USB Capture in Linux

tr1x_em — Mon, 29 Dec 2025 12:15:00 +0000

Today we will learn how to capture USB packets in Linux.

Follow along the video and copy commands from here </iframe>

All package name are for archlinux so for any other distro you might need to search google what it is </blockquote>

STEP 1</h3>

Install wireshark or wireshark-qt</h4>

Do it according to your distro, then

ONE TIME PROCESS

Add yourself to wireshark group - (IMPORTANT)</li> </ul>
sudo groupadd wireshark sudo usermod -a -G wireshark $USER</code></pre>STEP 2</h3> Install usbmon</h4> Do it according to your distro, then ONE TIME PROCESS Add yourself to usbmon group - (IMPORTANT)</li> </ul> sudo groupadd usbmon sudo usermod -a -G usbmon $USER</code></pre> Then run this : (IMPORTANT) It would let u capture usb packets without root permissions sudo tee /etc/udev/rules.d/99-usbmon.rules <<'EOF' SUBSYSTEM=="usbmon", GROUP="wireshark", MODE="0640" EOF sudo udevadm control --reload-rules sudo udevadm trigger</code></pre> You might need to logout and login again </blockquote> STEP 3</h3> Load usbmon module</h4> Run sudo modprobe usbmon</code></pre> It would load the kernel module STEP 4 - 6</h2> Capture USB packets</li> Do the thing thats told to you</li> Name the file and send it.</li> </ul> Voila, you have captured your USB packets 🫡

tr1x_em - tutorials

USB Capture in Linux

STEP 1</h3>

STEP 2</h3>

STEP 3</h3>

Load usbmon module</h4>
Run</p>
`sudo modprobe usbmon</span></span></code></pre> It would load the kernel module</p> STEP 4 - 6</h2> Capture USB packets</li> Do the thing thats told to you</li> Name the file and send it.</li> </ul> Voila, you have captured your USB packets 🫡</p>`

STEP 4 - 6</h2>

Capture USB packets</li>
Do the thing thats told to you</li>
Name the file and send it.</li> </ul>
Voila, you have captured your USB packets 🫡</p>

tr1x_em - tutorials

USB Capture in Linux

STEP 1</h3>

STEP 2</h3>

STEP 3</h3>

Load usbmon module</h4> Run</p> sudo modprobe usbmon</span></span></code></pre> It would load the kernel module</p> STEP 4 - 6</h2> Capture USB packets</li> Do the thing thats told to you</li> Name the file and send it.</li> </ul> Voila, you have captured your USB packets 🫡</p>

STEP 4 - 6</h2> Capture USB packets</li> Do the thing thats told to you</li> Name the file and send it.</li> </ul> Voila, you have captured your USB packets 🫡</p>

Load usbmon module</h4>
Run</p>
`sudo modprobe usbmon</span></span></code></pre> It would load the kernel module</p> STEP 4 - 6</h2> Capture USB packets</li> Do the thing thats told to you</li> Name the file and send it.</li> </ul> Voila, you have captured your USB packets 🫡</p>`

STEP 4 - 6</h2>

Capture USB packets</li>
Do the thing thats told to you</li>
Name the file and send it.</li> </ul>
Voila, you have captured your USB packets 🫡</p>