2 ms·
If you send your kernel logs to a syslog server you could get that pretty easily. From plugging a USB stick into my computer just now, then running dmesg:
by haldean 10y ago
If you send your kernel logs to a syslog server you could get that pretty easily. From plugging a USB stick into my computer just now, then running dmesg:
[14863.014481] usb-storage 2-4:1.0: USB Mass Storage device detected
...
[15045.488440] usb 2-4: USB disconnect, device number 34
They do, though, have quite a bit of pretty impressive logging!
- chx 10y agoIf I read this correctly at this point the machine was running Windows. I have zero doubts, however, that Windows has equivalent impressive logging, apparently the USB vendor and device ID pair was recorded as well.
- NamTaf 10y agoAbsolutely. The Windows Event Viewer logs heaps of stuff, and has heaps more you can enable. When I'm particularly lazy and forget to do my timesheet, I use it to look when I booted/shut/locked/unlocked down my work PC to get an idea of how long I worked. A cursory google search shows this for USB events: https://dfstream.blogspot.com.au/2014/01/the-windows-7-event-log-and-usb-device.html https://dfstream.blogspot.com.au/2014/01/the-windows-7-event...