Aodhan Collins
18f84a538a
- Added support for Single, Long, and Double press actions in libazeron. - Mapped Cyborg surgical command IDs (0x20F6, 0x20F8, 0x204A). - Updated azeron-cli to support --long and --double mapping flags. - Updated protocol documentation with newly discovered Cyborg commands. - Added TODO.md for remaining joystick and timing tasks.
18380 lines
622 KiB
JSON
18380 lines
622 KiB
JSON
[
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:58.302842000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:58.302842000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:58.302842000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000000000",
|
|
"frame.time_relative": "0.000000000",
|
|
"frame.number": "7",
|
|
"frame.len": "36",
|
|
"frame.cap_len": "36",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.0",
|
|
"usb.addr": "2.4.0",
|
|
"usb.usbpcap_header_len": "28",
|
|
"usb.irp_id": "0x0000000000000000",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x000b",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x80",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "0"
|
|
},
|
|
"usb.transfer_type": "0x02",
|
|
"usb.data_len": "8",
|
|
"usb.response_in": "8",
|
|
"usb.control_stage": "0"
|
|
},
|
|
"Setup Data": {
|
|
"usb.bmRequestType": "0x80",
|
|
"usb.bmRequestType_tree": {
|
|
"usb.bmRequestType.direction": "1",
|
|
"usb.bmRequestType.type": "0x00",
|
|
"usb.bmRequestType.recipient": "0x00"
|
|
},
|
|
"usb.setup.bRequest": "6",
|
|
"usb.DescriptorIndex": "0x00",
|
|
"usb.bDescriptorType": "0x01",
|
|
"usb.LanguageId": "0x0000",
|
|
"usb.setup.wLength": "18"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:58.302842000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:58.302842000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:58.302842000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000000000",
|
|
"frame.time_delta_displayed": "0.000000000",
|
|
"frame.time_relative": "0.000000000",
|
|
"frame.number": "8",
|
|
"frame.len": "46",
|
|
"frame.cap_len": "46",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.0",
|
|
"usb.addr": "2.4.0",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "28",
|
|
"usb.irp_id": "0x0000000000000000",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0008",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x80",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "0"
|
|
},
|
|
"usb.transfer_type": "0x02",
|
|
"usb.data_len": "18",
|
|
"usb.request_in": "7",
|
|
"usb.time": "0.000000000",
|
|
"usb.control_stage": "3"
|
|
},
|
|
"DEVICE DESCRIPTOR": {
|
|
"usb.bLength": "18",
|
|
"usb.bDescriptorType": "0x01",
|
|
"usb.bcdUSB": "0x0200",
|
|
"usb.bDeviceClass": "0x00",
|
|
"usb.bDeviceSubClass": "0",
|
|
"usb.bDeviceProtocol": "0",
|
|
"usb.bMaxPacketSize0": "64",
|
|
"usb.idVendor": "0x16d0",
|
|
"usb.idProduct": "0x113c",
|
|
"usb.bcdDevice": "0x0096",
|
|
"usb.iManufacturer": "1",
|
|
"usb.iProduct": "2",
|
|
"usb.iSerialNumber": "3",
|
|
"usb.bNumConfigurations": "1"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:58.302842000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:58.302842000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:58.302842000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000000000",
|
|
"frame.time_delta_displayed": "0.000000000",
|
|
"frame.time_relative": "0.000000000",
|
|
"frame.number": "9",
|
|
"frame.len": "36",
|
|
"frame.cap_len": "36",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.0",
|
|
"usb.addr": "2.4.0",
|
|
"usb.usbpcap_header_len": "28",
|
|
"usb.irp_id": "0x0000000000000000",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x000b",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x80",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "0"
|
|
},
|
|
"usb.transfer_type": "0x02",
|
|
"usb.data_len": "8",
|
|
"usb.response_in": "10",
|
|
"usb.control_stage": "0"
|
|
},
|
|
"Setup Data": {
|
|
"usb.bmRequestType": "0x80",
|
|
"usb.bmRequestType_tree": {
|
|
"usb.bmRequestType.direction": "1",
|
|
"usb.bmRequestType.type": "0x00",
|
|
"usb.bmRequestType.recipient": "0x00"
|
|
},
|
|
"usb.setup.bRequest": "6",
|
|
"usb.DescriptorIndex": "0x00",
|
|
"usb.bDescriptorType": "0x02",
|
|
"usb.LanguageId": "0x0000",
|
|
"usb.setup.wLength": "156"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:58.302842000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:58.302842000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:58.302842000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000000000",
|
|
"frame.time_delta_displayed": "0.000000000",
|
|
"frame.time_relative": "0.000000000",
|
|
"frame.number": "10",
|
|
"frame.len": "184",
|
|
"frame.cap_len": "184",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid:usbhid:usbhid:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.0",
|
|
"usb.addr": "2.4.0",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "28",
|
|
"usb.irp_id": "0x0000000000000000",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0008",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x80",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "0"
|
|
},
|
|
"usb.transfer_type": "0x02",
|
|
"usb.data_len": "156",
|
|
"usb.request_in": "9",
|
|
"usb.time": "0.000000000",
|
|
"usb.control_stage": "3"
|
|
},
|
|
"CONFIGURATION DESCRIPTOR": {
|
|
"usb.bLength": "9",
|
|
"usb.bDescriptorType": "0x02",
|
|
"usb.wTotalLength": "156",
|
|
"usb.bNumInterfaces": "5",
|
|
"usb.bConfigurationValue": "1",
|
|
"usb.iConfiguration": "0",
|
|
"usb.configuration.bmAttributes": "0x80",
|
|
"usb.configuration.bmAttributes_tree": {
|
|
"usb.configuration.legacy10buspowered": "1",
|
|
"usb.configuration.selfpowered": "0",
|
|
"usb.configuration.remotewakeup": "0"
|
|
},
|
|
"usb.bMaxPower": "250"
|
|
},
|
|
"INTERFACE DESCRIPTOR (0.0): class Vendor Specific": {
|
|
"usb.bLength": "9",
|
|
"usb.bDescriptorType": "0x04",
|
|
"usb.bInterfaceNumber": "0",
|
|
"usb.bAlternateSetting": "0",
|
|
"usb.bNumEndpoints": "2",
|
|
"usb.bInterfaceClass": "0xff",
|
|
"usb.bInterfaceSubClass": "0x5d",
|
|
"usb.bInterfaceProtocol": "0x01",
|
|
"usb.iInterface": "6"
|
|
},
|
|
"UNKNOWN DESCRIPTOR": {
|
|
"usb.bLength": "17",
|
|
"usb.bDescriptorType": "0x21"
|
|
},
|
|
"ENDPOINT DESCRIPTOR": {
|
|
"usb.bLength": "7",
|
|
"usb.bDescriptorType": "0x05",
|
|
"usb.bEndpointAddress": "0x81",
|
|
"usb.bEndpointAddress_tree": {
|
|
"usb.bEndpointAddress.direction": "1",
|
|
"usb.bEndpointAddress.number": "0x01"
|
|
},
|
|
"usb.bmAttributes": "0x03",
|
|
"usb.bmAttributes_tree": {
|
|
"usb.bmAttributes.transfer": "0x03"
|
|
},
|
|
"usb.wMaxPacketSize": "32",
|
|
"usb.wMaxPacketSize_tree": {
|
|
"usb.wMaxPacketSize.slots": "0",
|
|
"usb.wMaxPacketSize.size": "32"
|
|
},
|
|
"usb.bInterval": "2"
|
|
},
|
|
"ENDPOINT DESCRIPTOR": {
|
|
"usb.bLength": "7",
|
|
"usb.bDescriptorType": "0x05",
|
|
"usb.bEndpointAddress": "0x01",
|
|
"usb.bEndpointAddress_tree": {
|
|
"usb.bEndpointAddress.direction": "0",
|
|
"usb.bEndpointAddress.number": "0x01"
|
|
},
|
|
"usb.bmAttributes": "0x03",
|
|
"usb.bmAttributes_tree": {
|
|
"usb.bmAttributes.transfer": "0x03"
|
|
},
|
|
"usb.wMaxPacketSize": "32",
|
|
"usb.wMaxPacketSize_tree": {
|
|
"usb.wMaxPacketSize.slots": "0",
|
|
"usb.wMaxPacketSize.size": "32"
|
|
},
|
|
"usb.bInterval": "4"
|
|
},
|
|
"INTERFACE DESCRIPTOR (1.0): class HID": {
|
|
"usb.bLength": "9",
|
|
"usb.bDescriptorType": "0x04",
|
|
"usb.bInterfaceNumber": "1",
|
|
"usb.bAlternateSetting": "0",
|
|
"usb.bNumEndpoints": "1",
|
|
"usb.bInterfaceClass": "0x03",
|
|
"usb.bInterfaceSubClass": "0x00",
|
|
"usb.bInterfaceProtocol": "0x00",
|
|
"usb.iInterface": "7"
|
|
},
|
|
"HID DESCRIPTOR": {
|
|
"usb.bLength": "9",
|
|
"usb.bDescriptorType": "0x21",
|
|
"usbhid.descriptor.hid.bcdHID": "0x0111",
|
|
"usbhid.descriptor.hid.bCountryCode": "0x00",
|
|
"usbhid.descriptor.hid.bNumDescriptors": "1",
|
|
"usbhid.descriptor.hid.bDescriptorType": "0x22",
|
|
"usbhid.descriptor.hid.wDescriptorLength": "81"
|
|
},
|
|
"ENDPOINT DESCRIPTOR": {
|
|
"usb.bLength": "7",
|
|
"usb.bDescriptorType": "0x05",
|
|
"usb.bEndpointAddress": "0x82",
|
|
"usb.bEndpointAddress_tree": {
|
|
"usb.bEndpointAddress.direction": "1",
|
|
"usb.bEndpointAddress.number": "0x02"
|
|
},
|
|
"usb.bmAttributes": "0x03",
|
|
"usb.bmAttributes_tree": {
|
|
"usb.bmAttributes.transfer": "0x03"
|
|
},
|
|
"usb.wMaxPacketSize": "16",
|
|
"usb.wMaxPacketSize_tree": {
|
|
"usb.wMaxPacketSize.slots": "0",
|
|
"usb.wMaxPacketSize.size": "16"
|
|
},
|
|
"usb.bInterval": "2"
|
|
},
|
|
"INTERFACE DESCRIPTOR (2.0): class HID": {
|
|
"usb.bLength": "9",
|
|
"usb.bDescriptorType": "0x04",
|
|
"usb.bInterfaceNumber": "2",
|
|
"usb.bAlternateSetting": "0",
|
|
"usb.bNumEndpoints": "1",
|
|
"usb.bInterfaceClass": "0x03",
|
|
"usb.bInterfaceSubClass": "0x01",
|
|
"usb.bInterfaceProtocol": "0x02",
|
|
"usb.iInterface": "8"
|
|
},
|
|
"HID DESCRIPTOR": {
|
|
"usb.bLength": "9",
|
|
"usb.bDescriptorType": "0x21",
|
|
"usbhid.descriptor.hid.bcdHID": "0x0111",
|
|
"usbhid.descriptor.hid.bCountryCode": "0x00",
|
|
"usbhid.descriptor.hid.bNumDescriptors": "1",
|
|
"usbhid.descriptor.hid.bDescriptorType": "0x22",
|
|
"usbhid.descriptor.hid.wDescriptorLength": "70"
|
|
},
|
|
"ENDPOINT DESCRIPTOR": {
|
|
"usb.bLength": "7",
|
|
"usb.bDescriptorType": "0x05",
|
|
"usb.bEndpointAddress": "0x83",
|
|
"usb.bEndpointAddress_tree": {
|
|
"usb.bEndpointAddress.direction": "1",
|
|
"usb.bEndpointAddress.number": "0x03"
|
|
},
|
|
"usb.bmAttributes": "0x03",
|
|
"usb.bmAttributes_tree": {
|
|
"usb.bmAttributes.transfer": "0x03"
|
|
},
|
|
"usb.wMaxPacketSize": "7",
|
|
"usb.wMaxPacketSize_tree": {
|
|
"usb.wMaxPacketSize.slots": "0",
|
|
"usb.wMaxPacketSize.size": "7"
|
|
},
|
|
"usb.bInterval": "2"
|
|
},
|
|
"INTERFACE DESCRIPTOR (3.0): class HID": {
|
|
"usb.bLength": "9",
|
|
"usb.bDescriptorType": "0x04",
|
|
"usb.bInterfaceNumber": "3",
|
|
"usb.bAlternateSetting": "0",
|
|
"usb.bNumEndpoints": "1",
|
|
"usb.bInterfaceClass": "0x03",
|
|
"usb.bInterfaceSubClass": "0x00",
|
|
"usb.bInterfaceProtocol": "0x00",
|
|
"usb.iInterface": "9"
|
|
},
|
|
"HID DESCRIPTOR": {
|
|
"usb.bLength": "9",
|
|
"usb.bDescriptorType": "0x21",
|
|
"usbhid.descriptor.hid.bcdHID": "0x0111",
|
|
"usbhid.descriptor.hid.bCountryCode": "0x00",
|
|
"usbhid.descriptor.hid.bNumDescriptors": "1",
|
|
"usbhid.descriptor.hid.bDescriptorType": "0x22",
|
|
"usbhid.descriptor.hid.wDescriptorLength": "85"
|
|
},
|
|
"ENDPOINT DESCRIPTOR": {
|
|
"usb.bLength": "7",
|
|
"usb.bDescriptorType": "0x05",
|
|
"usb.bEndpointAddress": "0x84",
|
|
"usb.bEndpointAddress_tree": {
|
|
"usb.bEndpointAddress.direction": "1",
|
|
"usb.bEndpointAddress.number": "0x04"
|
|
},
|
|
"usb.bmAttributes": "0x03",
|
|
"usb.bmAttributes_tree": {
|
|
"usb.bmAttributes.transfer": "0x03"
|
|
},
|
|
"usb.wMaxPacketSize": "16",
|
|
"usb.wMaxPacketSize_tree": {
|
|
"usb.wMaxPacketSize.slots": "0",
|
|
"usb.wMaxPacketSize.size": "16"
|
|
},
|
|
"usb.bInterval": "2"
|
|
},
|
|
"INTERFACE DESCRIPTOR (4.0): class HID": {
|
|
"usb.bLength": "9",
|
|
"usb.bDescriptorType": "0x04",
|
|
"usb.bInterfaceNumber": "4",
|
|
"usb.bAlternateSetting": "0",
|
|
"usb.bNumEndpoints": "2",
|
|
"usb.bInterfaceClass": "0x03",
|
|
"usb.bInterfaceSubClass": "0x00",
|
|
"usb.bInterfaceProtocol": "0x00",
|
|
"usb.iInterface": "10"
|
|
},
|
|
"HID DESCRIPTOR": {
|
|
"usb.bLength": "9",
|
|
"usb.bDescriptorType": "0x21",
|
|
"usbhid.descriptor.hid.bcdHID": "0x0111",
|
|
"usbhid.descriptor.hid.bCountryCode": "0x00",
|
|
"usbhid.descriptor.hid.bNumDescriptors": "1",
|
|
"usbhid.descriptor.hid.bDescriptorType": "0x22",
|
|
"usbhid.descriptor.hid.wDescriptorLength": "28"
|
|
},
|
|
"ENDPOINT DESCRIPTOR": {
|
|
"usb.bLength": "7",
|
|
"usb.bDescriptorType": "0x05",
|
|
"usb.bEndpointAddress": "0x85",
|
|
"usb.bEndpointAddress_tree": {
|
|
"usb.bEndpointAddress.direction": "1",
|
|
"usb.bEndpointAddress.number": "0x05"
|
|
},
|
|
"usb.bmAttributes": "0x03",
|
|
"usb.bmAttributes_tree": {
|
|
"usb.bmAttributes.transfer": "0x03"
|
|
},
|
|
"usb.wMaxPacketSize": "64",
|
|
"usb.wMaxPacketSize_tree": {
|
|
"usb.wMaxPacketSize.slots": "0",
|
|
"usb.wMaxPacketSize.size": "64"
|
|
},
|
|
"usb.bInterval": "2"
|
|
},
|
|
"ENDPOINT DESCRIPTOR": {
|
|
"usb.bLength": "7",
|
|
"usb.bDescriptorType": "0x05",
|
|
"usb.bEndpointAddress": "0x06",
|
|
"usb.bEndpointAddress_tree": {
|
|
"usb.bEndpointAddress.direction": "0",
|
|
"usb.bEndpointAddress.number": "0x06"
|
|
},
|
|
"usb.bmAttributes": "0x03",
|
|
"usb.bmAttributes_tree": {
|
|
"usb.bmAttributes.transfer": "0x03"
|
|
},
|
|
"usb.wMaxPacketSize": "64",
|
|
"usb.wMaxPacketSize_tree": {
|
|
"usb.wMaxPacketSize.slots": "0",
|
|
"usb.wMaxPacketSize.size": "64"
|
|
},
|
|
"usb.bInterval": "4"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:58.302842000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:58.302842000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:58.302842000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000000000",
|
|
"frame.time_delta_displayed": "0.000000000",
|
|
"frame.time_relative": "0.000000000",
|
|
"frame.number": "11",
|
|
"frame.len": "36",
|
|
"frame.cap_len": "36",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.0",
|
|
"usb.addr": "2.4.0",
|
|
"usb.usbpcap_header_len": "28",
|
|
"usb.irp_id": "0x0000000000000000",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0000",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x00",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "0",
|
|
"usb.endpoint_address.number": "0"
|
|
},
|
|
"usb.transfer_type": "0x02",
|
|
"usb.data_len": "8",
|
|
"usb.response_in": "12",
|
|
"usb.control_stage": "0"
|
|
},
|
|
"Setup Data": {
|
|
"usb.bmRequestType": "0x00",
|
|
"usb.bmRequestType_tree": {
|
|
"usb.bmRequestType.direction": "0",
|
|
"usb.bmRequestType.type": "0x00",
|
|
"usb.bmRequestType.recipient": "0x00"
|
|
},
|
|
"usb.setup.bRequest": "9",
|
|
"usb.bConfigurationValue": "1",
|
|
"usb.setup.wIndex": "0",
|
|
"usb.setup.wLength": "0"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:58.302842000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:58.302842000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:58.302842000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000000000",
|
|
"frame.time_delta_displayed": "0.000000000",
|
|
"frame.time_relative": "0.000000000",
|
|
"frame.number": "12",
|
|
"frame.len": "28",
|
|
"frame.cap_len": "28",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.0",
|
|
"usb.addr": "2.4.0",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "28",
|
|
"usb.irp_id": "0x0000000000000000",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0000",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x00",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "0",
|
|
"usb.endpoint_address.number": "0"
|
|
},
|
|
"usb.transfer_type": "0x02",
|
|
"usb.data_len": "0",
|
|
"usb.request_in": "11",
|
|
"usb.time": "0.000000000",
|
|
"usb.control_stage": "3"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:58.713572000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:58.713572000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:58.713572000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.410730000",
|
|
"frame.time_delta_displayed": "0.410730000",
|
|
"frame.time_relative": "0.410730000",
|
|
"frame.number": "31",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.6",
|
|
"usb.addr": "2.4.6",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20fb50c3010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x06",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "0",
|
|
"usb.endpoint_address.number": "6"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.response_in": "34",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:12:8a:01:01:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:58.717169000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:58.717169000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:58.717169000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.003597000",
|
|
"frame.time_delta_displayed": "0.003597000",
|
|
"frame.time_relative": "0.414327000",
|
|
"frame.number": "32",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "01:00:12:8a:01:01:01:01:3f:03:69:1b:07:00:ff:06:06:06:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:f4:01:c8:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:58.717190000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:58.717190000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:58.717190000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000021000",
|
|
"frame.time_delta_displayed": "0.000021000",
|
|
"frame.time_relative": "0.414348000",
|
|
"frame.number": "33",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "41",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:58.718527000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:58.718527000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:58.718527000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001337000",
|
|
"frame.time_delta_displayed": "0.001337000",
|
|
"frame.time_relative": "0.415685000",
|
|
"frame.number": "34",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.6",
|
|
"usb.addr": "2.4.6",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20fb50c3010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x06",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "0",
|
|
"usb.endpoint_address.number": "6"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.request_in": "31",
|
|
"usb.time": "0.004955000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.187415000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.187415000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.187415000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.468888000",
|
|
"frame.time_delta_displayed": "0.468888000",
|
|
"frame.time_relative": "0.884573000",
|
|
"frame.number": "35",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:bf:e0:7a:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.187442000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.187442000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.187442000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000027000",
|
|
"frame.time_delta_displayed": "0.000027000",
|
|
"frame.time_relative": "0.884600000",
|
|
"frame.number": "36",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "43",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.189167000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.189167000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.189167000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001725000",
|
|
"frame.time_delta_displayed": "0.001725000",
|
|
"frame.time_relative": "0.886325000",
|
|
"frame.number": "37",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:35:32:33:5f:34:39:31:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.189190000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.189190000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.189190000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000023000",
|
|
"frame.time_delta_displayed": "0.000023000",
|
|
"frame.time_relative": "0.886348000",
|
|
"frame.number": "38",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "45",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.189416000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.189416000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.189416000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000226000",
|
|
