I’m getting unexpected results when I use !wmitrace.bufdump and
!wmitrace.strdump:
1: kd> !wmitrace.bufdump
(WmiTracing)BufDump:
LoggerContext Array @ 0x81939B00 [0 Elements]
Logger Context QBFL Depth Number Available Size NPP Usage PP Usage
================ ========== ====== ========= ======== =========== ==========
================ ========== ====== ========= ======== =========== ==========
0 0 0 0 0
1: kd> !wmitrace.strdump
(WmiTracing)StrDump Generic
LoggerContext Array @ 0x81939B00 [0 Elements]
I’m expecting to see something that jives with what “tracelog -l”
gives me, which is about 20 logger sessions. I have
wmitrace.searchpath pointing to some tmf’s generated from my drivers
pdb.
My goal is to use WinDbg to get at the WMI tracing data that my driver
is logging via the autologger–something like what !wdfkd.wdflogdump
does for WDF.
Anybody able to point me in the right direction?
Might be a symbol loading problem. I would try to reload kernel symbols and try again.
(got this from Alexb)
-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Shawn Brooks
Sent: Monday, April 14, 2008 2:42 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] !wmitrace
I’m getting unexpected results when I use !wmitrace.bufdump and
!wmitrace.strdump:
1: kd> !wmitrace.bufdump
(WmiTracing)BufDump:
LoggerContext Array @ 0x81939B00 [0 Elements]
Logger Context QBFL Depth Number Available Size NPP Usage PP Usage
================ ========== ====== ========= ======== =========== ==========
================ ========== ====== ========= ======== =========== ==========
0 0 0 0 0
1: kd> !wmitrace.strdump
(WmiTracing)StrDump Generic
LoggerContext Array @ 0x81939B00 [0 Elements]
I’m expecting to see something that jives with what “tracelog -l”
gives me, which is about 20 logger sessions. I have
wmitrace.searchpath pointing to some tmf’s generated from my drivers
pdb.
My goal is to use WinDbg to get at the WMI tracing data that my driver
is logging via the autologger–something like what !wdfkd.wdflogdump
does for WDF.
Anybody able to point me in the right direction?
NTDEV is sponsored by OSR
For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars
To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
That was the very first thing I tried. No luck.
I googled the issue and came up with a few folks having the same
trouble, but no resolution.
Are my expectations reasonable at least?
On Mon, Apr 14, 2008 at 4:54 PM, Jose Sua wrote:
> Might be a symbol loading problem. I would try to reload kernel symbols and try again.
> (got this from Alexb)
dt nt!_WMI_LOGGER_CONTEXT and nt!_WMI_BUFFER_HEADER and check if it resolves correctly.
Alex
-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Shawn Brooks
Sent: Tuesday, April 15, 2008 7:31 AM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] !wmitrace
That was the very first thing I tried. No luck.
I googled the issue and came up with a few folks having the same
trouble, but no resolution.
Are my expectations reasonable at least?
On Mon, Apr 14, 2008 at 4:54 PM, Jose Sua wrote:
> Might be a symbol loading problem. I would try to reload kernel symbols and try again.
> (got this from Alexb)
—
NTDEV is sponsored by OSR
For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars
To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
Those symbols don’t resolve. Here’s my sympath:
X:\ProfilePack\output\chk_wlh_x86\i386;srv*c:\symbols*http://msdl.microsoft.com/download/symbols
On Tue, Apr 15, 2008 at 2:14 PM, Jose Sua wrote:
> dt nt!_WMI_LOGGER_CONTEXT and nt!_WMI_BUFFER_HEADER and check if it resolves correctly.
> Alex
Hi Jose & Alex,
Any thoughts on this problem?
On Wed, Apr 16, 2008 at 9:35 AM, Shawn Brooks wrote:
> Those symbols don’t resolve. Here’s my sympath:
>
> X:\ProfilePack\output\chk_wlh_x86\i386;srvc:\symbolshttp://msdl.microsoft.com/download/symbols
>
>
>
> On Tue, Apr 15, 2008 at 2:14 PM, Jose Sua wrote:
> > dt nt!_WMI_LOGGER_CONTEXT and nt!_WMI_BUFFER_HEADER and check if it resolves correctly.
> > Alex
>
Which version of the OS are you running ?
If an old copy of XP, then that could be the problem. The ETW symbols were not initially exported, this was solved some time ago.
-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Shawn Brooks
Sent: Wednesday, April 16, 2008 7:35 AM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] !wmitrace
Those symbols don’t resolve. Here’s my sympath:
X:\ProfilePack\output\chk_wlh_x86\i386;srv*c:\symbols*http://msdl.microsoft.com/download/symbols
On Tue, Apr 15, 2008 at 2:14 PM, Jose Sua wrote:
> dt nt!_WMI_LOGGER_CONTEXT and nt!_WMI_BUFFER_HEADER and check if it resolves correctly.
> Alex
—
NTDEV is sponsored by OSR
For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars
To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
Vista + SP1
On Mon, Apr 21, 2008 at 4:06 PM, Jose Sua wrote:
> Which version of the OS are you running ?
>
> If an old copy of XP, then that could be the problem. The ETW symbols were not initially exported, this was solved some time ago.
>
>
>
> -----Original Message-----
> From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Shawn Brooks
> Sent: Wednesday, April 16, 2008 7:35 AM
> To: Windows System Software Devs Interest List
> Subject: Re: [ntdev] !wmitrace
>
>
> Those symbols don’t resolve. Here’s my sympath:
>
> X:\ProfilePack\output\chk_wlh_x86\i386;srvc:\symbolshttp://msdl.microsoft.com/download/symbols
>
>
> On Tue, Apr 15, 2008 at 2:14 PM, Jose Sua wrote:
> > dt nt!_WMI_LOGGER_CONTEXT and nt!_WMI_BUFFER_HEADER and check if it resolves correctly.
> > Alex
>
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>
Hi Shawn, thanks for your patience.
We figure it out, there was change to the extension recently, and we just realized that it does not work with the public symbols.
We are working on fix, and getting this on the next version of the debugger, in the meantime the best option would be to use an older version of the extension. Older version of the debugger will have it.
Thanks
jose
-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Shawn Brooks
Sent: Monday, April 21, 2008 4:27 PM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] !wmitrace
Vista + SP1
On Mon, Apr 21, 2008 at 4:06 PM, Jose Sua wrote:
> Which version of the OS are you running ?
>
> If an old copy of XP, then that could be the problem. The ETW symbols were not initially exported, this was solved some time ago.
>
>
>
> -----Original Message-----
> From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Shawn Brooks
> Sent: Wednesday, April 16, 2008 7:35 AM
> To: Windows System Software Devs Interest List
> Subject: Re: [ntdev] !wmitrace
>
>
> Those symbols don’t resolve. Here’s my sympath:
>
> X:\ProfilePack\output\chk_wlh_x86\i386;srvc:\symbolshttp://msdl.microsoft.com/download/symbols
>
>
> On Tue, Apr 15, 2008 at 2:14 PM, Jose Sua wrote:
> > dt nt!_WMI_LOGGER_CONTEXT and nt!_WMI_BUFFER_HEADER and check if it resolves correctly.
> > Alex
>
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>
—
NTDEV is sponsored by OSR
For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars
To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer