stillhq.com : Mikal, a geek from Canberra living in Silicon Valley (no blather posts)

Usblogdump Version 0.4 released

Mon, 03 Jan 2005 16:39:00 GMT

And available for download from http://www.stillhq.com/extracted/usblogdump.tgz.
New features in this version:

URB flag decoding
Started on flag parsing code
Support for external decoders
Binary output mode
Bulk data transfers dump cleanup
Fixed a silly omission in the string lookup code
Rolled in bulk transfers decoding patch
Fixed last night regressions
Can now parse usb stepper motor idle traffic correctly

Let me know if you have any comments...

Comment

Bulk transfer dumping

Thu, 30 Dec 2004 21:25:00 GMT

I'm just finishing up integrating and testing the bulk transfer decode patch from Hin-Tak Leung, which will mean that the next version of usblogdump will include decoding for interrupt and bulk transfers, which will be nice. That means that it has all the decoding smarts it needs for the USB stepper motor I am playing with at the moment. I'll give more details on that later, as having a decoded dump is just a step along the way to understanding how the device works.

I've also pulled the regression test suite out of the main download, which will make that a lot smaller. I've also started compressing the regression output, which is something that I should have been doing all along.

If anyone has usblog files their having trouble decoding, now is the time to let me know while I'm on a roll...

Comment

Hacking on usblogdump again

Thu, 30 Dec 2004 03:45:00 GMT

Well, I've spent some of the evening mostly ignoring Happy Gilmore and hacking away on usblogdump. The motivation? Well, I needed bulk and interrupt transfers to work better to help me analyze a USB stepper motor I'm playing with at the moment. Anyways, I've got that working but it has introduced some fairly significant regressions in the rest of the parsing test suite. I'll look into those hopefully tomorrow, and then have something more worth talking about here.

Anyways, just wanted y'all to know there is movement at the station.

Comment

Bug fix

Sat, 28 Jun 2003 07:00:00 GMT

It turns out that the initial version of the code had a bug when an unknown URB could cause a segmentation fault. This has been fixed in the version of the code available on this website, and usblogdump should now just abort...

Comment

usblogdump Released

Fri, 27 Jun 2003 07:00:00 GMT

In the words of the annoucement email:

To:  linux-usb-devel@lists.sourceforge.net
cc:  linux-kernel@vger.kernel.org
Subject: [Announce] Linux command line Snoopy Pro logfile dumper

I had two maths exams last week. This of course means that I had to find 
something to distract me. That thing was whipping up a SnoopyPro logfile 
dumper for the command line. This was motivated by generalised frustration 
with the SnoopyPro user interface.

For those wondering, SnoopyPro is a Source Force hosted USB traffic dumper
for Windows. It's useful when reverse engineering USB device drivers.

This version of the dumper only implements the URB types which I 
immediately needed. Adding additional URBs isn't hard, but I didn't have 
any samples. Feel free to mail me usblogs, and I'll add them to the 
decoder.

The only really cool feature in this version is that it implements 
"repeated URB sequence suppression", so if the Windows driver says to the 
USB device "hey, you still there" every second for 60 seconds, and there 
is no other traffic between the machine and that device, then the output 
will only show one of those interactions, and let you know it hid 59 more. 
This feature can be turned on and off with the -r command line option.

You can get the GPL'ed CVS version of the source code from:
http://www.stillhq.com/extracted/usblogdump.tgz

There is sample output et cetera at:
http://www.stillhq.com/cgi-bin/getpage?area=usblogdump

The next step is to modify the display of the URBs so that they're closer 
to the Linux data structures.

Cheers,
Mikal

-- 

Michael Still (mikal@stillhq.com) | Stage 1: Steal underpants
http://www.stillhq.com            | Stage 2: ????
UTC + 10                          | Stage 3: Profit

Comment

Sample output

Fri, 27 Jun 2003 07:00:00 GMT

Here's some sample output from usblogdump...

The SnoopyPro input
The output of usblogdump with no suppression
And the output of usblog dump with suppression.

Note that these files take several megabytes

Comment