!wmitrace.logdump

The !wmitrace.logdump extension displays the contents of the trace buffers for a trace session in the Debugger Command window. You can limit the display to trace messages from specified providers.

Syntax

!wmitrace.logdump [LoggerID] [GUIDFile]

Parameters

LoggerID

Identifies the trace session. Logger ID is an ordinal number that the system assigns to each trace session on the computer. The default value is 1.

GUIDFile

Displays only trace messages from providers specified in the GUIDFile file. GUIDFile represents the path (optional) and file name of a text file that contains the control GUIDs of one or more trace providers, such as a .guid or .ctl file.

DLL

Comments

Trace session buffers store trace messages until they are flushed to a log file or to a trace consumer for a real-time display. The !wmitrace.logdump extension displays the contents the buffers that are in physical memory. The display appears in the Debugger Command window.

Before using this extension, use !wmitrace.searchpath or !wmitrace.tmffile to specify trace message format files. The system uses the trace message format files to format the binary trace messages in the buffers so that they can be displayed as human-readable text.

When you use Tracelog to start a trace session with circular buffering (‑buffering), use this extension to display the buffer contents.

To find the logger ID of a trace session, use Tracelog to list the trace sessions and their basic properties. The command is tracelog -l.

Additional Information

For a conceptual overview of event tracing, see the Microsoft Windows SDK. For information about Tracelog, see "Tracelog" in the Windows Driver Kit (WDK).