Re: How to re-assemble contents of a USB upload?

[Svenn Are Bjerkem <svenn.bjerkem () googlemail com>]

On 28 June 2011 23:14, Svenn Are Bjerkem <svenn.bjerkem () googlemail com> wrote:
> tshark -r capfile -R "usb.transfer_type == 2 && usb.data_len == 512"
> -T fields -e usb.capdata

Eager to test my new knowledge, I found that using
-e usb.setup.wValue -e usb.capdata
nicely gave me the base address in front of each chunk.

I also tested with usb.bmRequestType == 0x40 instead of usb.data_len
== 512, but that also gave me the final CPU release which fxload sends
after end of hex file. At least I know what to do.

Cheers,
-- 
Svenn
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe