Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.

More Info on Driver Writing and Debugging

The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.

Check out The OSR Learning Library at:

Capturing USB data in an ETW trace

Paul_AttrydePaul_Attryde Member Posts: 15

I am trying to start an ETW session from a command line to capture USB data so that I can troubleshoot a problem with a HID device on a remote machine. This machine doesn't use XHCI so I'm using the Microsoft-Windows-USB-USBPORT and Microsoft-Windows-USB-USBHUB providers from Windows 10. I can get an ETL file that shows device enumeration (for example), but it never contains the data going to/from the device I'm interested in. Do those 2 providers capture the data, or is there another one I should be looking at? Or do I just need to change something on my commands to logman to capture the data? Alternatively, of course, is that I don't know how Message Analyser works :)

Also, now that MS has killed off Message Analyser, what's the best/recommended way of looking at the file once I have it? I still have a copy of Message Analyser, but wondered if there is a recommended replacement?

Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Upcoming OSR Seminars
OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!
Writing WDF Drivers 7 Dec 2020 LIVE ONLINE
Internals & Software Drivers 25 Jan 2021 LIVE ONLINE
Developing Minifilters 8 March 2021 LIVE ONLINE