Prev: Query: How to add a checkbox control in Tab [ Win 32 project, None MFC/.NET ]
Next: disconnection from internet
From: jczernia on 6 Jan 2010 09:22
Hi
I have simple driver which produces WPP logs. It works fine using
TraceView tool and I can see logs produced by driver. But I wish to
develop my own WPP consumer app. I found in Win7 SDK two source code
samples Tracelog and Wppdumper. I run Tracelog to start new trace for
specific provider (used WPP Guid from driver) and it seems that works
fine (I can see the trace session in MMC console, Reliability and
Performance snap-in, and in properties see valid provider GUID). I run
the Tracelog sample with default settings (didn't touch the code). The
problem is that .etl file which is produced seems to be damaged and/or
event logs and not captured correctly. Can't read the logs from file
neither by Wppdumper nor Traceview (using open existing Logfile
feature). I suppose the issue is that Tracelog works with ETW and I am
trying to capture WPP, but in other hands TraceView which creates
Trace Session with the same properties as TraceLog can read WPP logs
correctly and produce .etl log readable by Wppdumper. I googled the
web, didn't find any example of specific WPP controller. Where is my
mistake?
Thank you in advance
jacek
 | 
Pages: 1
Prev: Query: How to add a checkbox control in Tab [ Win 32 project, None MFC/.NET ]
Next: disconnection from internet