"frame.time_delta_displayed": "0.000226000",
|
|
"frame.time_relative": "0.886574000",
|
|
"frame.number": "39",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:ff:a6:45:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.189433000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.189433000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.189433000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "0.886591000",
|
|
"frame.number": "40",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "47",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.191166000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.191166000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.191166000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001733000",
|
|
"frame.time_delta_displayed": "0.001733000",
|
|
"frame.time_relative": "0.888324000",
|
|
"frame.number": "41",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "33",
|
|
"usb.time": "0.473976000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.191188000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.191188000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.191188000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000022000",
|
|
"frame.time_delta_displayed": "0.000022000",
|
|
"frame.time_relative": "0.888346000",
|
|
"frame.number": "42",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "49",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.191414000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.191414000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.191414000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000226000",
|
|
"frame.time_delta_displayed": "0.000226000",
|
|
"frame.time_relative": "0.888572000",
|
|
"frame.number": "43",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "36",
|
|
"usb.time": "0.003972000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:af:2a:26:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.191430000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.191430000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.191430000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "0.888588000",
|
|
"frame.number": "44",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "53",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.193207000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.193207000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.193207000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001777000",
|
|
"frame.time_delta_displayed": "0.001777000",
|
|
"frame.time_relative": "0.890365000",
|
|
"frame.number": "45",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "38",
|
|
"usb.time": "0.004017000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:32:33:5f:32:37:38:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.193224000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.193224000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.193224000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "0.890382000",
|
|
"frame.number": "46",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "51",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.193413000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.193413000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.193413000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000189000",
|
|
"frame.time_delta_displayed": "0.000189000",
|
|
"frame.time_relative": "0.890571000",
|
|
"frame.number": "47",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "40",
|
|
"usb.time": "0.003980000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:7f:2c:0a:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.193434000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.193434000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.193434000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000021000",
|
|
"frame.time_delta_displayed": "0.000021000",
|
|
"frame.time_relative": "0.890592000",
|
|
"frame.number": "48",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "57",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.195167000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.195167000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.195167000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001733000",
|
|
"frame.time_delta_displayed": "0.001733000",
|
|
"frame.time_relative": "0.892325000",
|
|
"frame.number": "49",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "42",
|
|
"usb.time": "0.003979000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:38:32:5f:31:35:32:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.195189000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.195189000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.195189000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000022000",
|
|
"frame.time_delta_displayed": "0.000022000",
|
|
"frame.time_relative": "0.892347000",
|
|
"frame.number": "50",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "55",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.197159000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.197159000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.197159000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001970000",
|
|
"frame.time_delta_displayed": "0.001970000",
|
|
"frame.time_relative": "0.894317000",
|
|
"frame.number": "51",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "46",
|
|
"usb.time": "0.003935000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:37:31:31:5f:34:30:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.197175000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.197175000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.197175000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "0.894333000",
|
|
"frame.number": "52",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "59",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.197413000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.197413000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.197413000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000238000",
|
|
"frame.time_delta_displayed": "0.000238000",
|
|
"frame.time_relative": "0.894571000",
|
|
"frame.number": "53",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "44",
|
|
"usb.time": "0.005983000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:af:eb:08:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.197429000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.197429000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.197429000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "0.894587000",
|
|
"frame.number": "54",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "61",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.199163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.199163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.199163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001734000",
|
|
"frame.time_delta_displayed": "0.001734000",
|
|
"frame.time_relative": "0.896321000",
|
|
"frame.number": "55",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "50",
|
|
"usb.time": "0.003974000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:37:31:31:5f:34:30:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.199182000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.199182000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.199182000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000019000",
|
|
"frame.time_delta_displayed": "0.000019000",
|
|
"frame.time_relative": "0.896340000",
|
|
"frame.number": "56",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "63",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.199415000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.199415000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.199415000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000233000",
|
|
"frame.time_delta_displayed": "0.000233000",
|
|
"frame.time_relative": "0.896573000",
|
|
"frame.number": "57",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "48",
|
|
"usb.time": "0.005981000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:4f:ea:06:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.199436000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.199436000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.199436000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000021000",
|
|
"frame.time_delta_displayed": "0.000021000",
|
|
"frame.time_relative": "0.896594000",
|
|
"frame.number": "58",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "65",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.201161000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.201161000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.201161000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001725000",
|
|
"frame.time_delta_displayed": "0.001725000",
|
|
"frame.time_relative": "0.898319000",
|
|
"frame.number": "59",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "52",
|
|
"usb.time": "0.003986000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:39:38:5f:33:35:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.201180000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.201180000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.201180000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000019000",
|
|
"frame.time_delta_displayed": "0.000019000",
|
|
"frame.time_relative": "0.898338000",
|
|
"frame.number": "60",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "67",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.201412000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.201412000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.201412000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000232000",
|
|
"frame.time_delta_displayed": "0.000232000",
|
|
"frame.time_relative": "0.898570000",
|
|
"frame.number": "61",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "54",
|
|
"usb.time": "0.003983000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:7f:e9:05:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.201429000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.201429000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.201429000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "0.898587000",
|
|
"frame.number": "62",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "71",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.203160000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.203160000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.203160000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001731000",
|
|
"frame.time_delta_displayed": "0.001731000",
|
|
"frame.time_relative": "0.900318000",
|
|
"frame.number": "63",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "56",
|
|
"usb.time": "0.003978000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:37:36:5f:32:37:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.203176000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.203176000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.203176000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "0.900334000",
|
|
"frame.number": "64",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "69",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.203413000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.203413000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.203413000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000237000",
|
|
"frame.time_delta_displayed": "0.000237000",
|
|
"frame.time_relative": "0.900571000",
|
|
"frame.number": "65",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "58",
|
|
"usb.time": "0.003977000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:bf:29:06:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.203431000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.203431000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.203431000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000018000",
|
|
"frame.time_delta_displayed": "0.000018000",
|
|
"frame.time_relative": "0.900589000",
|
|
"frame.number": "66",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "77",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.205162000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.205162000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.205162000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001731000",
|
|
"frame.time_delta_displayed": "0.001731000",
|
|
"frame.time_relative": "0.902320000",
|
|
"frame.number": "67",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "60",
|
|
"usb.time": "0.003982000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:36:33:5f:32:33:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.205181000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.205181000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.205181000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000019000",
|
|
"frame.time_delta_displayed": "0.000019000",
|
|
"frame.time_relative": "0.902339000",
|
|
"frame.number": "68",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "73",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.207161000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.207161000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.207161000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001980000",
|
|
"frame.time_delta_displayed": "0.001980000",
|
|
"frame.time_relative": "0.904319000",
|
|
"frame.number": "69",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "64",
|
|
"usb.time": "0.003985000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:36:37:5f:32:34:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.207182000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.207182000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.207182000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000021000",
|
|
"frame.time_delta_displayed": "0.000021000",
|
|
"frame.time_relative": "0.904340000",
|
|
"frame.number": "70",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "75",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.207413000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.207413000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.207413000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000231000",
|
|
"frame.time_delta_displayed": "0.000231000",
|
|
"frame.time_relative": "0.904571000",
|
|
"frame.number": "71",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "62",
|
|
"usb.time": "0.005984000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:5f:ea:06:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.207428000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.207428000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.207428000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "0.904586000",
|
|
"frame.number": "72",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "81",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.209163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.209163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.209163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001735000",
|
|
"frame.time_delta_displayed": "0.001735000",
|
|
"frame.time_relative": "0.906321000",
|
|
"frame.number": "73",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "68",
|
|
"usb.time": "0.003982000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:36:37:5f:32:34:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.209205000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.209205000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.209205000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000042000",
|
|
"frame.time_delta_displayed": "0.000042000",
|
|
"frame.time_relative": "0.906363000",
|
|
"frame.number": "74",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "79",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.211160000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.211160000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.211160000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001955000",
|
|
"frame.time_delta_displayed": "0.001955000",
|
|
"frame.time_relative": "0.908318000",
|
|
"frame.number": "75",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "70",
|
|
"usb.time": "0.003978000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:37:37:5f:32:37:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.211179000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.211179000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.211179000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000019000",
|
|
"frame.time_delta_displayed": "0.000019000",
|
|
"frame.time_relative": "0.908337000",
|
|
"frame.number": "76",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "83",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.211414000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.211414000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.211414000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000235000",
|
|
"frame.time_delta_displayed": "0.000235000",
|
|
"frame.time_relative": "0.908572000",
|
|
"frame.number": "77",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "66",
|
|
"usb.time": "0.007983000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:ff:69:06:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.211433000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.211433000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.211433000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000019000",
|
|
"frame.time_delta_displayed": "0.000019000",
|
|
"frame.time_relative": "0.908591000",
|
|
"frame.number": "78",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "87",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.213162000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.213162000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.213162000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001729000",
|
|
"frame.time_delta_displayed": "0.001729000",
|
|
"frame.time_relative": "0.910320000",
|
|
"frame.number": "79",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "74",
|
|
"usb.time": "0.003957000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:37:37:5f:32:37:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.213178000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.213178000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.213178000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "0.910336000",
|
|
"frame.number": "80",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "85",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.213412000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.213412000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.213412000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000234000",
|
|
"frame.time_delta_displayed": "0.000234000",
|
|
"frame.time_relative": "0.910570000",
|
|
"frame.number": "81",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "72",
|
|
"usb.time": "0.005984000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:2f:aa:06:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.213427000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.213427000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.213427000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "0.910585000",
|
|
