USB Monitor

USB Protocol Analyzer Features

• 

  USB devices & connections real time monitoring

  The USB Monitor detects all connected USB devices and displays them, grouping by device class. Extended information (including descriptors) is provided for each device. This list is automatically updated every time you plug or unplug a USB device.

  The activity of each USB device can be monitored in real time, and highly efficient and carefully optimized data processing algorithms help avoid communication delays. This approach makes our product, in fact, the only nonintrusive software USB protocol analyzer available on the market today.

• 

  USB data filtering & output customization

  Product offers a generic USB data/descriptors/commands/requests filtering feature, which allows you to configure filtering for different visualizers, create filtering schemes and quickly apply them to different visualizer windows.

  Additionally, you may change the appearance of visual elements for monitored packets in the data visualizers including URB View, Packet View, Communications View, Mass Storage View, HID View, Audio View, Video View, Still Image/ MTP View. No other solution will allow you to adjust your output as flexibly and conveniently as our product.

• 

  USB data logging & log file playback

  Our product is the only one among all other USB analyzers, which offers you the opportunity not only to monitor the usb communications in real time, but also to record the received data in the log file with the possibility to replay and analyze it later or share it with your colleagues.

  Using our usb communications monitoring solution, you will be able to reproduce arbitrary fragments of previously recorded data on the screen and export it in raw binary or text format.

• 

  Browsing monitored data, searching for data patterns

  Basic USB Monitor functionality includes the ability to view and navigate monitored USB data. All data visualizers allow a given data pattern to be easily found using the search function. The search may be performed among the whole visualizer contents or among the selected area only.

  Some visualizers also provide advanced searching capabilities, including searching for text in different encodings or binary data and a search with regular expressions.

• 

  Sniffing data on remote USB devices

  With this unique feature of our product, you can snoop usb data even on remote computers. You install the Device Monitoring Server on your remote computer, connect to it using USB Monitor running on your workstation, then access all the data flowing between USB applications running on the remote computer and USB devices connected to it.

  You can even have multiple simultaneous remote monitoring and recording sessions to a single device from computers in different places around the world.

• 

  USB data graphical analysis & statistics

  Only our product offers you a truly sophisticated graphical and statistical analysis of data obtained during the monitoring of USB devices activity. You can analyze not only real-time data, but also historical data stored in pre-recorded log files.

  You can inspect the following data parameters: Packets Total/sec, Bytes Total/sec, Bytes Read/sec, Bytes Written/sec, IO Packets/sec. The product allows you to customize the list of data being analyzed, and specify the type and form of the analysis.

• 

  Packet View: displaying monitored packets in a table

  The Packet View visualizer provides the combination of brief packet information for each monitored packet and in-depth analysis for an individually selected packet. It is structurally divided into two panes.

  The upper pane displays brief information for each monitored packet in a table. The lower pane lists all other supported and installed visualizers which are used to display the individual packet information. Once you select the packet in the upper pane, all its internal fields are decoded and displayed in the visualizers in the lower pane. For example, you may select a HID protocol packet to see it decoded in URB View and HID View visualizers.

• 

  URB View: displaying monitored USB Request Blocks

  The URB View visualizer displays each monitored USB Request Block (URB). It decodes the packet's internal fields, and works in two modes - Basic and Complete. In Basic mode only the main packet fields are decoded and displayed, while some other are available as popup hints. In Complete mode the entire packet is decoded and all accompanying data is provided in Hex/ASCII view.

  The contents of the visualizer can be copied into the Clipboard or exported into the file in various formats. Use the mouse to select the portion to copy/export or leave the selection empty to copy the entire visualizer contents.

• 

  Structure View: parsing & displaying USB packet data

  Structure View data visualizer is a two-part window. First part displays each monitored packet parsed according to specified set of protocols. Second part displays raw packet contents. Cursor navigation may be synchronized between two parts. Each packet is matched against one or more of loaded protocol definition files and all protocol fields are shown in the top part of the visualizer. For each field, its name, value, starting address and size are displayed. If field consists of other fields, you may expand it.

  Visualizer supports configuring protocol-based filtering (aka Display Filter) and allows changing of the root protocol.

• 

  Raw Data View: displaying raw packet data

  The visualizer has two windows, one of which displays data sent to the USB device, and another one displays data received from the USB device.

  All subsequent packets are concatenated into a single data stream, which is displayed as sequence of hexadecimal, decimal, octal, binary data and text. Alternatively, the stream may be displayed as a sequence of floating-point numbers with single or double precision.

  The data visualizer is extremely flexible and allows you to customize both its layout and appearance.

• 

  HID View: parsing of Human Interface Device (HID) packets

  The HID View visualizer parses and displays the contents of the HID report descriptors and HID-specific requests. This visualizer works in two modes: HID View and Report View.

