Implement support for USBPcap link-type

[CooperWhitlow]

Hi! I've found that pcap files captured on windows causes a runtime error.

[wcooley]

How are you capturing USB pcap on Windows? Can you share a sample with me?

[CooperWhitlow]

Sure! https://www.dropbox.com/s/cvytlc62yn7xq10/start.pcap?dl=1

[wcooley]

I'm guessing that you captured with USBPcap or something that captures to that format? The link-type of your capture is "USBPCAP", 249, whereas this tool supports "USB_LINUX_MMAPPED", 220.

I naively tried to change the link-type using pcapfix but the formats are non-trivially different. It would be possible to create a new packet format dictionary to decode it, but not without a bit of work.

The USBPcap format is documented at http://desowin.org/usbpcap/captureformat.html.

[CooperWhitlow]

I see.

A new format dictionary is beyond my ability to do myself. Perhaps at least I could include a mention to this in the "caveats" section of the usbreplay readme and submit a pull request?