When using the annotated marker funktion in WPR it doesn't show up in WPA in the cpu usage graph. What am i doing wrong?
↧
Annotated marker doesn't show in WPA
↧
Difference between "Known Activities Preventing DRIPS" and "Activities Preventing DRIPS"?
In WPA, it appears that the DRIPS graphs "Known Activities Preventing DRIPS" and "Activities Preventing DRIPS" are the same, but I'm assuming that the developer wouldn't have created an extra graph without some purpose. So, what is the difference between the two? When should one be used over the other?
-Brian
Azius Developer Training www.azius.com Windows device driver, internals, security, & forensics training and consulting. Blog at www.azius.com/blog
↧
↧
WDM driver
Hello,
Can anyone point me how to collect trace using WPR for a non-Microsoft driver? I would like to understand how much duration the IO takes inside my driver
Thanks,
Srini
↧
Can't open ETL files in WPA
I'm logged in to Win 10 r1903 as Admin, but can't open any ETL files in WPA with "access denied" error, despite run WPA as Admin. I can't also change ownership of any ETL file in itsProperties-Security-Advanced, and current owner is Unknown. When clicking Change Owner link, it switches to "You do not have permission" tab without showingChoose New Owner prompt. It happens only with ETL files, owner on other system files and folders I tried can be changed.
If WPA is aimed at viewing ETL files, why its unable to open them when run as Admin?
↧
Load Symbols Grayed Out
I tried to use WPA (10.0.18965.1000) to open a etl file. But under Trace menu both "Load Symbols" and "Configure Symbol Paths" are grayed out. I have both _NT_SYMBOL_PATH and _NT_SYMCACHE_PATH set as system variables.
_NT_SYMBOL_PATH=srv*D:\symbols*https://msdl.microsoft.com/downloads/symbols
_NT_SYMCACHE_PATH=D:\SymCache
Is there anything wrong? How to resolve this issue? Thanks.
↧
↧
WPA UI opens an ETL file but screen is completely gray.
I can't remember what I did, but now I can't see any provider information on the left column for Graph Explorer. It is blank. The ETL I loaded is one I just collected using WPR UI. Any suggestions on how to reset my profile or config to get this back. I tried reinstall of ADK but it didn't help. Seems like some registry entry got changed.
Thanks
Suraj
↧
windows performanace toolkit v5
how to start
↧
Svchost.exe is the fault.
I've just installed WPT because I have plenty of faults & warnings via Event Viewer and would like to trace them.
This is an example of three logged next to each other...
ERROR: "faulting application name svchost_wuauserv"
ERROR: "The Windows Update Service Terminated Unexpectedly"
WARNING: "Display Driver amdkmdap stopped responding and has successfully recovered"
I have no option to trace the svchost file? or can't see if the trace is active. Should I be tracing something else?
I'm not really sure what path I should be tracing in the Windows\system32
↧
How to get a contiguous trace using PerfSet, PerfInc and PerfDec calls
My code looks like this
PerfCreateInstance(); // Create the Object instance
PerfSetULongLongCounterValue(NewData); // Set a value say 100
OldData = NewData;
while(1) {
if (NewData > OldData) {
PerfIncrementULongLongCounterValue(NewData - OldData);
OldData = NewData;
}
if (NewData < OldData) {
PerfDecrementULongLongCounterValue(OldData - NewData);
OldData = NewData;
}
if (NewData == OldData) {
PerfSetULongLongCounterValue(NewData);
OldData = NewData;
}
} // end of while loop
My values are all ULONGLONG. I get a perfect smooth trace. However
Whenever NewData == OldData and I do PerfSetULongLongCounterValue(NewData); I get all broken traces.
I did try by doing simply calling PerfSetULongLongCounterValue() for all values without bothering to check for the old value or doing INC or DEC operation and that resulted in even bad broken trace form. Could some kind soul point me out what part of the logic is wrong in my code?
thanks
ananda
↧
↧
need confermation
i am from Pakistan and i got a message from a number the is "YOU HAVE BEEN AWARDED OF £8000,000 POUNDS IN THE 2020 UK MICROSOFT MOBILE DRAW TO CLAIM UR PRIZE SEND YOUR NAME, AGE AND MOBILE# TO: microuk2@outlook.com "
is this true or fake. Should i give them information or not?
