USB Analyzer

USB Analyzer by Eltima monitors incoming and outgoing data of any USB port in your system, or any USB device plugged into your computer, and presents it in a handy format.

To start analyzing USB data traffic, follow these steps:

1. Click New.
2. In the “Start new session” window choose the USB port or device to monitor.

1

Advanced View displays all the USB hubs and ports in the system detected by USB Analyzer.

2

3. Set which events should be sniffed:

  • Plug and Play – input/output request packets (IRPs) used by PnP subsystem. Information related to PnP is: hardware ID, instance ID, etc..
  • IOCTL – input/output control requests used by USB client drivers
  • URB – USB request blocks used by USB device drivers
  • USB function – input/output data traffic of USB devices

4. The captured data will be displayed in the main window of the program.
You can jump to a specific line number using ctrl + G hotkey (“Go to Line” dialog).

usb_mon_main-300x220

Now you can optimize the process of data analysis using the following options:

Filter
Use the in-built filter to find the required data.
You can jump to a specific line number using ctrl + G hotkey (“Go to Line” dialog).
To save a newly created filter, type its name in the corresponding field and click the “Save” button. Now it will show up in the drop-down filters list.

 usb_mon_filter

Find
Use the “Find” option to get the contents of the specific packet.
You can jump to a specific line number using ctrl + G hotkey (“Go to Line” dialog).

usb_mon_find

Save
Save captured data into a file with .usblog extension. Later you can open this file with USB Analyzer for thorough investigation.

Export
Save the log or any part of it in a convenient format (.txt, .html, etc.).
You can also export dump data in .txt, .html, .xml, .csv and .json formats (check the corresponding box).

Pair
Data monitoring is performed in two directions: from and to the USB device. Click “Pair” button to switch between the corresponding input/output packets.


See also: