Reading a WPP with TDH

NTDEV
1

Hi all,

I’m trying to read an WPP event with the TDH sample that comes with Vista
SDK and it simply reports element not found.
Using Regmon I have a trace of the tdhGetEventInformation() API accessing
the registry looking for a key based on the Provider guid
{68FDD900-4A3E-11D1-84F4-0000F80464E3}

So, can anyone help me with this, I know this is a Driver oriented
newsgroup, but this is the plane where I got some
answers to my WPP questions…

Thanks

Cláudio Albuquerque

2

WPP case:
TRACE_EVENT_INFO->DecodingSource == DecodingSourceWPP tell you that its WPP.

You also need to provide a path to the TMF files.

The easiest way to do this is setting the environment variable TRACE_FORMAT_SEARCH_PATH.

Then you need to get every property for the WPP event from the event using TdhGetProperty.

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Cl?udio Albuquerque
Sent: Monday, February 26, 2007 10:15 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] Reading a WPP with TDH

Hi all,

I’m trying to read an WPP event with the TDH sample that comes with Vista
SDK and it simply reports element not found.
Using Regmon I have a trace of the tdhGetEventInformation() API accessing
the registry looking for a key based on the Provider guid
{68FDD900-4A3E-11D1-84F4-0000F80464E3}

So, can anyone help me with this, I know this is a Driver oriented
newsgroup, but this is the plane where I got some
answers to my WPP questions…

Thanks

Cl?udio Albuquerque

Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer