Trace Lighting USB Devices Driver

12/10/2021by admin

In that case, you should right-click on Unknown Device, click on Properties, then the Driver tab and then click Update Driver. If this doesn’t work, you can also try to download the driver for your device from the manufacturer’s website. If the USB device is just a flash drive, then it’s probably not a driver issue. You can keep track of all the USB devices plugged into those machines using USBLogView. It’s a nifty little utility that runs in your system tray and automatically records into a log when any USB device is connected or disconnected from the machine.

Open usb device
  • USB(Universal Serial Bus) is a stranded developed to replace different types of BUS’s available. This is a solution devices to eliminate vendor lock-down of hardware ports, so that BUS’s will be identical across different devices from different vendors. USB devices solve one more problem i.e.
  • This method helps where the USB driver is unstable or corrupted. Right-click StartDevice Manager and click on the Universal Serial Bus controllers to expand the list. Right-click your device and click Uninstall, and then restart your computer to reinstall the controllers automatically. Create a New Drive Volume & Assign a Drive Letter.

This topic provides information about using the Logman tool to capture a USB ETW event trace. Logman is a tracing tool that is built into Windows. You can use Logman to capture events into an event trace log file.


Event trace log files can grow very quickly, but a smaller log file is easier to navigate and easier to transmit. Before you start a trace, consider taking the following steps to exclude extraneous events from the log so that you can focus on the device activity that you want to examine:

  • Disconnect any non-critical USB devices that are not the device of interest. Fewer devices result in smaller traces making it easier to read and analyze.
  • If your system has a USB keyboard or mouse, enter the trace commands by using Remote Desktop instead.
  • Narrow the start and the end of the trace as much as possible around the operations of interest.
  • If you are interested in only a certain category of USB events, you can use keywords to filter the events that are recorded. For more information, see Remarks.

Event traces from the USB 3.0 driver stack are similar to the USB 2.0 driver stack traces, which were introduced in Windows 7. Event traces from the USB 2.0 driver stack can be captured on a Windows 8 computer. The way you capture event traces from USB 2.0 and USB 3.0 driver stacks is similar. You can capture events from the USB 2.0 or USB 3.0 driver stack independently. When you connect a USB 2.0 device to a USB 3.0 host controller, you get event traces from the USB 3.0 driver stack. In that case, you will view new USB 3.0 driver stack events for a USB 2.0 device.


To collect USB trace events

  1. Open a command-prompt window that has administrative privileges. To do so, select Start, type cmd in the search box, Select and hold (or right-click) cmd.exe, and then select Run as administrator.

  2. In the command-prompt window, enter these commands to start a capture session:

    After each of these commands completes, Logman displays The command completed successfully.

  3. Perform the operations that you'll want to capture. For example, to capture events for device enumeration, you can plug in a USB flash drive that shows up as an 'Unknown device' in Device Manager. Keep the command prompt window open.

  4. Stop the session after you have completed the scenario. Enter these commands to end the capture session:

    You can stop USB hub and port event collection by running the following command:

The preceding capture session generates an etl file, named usbtrace.etl. The trace file is stored at %SystemRoot%Tracingusbtrace.etl (C:WindowsTracingusbtrace.etl). Move the file to another location or rename it in order to avoid overwriting it when you capture the next session.

The file contains event traces from the USB 3.0 and USB 2.0 driver stacks. If you want to reduce the event traces to just one USB driver stack, remove the other driver stack from your next trace session. You can do so by modifying the command sequence shown in step 2 to remove the 'logman update' lines corresponding to the driver stack you want to remove from the trace session.


Capture filters for USB 3.0 driver stack events

Notice ETW keywords such as Default and PartialDataBusTrace in the Logman capture commands. Those words are ETW keywords that indicate the types of events you want to view. You can use ETW keywords to filter the events that USB drivers write to a trace log and customize how much information you want to view about events captured from the USB 3.0 driver stack. Events that match any of your keywords are saved. Note that this method of filtering is for use at capture time, not during analysis.

You can filter events based on keywords depending on your requirements. Here are keywords for filtering USB 3.0 driver stack events:

ETW keywordDescription


Shows events that are useful for general troubleshooting. The events are similar to USB 2.0 ETW events but do not include any USB transfer events.


Shows driver-internal state machine transitions. The events are not included in the Default keyword.


Shows device information events at the beginning of the trace and captures the starting state of the USB tree. The device information Rundown events are important to save so that the trace contains details, such as the USB descriptors and USB Device Description, of connected devices. These events are included in the Default keyword. When you don’t use the Default keyword, you should use the Rundown keyword. The remaining Rundown events provide information on recent state transitions of the driver-internal state machines. These events are included in the StateMachine keyword.


Shows a subset of Default events. Shows device power transition events.


Shows a subset of Default events. The events show IRPs from the client driver and IRPs resulting from user-mode requests. However, valid USB transfer (URB) requests are not shown with the IRP keyword, and require HeadersBusTrace, PartialDataBusTrace, or FullDataBusTrace in order to be shown.


Shows all USB transfer events but doesn't save data packets.


Shows all USB transfer events and saves a limited payload of bus data.


Shows all USB transfer events and saves up to 4 KB of bus data for bulk, interrupt, and control transfers. Note that only the first buffer of a chained MDL is logged. Isochronous bus data is never logged (though the URB_ISOCH_TRANSFER](/windows-hardware/drivers/ddi/usb/ns-usb-_urb_isoch_transfer)'>URB_ISOCH_TRANSFER request structure is saved). For more information, see How to send chained MDLs and How to transfer data to USB isochronous endpoints.


Shows a subset of Default events. The events indicate when an error occurs in the USB host controller hardware.


Shows a subset of Default events. The events indicate when an error occurs in the USB hub hardware.


Shows a subset of Default events. The events indicate when an error occurs in the USB device hardware.

Trace lighting usb devices driver windows 7

As an example, here is a sequence of commands that start a session to capture USB device power transitions. Due to the selection of providers (the USB 3.0 driver stack), events are captured only for devices that are connected downstream of a USB 3.0 host controller.

Capture filters for power events

A useful ETW keyword for USB devices is the USB port driver’s PowerDiagnostics flag. When you use this keyword, the port driver logs host-controller and endpoint information but omits all events that describe transfers. If you do not need to see the transfer events, you can use the PowerDiagnostics keyword to reduce the size of a trace log by as much as 85 percent. Specify the PowerDiagnostics keyword when you start the trace, as shown in the following example:

Trace Lighting USB Devices Driver

If your filtered trace log has many host controller asynchronous schedule enable and disable events, you can filter them out when viewing the log by using a Netmon filter, as shown in the following example:

For more information on Netmon filters, see 'USB Netmon Filters' in Case Study: Troubleshooting an unknown USB device by using ETW and Netmon.

Trace Lighting Usb Devices Driver Updater

Sometimes it is helpful to have the transfer events in your trace log, such as hub requests and device requests that result in errors such as an XACT error or a stall. You might first capture a log without the transfer events and analyze that smaller log. Then run the trace again without filtering after you have a general understanding of the issues in your problem scenario.

Related topics

Trace Lighting Usb Devices Drivers

USB Event Tracing for Windows
Defining Keywords Used to Classify Types of Events

Comments are closed.