↧
Hardware Counters in Custom WPR Profiles
I would like to add hardware counters (to let cache misses or branch mispredictions appear in WPA) to a custom wpr profile. The only related information I could find by now are the suggestions made by VS after adding the windows performance recorder profile scheme. Hardware counter seems to be configurable but I could not find a way yet to configure it correctly.
Here is what I've tried so far
<?xml version="1.0" encoding="utf-8" standalone='yes'?><WindowsPerformanceRecorder Version="1.0" Author="Lars Kleen" Team="Motor" Company="Steinberg Media Technologies GmbH" Copyright="Steinberg Media Technologies GmbH" Tag="Media;Audio"><Profiles><SystemCollector Id="TestCollector" Name="NT Kernel Logger"><BufferSize Value="1024"/><Buffers Value="256"/><StackCaching CacheSize="1024" BucketCount="64"/></SystemCollector><HardwareCounter Id="TestCounter"><Counters><!-- try with output of 'tracelog -profilesource help--><Counter Value="10"/><Counter Value="CacheMisses"/><!-- try stuff from performace monitor suggestions when creating data collector sets --><Counter Value="\Processor\(*)\*"/></Counters></HardwareCounter><Profile Id="SteinbergProfile.Verbose.Memory" LoggingMode="Memory" Name="SteinbergProfile" DetailLevel="Verbose" Description="TEST"><ProblemCategories><ProblemCategory Value="MMCSS"/></ProblemCategories><Collectors><SystemCollectorId Value="TestCollector"><SystemProvider Id="system-provider"><Stacks><Stack Value="CSwitch"/></Stacks></SystemProvider> <HardwareCounterId Value="TestCounter"><SampledCounters Operation="Add"><SampledCounter Value="\Processor\(*)\*" Interval="1221"/> <!-- interval valid --><SampledCounter Value="CacheMisses"/> <!-- interval not valid --><!--<SampledCounter Value="10" Interval="1221"/>--><!--<SampledCounter Interval="2000" Value="CacheMisses"/>--></SampledCounters></HardwareCounterId></SystemCollectorId></Collectors></Profile></Profiles><TraceMergeProperties><TraceMergeProperty Id="TraceMerge_Default" Name="TraceMerge_Default" Base=""><DeletePreMergedTraceFiles Value="true"/><CustomEvents><CustomEvent Value="ImageId"/><CustomEvent Value="BuildInfo"/><CustomEvent Value="VolumeMapping"/><CustomEvent Value="EventMetadata"/><CustomEvent Value="PerfTrackMetadata"/><CustomEvent Value="WinSAT"/><CustomEvent Value="NetworkInterface"/></CustomEvents></TraceMergeProperty></TraceMergeProperties></WindowsPerformanceRecorder>How is it configured correctly?
↧
Documentation for Keywords/Stacks in Custom WPR Profiles
When the xml scheme for custom WPR profiles defines some values for keywords and stacks. Some of the values allow to make a guess what they enable others don't but you never know exaclty what it is supposed to do. If it is added to the stacks section it
should generate a call stack but it could also generate a stack if added to the Keywords section.
Examples
<stack Value="CSwitch"/>
Thread Context Switch: allows analysis of thread behavior with call stacks
<Keyword Value="Memory"/>
Memory Analysis? It also adds Thread Context Switches with call stacks but no information when memory is allocated or freed.
