Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Device address does not match when system is restored from hibernate #137

Open
pmyy-wt opened this issue Jan 24, 2024 · 5 comments
Open

Comments

@pmyy-wt
Copy link

pmyy-wt commented Jan 24, 2024

When the system is restored from hibernate, USBPcapCMD.exe outputs different device address . But the filtering driver continues to use the old address for filtering.

@pmyy-wt
Copy link
Author

pmyy-wt commented Jan 24, 2024

Oh, another problem is the USBPcapCMD.exe also outputs the disabled devices address, which may conflicts with other device.

@pmyy-wt
Copy link
Author

pmyy-wt commented Jan 26, 2024

OK, I found message from the tour (https://desowin.org/usbpcap/tour.html) that, before the capture start, the target device needs to disconnect from computer. Maybe it is the reason for the address mismatch after restored from hibernate. But that I came up another problem with the embedded Bluetooth adapter. I can't unplug it from the computer. I had try to disable and re-enable the Bluetooth adapter, disable/re-enable the USB hub and disable/re-enable the USB controller, all can't capture data from the embedded Bluetooth adaptor.

For the second problem, here a case of conflict address. the disabled device 'Synaptics FP Sensors (WBF) (PID=0017)' has the same address 1 with the device 'USB Composite Device'.
conflict address

@desowin
Copy link
Owner

desowin commented Jan 26, 2024

For the second problem, here a case of conflict address. the disabled device 'Synaptics FP Sensors (WBF) (PID=0017)' has the same address 1 with the device 'USB Composite Device'.

This is interesting because this is all enumerated in user-space. Is it possible that it is simply wrong parent-child relationship and the Synaptics FP sensor is really one interface of the composite device?

@pmyy-wt
Copy link
Author

pmyy-wt commented Jan 27, 2024

For the second problem, here a case of conflict address. the disabled device 'Synaptics FP Sensors (WBF) (PID=0017)' has the same address 1 with the device 'USB Composite Device'.

This is interesting because this is all enumerated in user-space. Is it possible that it is simply wrong parent-child relationship and the Synaptics FP sensor is really one interface of the composite device?

As shown in the device manager(image left side), it is an independence device, not a composite device(a laptop embedded fingerprint input device, useless for me, so disabled).

@pmyy-wt
Copy link
Author

pmyy-wt commented Jan 27, 2024

I continue research the first problem. The capture always OK when use an external USB Bluetooth dongle. But for the embedded Bluetooth adapter, the capture was only successfully by chance, failure occurred even after reboot. Then I tried passthrough the adapter to vmware client, the capture OK again (on host). Inspect to device manager, the device becomes "VMWare USB Device", and the driver information show usbpcap.sys in it. Compared to its original Bluetooth driver, the usbpcap.sys is not in the driver information. I don't think it is the matter because usbpcap.sys also not in the external dongle's driver information.
driver information
How can I get logs if there some fail in the filter driver?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants