1. EE-587 Spring 2008 26 FEB 08 William Mullins
USBlyzer
EE-587 Spring 2008
26 FEB 08
William Mullins
USBlyzer

2. Features
View all plugged USB devices in hierarchical auto-refreshed tree view along with detailed information about each USB device properties and their child components:
USB device stack layout: Device objects for each driver that is involved in handling I/O activity.
USB descriptors: Device Descriptor, Configuration Descriptor, Interface Descriptor, Endpoint Descriptor, etc.
Information related to Plug and Play: Hardware IDs, Instance ID, Software Key, etc.
Capture, decode and display important information going through USB device stack:
USB-related requests such as URBs and structures used by USB device drivers.
I/O Request Packets (IRPs) used by PnP subsystem.
Kernel-mode and user-mode device I/O control requests (IOCTLs) used by USB client drivers and user-mode applications.
Incoming and outgoing data traffic of the USB devices.
Trace USB requests that the user-mode applications and USB device drivers use to communicate with the USB driver stack.
Analyze USB protocol and USB devices I/O activity with ease.
Filter to exclude non-essential information from the view.
Search the captured data for the particular request types.
Save captured data in binary file for later analysis.
Export USB descriptor hierarchy and all captured data to a file.
USBlyzer

3. USBlyzer

4. Select Device
All of the devices connected to the machine should appear in the device tree.
Selecting components will determine which messages the program will collect.
USBlyzer

5. USB Properties
The properties window shows you information about the selected device that the system was automatically able to find
Includes: Device Descriptor, Device Descriptor, Configuration Descriptor, Interface Descriptor, HID Descriptor, Endpoint Descriptor.
USBlyzer

6. PNP Properties
USBlyzer

7. Device Stack
USBlyzer

8. Capture Settings Capture -> Capture Settings
Choose messages you want to captures
Change the size of the buffer size for each message 64KB max.
USBlyzer

9. USBlyzer

10. Capture from a high data device
Depending on how much data you collect from each message and the frequency of messages your capture file can fill quickly.
Options->preferences ->capture
256MB capture limit
USBlyzer

11. Raw Data amount determined by URB transfer buffer
Amount of free space left in capture file (currently full)
USBlyzer

12. More Preferences: Time
Change how the program keep track of time.
Different styles for better analysis and easy understanding
USBlyzer

13. Summary Benefits Down side Easy to use
Cheaper than hardware USB sniffer
30 day trial
Down side
Can only monitor devices connected to the computer
USBlyzer