to
Wireshark/extcap directory) - the capture can then be started from
Wireshark interface.