"frame.number": "82",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "91",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.215161000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.215161000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.215161000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001734000",
|
|
"frame.time_delta_displayed": "0.001734000",
|
|
"frame.time_relative": "0.912319000",
|
|
"frame.number": "83",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "76",
|
|
"usb.time": "0.003982000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:37:31:5f:32:35:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.215195000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.215195000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.215195000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000034000",
|
|
"frame.time_delta_displayed": "0.000034000",
|
|
"frame.time_relative": "0.912353000",
|
|
"frame.number": "84",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "89",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.217163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.217163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.217163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001968000",
|
|
"frame.time_delta_displayed": "0.001968000",
|
|
"frame.time_relative": "0.914321000",
|
|
"frame.number": "85",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "80",
|
|
"usb.time": "0.003985000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:37:34:5f:32:36:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.217189000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.217189000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.217189000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000026000",
|
|
"frame.time_delta_displayed": "0.000026000",
|
|
"frame.time_relative": "0.914347000",
|
|
"frame.number": "86",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "93",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.217414000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.217414000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.217414000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000225000",
|
|
"frame.time_delta_displayed": "0.000225000",
|
|
"frame.time_relative": "0.914572000",
|
|
"frame.number": "87",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "78",
|
|
"usb.time": "0.005981000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:6f:2a:07:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.217497000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.217497000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.217497000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000083000",
|
|
"frame.time_delta_displayed": "0.000083000",
|
|
"frame.time_relative": "0.914655000",
|
|
"frame.number": "88",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "95",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.219160000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.219160000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.219160000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001663000",
|
|
"frame.time_delta_displayed": "0.001663000",
|
|
"frame.time_relative": "0.916318000",
|
|
"frame.number": "89",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "84",
|
|
"usb.time": "0.003965000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:37:34:5f:32:36:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.219174000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.219174000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.219174000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000014000",
|
|
"frame.time_delta_displayed": "0.000014000",
|
|
"frame.time_relative": "0.916332000",
|
|
"frame.number": "90",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "97",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.219415000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.219415000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.219415000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000241000",
|
|
"frame.time_delta_displayed": "0.000241000",
|
|
"frame.time_relative": "0.916573000",
|
|
"frame.number": "91",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "82",
|
|
"usb.time": "0.005988000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:af:6a:07:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.219435000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.219435000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.219435000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000020000",
|
|
"frame.time_delta_displayed": "0.000020000",
|
|
"frame.time_relative": "0.916593000",
|
|
"frame.number": "92",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "99",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.221160000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.221160000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.221160000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001725000",
|
|
"frame.time_delta_displayed": "0.001725000",
|
|
"frame.time_relative": "0.918318000",
|
|
"frame.number": "93",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "86",
|
|
"usb.time": "0.003971000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:37:38:5f:32:38:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.221178000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.221178000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.221178000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000018000",
|
|
"frame.time_delta_displayed": "0.000018000",
|
|
"frame.time_relative": "0.918336000",
|
|
"frame.number": "94",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "101",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.221414000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.221414000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.221414000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000236000",
|
|
"frame.time_delta_displayed": "0.000236000",
|
|
"frame.time_relative": "0.918572000",
|
|
"frame.number": "95",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "88",
|
|
"usb.time": "0.003917000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:df:aa:07:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.221430000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.221430000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.221430000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "0.918588000",
|
|
"frame.number": "96",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "103",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.223160000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.223160000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.223160000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001730000",
|
|
"frame.time_delta_displayed": "0.001730000",
|
|
"frame.time_relative": "0.920318000",
|
|
"frame.number": "97",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "90",
|
|
"usb.time": "0.003986000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:38:32:5f:32:39:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.223177000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.223177000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.223177000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "0.920335000",
|
|
"frame.number": "98",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "105",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.223411000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.223411000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.223411000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000234000",
|
|
"frame.time_delta_displayed": "0.000234000",
|
|
"frame.time_relative": "0.920569000",
|
|
"frame.number": "99",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "92",
|
|
"usb.time": "0.003976000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:6f:6b:08:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.223428000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.223428000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.223428000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "0.920586000",
|
|
"frame.number": "100",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "107",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.225162000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.225162000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.225162000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001734000",
|
|
"frame.time_delta_displayed": "0.001734000",
|
|
"frame.time_relative": "0.922320000",
|
|
"frame.number": "101",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "94",
|
|
"usb.time": "0.003984000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:38:35:5f:33:30:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.225179000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.225179000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.225179000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "0.922337000",
|
|
"frame.number": "102",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "109",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.225416000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.225416000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.225416000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000237000",
|
|
"frame.time_delta_displayed": "0.000237000",
|
|
"frame.time_relative": "0.922574000",
|
|
"frame.number": "103",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "96",
|
|
"usb.time": "0.003986000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:1f:2b:08:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.225432000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.225432000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.225432000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "0.922590000",
|
|
"frame.number": "104",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "113",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.227163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.227163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.227163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001731000",
|
|
"frame.time_delta_displayed": "0.001731000",
|
|
"frame.time_relative": "0.924321000",
|
|
"frame.number": "105",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "98",
|
|
"usb.time": "0.003986000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:39:34:5f:33:33:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.227200000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.227200000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.227200000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000037000",
|
|
"frame.time_delta_displayed": "0.000037000",
|
|
"frame.time_relative": "0.924358000",
|
|
"frame.number": "106",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "111",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.227428000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.227428000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.227428000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000228000",
|
|
"frame.time_delta_displayed": "0.000228000",
|
|
"frame.time_relative": "0.924586000",
|
|
"frame.number": "107",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "100",
|
|
"usb.time": "0.004000000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:6f:6b:08:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.227446000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.227446000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.227446000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000018000",
|
|
"frame.time_delta_displayed": "0.000018000",
|
|
"frame.time_relative": "0.924604000",
|
|
"frame.number": "108",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "117",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.229162000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.229162000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.229162000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001716000",
|
|
"frame.time_delta_displayed": "0.001716000",
|
|
"frame.time_relative": "0.926320000",
|
|
"frame.number": "109",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "102",
|
|
"usb.time": "0.003983000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:38:39:5f:33:32:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.229177000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.229177000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.229177000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "0.926335000",
|
|
"frame.number": "110",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "115",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.231163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.231163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.231163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001986000",
|
|
"frame.time_delta_displayed": "0.001986000",
|
|
"frame.time_relative": "0.928321000",
|
|
"frame.number": "111",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "106",
|
|
"usb.time": "0.003963000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:39:34:5f:33:33:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.231178000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.231178000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.231178000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "0.928336000",
|
|
"frame.number": "112",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "119",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.231416000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.231416000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.231416000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000238000",
|
|
"frame.time_delta_displayed": "0.000238000",
|
|
"frame.time_relative": "0.928574000",
|
|
"frame.number": "113",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "104",
|
|
"usb.time": "0.005984000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:3f:2b:08:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.231431000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.231431000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.231431000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "0.928589000",
|
|
"frame.number": "114",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "123",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.233164000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.233164000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.233164000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001733000",
|
|
"frame.time_delta_displayed": "0.001733000",
|
|
"frame.time_relative": "0.930322000",
|
|
"frame.number": "115",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "110",
|
|
"usb.time": "0.003987000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:39:34:5f:33:33:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.233179000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.233179000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.233179000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "0.930337000",
|
|
"frame.number": "116",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "121",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.233414000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.233414000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.233414000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000235000",
|
|
"frame.time_delta_displayed": "0.000235000",
|
|
"frame.time_relative": "0.930572000",
|
|
"frame.number": "117",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "108",
|
|
"usb.time": "0.005968000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:bf:6a:07:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.233428000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.233428000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.233428000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000014000",
|
|
"frame.time_delta_displayed": "0.000014000",
|
|
"frame.time_relative": "0.930586000",
|
|
"frame.number": "118",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "127",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.235167000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.235167000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.235167000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001739000",
|
|
"frame.time_delta_displayed": "0.001739000",
|
|
"frame.time_relative": "0.932325000",
|
|
"frame.number": "119",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "112",
|
|
"usb.time": "0.003989000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:39:31:5f:33:32:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.235190000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.235190000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.235190000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000023000",
|
|
"frame.time_delta_displayed": "0.000023000",
|
|
"frame.time_relative": "0.932348000",
|
|
"frame.number": "120",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "125",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.237160000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.237160000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.237160000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001970000",
|
|
"frame.time_delta_displayed": "0.001970000",
|
|
"frame.time_relative": "0.934318000",
|
|
"frame.number": "121",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "116",
|
|
"usb.time": "0.003981000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:38:33:5f:32:39:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.237176000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.237176000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.237176000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "0.934334000",
|
|
"frame.number": "122",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "129",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.237426000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.237426000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.237426000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000250000",
|
|
"frame.time_delta_displayed": "0.000250000",
|
|
"frame.time_relative": "0.934584000",
|
|
"frame.number": "123",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "114",
|
|
"usb.time": "0.005995000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:8f:2a:07:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.237441000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.237441000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.237441000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "0.934599000",
|
|
"frame.number": "124",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "131",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.239163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.239163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.239163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001722000",
|
|
"frame.time_delta_displayed": "0.001722000",
|
|
"frame.time_relative": "0.936321000",
|
|
"frame.number": "125",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "120",
|
|
