[Lazarus] Decoding USB sniff data

[Henry Vermaak]

On 3 June 2010 22:58, Adem <listmember at letterboxes.org> wrote:
>
> <Request Number = "5088" Dir = "[OUT]">
> <LogType>URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER</LogType>
> <Param>
> <Name>Length</Name>
> <Value>0x48</Value>
> </Param>
> <Param>
> <Name>USBD Status</Name>
> <Value>USBD_STATUS_SUCCESS (0x0)</Value>
> </Param>
> <Param>
> <Name>EndpointAddress</Name>
> <Value>0x81</Value>
> </Param>
> <Param>
> <Name>PipeHandle</Name>
> <Value>0x86363A94</Value>
> </Param>
> <Param>
> <Name>TransferFlags</Name>
> <Value>0x3 ( USBD_TRANSFER_DIRECTION_IN USBD_SHORT_TRANSFER_OK )</Value>
> </Param>
> <Param>
> <Name>TransferBufferLength</Name>
> <Value>0x40</Value>
> </Param>
> <Param>
> <Name>TransferBuffer</Name>
> <Value>0x86ED6AD8</Value>
> </Param>
> <Param>
> <Name>TransferBufferMDL</Name>
> <Value>0x0</Value>
> </Param>
> <Param>
> <Name>UrbLink</Name>
> <Value>0x0</Value>
> </Param>
> </Request>
> <Request Number = "5089" Dir = "[IN]">
> <LogType>URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER</LogType>
> <Param>
> <Name>Length</Name>
> <Value>0x48</Value>
> </Param>
> <Param>
> <Name>USBD Status</Name>
> <Value>USBD_STATUS_PENDING (0x40000000)</Value>
> </Param>
> <Param>
> <Name>EndpointAddress</Name>
> <Value>0x81</Value>
> </Param>
> <Param>
> <Name>PipeHandle</Name>
> <Value>0x86363A94</Value>
> </Param>
> <Param>
> <Name>TransferFlags</Name>
> <Value>0x3 ( USBD_TRANSFER_DIRECTION_IN USBD_SHORT_TRANSFER_OK )</Value>
> </Param>
> <Param>
> <Name>TransferBufferLength</Name>
> <Value>0x0</Value>
> </Param>
> <Param>
> <Name>TransferBuffer</Name>
> <Value>0x86ED6AD8</Value>
> </Param>
> <Param>
> <Name>TransferBufferMDL</Name>
> <Value>0x858FD770</Value>
> </Param>
> <Param>
> <Name>UrbLink</Name>
> <Value>0x0</Value>
> </Param>
> </Request>

The above just means that it's doing some bulk/interrupt transfers on
endpoint 1.  It's strange that it gives the endpoint address as 0x81,
since that implies an "in" direction, and one of the transfers say
it's an "out".  What you are really interested in are the control
transfers the software issues to set up and control the device.  There
will probably be bulk/interrupt reads after some control transfers,
I'd guess.

Henry