New line in WPP trace

NTDEV
1

Hi

I am using WPP for debug my driver.
I want to print new line in the format string of the WPP trace,
But when I use " \n " in the format string
(something like: “first sentence \n second sentence” )
the WPP trace does not print the new line
(and we get : “first sentence second sentence”)

Does I need to do something special to print new line in WPP ?

10x
Yossi

2

That is the correct behavior.

We strip new lines from the format string.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Yossi Leybovich
Sent: Wednesday, February 14, 2007 12:11 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] New line in WPP trace

Hi

I am using WPP for debug my driver.
I want to print new line in the format string of the WPP trace,
But when I use " \n " in the format string
(something like: “first sentence \n second sentence” )
the WPP trace does not print the new line
(and we get : “first sentence second sentence”)

Does I need to do something special to print new line in WPP ?

10x
Yossi

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

3

I know you do this, would Microsoft consider an escape in the future to
allow a newline. I personally hate doing upto 5 entries, so that I do not
have a long line in WPP tracing.

–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
http://www.windrvr.com
Remove StopSpam from the email to reply

“Jose Sua” wrote in message
news:xxxxx@ntdev…
That is the correct behavior.

We strip new lines from the format string.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Yossi Leybovich
Sent: Wednesday, February 14, 2007 12:11 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] New line in WPP trace

Hi

I am using WPP for debug my driver.
I want to print new line in the format string of the WPP trace,
But when I use " \n " in the format string
(something like: “first sentence \n second sentence” )
the WPP trace does not print the new line
(and we get : “first sentence second sentence”)

Does I need to do something special to print new line in WPP ?

10x
Yossi

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

4

Ok,

What else would you like to see ?

Some users that are using WPP for diagnostics may want took at the Vista
ETW API which offers improved functionality.
Events are manifested, Localized, can flow to more than one trace
session, Improved control granularity with an Event Descriptor. On the
consumer side API for decoding events, or take action on the event type
and payload.

Thanks for the feedback Don

Jose

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Don Burn
Sent: Wednesday, February 14, 2007 9:41 AM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] New line in WPP trace

I know you do this, would Microsoft consider an escape in the future to
allow a newline. I personally hate doing upto 5 entries, so that I do
not
have a long line in WPP tracing.

–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
http://www.windrvr.com
Remove StopSpam from the email to reply

“Jose Sua” wrote in message
news:xxxxx@ntdev…
That is the correct behavior.

We strip new lines from the format string.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Yossi Leybovich
Sent: Wednesday, February 14, 2007 12:11 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] New line in WPP trace

Hi

I am using WPP for debug my driver.
I want to print new line in the format string of the WPP trace,
But when I use " \n " in the format string
(something like: “first sentence \n second sentence” )
the WPP trace does not print the new line
(and we get : “first sentence second sentence”)

Does I need to do something special to print new line in WPP ?

10x
Yossi

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

5

Jose Sua wrote:

Events are manifested, …

I know what all those words mean, but I have no idea what this phrase is
trying to say.

–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.

6

Thanks for the answer.
Its very uncomfortable when you want to use same macros both for debug
prints and WPP.
I would like to format our massages with \n and \t so this will be very
help full if you will add this support in the future.

Yossi

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Jose Sua
Sent: Wednesday, February 14, 2007 7:37 PM
To: Windows System Software Devs Interest List
Subject: RE: [ntdev] New line in WPP trace

That is the correct behavior.

We strip new lines from the format string.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Yossi
Leybovich
Sent: Wednesday, February 14, 2007 12:11 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] New line in WPP trace

Hi

I am using WPP for debug my driver.
I want to print new line in the format string of the WPP
trace, But when I use " \n " in the format string (something
like: “first sentence \n second sentence” ) the WPP trace
does not print the new line (and we get : “first sentence
second sentence”)

Does I need to do something special to print new line in WPP ?

