The extension did not used to work on XP, because the required symbols in XP were not exported with the public symbols.
That problem was solved about a year ago, and it should be working because the recent versions of the public symbols do have the required symbols the extension is looking for.
You can always try boot time tracing on XP, take a look at MSDN.
http://msdn2.microsoft.com/en-us/library/ms797172.aspx
-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Martin O’Brien
Sent: Friday, December 28, 2007 9:26 PM
To: Kernel Debugging Interest List
Subject: Re:[windbg] why can’t i get wpp Trace output not written to disk before a system crash?
I can’t say that I really know the answer to this problem; I personally
avoid ETW/WPP like the plauge. However, to the best of my knowledge,
ETW is not supported pre-Vista/Longhorn, so it seems very unlikely that
the symbols which it seeks (nt!Etw…) would exist on XP.
Unfortunately, this isn’t very helpful; I guess all I am really saying
is that on this one, I would personally not beat my head against the
wall to get it working without getting confirmation from someone who has
knowledge of the implementation of the extension or has otherwise
performed this on XP, because it looks the extension is asking for
things that don’t make sense on XP.
Good luck,
mm
likeosr wrote:
I added wpp to fs project(windows xp).when system crashed, I wanted to
get the wpp Trace output via windbg.but I failed.
(1)
windbg version: 6.5.0003.7.
kd> .sympath
Symbol search path is:
srv*DownstreamStore*http://msdl.microsoft.com/download/symbols
kd> !load wmitrace
kd> !wmitrace.strdump
(WmiTracing)StrDump Generic
LoggerContext Array @ 0x8055AD80 [64 Elements]
Logger Id 2 @ 0x80F9E000 Named ‘’
kd> !wmitracelogsave 2
WMI Trace Save: Debugger Extension. LoggerId = 2, Save File = ‘LogData.elg’
LoggerMode is 0
unable to get NT!EtwCPUSpeedInMHz
unable to get NT!EtwpBootTime
unable to get NT!EtwPerfFreq
Unable to determine buffer mechanism. Check for complete symbol
availability
Saved 0 Buffers
kd> lm
start end module name
804d8000 806ce100 nt (pdb symbols)
DownstreamStore\ntkrnlpa.pdb\BD8F451F3E754ED8A34B50560CEB08E31\ntkrnlpa.pdb
806cf000 806ef380 hal (deferred)
…
(is there no symbol of NT!EtwCPUSpeedInMHz?where can i find it?)
(2)
windbg version: 6.8.0004.0
kd> !load wmitrace
kd> !wmitrace.strdump
(WmiTracing)StrDump Generic
LoggerContext Array @ 0x8055AD80 [0 Elements]
kd> !wmitrace.logsave 2 c:\like.txt
WMI Trace Save: Debugger Extension. LoggerId = 2, Save File = ‘c:\like.txt’
Failed to Find Logger
Is there somthing wrong with my methods?
You are currently subscribed to windbg as: xxxxx@windows.microsoft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com