Great timing, I just started looking into this too....

I think we can split the research into two sections:
1) Plug in and enumeration
2) Image capture

Plug in and enumeration would be where firmware upload, if it does it, would occur. I'm not sure if the USB sniffing tools I have can do this. Can anyone else get a dump during this phase?

I've created a dump, of image capture, using Wireshark Version 2.2.0 (v2.2.0-0-g5368c50 from master-2.2) and the bundled version of USBPcapCMD (1.1.0.0-g794bf26-5).
It consists of starting MaximDL, capturing a 5 second frame, and then closing MaximDL.

I've configured the fan speed to be low. When the camera is plugged into USB, the fan stays high until the MaximDL software is started. It's a nice indicator of important USB activity.

I've attached the dump here, but if that doesn't work you can download from Dropbox: www.dropbox.com/s/tj2l2m873sf6e1g/sspro-...photo.pcapng.xz?dl=0

Read More...