How to detect or catch the USB plugin event in kernel mode?

NTDEV
1

Dear all,
In Windows DDK, ‘General Driver Information’->‘Kernel-Mode Driver
Architecture’->‘Design Guide’->‘Plug and Play’->‘Adding a PnP device to a
Running System’, It is said:

The function driver for the bus device notifies the PnP manager by calling
IoInvalidateDeviceRelations with a Type of BusRelations that its set of
child devices has changed.

Is there any way to capture this nodification in any kind of
kernel-mode driver?

thanks.
Kevin

2

The user mode usbview sample program is notified of usb plug/unplug
events using GUID_CLASS_USB_DEVICE. You should be able to do the
equivalent with IoRegisterPlugPlayNotification.

But why do this in kernel mode at all?

From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Kevin Liang
Sent: Friday, January 05, 2007 3:48 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] How to detect or catch the USB plugin event in kernel
mode?

Dear all,
In Windows DDK, ‘General Driver Information’->‘Kernel-Mode
Driver Architecture’->‘Design Guide’->‘Plug and Play’->‘Adding a PnP
device to a Running System’, It is said:

The function driver for the bus device notifies the PnP manager by
calling IoInvalidateDeviceRelations with a Type of BusRelations that its
set of child devices has changed.

Is there any way to capture this nodification in any kind of
kernel-mode driver?

thanks.
Kevin

— Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256 To unsubscribe, visit the
List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

3

Thanks, Roddy

I knew IoRegisterPlugPlayNotification can be used to archive this goal in
user mode.

But I just want to catch this event in another kernel-mode driver to do
some special operation. And there is no user-mode application in my
architecture. So I cannot make another application to get this
notification and pass down to my kernel-mode driver.

“Roddy, Mark”
Sent by: xxxxx@lists.osr.com
2007-01-05 22:56
Please respond to “Windows System Software Devs Interest List”

To: “Windows System Software Devs Interest List”

cc:
Subject: RE: [ntdev] How to detect or catch the USB plugin
event in kernel mode?

The user mode usbview sample program is notified of usb plug/unplug events
using GUID_CLASS_USB_DEVICE. You should be able to do the equivalent with
IoRegisterPlugPlayNotification.

But why do this in kernel mode at all?

From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Kevin Liang
Sent: Friday, January 05, 2007 3:48 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] How to detect or catch the USB plugin event in kernel
mode?

Dear all,
In Windows DDK, ‘General Driver Information’->‘Kernel-Mode Driver
Architecture’->‘Design Guide’->‘Plug and Play’->‘Adding a PnP device to a
Running System’, It is said:

The function driver for the bus device notifies the PnP manager by calling
IoInvalidateDeviceRelations with a Type of BusRelations that its set of
child devices has changed.

Is there any way to capture this nodification in any kind of
kernel-mode driver?

thanks.
Kevin

— Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256 To unsubscribe, visit the List
Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

–
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

4

IoRegisterPlugPlayNotification is a kernel mode interface. However unless
there is some compelling reason to do this in the kernel, a service would be
a better approach. If you do not have a user mode component consider adding
one.

From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Kevin Liang
Sent: Saturday, January 06, 2007 10:04 AM
To: Windows System Software Devs Interest List
Subject: RE: [ntdev] How to detect or catch the USB plugin event in kernel
mode?

Thanks, Roddy

I knew IoRegisterPlugPlayNotification can be used to archive this goal in
user mode.

But I just want to catch this event in another kernel-mode driver to do some
special operation. And there is no user-mode application in my architecture.
So I cannot make another application to get this notification and pass down
to my kernel-mode driver.

“Roddy, Mark”
Sent by: xxxxx@lists.osr.com

2007-01-05 22:56
Please respond to “Windows System Software Devs Interest List”

To: “Windows System Software Devs Interest List”

cc:
Subject: RE: [ntdev] How to detect or catch the USB plugin
event in kernel mode?

The user mode usbview sample program is notified of usb plug/unplug events
using GUID_CLASS_USB_DEVICE. You should be able to do the equivalent with
IoRegisterPlugPlayNotification.

But why do this in kernel mode at all?

_____

From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Kevin Liang
Sent: Friday, January 05, 2007 3:48 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] How to detect or catch the USB plugin event in kernel mode?

Dear all,
In Windows DDK, ‘General Driver Information’->‘Kernel-Mode Driver
Architecture’->‘Design Guide’->‘Plug and Play’->‘Adding a PnP device to a
Running System’, It is said:

The function driver for the bus device notifies the PnP manager by calling
IoInvalidateDeviceRelations with a Type of BusRelations that its set of
child devices has changed.

Is there any way to capture this nodification in any kind of
kernel-mode driver?

thanks.
Kevin

— Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256 To unsubscribe, visit the List
Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

–
This message has been scanned for viruses and
dangerous content by http:</http:> MailScanner, and is
believed to be clean.
— Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256 To unsubscribe, visit the List
Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer