Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.

More Info on Driver Writing and Debugging

The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.

Check out The OSR Learning Library at:

capture WPP traces of PCI.sys

joyjit_mullickjoyjit_mullick Member Posts: 28

Hi All,

a)related to wdi driver ...interface PCIE
b)issue device suddenly receive surprise remove after resume from d3 state.

want to fetch the traces of pci.sys to understand or dig deep into this issue

however cant get the wpp traces for the same ..
tried so far ..fetched the pci.pdb symbol files -->generated tmf files ---> but cant get the .mof file and so cant find the GUID of the driver, but the same way i could get the mof file for usbhub3

if any further steps suggested in this regard( to fetch the trace logs of pci.sys) will help surely

thanks in advance


  • Scott_Noone_(OSR)Scott_Noone_(OSR) Administrator Posts: 3,300

    Not sure about regular WPP traces. However, pci.sys uses the WPP Recorder so you can use !rcdrkd.rcdrlogdump pci to dump the in memory log.

    By default you get everything but you can filter to the bus level using !pcitree. Just find the bus you want and click the FDO Ext link in the output. For example:

    1: kd> !pcitree
      Bus 0x3 (FDO Ext ffffa1847f1ee650)
        (d=0,  f=0) 10000054 devext 0xffffa1847f358270 devstack 0xffffa1847f358120 0107 Mass Storage Controller/Unknown Sub Class
    1: kd> !devext ffffa1847f1ee650
    FDO Extension, Bus 0x3, PDO 0xffffa1847f0b7360  Bus is a child of FDOX 0xffffa1847f2d61d0, Bus 0x0
      Bus PNP logs:   !rcdrkd.rcdrlogdump pci -a ffffa1847f20f000
      Bus Power logs: !rcdrkd.rcdrlogdump pci -a ffffa1847f35e000


  • joyjit_mullickjoyjit_mullick Member Posts: 28

    hi Scott,

    thanks a ton i will try this method

Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Upcoming OSR Seminars
OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!
Kernel Debugging 30 Mar 2020 OSR Seminar Space
Developing Minifilters 15 Jun 2020 LIVE ONLINE
Writing WDF Drivers 22 June 2020 LIVE ONLINE
Internals & Software Drivers 28 Sept 2020 Dulles, VA