First, run sudo modprobe usbmon
.
Now Wireshark should show usbmon0-N
capture devices.
They correspond to USB buses (see lsusb
), so select the one on which the target device is attached.
Now filter out the right device on the bus by writing a filter.
usb.src
and usb.dst
are the packet's source and destination address, one of which will always be "host".