Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

USBPCap did not recognize URB Function code #113

Open
ifohancroft opened this issue Feb 15, 2021 · 0 comments
Open

USBPCap did not recognize URB Function code #113

ifohancroft opened this issue Feb 15, 2021 · 0 comments

Comments

@ifohancroft
Copy link

ifohancroft commented Feb 15, 2021

In a USB packet capture in the pcapng format during a firmware update (technically this capture contains the firmware update of two devices, a mouse dongle and the mouse), I got 22 packets that show up as Summary: Unknown type 7f, Group: Malformed and at the top it says "USBPCap did not recognize URB Function code (report to desowin.org/USBPCap).
The way the repeat seems like a pattern, so it may be important:

    1. Group of 4 (as in 4 consecutive packets are of this malformed unknown type 7f) - packet numbers 5737-5740
    1. Group of 4 - packet numbers 12891-12894
    1. Group of 4 - 12980-12983
    1. Group of 2 - 12988-12989
    1. Group of 2 - 12994-12995
    1. Group of 2 - 13052-13053
    1. Group of 4 - 26910-26913

The first packet in each group is always from the Host to the Device.

Total number of packets in the capture 29333.

P.S.

  • Group 1 is for device 1.9.0 (The dongle)
  • Group 2 is for device 1.10.0 (The dongle again) (Probably after the update, the device was turned off and on again and switched its id)
  • Group 3 - 1.11.0 (The mouse) (connected via cable as that's what the updater wanted)
  • Group 4 - the device is still 1.11.0
  • Group 5 - the device is still 1.11.0
  • Group 6 - the device is still 1.11.0
  • Group 7 - 1.13.0 (The mouse again)

During the capture, only the mouse, its dongle (via its dock) and a keyboard were plugged. The keyboard was not used.

Here are the packets themselves:

0000   1b 00 a0 25 a0 be 87 d5 ff ff 00 00 00 00 2a 00
0010   00 01 00 09 00 00 ff 00 00 00 00

0000   1b 00 a0 25 a0 be 87 d5 ff ff 00 00 00 00 2a 00
0010   01 01 00 09 00 00 ff 00 00 00 00

0000   1b 00 a0 25 a0 be 87 d5 ff ff 00 00 00 00 2a 00
0010   00 01 00 09 00 00 ff 00 00 00 00

0000   1b 00 a0 25 a0 be 87 d5 ff ff 00 00 00 00 2a 00
0010   01 01 00 09 00 00 ff 00 00 00 00

0000   1b 00 e0 b4 0e be 87 d5 ff ff 00 00 00 00 2a 00
0010   00 01 00 0a 00 00 ff 00 00 00 00

0000   1b 00 e0 b4 0e be 87 d5 ff ff 00 00 00 00 2a 00
0010   01 01 00 0a 00 00 ff 00 00 00 00

0000   1b 00 e0 c4 0e be 87 d5 ff ff 00 00 00 00 2a 00
0010   00 01 00 0a 00 00 ff 00 00 00 00

0000   1b 00 e0 c4 0e be 87 d5 ff ff 00 00 00 00 2a 00
0010   01 01 00 0a 00 00 ff 00 00 00 00

0000   1b 00 a0 a9 07 bd 87 d5 ff ff 00 00 00 00 2a 00
0010   00 01 00 0b 00 00 ff 00 00 00 00

0000   1b 00 a0 a9 07 bd 87 d5 ff ff 00 00 00 00 2a 00
0010   01 01 00 0b 00 00 ff 00 00 00 00

0000   1b 00 a0 a9 07 bd 87 d5 ff ff 00 00 00 00 2a 00
0010   00 01 00 0b 00 00 ff 00 00 00 00

0000   1b 00 a0 a9 07 bd 87 d5 ff ff 00 00 00 00 2a 00
0010   01 01 00 0b 00 00 ff 00 00 00 00

0000   1b 00 a0 f9 bd bc 87 d5 ff ff 00 00 00 00 2a 00
0010   00 01 00 0b 00 00 ff 00 00 00 00

0000   1b 00 a0 f9 bd bc 87 d5 ff ff 00 00 00 00 2a 00
0010   01 01 00 0b 00 00 ff 00 00 00 00

0000   1b 00 f0 59 0d b9 87 d5 ff ff 00 00 00 00 2a 00
0010   00 01 00 0b 00 00 ff 00 00 00 00

0000   1b 00 f0 59 0d b9 87 d5 ff ff 00 00 00 00 2a 00
0010   01 01 00 0b 00 00 ff 00 00 00 00

0000   1b 00 a0 09 ce be 87 d5 ff ff 00 00 00 00 2a 00
0010   00 01 00 0b 00 00 ff 00 00 00 00

0000   1b 00 a0 09 ce be 87 d5 ff ff 00 00 00 00 2a 00
0010   01 01 00 0b 00 00 ff 00 00 00 00

0000   1b 00 a0 09 ca bb 87 d5 ff ff 00 00 00 00 2a 00
0010   00 01 00 0d 00 00 ff 00 00 00 00

0000   1b 00 a0 09 ca bb 87 d5 ff ff 00 00 00 00 2a 00
0010   01 01 00 0d 00 00 ff 00 00 00 00

0000   1b 00 a0 09 ca bb 87 d5 ff ff 00 00 00 00 2a 00
0010   00 01 00 0d 00 00 ff 00 00 00 00

0000   1b 00 a0 09 ca bb 87 d5 ff ff 00 00 00 00 2a 00
0010   01 01 00 0d 00 00 ff 00 00 00 00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant