▸ yeet-src/usbsnoopscreen
Trace live USB traffic

usbsnoop

5289
by yeet-src·updated Aug 2026#287

Live, system-wide USB transfer sniffer in eBPF — decodes USB traffic inline (control SETUP, SCSI, HID) from two universal URB hooks. No usbmon, no hardware sniffer. CO-RE portable.

$ run it on a Linux host with yeet installed

no yeet yet? get started →
$ yeet run gh:yeet-src/usbsnoopcopy
co-relibbpfobservabilityreverse-engineeringtracingusbusb-sniffer