2018年1月7日 星期日

[研究] USB snoopy (史奴比) / USB sniffer / SnoopyPro-0.22

[研究] USB snoopy (史奴比) / USB sniffer / SnoopyPro-0.22

2018-01-07

USB Snoopy, a tool to watch device interactions on windows.
http://www.wingmanteam.com/usbsnoopy/
似乎不存在了

Usb Sniffer for Windows
https://sourceforge.net/projects/usbsnoop/

SnoopyPro, a spin off from USB Snoopy.
SnoopyPro 是 USB Snoopy 的一個分支。
http://sf.net/projects/usbsnoop/
會自動轉網址到
https://sourceforge.net/projects/usbsnoop/
目前最新版 SnoopyPro-0.22.zip (291 KB (298,402 位元組)) ,於 2013-04-23 釋出。




Readme.txt 提到
1. Run SnoopyPro.exe from whereever you have saved it.
2. Open up the USB devices window with F2.
3. Choose 'Unpack Drivers' from the 'File' menu.
4. Choose 'Install Service' from the 'File' menu.
5. Locate the device you want to sniff.
6. Right-click on it and choose 'Install and Restart'.
7. Wait for the magic to happen...

(下圖) 依據 Readme.txt 內容,點選 File 下拉選單的 Unpack Drivers

(下圖) 結果出現錯誤,找不到 USBSnoop.sys
根據 Google 的文章,USBSnoop.sys是自動從網路下載的。而此工具是 2013年的,有可能已經不再提供?(不確定)


(下圖) Edit 下拉選單的內容。


*********************************************************************************
Readme.txt 的內容
*********************************************************************************

==========================================================================
SnoopyPro 0.22 Readme.txt
==========================================================================


==========================================================================
WHAT IS SNOOPYPRO?
==========================================================================

SnoopyPro is a tool for advanced USB programmers. It allows you to record
each URB sent to and received from a USB device. This traces can be saved,
loaded, edited, printed and combined into new traces.

WARNING: You might damage your system with this tool. Don't use it if
you don't know what you're doing!!!! We're not responsible for anything
that happens to you, your system, your devices, your marriage, etc. etc.


==========================================================================
SUPPORTED OPERATING SYSTEMS:
==========================================================================

Tested by the authors on Windows 98, Windows 2000.


==========================================================================
INSTALLATION/USE:
==========================================================================

1. Run SnoopyPro.exe from whereever you have saved it.
2. Open up the USB devices window with F2.
3. Choose 'Unpack Drivers' from the 'File' menu.
4. Choose 'Install Service' from the 'File' menu.
5. Locate the device you want to sniff.
6. Right-click on it and choose 'Install and Restart'.
7. Wait for the magic to happen...


==========================================================================
FAQ:
==========================================================================

Q: Is this a cool piece of software?
A: Yes.


==========================================================================
RECENT CHANGES:
==========================================================================

0.22:
[X] Bumped version info to 0.22, fixed a bug in the exporter where it
    wouldn't take the filename selected as output file. Added XML output
    for isochronous transfers.

0.21:
[X] Added export functionality. The only export format is XML for now, and
    only a very limited amount of information is exported for each URB.
    The selection of URB's is not implemented either, so trim down the log
    before invoking 'File', 'Export' to limit the amount of data exported.

0.20:

[X] Added endpoint number as a column in the log.

[X] Added some analyzing log functionality: should figure out better
    which URBs are IN or OUT or INOUT and determines endpoint addresses

[X] Fixed isochronous IN transferbuffer handling: correctly gathers
    the individual buffers with the (variable) length

[X] Now adding the filter in front of the LowerFilters registry
    entry, so it's loaded first.

[X] Timestamping mess: should store plug-in stamp in front
    of trace and UI can either offset or not...
    -> allows comparison of timestamps across traces

[X] Figure out why the update cmd ui in the devices dialog
    doesn't work... because the updatecmdui gets called on
    command invocation as well... doh

[X] sister device objects on newly arrived devices... wuah!


==========================================================================
TODO/BUGS:
==========================================================================

[ ] Fix About Box - there should be a way to display a nice
    little hand while over the url... (except comctl32.dll
    version 6 -> ICC_LINK_CLASS :-( )

[ ] Implement a retry mechanims in USBSnoop to go out and
    look for USBSnpys on other occasions than just load

[ ] Implement nasty behaviour of stealing the USBD entry
    points and inserting the sniffer filter into chains of
    'impaired' drivers.

[ ] Implement additional column called 'Endpoint' and correctly
    decode In/Out flags of the URBs...

[ ] Don't free the snoop buffer over in the Snpys bridge. Use
    two buffers instead.. might be a bit slower on connect, but
    it's way cleaner.

[ ] Opening log windows after a log has been stopped could yield
    shadow buttons. New log windows shouldn't have the VID/PID
    display -> or it should be grayed, filled in on the first
    paste and checks could be performed on subsequent pastes...
    hmmmm


==========================================================================
CONTACT INFO:
==========================================================================

Download latest version from:
http://home.jps.net/~koma

Send email to:
tom@wingmanteam.com
roland@wingmanteam.com

Send postcards to:
Logitech Inc.
Cool Driver Room
6505 Kaiser Drive
Fremont, CA 94555
USA

(完)

相關

阿呆的blog: USB Sniffer試用心得
http://ycfu.blog.mypc.tw/2007/06/usb-sniffer.html

沒有留言:

張貼留言