"usb.time": "0.003973000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:38:33:5f:32:39:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.239180000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.239180000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.239180000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "0.936338000",
|
|
"frame.number": "126",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "133",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.239411000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.239411000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.239411000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000231000",
|
|
"frame.time_delta_displayed": "0.000231000",
|
|
"frame.time_relative": "0.936569000",
|
|
"frame.number": "127",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "118",
|
|
"usb.time": "0.005983000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:2f:aa:06:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.239428000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.239428000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.239428000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "0.936586000",
|
|
"frame.number": "128",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "135",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.241164000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.241164000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.241164000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001736000",
|
|
"frame.time_delta_displayed": "0.001736000",
|
|
"frame.time_relative": "0.938322000",
|
|
"frame.number": "129",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "122",
|
|
"usb.time": "0.003988000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:38:30:5f:32:38:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.241181000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.241181000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.241181000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "0.938339000",
|
|
"frame.number": "130",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "137",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.241415000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.241415000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.241415000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000234000",
|
|
"frame.time_delta_displayed": "0.000234000",
|
|
"frame.time_relative": "0.938573000",
|
|
"frame.number": "131",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "124",
|
|
"usb.time": "0.003974000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:bf:29:06:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.241433000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.241433000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.241433000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000018000",
|
|
"frame.time_delta_displayed": "0.000018000",
|
|
"frame.time_relative": "0.938591000",
|
|
"frame.number": "132",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "139",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.243165000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.243165000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.243165000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001732000",
|
|
"frame.time_delta_displayed": "0.001732000",
|
|
"frame.time_relative": "0.940323000",
|
|
"frame.number": "133",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "126",
|
|
"usb.time": "0.003985000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:37:34:5f:32:36:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.243186000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.243186000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.243186000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000021000",
|
|
"frame.time_delta_displayed": "0.000021000",
|
|
"frame.time_relative": "0.940344000",
|
|
"frame.number": "134",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "141",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.243418000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.243418000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.243418000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000232000",
|
|
"frame.time_delta_displayed": "0.000232000",
|
|
"frame.time_relative": "0.940576000",
|
|
"frame.number": "135",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "128",
|
|
"usb.time": "0.003990000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:6f:a9:05:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.243436000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.243436000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.243436000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000018000",
|
|
"frame.time_delta_displayed": "0.000018000",
|
|
"frame.time_relative": "0.940594000",
|
|
"frame.number": "136",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "143",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.245165000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.245165000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.245165000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001729000",
|
|
"frame.time_delta_displayed": "0.001729000",
|
|
"frame.time_relative": "0.942323000",
|
|
"frame.number": "137",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "130",
|
|
"usb.time": "0.003984000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:36:37:5f:32:34:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.245215000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.245215000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.245215000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000050000",
|
|
"frame.time_delta_displayed": "0.000050000",
|
|
"frame.time_relative": "0.942373000",
|
|
"frame.number": "138",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "145",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.245414000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.245414000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.245414000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000199000",
|
|
"frame.time_delta_displayed": "0.000199000",
|
|
"frame.time_relative": "0.942572000",
|
|
"frame.number": "139",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "132",
|
|
"usb.time": "0.003981000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:cf:e8:04:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.245436000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.245436000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.245436000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000022000",
|
|
"frame.time_delta_displayed": "0.000022000",
|
|
"frame.time_relative": "0.942594000",
|
|
"frame.number": "140",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "149",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.247165000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.247165000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.247165000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001729000",
|
|
"frame.time_delta_displayed": "0.001729000",
|
|
"frame.time_relative": "0.944323000",
|
|
"frame.number": "141",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "134",
|
|
"usb.time": "0.003979000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:36:32:5f:32:32:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.247183000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.247183000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.247183000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000018000",
|
|
"frame.time_delta_displayed": "0.000018000",
|
|
"frame.time_relative": "0.944341000",
|
|
"frame.number": "142",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "147",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.247417000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.247417000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.247417000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000234000",
|
|
"frame.time_delta_displayed": "0.000234000",
|
|
"frame.time_relative": "0.944575000",
|
|
"frame.number": "143",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "136",
|
|
"usb.time": "0.003981000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:6f:a8:04:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.247432000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.247432000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.247432000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "0.944590000",
|
|
"frame.number": "144",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "157",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.249163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.249163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.249163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001731000",
|
|
"frame.time_delta_displayed": "0.001731000",
|
|
"frame.time_relative": "0.946321000",
|
|
"frame.number": "145",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "138",
|
|
"usb.time": "0.003948000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:35:32:5f:31:39:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.249178000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.249178000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.249178000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "0.946336000",
|
|
"frame.number": "146",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "151",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.251163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.251163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.251163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001985000",
|
|
"frame.time_delta_displayed": "0.001985000",
|
|
"frame.time_relative": "0.948321000",
|
|
"frame.number": "147",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "142",
|
|
"usb.time": "0.003980000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:34:36:5f:31:38:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.251180000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.251180000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.251180000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "0.948338000",
|
|
"frame.number": "148",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "153",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.251415000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.251415000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.251415000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000235000",
|
|
"frame.time_delta_displayed": "0.000235000",
|
|
"frame.time_relative": "0.948573000",
|
|
"frame.number": "149",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "140",
|
|
"usb.time": "0.005979000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:1f:28:04:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.251431000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.251431000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.251431000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "0.948589000",
|
|
"frame.number": "150",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "165",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.253163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.253163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.253163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001732000",
|
|
"frame.time_delta_displayed": "0.001732000",
|
|
"frame.time_relative": "0.950321000",
|
|
"frame.number": "151",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "146",
|
|
"usb.time": "0.003985000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:34:36:5f:31:38:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.253181000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.253181000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.253181000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000018000",
|
|
"frame.time_delta_displayed": "0.000018000",
|
|
"frame.time_relative": "0.950339000",
|
|
"frame.number": "152",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "155",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.255164000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.255164000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.255164000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001983000",
|
|
"frame.time_delta_displayed": "0.001983000",
|
|
"frame.time_relative": "0.952322000",
|
|
"frame.number": "153",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "148",
|
|
"usb.time": "0.003984000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:34:31:5f:31:36:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.255180000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.255180000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.255180000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "0.952338000",
|
|
"frame.number": "154",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "159",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.257167000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.257167000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.257167000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001987000",
|
|
"frame.time_delta_displayed": "0.001987000",
|
|
"frame.time_relative": "0.954325000",
|
|
"frame.number": "155",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "152",
|
|
"usb.time": "0.003986000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:34:31:5f:31:36:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.257189000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.257189000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.257189000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000022000",
|
|
"frame.time_delta_displayed": "0.000022000",
|
|
"frame.time_relative": "0.954347000",
|
|
"frame.number": "156",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "161",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.267415000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.267415000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.267415000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.010226000",
|
|
"frame.time_delta_displayed": "0.010226000",
|
|
"frame.time_relative": "0.964573000",
|
|
"frame.number": "157",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "144",
|
|
"usb.time": "0.019983000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:ef:e7:03:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.267439000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.267439000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.267439000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000024000",
|
|
"frame.time_delta_displayed": "0.000024000",
|
|
"frame.time_relative": "0.964597000",
|
|
"frame.number": "158",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "171",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.269187000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.269187000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.269187000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001748000",
|
|
"frame.time_delta_displayed": "0.001748000",
|
|
"frame.time_relative": "0.966345000",
|
|
"frame.number": "159",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "154",
|
|
"usb.time": "0.014007000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:33:38:5f:31:35:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.269209000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.269209000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.269209000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000022000",
|
|
"frame.time_delta_displayed": "0.000022000",
|
|
"frame.time_relative": "0.966367000",
|
|
"frame.number": "160",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "163",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.271163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.271163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.271163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001954000",
|
|
"frame.time_delta_displayed": "0.001954000",
|
|
"frame.time_relative": "0.968321000",
|
|
"frame.number": "161",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "156",
|
|
"usb.time": "0.013974000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.271179000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.271179000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.271179000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "0.968337000",
|
|
"frame.number": "162",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "167",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.273169000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.273169000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.273169000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001990000",
|
|
"frame.time_delta_displayed": "0.001990000",
|
|
"frame.time_relative": "0.970327000",
|
|
"frame.number": "163",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "160",
|
|
"usb.time": "0.003960000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:33:38:5f:31:35:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.273193000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.273193000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.273193000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000024000",
|
|
"frame.time_delta_displayed": "0.000024000",
|
|
"frame.time_relative": "0.970351000",
|
|
"frame.number": "164",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "169",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.273415000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.273415000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.273415000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000222000",
|
|
"frame.time_delta_displayed": "0.000222000",
|
|
"frame.time_relative": "0.970573000",
|
|
"frame.number": "165",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "150",
|
|
"usb.time": "0.021984000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:bf:e7:03:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.273433000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.273433000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.273433000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000018000",
|
|
"frame.time_delta_displayed": "0.000018000",
|
|
"frame.time_relative": "0.970591000",
|
|
"frame.number": "166",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "177",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.275165000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.275165000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.275165000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001732000",
|
|
"frame.time_delta_displayed": "0.001732000",
|
|
"frame.time_relative": "0.972323000",
|
|
"frame.number": "167",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "162",
|
|
"usb.time": "0.003986000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:33:35:5f:31:35:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.275185000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.275185000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.275185000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000020000",
|
|
"frame.time_delta_displayed": "0.000020000",
|
|
"frame.time_relative": "0.972343000",
|
|
