Closed vcidst closed 5 years ago
The linked data dump is not generated by USBPcap. Based on that dump, it is impossible to tell to which endpoint the data was being directed. PipeHandle 0xffffe3884a84d7d8 can really mean any endpoint of the device.
USBPcap does keep track of pipe handles when they are opened and uses that information to fill USBPcap pseudoheader with the actual endpoint information.
Once you know the endpoint, you simply read or write data to the endpoint using the bulk transfer (all transfers in the linked dump are bulk transfers).
I have a pcap file generated by sniffing usb interaction with a hardware that I want to reverse engineer. How do I send exactly the same packets again to the device (replay packets) using either python (pyusb) or C?
Here's a link to part of the data dump that contains 20 packets