130 likes | 154 Vues
USBlyzer. EE-587 Spring 2008 26 FEB 08 William Mullins. Features. View all plugged USB devices in hierarchical auto-refreshed tree view along with detailed information about each USB device properties and their child components:
E N D
USBlyzer EE-587 Spring 2008 26 FEB 08 William Mullins USBlyzer
Features • View all plugged USB devices in hierarchical auto-refreshed tree view along with detailed information about each USB device properties and their child components: • USB device stack layout: Device objects for each driver that is involved in handling I/O activity. • USB descriptors: Device Descriptor, Configuration Descriptor, Interface Descriptor, Endpoint Descriptor, etc. • Information related to Plug and Play: Hardware IDs, Instance ID, Software Key, etc. • Capture, decode and display important information going through USB device stack: • USB-related requests such as URBs and structures used by USB device drivers. • I/O Request Packets (IRPs) used by PnP subsystem. • Kernel-mode and user-mode device I/O control requests (IOCTLs) used by USB client drivers and user-mode applications. • Incoming and outgoing data traffic of the USB devices. • Trace USB requests that the user-mode applications and USB device drivers use to communicate with the USB driver stack. • Analyze USB protocol and USB devices I/O activity with ease. • Filter to exclude non-essential information from the view. • Search the captured data for the particular request types. • Save captured data in binary file for later analysis. • Export USB descriptor hierarchy and all captured data to a file. USBlyzer
Select Device • All of the devices connected to the machine should appear in the device tree. • Selecting components will determine which messages the program will collect. USBlyzer
USB Properties • The properties windowshows you informationabout the selected device that the systemwas automatically able to find • Includes: Device Descriptor, Device Descriptor, Configuration Descriptor, Interface Descriptor, HID Descriptor, Endpoint Descriptor. USBlyzer
PNP Properties USBlyzer
Device Stack USBlyzer
Capture Settings • Capture -> Capture Settings • Choose messages you want to captures • Change the size of the buffer size for each message 64KB max. USBlyzer
Capture from a high data device • Depending on how much data you collect from each message and the frequency of messages your capture file can fill quickly. • Options->preferences->capture • 256MB capture limit USBlyzer
Raw Data amount determined by URB transfer buffer Amount of free space left in capture file (currently full) USBlyzer
More Preferences: Time • Change how theprogram keep trackof time. • Different styles for better analysis andeasy understanding USBlyzer
Summary • Benefits • Easy to use • Cheaper than hardware USB sniffer • 30 day trial • Down side • Can only monitor devices connected to the computer USBlyzer