"frame.number": "168",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "173",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.277164000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.277164000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.277164000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001979000",
|
|
"frame.time_delta_displayed": "0.001979000",
|
|
"frame.time_relative": "0.974322000",
|
|
"frame.number": "169",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "164",
|
|
"usb.time": "0.003971000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:33:35:5f:31:35:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.277185000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.277185000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.277185000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000021000",
|
|
"frame.time_delta_displayed": "0.000021000",
|
|
"frame.time_relative": "0.974343000",
|
|
"frame.number": "170",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "175",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.277416000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.277416000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.277416000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000231000",
|
|
"frame.time_delta_displayed": "0.000231000",
|
|
"frame.time_relative": "0.974574000",
|
|
"frame.number": "171",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "158",
|
|
"usb.time": "0.009977000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:8f:a7:03:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.277434000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.277434000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.277434000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000018000",
|
|
"frame.time_delta_displayed": "0.000018000",
|
|
"frame.time_relative": "0.974592000",
|
|
"frame.number": "172",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "183",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.279165000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.279165000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.279165000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001731000",
|
|
"frame.time_delta_displayed": "0.001731000",
|
|
"frame.time_relative": "0.976323000",
|
|
"frame.number": "173",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "168",
|
|
"usb.time": "0.003980000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:33:32:5f:31:34:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.279184000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.279184000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.279184000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000019000",
|
|
"frame.time_delta_displayed": "0.000019000",
|
|
"frame.time_relative": "0.976342000",
|
|
"frame.number": "174",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "179",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.283163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.283163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.283163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.003979000",
|
|
"frame.time_delta_displayed": "0.003979000",
|
|
"frame.time_relative": "0.980321000",
|
|
"frame.number": "175",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "170",
|
|
"usb.time": "0.005978000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:33:32:5f:31:34:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.283181000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.283181000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.283181000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000018000",
|
|
"frame.time_delta_displayed": "0.000018000",
|
|
"frame.time_relative": "0.980339000",
|
|
"frame.number": "176",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "181",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.285418000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.285418000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.285418000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.002237000",
|
|
"frame.time_delta_displayed": "0.002237000",
|
|
"frame.time_relative": "0.982576000",
|
|
"frame.number": "177",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "166",
|
|
"usb.time": "0.011985000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:5f:67:03:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.285438000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.285438000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.285438000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000020000",
|
|
"frame.time_delta_displayed": "0.000020000",
|
|
"frame.time_relative": "0.982596000",
|
|
"frame.number": "178",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "189",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.287164000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.287164000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.287164000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001726000",
|
|
"frame.time_delta_displayed": "0.001726000",
|
|
"frame.time_relative": "0.984322000",
|
|
"frame.number": "179",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "174",
|
|
"usb.time": "0.007980000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:32:39:5f:31:33:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.287179000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.287179000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.287179000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "0.984337000",
|
|
"frame.number": "180",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "185",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.289159000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.289159000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.289159000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001980000",
|
|
"frame.time_delta_displayed": "0.001980000",
|
|
"frame.time_relative": "0.986317000",
|
|
"frame.number": "181",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "176",
|
|
"usb.time": "0.005978000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:32:39:5f:31:33:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.289173000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.289173000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.289173000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000014000",
|
|
"frame.time_delta_displayed": "0.000014000",
|
|
"frame.time_relative": "0.986331000",
|
|
"frame.number": "182",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "187",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.293413000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.293413000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.293413000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.004240000",
|
|
"frame.time_delta_displayed": "0.004240000",
|
|
"frame.time_relative": "0.990571000",
|
|
"frame.number": "183",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "172",
|
|
"usb.time": "0.015979000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:2f:67:03:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.293429000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.293429000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.293429000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "0.990587000",
|
|
"frame.number": "184",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "197",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.295160000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.295160000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.295160000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001731000",
|
|
"frame.time_delta_displayed": "0.001731000",
|
|
"frame.time_relative": "0.992318000",
|
|
"frame.number": "185",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "180",
|
|
"usb.time": "0.007981000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:32:36:5f:31:33:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.295173000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.295173000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.295173000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000013000",
|
|
"frame.time_delta_displayed": "0.000013000",
|
|
"frame.time_relative": "0.992331000",
|
|
"frame.number": "186",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "191",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.297161000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.297161000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.297161000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001988000",
|
|
"frame.time_delta_displayed": "0.001988000",
|
|
"frame.time_relative": "0.994319000",
|
|
"frame.number": "187",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "182",
|
|
"usb.time": "0.007988000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:32:36:5f:31:33:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.297175000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.297175000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.297175000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000014000",
|
|
"frame.time_delta_displayed": "0.000014000",
|
|
"frame.time_relative": "0.994333000",
|
|
"frame.number": "188",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "193",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.307413000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.307413000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.307413000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.010238000",
|
|
"frame.time_delta_displayed": "0.010238000",
|
|
"frame.time_relative": "1.004571000",
|
|
"frame.number": "189",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "178",
|
|
"usb.time": "0.021975000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:ff:26:03:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.307431000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.307431000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.307431000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000018000",
|
|
"frame.time_delta_displayed": "0.000018000",
|
|
"frame.time_relative": "1.004589000",
|
|
"frame.number": "190",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "203",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.309161000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.309161000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.309161000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001730000",
|
|
"frame.time_delta_displayed": "0.001730000",
|
|
"frame.time_relative": "1.006319000",
|
|
"frame.number": "191",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "186",
|
|
"usb.time": "0.013988000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:32:33:5f:31:32:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.309178000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.309178000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.309178000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.006336000",
|
|
"frame.number": "192",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "195",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.311163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.311163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.311163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001985000",
|
|
"frame.time_delta_displayed": "0.001985000",
|
|
"frame.time_relative": "1.008321000",
|
|
"frame.number": "193",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "188",
|
|
"usb.time": "0.013988000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.311181000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.311181000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.311181000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000018000",
|
|
"frame.time_delta_displayed": "0.000018000",
|
|
"frame.time_relative": "1.008339000",
|
|
"frame.number": "194",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "199",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.313162000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.313162000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.313162000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001981000",
|
|
"frame.time_delta_displayed": "0.001981000",
|
|
"frame.time_relative": "1.010320000",
|
|
"frame.number": "195",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "192",
|
|
"usb.time": "0.003984000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:32:33:5f:31:32:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.313177000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.313177000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.313177000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "1.010335000",
|
|
"frame.number": "196",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "201",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.313416000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.313416000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.313416000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000239000",
|
|
"frame.time_delta_displayed": "0.000239000",
|
|
"frame.time_relative": "1.010574000",
|
|
"frame.number": "197",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "184",
|
|
"usb.time": "0.019987000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:cf:e6:02:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.313437000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.313437000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.313437000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000021000",
|
|
"frame.time_delta_displayed": "0.000021000",
|
|
"frame.time_relative": "1.010595000",
|
|
"frame.number": "198",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "209",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.315162000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.315162000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.315162000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001725000",
|
|
"frame.time_delta_displayed": "0.001725000",
|
|
"frame.time_relative": "1.012320000",
|
|
"frame.number": "199",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "194",
|
|
"usb.time": "0.003981000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:32:30:5f:31:31:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.315178000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.315178000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.315178000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "1.012336000",
|
|
"frame.number": "200",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "205",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.319166000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.319166000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.319166000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.003988000",
|
|
"frame.time_delta_displayed": "0.003988000",
|
|
"frame.time_relative": "1.016324000",
|
|
"frame.number": "201",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "196",
|
|
"usb.time": "0.005989000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:32:30:5f:31:31:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.319185000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.319185000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.319185000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000019000",
|
|
"frame.time_delta_displayed": "0.000019000",
|
|
"frame.time_relative": "1.016343000",
|
|
"frame.number": "202",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "207",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.321413000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.321413000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.321413000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.002228000",
|
|
"frame.time_delta_displayed": "0.002228000",
|
|
"frame.time_relative": "1.018571000",
|
|
"frame.number": "203",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "190",
|
|
"usb.time": "0.013982000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:9f:e6:02:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.321432000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.321432000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.321432000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000019000",
|
|
"frame.time_delta_displayed": "0.000019000",
|
|
"frame.time_relative": "1.018590000",
|
|
"frame.number": "204",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "213",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.323171000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.323171000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.323171000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001739000",
|
|
"frame.time_delta_displayed": "0.001739000",
|
|
"frame.time_relative": "1.020329000",
|
|
"frame.number": "205",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "200",
|
|
"usb.time": "0.007993000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:31:37:5f:31:31:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.323191000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.323191000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.323191000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000020000",
|
|
"frame.time_delta_displayed": "0.000020000",
|
|
"frame.time_relative": "1.020349000",
|
|
"frame.number": "206",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "211",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.325162000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.325162000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.325162000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001971000",
|
|
"frame.time_delta_displayed": "0.001971000",
|
|
"frame.time_relative": "1.022320000",
|
|
"frame.number": "207",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "202",
|
|
"usb.time": "0.005977000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:31:37:5f:31:31:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.325179000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.325179000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.325179000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.022337000",
|
|
"frame.number": "208",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "215",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.357413000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.357413000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.357413000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.032234000",
|
|
"frame.time_delta_displayed": "0.032234000",
|
|
"frame.time_relative": "1.054571000",
|
|
"frame.number": "209",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "198",
|
|
"usb.time": "0.043976000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:cf:e6:02:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.357433000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.357433000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.357433000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000020000",
|
|
"frame.time_delta_displayed": "0.000020000",
|
|
"frame.time_relative": "1.054591000",
|
|