10x
Yossi

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online
at http://www.osronline.com/page.cfm?name=ListServer

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online
at http://www.osronline.com/page.cfm?name=ListServer

7

Just one humble programmer’s opinion: that WPP features alternative
frameworks to replace essentially universal constructs like ‘\n’ does
not make me wish to learn to use it, whatever else it may offer. It
kind of just says “work.”

mm

>> xxxxx@mellanox.co.il 2007-02-14 13:28 >>>
Thanks for the answer.
Its very uncomfortable when you want to use same macros both for debug
prints and WPP.
I would like to format our massages with \n and \t so this will be
very
help full if you will add this support in the future.

Yossi

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Jose Sua
Sent: Wednesday, February 14, 2007 7:37 PM
To: Windows System Software Devs Interest List
Subject: RE: [ntdev] New line in WPP trace

That is the correct behavior.

We strip new lines from the format string.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Yossi
Leybovich
Sent: Wednesday, February 14, 2007 12:11 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] New line in WPP trace

Hi

I am using WPP for debug my driver.
I want to print new line in the format string of the WPP
trace, But when I use " \n " in the format string (something
like: “first sentence \n second sentence” ) the WPP trace
does not print the new line (and we get : “first sentence
second sentence”)

Does I need to do something special to print new line in WPP ?

10x
Yossi

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online
at http://www.osronline.com/page.cfm?name=ListServer

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online
at http://www.osronline.com/page.cfm?name=ListServer

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

8

“Martin O’Brien” wrote in message
news:xxxxx@ntdev…
> Just one humble programmer’s opinion: that WPP features alternative
> frameworks to replace essentially universal constructs like ‘\n’ does
> not make me wish to learn to use it, whatever else it may offer. It
> kind of just says “work.”
>
> mm
>

Martin,

You sound like a Lin-suck’s guy I know that refures to use Windows
because it uses backslash instead of slash! WPP is well worth trying, and
there are justifiable reasons for removing newlines, for instance being
able to grep for all patterns specific type.

I wish we could get you and others to sit down with Jose and have a
true feedback session. Unfortunately, Microsoft seems to have eliminated
those from WinHEC, since they got rid of BOF’s. This was the best reason
to go to the conference, and their elimination will probably mean I skip
this one after 10 years of attendance.

–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
http://www.windrvr.com
Remove StopSpam from the email to reply

9

> ----------

From: xxxxx@lists.osr.com[SMTP:xxxxx@lists.osr.com] on behalf of Don Burn[SMTP:xxxxx@acm.org]
Reply To: Windows System Software Devs Interest List
Sent: Wednesday, February 14, 2007 9:57 PM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] New line in WPP trace

You sound like a Lin-suck’s guy I know that refures to use Windows
because it uses backslash instead of slash! WPP is well worth trying, and
there are justifiable reasons for removing newlines, for instance being
able to grep for all patterns specific type.

No, it is different. There can be good reasons for removing newlines but the choice should be on programmer who can have even better reasons to leave them there. It is format string, anyway, and such a feature should be optional. We know better what you wanted to do…

Best regards,

Michal Vodicka
UPEK, Inc.
[xxxxx@upek.com, http://www.upek.com]

10

Don Burn wrote:

You sound like a Lin-suck’s guy I know that refures to use Windows
because it uses backslash instead of slash! WPP is well worth trying, and
there are justifiable reasons for removing newlines, for instance being
able to grep for all patterns specific type.

That’s silly. How does removing the newlines help with grepping in any
way? Indeed, it now means that my output does not match my input, so I
cannot simply search for the exact string that I presented.

I care greatly about how things look, even in my debug logs. If I want
to include newlines in my debug messages in order to have the display be
pretty and readable, that is my right, and there is NO LEGITIMATE REASON
why Windows should remove them. It is an arbitrary and senseless
decision that destroys what is otherwise a perfectly reasonable thing to do.

–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.

