| |
|
|
| |
DeviceFilter Description |
|
| |
DevFilter is a universal software bus analyzer for capturing device I/O that allows you to monitor all I/O request packets (IRPs) on your system, fast I/O requests and capture each request input and output data. It shows you all kernel-mode drivers installed on your Windows NT/2000/XP/2003 system and device objects created by these drivers.
It also allows you to hook any of these devices (not more than 10 simultaneously by default) and monitor all requests to the selected devices that are delivered to their dispatch table. Please, note that it hooks a selected device, but not the one which can be above this device.
This approach allows you to see the IRP path down the device stack, for example, to check if it was blocked by an upper level filter. All request input and output data are converted into request-associated structures or represented as a hexadecimal data dump. |
|
| |
|
|
|
|