http://sourceforge.net/projects/usbsnoop
Regards,
Fernando Roberto da Silva.
-----Mensagem original-----
De: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] Em nome de
xxxxx@yahoo.co.in
Enviada em: quarta-feira, 26 de julho de 2006 12:09
Para: Windows System Software Devs Interest List
Assunto: [ntdev] USB Filter driver
I want to create usb moniter or filter driver which will track all
information going or coming to USB. I had some queries regarding this.
Can anybody help me out in this…
-
Microsoft provides device specific drivers like usbstor.sys for mass
storage device and also bus drivers like usbd.sys and usbhub.sys. Now I
want to track any information going to usb device or coming from usb
device. For that I am trying to build filter driver which will give me
all details of URB’s, IRP etc. Now this filter driver will be in between
vendor’s device specific driver and usb bus driver since vendor device
specific driver create URB’s or IRP. Is it right.
-
Can I track information before it goes to vendor device specific
driver, and if yes then can provide me some information. For this is it
necessary to know interfaces provided by vendor driver.
-
Can I create generic filter driver just above vendor driver. This
filter driver should not depends on vendors supplied driver but should
be capable of extrating information going to driver.
-
Is there any sample for building this this type of driver or monitor
above or below vendor supplied device specific driver.
Thanks in advance
Chandrakant
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer
[resending due to bounce]
What you want here is an upper filter to the host controller driver,
usbehci.sys. That will get all URBs. (Well, it will get all USB 2.0
URBs.)
Not exactly. Once the URB hits the device specific PDO it is directly
sent to the downlevel root hub’s PDO so you cannot sit in one place in
the driver stack and see all URB traffic.
d
What do mean to say that device specific PDO… Is there anyway to send information directly to device object
I am sorry, but I don’t understand your question. Which device object?
Your filter? Who is sending information here? Your filter? The class
driver?
d
– I can spell, I just can’t type.
well if i make my filter driver just above usbhub.sys driver then will i would be able to catch all traffic going and coming to any USB device. Or should i go for usbport.sys driver.-
Filtering above usbhub’s FDO does not help you. The class driver sends
I/O down the stack to the USB Hub PDO. The usbhub PDO does not send all
I/O to the FDO, it sends most I/O directly to the host controller,
bypassing the rest of the stack. On some versions of the core,
filtering usbport doesn’t do you any good either b/c it is sent directly
to the usbport’s device object, not to the top level device of usbport’s
device object.
d
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@yahoo.co.in
Sent: Friday, July 28, 2006 6:43 AM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] RES: USB Filter driver
well if i make my filter driver just above usbhub.sys driver then will i
would be able to catch all traffic going and coming to any USB device.
Or should i go for usbport.sys driver.-
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer
Thanks Doron,
Can you tell me about the document link’s or details of the information which you are telling. Actually i am unable to figure out whole picture about it.
well regarding host controllers, it differs on different OS. So if i make my filter above USB host controller then will i would be able to capture whole data communication between USB device and OS.
Thanks for your help
Chandrakant Tripathi
Doron Holan wrote:
Filtering above usbhub’s FDO does not help you. The class driver sends
I/O down the stack to the USB Hub PDO. The usbhub PDO does not send all
I/O to the FDO, it sends most I/O directly to the host controller,
bypassing the rest of the stack. On some versions of the core,
filtering usbport doesn’t do you any good either b/c it is sent directly
to the usbport’s device object, not to the top level device of usbport’s
device object.
d
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@yahoo.co.in
Sent: Friday, July 28, 2006 6:43 AM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] RES: USB Filter driver
well if i make my filter driver just above usbhub.sys driver then will i
would be able to catch all traffic going and coming to any USB device.
Or should i go for usbport.sys driver.-
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer
—
Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256
To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
---------------------------------
Here’s a new way to find what you’re looking for - Yahoo! Answers
This not documented anywhere. The whole picture is intentionally vague
b/c it changes from release to release.
d
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Chandrakant
Tripathi
Sent: Friday, July 28, 2006 12:36 PM
To: Windows System Software Devs Interest List
Subject: RE: [ntdev] RES: USB Filter driver
Thanks Doron,
Can you tell me about the document link’s or details of the
information which you are telling. Actually i am unable to figure out
whole picture about it.
well regarding host controllers, it differs on different OS. So if i
make my filter above USB host controller then will i would be able to
capture whole data communication between USB device and OS.
Thanks for your help
Chandrakant Tripathi