11

BOFs are still there, they just have a different name now. Something
like chalk talk or something non descriptive like that

d

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Don Burn
Sent: Wednesday, February 14, 2007 12:57 PM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] New line in WPP trace

“Martin O’Brien” wrote in message
news:xxxxx@ntdev…
> Just one humble programmer’s opinion: that WPP features alternative
> frameworks to replace essentially universal constructs like ‘\n’ does
> not make me wish to learn to use it, whatever else it may offer. It
> kind of just says “work.”
>
> mm
>

Martin,

You sound like a Lin-suck’s guy I know that refures to use Windows

because it uses backslash instead of slash! WPP is well worth trying,
and
there are justifiable reasons for removing newlines, for instance being
able to grep for all patterns specific type.

I wish we could get you and others to sit down with Jose and have
a
true feedback session. Unfortunately, Microsoft seems to have
eliminated
those from WinHEC, since they got rid of BOF’s. This was the best
reason
to go to the conference, and their elimination will probably mean I skip

this one after 10 years of attendance.

–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
http://www.windrvr.com
Remove StopSpam from the email to reply

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

12

Having been to a lot of conferences with Chalk Talks and BOF’s they are
significantly different (at least every situation I’ve seen). A BOF is a
two way feedback session which can and will wander almost anywhere, while a
chalk talk is a less formal presentation with some interaction (normally
constrained to the specifics of the talk). I’ve asked some of the folks
slated to do chalk talks this year at WinHEC and their idea of what it
means seems to be the same as mine.

It looks like the marketing droid’s have won this year, no BOF’s and so far
I have not heard of a lot of meat in the conference. Level 100 sessions
(no matter what level you call them) are important, but some of us want
something a little more techy.

–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
http://www.windrvr.com
Remove StopSpam from the email to reply

“Doron Holan” wrote in message
news:xxxxx@ntdev…
BOFs are still there, they just have a different name now. Something
like chalk talk or something non descriptive like that

d

13

> That’s silly. How does removing the newlines help with grepping in any

way? Indeed, it now means that my output does not match my input, so I
cannot simply search for the exact string that I presented.

From all these discussion on WPP on the forum I can conclude the following:

  • WPP is a major nuisance which requires, after all, to pass your sources
    through some preprocessor before build. Installation nuisances also follow.
  • WPP reduces the developer productivity a lot and is a major issue generator.
  • so, for me, the solution of 2-screen code which calls
    IoAllocateErrorLogEntry/IoWriteErrorLogEntry is MUCH better.
  • the logging level can be adjusted by the DWORD bitmask in the registry.

Looks like such solution is by far better then WPP, which is one another
useless MS’s technology.

My opinion on MS is good, but they sometimes produce useless monsters.

–
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

14

Comments inline:

“Maxim S. Shatskih” wrote in message
news:xxxxx@ntdev…
> From all these discussion on WPP on the forum I can conclude the
> following:
>
> - WPP is a major nuisance which requires, after all, to pass your sources
> through some preprocessor before build. .

So you have to add one line to the sources file, I don’t consider that a
lot of work.

> Installation nuisances also follow

What installation nuisances?

> - WPP reduces the developer productivity a lot and is a major issue
> generator.

Sorry, I find it is a productivitiy enhancer, since it allows me the
equivalent of KdPrint without the performance penalties, without the code
bloat, and without my customer seeing my spew.

> - so, for me, the solution of 2-screen code which calls
> IoAllocateErrorLogEntry/IoWriteErrorLogEntry is MUCH better.

Event logging has nothing to do with WPP. Event logging is a diagnostic
for administrators that should be in most drivers. WPP is a developer
diagnostic, that can be turned on at a customer site when needed.

> - the logging level can be adjusted by the DWORD bitmask in the registry.

And I hope you document it, and don’t spew superfulous crap into the event
log. The worst shit you can do with an event log is spew, since I have
encounted drivers that spew so much, that it wraps the circular log, and
the important event that cause my system problems is lost with worthless
messages.

> Looks like such solution is by far better then WPP, which is one another
> useless MS’s technology.

Gee totally different things, and even if you abuse the event log, you have
the small message limit, all posts at PASSIVE_LEVEL, and a lot of overhead
in comparison.

> My opinion on MS is good, but they sometimes produce useless monsters.

