I am looking for a way to monitor the raw USB HID events generated by devices such as keyboards, mice and other similar devices. There used to a IOUSBFamily kext with logging enabled that could be installed that would do this, but Apple hasn't updated it since OSX 10.9, so it doesn't seem to work anymore.

  • You are asking an off-topic question (software shopping). Questions seeking product, service, or learning material recommendations are off-topic. See On Topic. Try softwarerecs.stackexchange.com but please first read What is required for a question to contain "enough information". – DavidPostill Apr 12 '17 at 13:21
  • Fair enough, I do not a seek a software recommendation as such, but "how to do this". Should I rephrase the question or post a new one? – simon Apr 12 '17 at 13:25
  • edit and rephrase the question. – DavidPostill Apr 12 '17 at 13:26
  • Does Wireshark support this on macOS? I know it has USB monitoring on Windows and Linux. – user1686 Apr 12 '17 at 13:49
  • Yes it's supported. You probably need nightly builds of wireshark. Haven't tested this yet, but read here. – huch Oct 25 '18 at 12:58

Look at Little Flocker (monitors file access) and Micro Snitch. I have both, as well as Little Snitch, which monitors network traffic. It can be quite confusing when all these messages pop up, sometimes ten in several seconds. Best is to try one, see how it works, get a feeling about it, then install another, etc.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.