> thinking about patching a Linux driver module to record everything it > does and every command it receives; snooping with driver help. >
Wireshark can snoop usb traffic. It is easy and gives you all the information you probably need. There is also a similar thing for windows. Can't remember the name. G.