"frame.number": "210",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "217",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.359163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.359163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.359163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001730000",
|
|
"frame.time_delta_displayed": "0.001730000",
|
|
"frame.time_relative": "1.056321000",
|
|
"frame.number": "211",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "206",
|
|
"usb.time": "0.035972000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:32:30:5f:31:31:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.359181000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.359181000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.359181000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000018000",
|
|
"frame.time_delta_displayed": "0.000018000",
|
|
"frame.time_relative": "1.056339000",
|
|
"frame.number": "212",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "219",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.359411000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.359411000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.359411000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000230000",
|
|
"frame.time_delta_displayed": "0.000230000",
|
|
"frame.time_relative": "1.056569000",
|
|
"frame.number": "213",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "204",
|
|
"usb.time": "0.037979000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:8f:a6:02:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.359427000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.359427000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.359427000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "1.056585000",
|
|
"frame.number": "214",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "223",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.361162000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.361162000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.361162000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001735000",
|
|
"frame.time_delta_displayed": "0.001735000",
|
|
"frame.time_relative": "1.058320000",
|
|
"frame.number": "215",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "208",
|
|
"usb.time": "0.035983000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.361179000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.361179000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.361179000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.058337000",
|
|
"frame.number": "216",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "221",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.361411000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.361411000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.361411000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000232000",
|
|
"frame.time_delta_displayed": "0.000232000",
|
|
"frame.time_relative": "1.058569000",
|
|
"frame.number": "217",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "210",
|
|
"usb.time": "0.003978000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:bf:e6:02:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.361425000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.361425000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.361425000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000014000",
|
|
"frame.time_delta_displayed": "0.000014000",
|
|
"frame.time_relative": "1.058583000",
|
|
"frame.number": "218",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "227",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.363163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.363163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.363163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001738000",
|
|
"frame.time_delta_displayed": "0.001738000",
|
|
"frame.time_relative": "1.060321000",
|
|
"frame.number": "219",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "212",
|
|
"usb.time": "0.003982000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:31:36:5f:31:30:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.363180000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.363180000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.363180000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.060338000",
|
|
"frame.number": "220",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "225",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.365162000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.365162000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.365162000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001982000",
|
|
"frame.time_delta_displayed": "0.001982000",
|
|
"frame.time_relative": "1.062320000",
|
|
"frame.number": "221",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "216",
|
|
"usb.time": "0.003983000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:31:39:5f:31:31:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.365178000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.365178000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.365178000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "1.062336000",
|
|
"frame.number": "222",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "229",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.365412000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.365412000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.365412000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000234000",
|
|
"frame.time_delta_displayed": "0.000234000",
|
|
"frame.time_relative": "1.062570000",
|
|
"frame.number": "223",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "214",
|
|
"usb.time": "0.005985000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:3f:67:03:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.365427000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.365427000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.365427000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "1.062585000",
|
|
"frame.number": "224",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "231",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.367162000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.367162000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.367162000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001735000",
|
|
"frame.time_delta_displayed": "0.001735000",
|
|
"frame.time_relative": "1.064320000",
|
|
"frame.number": "225",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "220",
|
|
"usb.time": "0.003982000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:31:39:5f:31:31:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.367179000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.367179000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.367179000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.064337000",
|
|
"frame.number": "226",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "233",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.367414000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.367414000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.367414000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000235000",
|
|
"frame.time_delta_displayed": "0.000235000",
|
|
"frame.time_relative": "1.064572000",
|
|
"frame.number": "227",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "218",
|
|
"usb.time": "0.005989000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:9f:a7:03:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.367431000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.367431000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.367431000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.064589000",
|
|
"frame.number": "228",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "235",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.369164000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.369164000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.369164000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001733000",
|
|
"frame.time_delta_displayed": "0.001733000",
|
|
"frame.time_relative": "1.066322000",
|
|
"frame.number": "229",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "222",
|
|
"usb.time": "0.003986000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:32:37:5f:31:33:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.369182000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.369182000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.369182000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000018000",
|
|
"frame.time_delta_displayed": "0.000018000",
|
|
"frame.time_relative": "1.066340000",
|
|
"frame.number": "230",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "237",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.369427000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.369427000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.369427000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000245000",
|
|
"frame.time_delta_displayed": "0.000245000",
|
|
"frame.time_relative": "1.066585000",
|
|
"frame.number": "231",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "224",
|
|
"usb.time": "0.004000000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:ff:27:04:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.369459000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.369459000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.369459000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000032000",
|
|
"frame.time_delta_displayed": "0.000032000",
|
|
"frame.time_relative": "1.066617000",
|
|
"frame.number": "232",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "239",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.371159000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.371159000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.371159000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001700000",
|
|
"frame.time_delta_displayed": "0.001700000",
|
|
"frame.time_relative": "1.068317000",
|
|
"frame.number": "233",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "226",
|
|
"usb.time": "0.003980000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:33:33:5f:31:34:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.371174000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.371174000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.371174000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "1.068332000",
|
|
"frame.number": "234",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "241",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.371415000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.371415000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.371415000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000241000",
|
|
"frame.time_delta_displayed": "0.000241000",
|
|
"frame.time_relative": "1.068573000",
|
|
"frame.number": "235",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "228",
|
|
"usb.time": "0.003984000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:af:e8:04:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.371435000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.371435000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.371435000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000020000",
|
|
"frame.time_delta_displayed": "0.000020000",
|
|
"frame.time_relative": "1.068593000",
|
|
"frame.number": "236",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "243",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.373161000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.373161000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.373161000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001726000",
|
|
"frame.time_delta_displayed": "0.001726000",
|
|
"frame.time_relative": "1.070319000",
|
|
"frame.number": "237",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "230",
|
|
"usb.time": "0.003979000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:33:39:5f:31:36:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.373178000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.373178000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.373178000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.070336000",
|
|
"frame.number": "238",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "245",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.373412000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.373412000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.373412000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000234000",
|
|
"frame.time_delta_displayed": "0.000234000",
|
|
"frame.time_relative": "1.070570000",
|
|
"frame.number": "239",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "232",
|
|
"usb.time": "0.003953000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:3f:69:05:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.373427000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.373427000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.373427000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "1.070585000",
|
|
"frame.number": "240",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "249",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.375161000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.375161000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.375161000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001734000",
|
|
"frame.time_delta_displayed": "0.001734000",
|
|
"frame.time_relative": "1.072319000",
|
|
"frame.number": "241",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "234",
|
|
"usb.time": "0.003987000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:35:30:5f:31:39:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.375177000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.375177000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.375177000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "1.072335000",
|
|
"frame.number": "242",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "247",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.375412000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.375412000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.375412000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000235000",
|
|
"frame.time_delta_displayed": "0.000235000",
|
|
"frame.time_relative": "1.072570000",
|
|
"frame.number": "243",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "236",
|
|
"usb.time": "0.003977000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:df:29:06:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.375428000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.375428000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.375428000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "1.072586000",
|
|
"frame.number": "244",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "253",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.377163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.377163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.377163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001735000",
|
|
"frame.time_delta_displayed": "0.001735000",
|
|
"frame.time_relative": "1.074321000",
|
|
"frame.number": "245",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "238",
|
|
"usb.time": "0.003985000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:35:39:5f:32:31:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.377180000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.377180000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.377180000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.074338000",
|
|
"frame.number": "246",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "251",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.379161000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.379161000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.379161000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001981000",
|
|
"frame.time_delta_displayed": "0.001981000",
|
|
"frame.time_relative": "1.076319000",
|
|
"frame.number": "247",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "242",
|
|
"usb.time": "0.003984000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:36:39:5f:32:34:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.379178000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.379178000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.379178000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.076336000",
|
|
"frame.number": "248",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "255",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.379413000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.379413000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.379413000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000235000",
|
|
"frame.time_delta_displayed": "0.000235000",
|
|
"frame.time_relative": "1.076571000",
|
|
"frame.number": "249",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "240",
|
|
"usb.time": "0.005986000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:6f:2a:07:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.379428000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.379428000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.379428000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "1.076586000",
|
|
"frame.number": "250",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "259",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.381162000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.381162000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.381162000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001734000",
|
|
"frame.time_delta_displayed": "0.001734000",
|
|
"frame.time_relative": "1.078320000",
|
|
"frame.number": "251",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "246",
|
|
"usb.time": "0.003982000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:36:39:5f:32:34:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.381176000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.381176000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.381176000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000014000",
|
|
"frame.time_delta_displayed": "0.000014000",
|
|
"frame.time_relative": "1.078334000",
|
|
"frame.number": "252",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "257",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.381415000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.381415000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.381415000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000239000",
|
|
"frame.time_delta_displayed": "0.000239000",
|
|
"frame.time_relative": "1.078573000",
|
|
"frame.number": "253",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "244",
|
|
"usb.time": "0.005987000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:3f:ea:06:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.381432000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.381432000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.381432000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.078590000",
|
|
"frame.number": "254",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "263",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.383169000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.383169000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.383169000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001737000",
