Installation of USBPcap on Windows

Preface

USBPcap is an open-source USB packet capture driver for Windows. Although it’s not an official part of the Windows operating system (unlike usbmon on Linux), it’s nevertheless a well-known and reliable solution for USB sniffing on Windows; it’s trusted and used by many products such as Wireshark.

IO Ninja plugins USB Monitor and HID Monitor require USBPcap on Windows; as such, you need to install it for proper operation of these plugins (attempting to capture yields an error otherwise).

Installation

1. Download a USBPcap package from the official website:

   https://desowin.org/usbpcap

   Alternatively, you can grab it from the USBPcap GitHub release page:

   https://github.com/desowin/usbpcap/releases

2. Run the downloaded package, accept the default install locations, and confirm an administrative elevation pop-up (if you have Windows UAC on).

3. After the installation completes, be sure to reboot Windows in order to let USBPcap attach its filter to the root USB hub device object.

Congratulations! Tibbo Device Monitor is now installed and ready to use (e.g., from the HID Monitor plugin).