yeet-src/usbsnoop

Live, system-wide USB transfer sniffer in eBPF — decodes USB traffic inline (control SETUP, SCSI, HID) from two universal URB hooks. No usbmon, no hardware sniffer. CO-RE portable.

9 best points · 0 comments · 1 Hacker News post · 88 GitHub stars · View on GitHub

Hacker News discussions

• Show HN: Live, system-wide USB transfer sniffer in eBPF (9 points, 0 comments, by r3tr0, 2026-05-31)