Wireshark mailing list archives

Re: Windows 8 Mobile Broadband interface model interface types


From: Pascal Quantin <pascal.quantin () gmail com>
Date: Mon, 7 Oct 2013 23:39:58 +0200

2013/4/28 Roger Smith <irieblue () me com>

 Windows 8 added support for MBIM devices/network interfaces.
Unfortunately these MBIM interfaces are not showing up as a selectable
interface  in wireshark. Any idea on how to get this working?

MBIM interfaces  transport ip packets and are not wrapped in an Ethernet
style frame. Essentially MBIM is a new interface type that adheres to the
USB CDC NCM/MBIM Spec that has a pretty well defined headers. I need the
ability to decode the packets across an MBIM connection.

Any idea how to get this working? MBIM is finally a standard that should
replace RNDIS for USB network devices , but more important work on all
platforms wire shark runs on.

Thx


Hi Roger,

WinPcap is still not able to capture packets coming from a MBIM device (due
to the various reasons explained by Evan and Guy a few months ago), but if
you use USBPcap (found here: http://desowin.org/usbpcap/ ) with a
development release of Wireshark (found here:
http://www.wireshark.org/download/automated/ ) you should be able to
capture MBIM IP traffic (and MBIM control packets also) directly at USB
level.
The setup is not as straightforward as clicking on button in Wireshark GUI,
but by following the small tour found on
http://desowin.org/usbpcap/tour.html you should be able to get things
working rather easily.
That's the best alternative method we can offer for now while waiting for a
more official support by WinPcap.

Best regards,
Pascal.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: