This column shows you whether the I/O has a bookmark set or not. If the I/O has a bookmark set, a bookmark icon appears in this column.

This column shows you how many bytes of data have been captured for the given I/O. If you have configured busTRACE to capture less data than what was actually transferred, this value may be less than the Bytes Transferred described below.

This column shows you how many bytes were requested to be transferred. In other words, how large the original data buffer was. This may be larger than what was actually transferred. For example, if a command is issued to a device that will return between 0 and 256 bytes (depending on what data is available), the caller may set the original buffer size to 256 bytes. This way, there is enough space to store the entire data transfer.

This column shows you how many bytes were actually transferred along with the I/O. This may be less than (but never more than) the Bytes Requested value described above. There are some circumstances where this value is always set to the Bytes Requested value, and does not represent the true number of bytes transferred. This is usually caused by a limitation of the underlying software driver or hardware. Additional details on this limitation can be found in our Troubleshooting busTRACE section.

This column shows you text describing the I/O command sent. For a storage device, this is usually the name of the CDB being sent to the device (e.g. Test Unit Ready, Inquiry, etc.). For a USB device, this is usually the URB Function being sent to the device (e.g. Get Descriptor, Select Interface, etc.).

This column shows you more specific text describing the I/O command sent. For a storage device, this is usually the hex Command Descriptor Block being sent. For a USB device, this is usually additional details about the URB Function being sent.

This column indicates the order in which the I/Os were initiated.

This column displays an icon for the device that the I/O was sent too. This is the same icon that appears in the Capture Devices pane. If you float the mouse over the device icon, in the I/O Capture List, busTRACE will show you the full device name in a tool tip.

This column will show you the Port Number, Path ID, Target ID, and LUN for the device that processed the captured I/O. This field is only applicable to storage devices. If no such value is available, the field is left empty.

This field shows you a unique 32-bit or 64-bit value that is used internally to represent the device that processed the I/O request. When you are capturing I/O activity, this field shows you the PDEVICE_OBJECT pointer value for the device object that received the IRP request. For busPROBE or busSCRIPT, the value is an internally used pointer. This field is not available under Windows Me.

This column displays when the I/O finished. You can customize how the I/O timing is displayed.

This column indicates whether the I/O succeeded or failed. If successful, nothing appears in this column entry. If the I/O fails, an error icon will appear.

This column displays the time it took for the I/O to execute. You can customize how the I/O timing is displayed.

This column shows you whether data is being transferred to the device (data out) or from the device (data in). If no data is transferred, nothing appears in this column.

If you have configured busTRACE to view interleaved I/O activity (one showing the I/O going down the stack, and the other going up the stack), this column shows you how the I/Os are interleaved by drawing an arrow from where the I/O starts to where the I/O finishes.

This column displays the timeout set for the given I/O.

This column indicates whether the I/O is going down the I/O stack or going back up the I/O stack. This is only applicable if you have configured busTRACE to view interleaved I/O activity. If busTRACE is configured in its default state of not viewing interleaved I/O activity, then this column will simply show you a double arrow indicator.

This field shows you a unique 32-bit or 64-bit value that is used internally to represent the I/O request. When you are capturing I/O activity, this field shows you the PIRP pointer value for the IRP that was sent to generate the I/O request. For busPROBE or busSCRIPT, the value is an internally used pointer. This field is not available under Windows Me.

This column shows you the type of I/O Request Packet (IRP) that was captured. Details on types of I/O Request Packets are described in Microsoft's Windows Driver Development Kit. One of the following fields will be displayed here:

If dealing with storage class devices (e.g. hard drive, CD/DVD drive), and a read, write, or verify is issued, this column shows you the I/O request's starting Logical Block Address (LBA).

If we are able to determine which driver submitted the I/O request, the name of the driver will appear here. This field is not available under Windows Me.

NOTE: If we detect that the I/O is being sent directly to the port driver, bypassing the I/O stack, we place an "[x]" indicator to the right of the originator name. We can only detect this if busTRACE's Advanced Filtering option is enabled.

This column will show you up to the first eight bytes of data transfer. You can click on the column header to sort on this field if you like. If there are more than eight bytes available, "..." is appended to the end of the entry.

If dealing with storage class devices (e.g. hard drive, CD/DVD drive), and a read, write, or verify is issued, this column shows you the number of sectors requested by the I/O.

If dealing with storage class devices (e.g. hard drive, CD/DVD drive, etc.), and a check condition occurs, this column will show you three hex bytes. The first is the sense key followed by the sense code followed by the sense code qualifier.

If the I/O captured is a SCSI_REQUEST_BLOCK, this column would show you the SrbStatus field.

This column displays when the I/O started. You can customize how the I/O timing is displayed.

If the I/O captured is a SCSI_REQUEST_BLOCK, this column would show you the ScsiStatus field.

This column shows you whether the I/O hit a trigger point or not. If the I/O did hit a trigger point, a trigger icon appears in this column.

If a user comment is attached to a given I/O, floating the mouse over the list item will display a tool tip with that user comment. You can choose to view all user comments in their own column by selecting this option.