|
|
"frame.time_delta_displayed": "0.001737000",
|
|
"frame.time_relative": "1.080327000",
|
|
"frame.number": "255",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "248",
|
|
"usb.time": "0.003991000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:37:38:5f:32:38:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.383189000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.383189000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.383189000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000020000",
|
|
"frame.time_delta_displayed": "0.000020000",
|
|
"frame.time_relative": "1.080347000",
|
|
"frame.number": "256",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "261",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.385161000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.385161000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.385161000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001972000",
|
|
"frame.time_delta_displayed": "0.001972000",
|
|
"frame.time_relative": "1.082319000",
|
|
"frame.number": "257",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "252",
|
|
"usb.time": "0.003985000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:37:35:5f:32:37:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.385180000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.385180000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.385180000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000019000",
|
|
"frame.time_delta_displayed": "0.000019000",
|
|
"frame.time_relative": "1.082338000",
|
|
"frame.number": "258",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "265",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.385433000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.385433000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.385433000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000253000",
|
|
"frame.time_delta_displayed": "0.000253000",
|
|
"frame.time_relative": "1.082591000",
|
|
"frame.number": "259",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "250",
|
|
"usb.time": "0.006005000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:4f:a9:05:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.385449000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.385449000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.385449000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "1.082607000",
|
|
"frame.number": "260",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "267",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.387158000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.387158000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.387158000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001709000",
|
|
"frame.time_delta_displayed": "0.001709000",
|
|
"frame.time_relative": "1.084316000",
|
|
"frame.number": "261",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "256",
|
|
"usb.time": "0.003969000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:37:35:5f:32:37:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.387174000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.387174000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.387174000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "1.084332000",
|
|
"frame.number": "262",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "269",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.387414000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.387414000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.387414000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000240000",
|
|
"frame.time_delta_displayed": "0.000240000",
|
|
"frame.time_relative": "1.084572000",
|
|
"frame.number": "263",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "254",
|
|
"usb.time": "0.005982000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:7f:e9:05:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.387432000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.387432000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.387432000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000018000",
|
|
"frame.time_delta_displayed": "0.000018000",
|
|
"frame.time_relative": "1.084590000",
|
|
"frame.number": "264",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "271",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.389164000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.389164000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.389164000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001732000",
|
|
"frame.time_delta_displayed": "0.001732000",
|
|
"frame.time_relative": "1.086322000",
|
|
"frame.number": "265",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "258",
|
|
"usb.time": "0.003984000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:36:30:5f:32:32:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.389183000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.389183000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.389183000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000019000",
|
|
"frame.time_delta_displayed": "0.000019000",
|
|
"frame.time_relative": "1.086341000",
|
|
"frame.number": "266",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "273",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.389416000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.389416000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.389416000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000233000",
|
|
"frame.time_delta_displayed": "0.000233000",
|
|
"frame.time_relative": "1.086574000",
|
|
"frame.number": "267",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "260",
|
|
"usb.time": "0.003967000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:6f:a8:04:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.389433000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.389433000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.389433000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.086591000",
|
|
"frame.number": "268",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "275",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.391162000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.391162000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.391162000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001729000",
|
|
"frame.time_delta_displayed": "0.001729000",
|
|
"frame.time_relative": "1.088320000",
|
|
"frame.number": "269",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "262",
|
|
"usb.time": "0.003988000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:36:33:5f:32:33:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.391178000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.391178000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.391178000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "1.088336000",
|
|
"frame.number": "270",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "277",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.391421000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.391421000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.391421000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000243000",
|
|
"frame.time_delta_displayed": "0.000243000",
|
|
"frame.time_relative": "1.088579000",
|
|
"frame.number": "271",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "264",
|
|
"usb.time": "0.003989000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:df:e7:03:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.391438000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.391438000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.391438000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.088596000",
|
|
"frame.number": "272",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "279",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.393193000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.393193000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.393193000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001755000",
|
|
"frame.time_delta_displayed": "0.001755000",
|
|
"frame.time_relative": "1.090351000",
|
|
"frame.number": "273",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "266",
|
|
"usb.time": "0.004010000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:34:36:5f:31:38:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.393207000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.393207000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.393207000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000014000",
|
|
"frame.time_delta_displayed": "0.000014000",
|
|
"frame.time_relative": "1.090365000",
|
|
"frame.number": "274",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "281",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.393413000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.393413000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.393413000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000206000",
|
|
"frame.time_delta_displayed": "0.000206000",
|
|
"frame.time_relative": "1.090571000",
|
|
"frame.number": "275",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "268",
|
|
"usb.time": "0.003980000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:cf:e6:02:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.393428000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.393428000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.393428000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "1.090586000",
|
|
"frame.number": "276",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "283",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.395163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.395163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.395163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001735000",
|
|
"frame.time_delta_displayed": "0.001735000",
|
|
"frame.time_relative": "1.092321000",
|
|
"frame.number": "277",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "270",
|
|
"usb.time": "0.003985000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:33:37:5f:31:35:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.395178000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.395178000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.395178000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "1.092336000",
|
|
"frame.number": "278",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "285",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.395412000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.395412000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.395412000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000234000",
|
|
"frame.time_delta_displayed": "0.000234000",
|
|
"frame.time_relative": "1.092570000",
|
|
"frame.number": "279",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "272",
|
|
"usb.time": "0.003974000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:5f:e5:01:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.395428000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.395428000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.395428000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "1.092586000",
|
|
"frame.number": "280",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "287",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.397163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.397163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.397163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001735000",
|
|
"frame.time_delta_displayed": "0.001735000",
|
|
"frame.time_relative": "1.094321000",
|
|
"frame.number": "281",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "274",
|
|
"usb.time": "0.003956000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:36:32:30:5f:31:31:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.397176000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.397176000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.397176000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000013000",
|
|
"frame.time_delta_displayed": "0.000013000",
|
|
"frame.time_relative": "1.094334000",
|
|
"frame.number": "282",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "289",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.397417000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.397417000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.397417000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000241000",
|
|
"frame.time_delta_displayed": "0.000241000",
|
|
"frame.time_relative": "1.094575000",
|
|
"frame.number": "283",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "276",
|
|
"usb.time": "0.003989000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:9f:64:01:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.397432000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.397432000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.397432000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "1.094590000",
|
|
"frame.number": "284",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "291",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.399166000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.399166000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.399166000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001734000",
|
|
"frame.time_delta_displayed": "0.001734000",
|
|
"frame.time_relative": "1.096324000",
|
|
"frame.number": "285",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "278",
|
|
"usb.time": "0.003988000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:35:39:37:5f:37:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.399181000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.399181000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.399181000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "1.096339000",
|
|
"frame.number": "286",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "293",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.399415000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.399415000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.399415000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000234000",
|
|
"frame.time_delta_displayed": "0.000234000",
|
|
"frame.time_relative": "1.096573000",
|
|
"frame.number": "287",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "280",
|
|
"usb.time": "0.003987000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:ff:23:01:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.399430000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.399430000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.399430000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000015000",
|
|
"frame.time_delta_displayed": "0.000015000",
|
|
"frame.time_relative": "1.096588000",
|
|
"frame.number": "288",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "295",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.401163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.401163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.401163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001733000",
|
|
"frame.time_delta_displayed": "0.001733000",
|
|
"frame.time_relative": "1.098321000",
|
|
"frame.number": "289",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "282",
|
|
"usb.time": "0.003987000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:35:38:35:5f:35:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.401182000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.401182000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.401182000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000019000",
|
|
"frame.time_delta_displayed": "0.000019000",
|
|
"frame.time_relative": "1.098340000",
|
|
"frame.number": "290",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "297",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.401414000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.401414000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.401414000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000232000",
|
|
"frame.time_delta_displayed": "0.000232000",
|
|
"frame.time_relative": "1.098572000",
|
|
"frame.number": "291",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "284",
|
|
"usb.time": "0.003982000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:0f:62:00:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.401431000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.401431000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.401431000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.098589000",
|
|
"frame.number": "292",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "299",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.403162000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.403162000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.403162000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001731000",
|
|
"frame.time_delta_displayed": "0.001731000",
|
|
"frame.time_relative": "1.100320000",
|
|
"frame.number": "293",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "286",
|
|
"usb.time": "0.003981000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:35:37:35:5f:34:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.403181000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.403181000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.403181000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000019000",
|
|
"frame.time_delta_displayed": "0.000019000",
|
|
"frame.time_relative": "1.100339000",
|
|
"frame.number": "294",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "301",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.403414000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.403414000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.403414000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000233000",
|
|
"frame.time_delta_displayed": "0.000233000",
|
|
"frame.time_relative": "1.100572000",
|
|
"frame.number": "295",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "288",
|
|
"usb.time": "0.003984000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:3f:21:00:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.403427000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.403427000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.403427000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000013000",
|
|
"frame.time_delta_displayed": "0.000013000",
|
|
"frame.time_relative": "1.100585000",
|
|
"frame.number": "296",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "303",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.405164000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.405164000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.405164000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001737000",
|
|
"frame.time_delta_displayed": "0.001737000",
|
|
"frame.time_relative": "1.102322000",
|
|
"frame.number": "297",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "290",
|
|
"usb.time": "0.003982000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:35:34:34:5f:31:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.405183000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.405183000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.405183000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000019000",