  In HID View mode the visualizer displays parsed HID Report descriptor and brief description for each monitored HID packet. In Report View, the most detailed information for each monitored packet is displayed.

• 

  Still Image View: parsing of USB Still Image and MTP packets

  The Still Image/MTP View visualizer parses and displays the commands and data exchanged between device and host over USB Still Image and MTP protocols. These protocols are used by digital still photography devices.

  The complete PIMA 15740 command set is supported, all PIMA 15740 operations, responses and events are decoded and displayed.

• 

  Mass Storage View: parsing of USB Mass Storage packets

  Works with USB Mass Storage Bulk-Only device class and subclass. Specific commands from USB Mass Storage CBI are also supported. There are two modes of operation: Mass Storage Level and Command Level. In first mode it parses Mass Storage-specific structures, and in the second mode it parses commands exchanged between the host and device.

  The following command sets are supported: SCSI Primary Command Set 2 (SPC2), SCSI Multimedia Command Set 2 (MMC2), SCSI Reduced Block Command Set (RBC)

• 

  Audio View: parsing of USB Audio packets

  USB Audio visualizer parses packets and descriptors for USB Audio compliant device. The following subclasses are supported: Audio Control (AC) & Audio Streaming (AS). The first one is used to control and change the state of device. The second one is generally used for data transmitting.

  The following control pipe requests are parsed for the audio class device: SET_CUR (0x01), GET_CUR (0x81), SET_MIN (0x02), GET_MIN (0x82), SET_MAX (0x03), GET_MAX (0x83), SET_RES (0x04), GET_RES (0x84), SET_MEM (0x05), GET_MEM (0x85), GET_STAT (0xFF)

• 

  Video View: parsing of USB Video packets

  USB Video visualizer parses packets and descriptors for USB Video compliant device. The following subclasses are supported - Video Control (VC) & Video Streaming (VS). The first one is used to control and change the state of device. The second one is generally used for data transmitting.

• 

  Communications View: parsing of USB Communications packets

  This visualizer decodes USB Communications Class packets and descriptors. The Communication Device Class is a device level definition and is used by the host to properly identify a communication device that may present several different types of interfaces.

• 

  Capture filter

  A filter is a single condition which follows the syntax of Protocol Definition expressions. Capture filter can be used to discard entire packets according to specified criteria. It can refer to any field in captured packet and use logical or arithmetic operators.

  You can either select one of the predefined filters or create your own.

• 

  USB endpoints filtering feature

  Device Monitoring Studio offers an endpoints filtering feature, which allows you to select endpoints to be filtered using context menu in URB View visualizer.

  Combined with an ability to have as much URB View visualizers as you need, you may open one data visualizer for each endpoint.

• 

  Raw data exporter

  This exporter parses intercepted USB data according to the loaded set of protocols, applies optional protocol-based filtering and Root Protocol and writes the resulting binary data into the output file. It produces the result identical to the lower part of the Structure View data visualizer, but does not display any UI, writing raw data directly to the file.

• 

  Text exporter

  This exporter parses intercepted USB data according to the loaded set of protocols, applies optional protocol-based filtering and Root Protocol and writes the resulting text data into the file. It formats its textual output exactly like the upper part of the Structure View visualizer, but does not display any UI, writing formatted data directly to the file.

• 

  Custom protocols

  USB Monitor comes with a lot of pre-installed protocols. This feature also allows the customer to add the definition of the custom protocol to USB Monitor. After this, the application will start parsing and decoding all matching packets according to custom protocol definition.

• 

  Custom visualizers

  Custom Visualizer allows the user to create his own visualizer in TypeScript. Custom visualizer receives each packet parsed according to selected protocol and adds one or more text strings to the output. It also defines several visual schemes which may later be customized by the user.

• 

  Root protocol

  Root protocol, a feature of Structure View data visualizer, as well as several other components, allows the user to focus on a specific custom protocol frame inside another encapsulating protocol.

• 

  Multi-source monitoring

  This feature supports joining monitored data from multiple USB devices into a single monitoring session. Device Monitoring Studio makes sure packets are correctly sorted and presented through a number of supported data visualizers. Data logging also supports multi-source sessions.

• 

  HID send: sending HID protocol commands to a device

  HID Send module allows you to directly communicate with USB HID devices. You may query HID device parameters, construct and send HID report packets.

  HID Send module may be controlled with scripting. Being used with custom protocols parsing feature (Custom visualizers) it provides you with automatic event control handler functionality. You may automatically send commands to your device upon receiving specific data.

• 

  Scripting support

  The built-in scripting support offers the possibility to control several in-application objects with user-written scripts written in TypeScript (JavaScript superset).

  Being used with custom protocols parsing feature (Custom visualizers) and HID send it provides you with USB protocol automatic event control handler functionality. You may automatically send commands to your device upon receiving specific data.