Max, you obviously have never tried WPP tracing.

–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
http://www.windrvr.com
Remove StopSpam from the email to reply

15

> And I hope you document it, and don’t spew superfulous crap into the event

log. The worst shit you can do with an event log is spew, since I have
encounted drivers that spew so much, that it wraps the circular log, and
the important event that cause my system problems is lost with worthless
messages.

Correct. The bits in this registry word will only be set by customer request to
debug an issue.

–
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

16

DON:

On this subject - debugging tools - , you are correct. In no way am I
saying that my response is reasonable or really even based on anything
other than impatience, however, it is what it is, and this is basically
just the result of inertia. I am not like this with all technologies,
but I’m very narrow when it comes to anything that gets near the subject
of debugging tools, because they are more or less the only thing I
really depend on, and on this subject the perception that something like
WPP will require a significant change in habit just makes the idea of
researching switching pretty unappealing, considering that virtually all
of my work is solo development of tools for internal R&D. I realize
that my case is not what WPP was really designed for, but I still like
to consider new ideas, but, the initial inconvenience level has to be
pretty low for me to be willing for me to be willing to do the right
thing over just using tracing.

>> xxxxx@acm.org 2007-02-14 15:57 >>>

“Martin O’Brien” wrote in message
news:xxxxx@ntdev…
> Just one humble programmer’s opinion: that WPP features alternative
> frameworks to replace essentially universal constructs like ‘\n’
does
> not make me wish to learn to use it, whatever else it may offer. It
> kind of just says “work.”
>
> mm
>

Martin,

You sound like a Lin-suck’s guy I know that refures to use
Windows
because it uses backslash instead of slash! WPP is well worth trying,
and
there are justifiable reasons for removing newlines, for instance being

able to grep for all patterns specific type.

I wish we could get you and others to sit down with Jose and
have a
true feedback session. Unfortunately, Microsoft seems to have
eliminated
those from WinHEC, since they got rid of BOF’s. This was the best
reason
to go to the conference, and their elimination will probably mean I
skip
this one after 10 years of attendance.

–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
http://www.windrvr.com
Remove StopSpam from the email to reply

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

17

As far as I am concerned, all I wanted from WPP was a generic implementation
of a virtual console for capturing runtime trace information in a flexible
efficient manner, ideally a solution that one had a reasonable hope would be
retrievable from a crash dump. The solution provided is too complicated and
too incompatible with DebugPrint to be widely adopted. Some of us have been
pointing this out for years now, and not getting very far. Many of us will
instead continue to use our own custom solutions.

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:bounce-278202-
xxxxx@lists.osr.com] On Behalf Of Don Burn
Sent: Wednesday, February 14, 2007 3:57 PM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] New line in WPP trace

“Martin O’Brien” wrote in message
> news:xxxxx@ntdev…
> > Just one humble programmer’s opinion: that WPP features alternative
> > frameworks to replace essentially universal constructs like ‘\n’ does
> > not make me wish to learn to use it, whatever else it may offer. It
> > kind of just says “work.”
> >
> > mm
> >
>
> Martin,
>
> You sound like a Lin-suck’s guy I know that refures to use
> Windows
> because it uses backslash instead of slash! WPP is well worth trying,
> and
> there are justifiable reasons for removing newlines, for instance being
> able to grep for all patterns specific type.
>
> I wish we could get you and others to sit down with Jose and
> have a
> true feedback session. Unfortunately, Microsoft seems to have
> eliminated
> those from WinHEC, since they got rid of BOF’s. This was the best
> reason
> to go to the conference, and their elimination will probably mean I
> skip
> this one after 10 years of attendance.
>
>
> –
> Don Burn (MVP, Windows DDK)
> Windows 2k/XP/2k3 Filesystem and Driver Consulting
> http://www.windrvr.com
> Remove StopSpam from the email to reply
>
>
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer

18

Hi

From my experience with WPP it is very helpful and powerful tool.
I use it not just for tracing but also to debug my code.
We wrote whole bunch of networking drivers that ran in 10Gbs and in
order to debug races and scenarios that happen when there is
traffic load I found it very helpful to use WPP (and I think it’s the
only way I can see output without loosing performance).

