On Tue, Dec 11, 2018 at 8:07 PM Ilnur Iskh <
ilnur.i...@gmail.com> wrote:
> While looking at code in USBPcapURB.c I noticed that large switch in USBPcapAnalyzeURB func lacks URB_FUNCTION_ABORT_PIPE and URB_FUNCTION_RESET_PIPE checks.
> Does it mean USBPcap cannot capture this kind of requests?
They were not captured at all in old USBPcap versions before 1.4.0.0.
In USBPcap 1.4.0.0 - 1.4.1.0, these are captured as
USBPCAP_TRANSFER_UNKNOWN (no endpoint information available).
In USBPcap 1.5.0.0 these are captured as USBPCAP_TRANSFER_IRP_INFO
(proper endpoint in USBPcap pseudoheader).