Forum Discussion
Capturing HID data in ETW traces
Can someone give some current hints on how to capture HID data for a USB device?
I started this quest using Logman to create an ETW session using the Microsoft-Windows-USB-USBPORT and Microsoft-Windows-USB-USBHUB providers from Windows 10, but although I get a ETL file with USB information in it I'm not seeing the actual data going to/from the device.
I then found a blog recommending to use the GUIDs for HidClass and HidUSB, but I get the same result then as well. This article (https://techcommunity.microsoft.com/t5/microsoft-usb-blog/how-to-capture-and-read-hid-traces-in-windows-8-1/ba-p/270839) doesn't go into much depth on viewing the ETL file, and I see that both Network Monitor and Message Analyser have been EOLd. Is TraceView really the only way we're meant to view the files now? And where does one go in 2021 to get the most recent copy?