Monitor and record all I/O packets on your system.
Device Filter allows you to monitor all I/O request packets (IRP's) on your system, fast I/O requests, and capture each request input and output data. It shows you all kernel-mode drivers installed on your Windows NT/2000/XP/2003 system and device objects created by these drivers. It also allows you to hook any of these devices (not more than 10 simultaneously by default) and monitor all requests to the selected devices that are delivered to their dispatch table.