It would be quite easy to hack it to only show the contents of DATA packets… that would make an excellent keyboard sniffer 
End of packet is signalled in USB by pulling both D+ and D- to ground. I’m not sure if it is possible to detect it otherwise. Other than that, a single signal would be enough.