Dear experts,
Is there any tool available to show the contents of data in read/write IRP
buffer? Not from device.
Regards,
Ramya
Windbg with VMWARE and breakpoints on the drivers dipatch routine.
Or write a filter(long way).
Irp tracker will let you see the address of the data that is being
send/recieved. But you cannot view the data.
!drvobj [DriverObject] 3
will give u the drivers dispatch routines.
Regards
Faraz Ahmed
On 12/23/05, Ramya Desai wrote:
> Dear experts,
>
>
>
> Is there any tool available to show the contents of data in read/write IRP
> buffer? Not from device.
>
>
> Regards,
> Ramya
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>