Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Home› NTDEV

Before Posting...

Please check out the Community Guidelines in the Announcements and Administration Category.

More Info on Driver Writing and Debugging


The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.


Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/


Viewing TraceEvent Messages in WindDbg

ajitabhsajitabhs Member Posts: 96
in NTDEV

Hi Guys,
I am trying to debug my driver which has trace messages and the driver is installed on a remote system to which I do not have access. It is a driver which has all the TraceEvents. I do have all the TMH files. I have a debugger connection to the machine and I can put break points etc. I am trying to see the TraceEvent messages in WinDbg. I am trying to do this:-

https://learn.microsoft.com/en-us/windows-hardware/drivers/devtest/example-16--viewing-trace-messages-in-a-debugger

The problem is that with the latest SDKs I cannot find Traceprt.dll. Now sure what I am missing. I installed the latest debugging tools for windows and still not there.
What am I missing here?

Thanks
Aj

· Share on Facebook

Comments

  • Scott_Noone_(OSR)Scott_Noone_(OSR) Administrator Posts: 3,631

    I just confirmed this works for me and I didn't need that DLL. Steps:

    1. Copy tracelog.exe to the target system
    2. Create a guid.etl file with the GUID, flags, and level. I made mine look like this (i.e. just try to turn everything on):
      {79C04C13-1234-4DE7-911C-53F90811B72C};0xFFFFFFFF;255
    3. Enable the trace:
      tracelog -start MyTrace -guid guid.ctl -rt -kd
    4. Then the messages started coming out in the debugger without any further action

    -scott
    OSR

    · Share on Facebook
  • ajitabhsajitabhs Member Posts: 96

    Thank you Sir!! It works!!

    · Share on Facebook
Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. Sign in or register to get started.

Sign In Register
Upcoming OSR Seminars
OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!
Kernel Debugging 16-20 October 2023 Live, Online
Developing Minifilters 13-17 November 2023 Live, Online
Internals & Software Drivers 4-8 Dec 2023 Live, Online
Writing WDF Drivers 10-14 July 2023 Live, Online

Categories