|
|
"frame.time_delta_displayed": "0.000019000",
|
|
"frame.time_relative": "1.102341000",
|
|
"frame.number": "298",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "305",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.405416000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.405416000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.405416000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000233000",
|
|
"frame.time_delta_displayed": "0.000233000",
|
|
"frame.time_relative": "1.102574000",
|
|
"frame.number": "299",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "292",
|
|
"usb.time": "0.003985000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:ff:1f:00:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.405433000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.405433000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.405433000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.102591000",
|
|
"frame.number": "300",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "307",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.407160000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.407160000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.407160000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001727000",
|
|
"frame.time_delta_displayed": "0.001727000",
|
|
"frame.time_relative": "1.104318000",
|
|
"frame.number": "301",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "294",
|
|
"usb.time": "0.003979000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:35:33:31:5f:30:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.407176000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.407176000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.407176000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "1.104334000",
|
|
"frame.number": "302",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "309",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.407414000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.407414000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.407414000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000238000",
|
|
"frame.time_delta_displayed": "0.000238000",
|
|
"frame.time_relative": "1.104572000",
|
|
"frame.number": "303",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "296",
|
|
"usb.time": "0.003987000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:1f:1f:00:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.407431000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.407431000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.407431000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.104589000",
|
|
"frame.number": "304",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "311",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.409163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.409163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.409163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001732000",
|
|
"frame.time_delta_displayed": "0.001732000",
|
|
"frame.time_relative": "1.106321000",
|
|
"frame.number": "305",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "298",
|
|
"usb.time": "0.003980000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:35:31:31:5f:30:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.409180000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.409180000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.409180000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.106338000",
|
|
"frame.number": "306",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "313",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.409415000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.409415000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.409415000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000235000",
|
|
"frame.time_delta_displayed": "0.000235000",
|
|
"frame.time_relative": "1.106573000",
|
|
"frame.number": "307",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "300",
|
|
"usb.time": "0.003982000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:cf:1e:00:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.409429000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.409429000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.409429000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000014000",
|
|
"frame.time_delta_displayed": "0.000014000",
|
|
"frame.time_relative": "1.106587000",
|
|
"frame.number": "308",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "317",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.411163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.411163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.411163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001734000",
|
|
"frame.time_delta_displayed": "0.001734000",
|
|
"frame.time_relative": "1.108321000",
|
|
"frame.number": "309",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "302",
|
|
"usb.time": "0.003987000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:34:39:37:5f:30:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.411179000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.411179000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.411179000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "1.108337000",
|
|
"frame.number": "310",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "315",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.411416000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.411416000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.411416000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000237000",
|
|
"frame.time_delta_displayed": "0.000237000",
|
|
"frame.time_relative": "1.108574000",
|
|
"frame.number": "311",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "304",
|
|
"usb.time": "0.003985000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:ff:5d:00:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.411430000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.411430000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.411430000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000014000",
|
|
"frame.time_delta_displayed": "0.000014000",
|
|
"frame.time_relative": "1.108588000",
|
|
"frame.number": "312",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "323",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.413163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.413163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.413163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001733000",
|
|
"frame.time_delta_displayed": "0.001733000",
|
|
"frame.time_relative": "1.110321000",
|
|
"frame.number": "313",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "306",
|
|
"usb.time": "0.003983000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:34:39:32:5f:30:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.413180000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.413180000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.413180000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.110338000",
|
|
"frame.number": "314",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "319",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.415163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.415163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.415163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001983000",
|
|
"frame.time_delta_displayed": "0.001983000",
|
|
"frame.time_relative": "1.112321000",
|
|
"frame.number": "315",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "310",
|
|
"usb.time": "0.003984000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:34:37:39:5f:31:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.415179000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.415179000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.415179000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000016000",
|
|
"frame.time_delta_displayed": "0.000016000",
|
|
"frame.time_relative": "1.112337000",
|
|
"frame.number": "316",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "321",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.415412000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.415412000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.415412000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000233000",
|
|
"frame.time_delta_displayed": "0.000233000",
|
|
"frame.time_relative": "1.112570000",
|
|
"frame.number": "317",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "308",
|
|
"usb.time": "0.005983000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:5f:1e:00:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.415426000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.415426000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.415426000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000014000",
|
|
"frame.time_delta_displayed": "0.000014000",
|
|
"frame.time_relative": "1.112584000",
|
|
"frame.number": "318",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "327",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.417165000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.417165000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.417165000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001739000",
|
|
"frame.time_delta_displayed": "0.001739000",
|
|
"frame.time_relative": "1.114323000",
|
|
"frame.number": "319",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "314",
|
|
"usb.time": "0.003985000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:34:37:39:5f:31:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.417182000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.417182000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.417182000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.114340000",
|
|
"frame.number": "320",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "325",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.419160000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.419160000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.419160000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001978000",
|
|
"frame.time_delta_displayed": "0.001978000",
|
|
"frame.time_relative": "1.116318000",
|
|
"frame.number": "321",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "316",
|
|
"usb.time": "0.003981000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:34:38:35:5f:30:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.419196000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.419196000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.419196000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000036000",
|
|
"frame.time_delta_displayed": "0.000036000",
|
|
"frame.time_relative": "1.116354000",
|
|
"frame.number": "322",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "329",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.419428000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.419428000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.419428000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000232000",
|
|
"frame.time_delta_displayed": "0.000232000",
|
|
"frame.time_relative": "1.116586000",
|
|
"frame.number": "323",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "312",
|
|
"usb.time": "0.007998000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:5f:1f:00:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.419445000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.419445000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.419445000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.116603000",
|
|
"frame.number": "324",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "331",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.421162000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.421162000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.421162000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001717000",
|
|
"frame.time_delta_displayed": "0.001717000",
|
|
"frame.time_relative": "1.118320000",
|
|
"frame.number": "325",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "320",
|
|
"usb.time": "0.003980000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:34:38:35:5f:30:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.421180000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.421180000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.421180000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000018000",
|
|
"frame.time_delta_displayed": "0.000018000",
|
|
"frame.time_relative": "1.118338000",
|
|
"frame.number": "326",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "333",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.421415000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.421415000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.421415000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000235000",
|
|
"frame.time_delta_displayed": "0.000235000",
|
|
"frame.time_relative": "1.118573000",
|
|
"frame.number": "327",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "318",
|
|
"usb.time": "0.005989000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:4f:60:04:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.421435000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.421435000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.421435000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000020000",
|
|
"frame.time_delta_displayed": "0.000020000",
|
|
"frame.time_relative": "1.118593000",
|
|
"frame.number": "328",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9868f010",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.423162000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.423162000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.423162000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001727000",
|
|
"frame.time_delta_displayed": "0.001727000",
|
|
"frame.time_relative": "1.120320000",
|
|
"frame.number": "329",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "322",
|
|
"usb.time": "0.003966000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:35:30:31:5f:30:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.423179000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.423179000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.423179000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.120337000",
|
|
"frame.number": "330",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.response_in": "335",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.423413000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.423413000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.423413000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000234000",
|
|
"frame.time_delta_displayed": "0.000234000",
|
|
"frame.time_relative": "1.120571000",
|
|
"frame.number": "331",
|
|
"frame.len": "39",
|
|
"frame.cap_len": "39",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "12",
|
|
"usb.request_in": "324",
|
|
"usb.time": "0.003968000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "00:00:00:00:0f:e0:7f:00:02:08:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.423427000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.423427000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.423427000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000014000",
|
|
"frame.time_delta_displayed": "0.000014000",
|
|
"frame.time_relative": "1.120585000",
|
|
"frame.number": "332",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.4",
|
|
"usb.addr": "2.4.4",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f98654770",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x84",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "4"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.425163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.425163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.425163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001736000",
|
|
"frame.time_delta_displayed": "0.001736000",
|
|
"frame.time_relative": "1.122321000",
|
|
"frame.number": "333",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "326",
|
|
"usb.time": "0.003983000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:35:31:36:5f:31:37:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.425180000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.425180000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.425180000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000017000",
|
|
"frame.time_delta_displayed": "0.000017000",
|
|
"frame.time_relative": "1.122338000",
|
|
"frame.number": "334",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9867c420",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.427163000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.427163000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.427163000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.001983000",
|
|
"frame.time_delta_displayed": "0.001983000",
|
|
"frame.time_relative": "1.124321000",
|
|
"frame.number": "335",
|
|
"frame.len": "91",
|
|
"frame.cap_len": "91",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb:usbhid",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.dst": "host",
|
|
"usb.addr": "host",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x01",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x01"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "64",
|
|
"usb.request_in": "330",
|
|
"usb.time": "0.003984000",
|
|
"usb.bInterfaceClass": "0x03"
|
|
},
|
|
"usbhid.data": "4a:4f:59:5f:32:34:5f:35:31:32:5f:35:31:31:0d:0a:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"_index": "packets-2026-02-22",
|
|
"_score": null,
|
|
"_source": {
|
|
"layers": {
|
|
"frame": {
|
|
"frame.section_number": "1",
|
|
"frame.interface_id": "0",
|
|
"frame.interface_id_tree": {
|
|
"frame.interface_name": "\\\\.\\USBPcap2",
|
|
"frame.interface_description": "USBPcap2"
|
|
},
|
|
"frame.encap_type": "152",
|
|
"frame.time": "2026-02-22T18:57:59.427181000Z",
|
|
"frame.time_utc": "2026-02-22T18:57:59.427181000Z",
|
|
"frame.time_epoch": "2026-02-22T18:57:59.427181000Z",
|
|
"frame.offset_shift": "0.000000000",
|
|
"frame.time_delta": "0.000018000",
|
|
"frame.time_delta_displayed": "0.000018000",
|
|
"frame.time_relative": "1.124339000",
|
|
"frame.number": "336",
|
|
"frame.len": "27",
|
|
"frame.cap_len": "27",
|
|
"frame.marked": "0",
|
|
"frame.ignored": "0",
|
|
"frame.protocols": "usb",
|
|
"frame.encoding": "0"
|
|
},
|
|
"usb": {
|
|
"usb.src": "host",
|
|
"usb.addr": "host",
|
|
"usb.dst": "2.4.5",
|
|
"usb.addr": "2.4.5",
|
|
"usb.usbpcap_header_len": "27",
|
|
"usb.irp_id": "0xffffe20f9861d7e0",
|
|
"usb.usbd_status": "0x00000000",
|
|
"usb.function": "0x0009",
|
|
"usb.irp_info": "0x00",
|
|
"usb.irp_info_tree": {
|
|
"usb.irp_info.reserved": "0x00",
|
|
"usb.irp_info.direction": "0x00"
|
|
},
|
|
"usb.bus_id": "2",
|
|
"usb.device_address": "4",
|
|
"usb.endpoint_address": "0x85",
|
|
"usb.endpoint_address_tree": {
|
|
"usb.endpoint_address.direction": "1",
|
|
"usb.endpoint_address.number": "5"
|
|
},
|
|
"usb.transfer_type": "0x01",
|
|
"usb.data_len": "0",
|
|
"usb.bInterfaceClass": "0x03"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
]
|