I can collect my traces by traceview or by dbgview with few simple
scripts and I don’t think it is nuisance.
It also enable us to debug problems on the client site without switching
any drivers.
(just send him script that collect the traces and let him ran his test)

I don’t think that event log is the right tool for tracing or debugging
specially not when you debug networking events in 10Gbs.

We use the same macros for chk version (that use DbgPrint ) and for fre
version that use WPP.
So we encounter few cases that WPP act differently from the regular
dbgprint

  1. is the removing of \n from the string format 0 I think MS should fix
    that (and that was the reason for that mail thread).
  2. us the WPP from with in macros
    for example:
    in the dbg print I have 2 macros
    DBG_PRINT(msg) —> print the msg
    DBG_EXIT() —> to trace exit from
    function (print “<=====”)
    II also create macro that print msg and exit function
    DBG_PRINT_EXIT(msg) ----> print the msg and that
    in new line print “<=====”
    I did not find any way to port this macro to WPP.
    Maybe there should be a way to ran preprocessor before the WPP
    preprocessor so one can use WPP from within macros.

Thanks
Yossi

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Maxim
S. Shatskih
Sent: Thursday, February 15, 2007 12:11 AM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] New line in WPP trace

> That’s silly. How does removing the newlines help with grepping in
> any way? Indeed, it now means that my output does not
match my input,
> so I cannot simply search for the exact string that I presented.

>From all these discussion on WPP on the forum I can conclude
the following:

  • WPP is a major nuisance which requires, after all, to pass
    your sources through some preprocessor before build.
    Installation nuisances also follow.
  • WPP reduces the developer productivity a lot and is a major
    issue generator.
  • so, for me, the solution of 2-screen code which calls
    IoAllocateErrorLogEntry/IoWriteErrorLogEntry is MUCH better.
  • the logging level can be adjusted by the DWORD bitmask in
    the registry.

Looks like such solution is by far better then WPP, which is
one another useless MS’s technology.

My opinion on MS is good, but they sometimes produce useless monsters.

–
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online
at http://www.osronline.com/page.cfm?name=ListServer

19

I am someone who would quite like to exploit WPP in some of my drivers.
Unfortunately I like to use WMI for other purposes. The WPP preprocessor
assumes it is the sole user of WMI. So implementing WPP in my drivers is an
awful lot of work, which I have not got around to doing yet. There is a useful
OSR article which would help with this.

So I am not a fan of WMI yet.

In a driver a long time ago I used WPP to do some heavyweight tracing. From
this I learned that lightweight WMI tracing (which WPP is) has a couple of
problems to look out for.

  1. Blocks can arrive out of order.
  2. Blocks can go missing.
    The fault was partly with my user mode reading app (it sorted, obviously but I
    never managed to get all the blocks).
20

I do not think that is true. I have drivers that use both WMI and WPP
without issues (other than the discussed over complexity of WPP itself.)

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:bounce-278272-
xxxxx@lists.osr.com] On Behalf Of xxxxx@dsl.pipex.com
Sent: Thursday, February 15, 2007 5:18 AM
To: Windows System Software Devs Interest List
Subject: RE: [ntdev] New line in WPP trace

I am someone who would quite like to exploit WPP in some of my drivers.
Unfortunately I like to use WMI for other purposes. The WPP
preprocessor
assumes it is the sole user of WMI. So implementing WPP in my drivers
is an
awful lot of work, which I have not got around to doing yet. There is a
useful
OSR article which would help with this.

So I am not a fan of WMI yet.

In a driver a long time ago I used WPP to do some heavyweight tracing.
From
this I learned that lightweight WMI tracing (which WPP is) has a couple
of
problems to look out for.

  1. Blocks can arrive out of order.
  2. Blocks can go missing.
    The fault was partly with my user mode reading app (it sorted,
    obviously but I
    never managed to get all the blocks).

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer