
> #Down dev=1 'usb:0' endpt=82 stream=0 datalen=8 numPackets=0 status=0 0\r\n However, the script seems to be out of date, had to edit it slightly to get it to parse : VMWare has a built in USB logging feature which you can convert into PCAP files using this conversion script You can use Windows as a host when using VMWare as a guest. Once you have wireshark installed run Windows inside a Virtual machine such as VirtualBox or VMWare Player. This page has good details on the VMWare setup. Please see Wireshark PTP Support for install / download details. As of version 1.9.1 the PTP/MTP dissector is not part of the normal distribution. There is also a command line version of wireshark Linux Hostįrom a Linux box you can capture USB packets directly using Wireshark. Please note that you have to use patched version of Wireshark to analyse the file created by USBPcap.

Once you've created a PCAP file, you can do the analysis with Wireshark.

Hopefully, on Windows XP and later you can use to create PCAP file. Using current vanilla release of Wireshark you can only capture in Linux. Wireshark has built in USB capture and decode. Additionally DPS service is implemented on top of PTP that allow usage of PictBridge printer (which acts as USB host). It acts as USB function and implements MTP/PTP protocol with 4 endpoints. D5100 camera is represented by USB bus device with product ID 0x0429 vendor ID 0x04B0 (Nikon) and release number 0x0100 and is USB 2.0 compatible.