<?xml version="1.0" encoding="utf-8" standalone='yes'?><WindowsPerformanceRecorder Version="1.0" Author="Lars Kleen" Team="Motor" Company="Steinberg Media Technologies GmbH" Copyright="Steinberg Media Technologies GmbH" Tag="Media;Audio"><Profiles><SystemCollector Id="TestCollector" Name="NT Kernel Logger"><BufferSize Value="1024"/><Buffers Value="256"/><StackCaching CacheSize="1024" BucketCount="64"/></SystemCollector><Profile Id="SteinbergProfile.Verbose.Memory" LoggingMode="Memory" Name="SteinbergProfile" DetailLevel="Verbose" Description="Keywords Test"><ProblemCategories><ProblemCategory Value="MMCSS"/></ProblemCategories><Collectors><SystemCollectorId Value="TestCollector"><SystemProvider Id="system-provider"><Keywords><Keyword Value="Memory"/><!--<Keyword Value="SpinLock"/>--></Keywords><!--<Stacks><Stack Value="HeapAllocation"/><Stack Value="HeapCreate"/><Stack Value="HeapFree"/><Stack Value="CSwitch"/><Stack Value="HeapDestroy"/><Stack Value="PmcInterrupt"/><Stack Value="PagefaultHard"/><Stack Value="CSwitch"/><Stack Value="DpcEnqueue"/><Stack Value="DpcExecute"/><Stack Value="ReadyThread"/></Stacks>
--></SystemProvider> </SystemCollectorId></Collectors></Profile></Profiles><TraceMergeProperties><TraceMergeProperty Id="TraceMerge_Default" Name="TraceMerge_Default" Base=""><DeletePreMergedTraceFiles Value="true"/><CustomEvents><CustomEvent Value="ImageId"/><CustomEvent Value="BuildInfo"/><CustomEvent Value="VolumeMapping"/><CustomEvent Value="EventMetadata"/><CustomEvent Value="PerfTrackMetadata"/><CustomEvent Value="WinSAT"/><CustomEvent Value="NetworkInterface"/></CustomEvents></TraceMergeProperty></TraceMergeProperties></WindowsPerformanceRecorder>
My question is: Where can I find a documentation which allows me to create a custom wpr profile with keyword and/or stack entries which puts me in the position toknow (in the best case exactly) what I'm doing?
↧
windows 10 update
Windows ten creation tool to usb failed to install on usb on errors error codes 0x80042912-0xA001B can anyone give me advice on this. Want to update to1903 from 1703 but have failed to do so because it fails on 2nd boot so was trying clean install.
but could not because could not get image on usb?
↧
↧
I am not able to profile the heap usage from WPA
hi there..
I have purposely made a memory leak issue by called GlobalAlloc(or HeapAlloc) and never free it in my dll library of WIN8.
Then, I enable the additional profile setting "heap usage" for more performance recording before starts the WPR logging, and save an etl file after my scenario.
When I used WPA to open it with symbols loaded and look into the graphic explorer, I can't see any of the heap usage profiling data(graphics) in it. therefore, I am not capable to trace my issue since then.
can any of you give me some clue to fix this out?
↧
WPRP files for default profiles?
Hello there, I'm struggling with the WPRP file format and wondered whether there is any way to get WPRP files for the default profiles? That would simplify everything by a lot, since I guess most people start with a default one and then want to modify that.
Thanks! :)
↧
anyone know of a safe place to get a download for a trace file?
anyone know of a safe place to get a download for a trace file?
↧
WPR GUI on App Store
Great to see WPA on Win10 App Store. So much easier to stay up to date! How about also installing Windows Performance Recorder? I know wpr.exe is now part of Win10, but the GUI is so much more usable and discoverable.
Best, Michael
↧
↧
Windows Performance Analyzer - CPU Usage (Sampled) not showing up
Just installed WPK, I wanted to find the reason for high system CPU usage following this guide from years ago, I can't link it but it's from superuser.com "Troubleshoot High CPU usage by the 'system' process".
Rebooted my computer, ran WPR and no sampled graph. I can see that it is enabled in windows>select table(experimental) menu. My system CPU usage is constantly over 50% and I need to find out why. My computer is running the latest version of Windows 10.
Thanks!
↧
CPU Usage (Sample) not being shown.
Hi,
I'm developing a windows driver using Visual Studio and the WDK. Now, I'm in the process of profiling the code to solve some bottlenecks.
I used the tool Windows Performance Recorder to trace CPU usage. For now I'm only tracing CPU usage only.
In that machine the item CPU Usage has two items (among others). One is called "CPU Usage (Sampled)" and another called "CPU Usage (Precise)"
I need to use the sampled version, one reason it allows me to show the stack in a more easy way.
I have another machine where I debug and install the driver(I don't use the same machine for a number of reasons like debugging). So for doing the analyzisis I downloaded the stand alone version of the product. But, after tracing the CPU usage the report
only contains the "CPU Usage (Precise)", the Sampled version is missing.
Do you guys know what could be happening?
Thanks in advance.
I attach screen shot of what I see in WPA.
Martin
↧
Windows Performance Analyzer --Pool graphs not there
I'm using WPA to diagnose a memory leak on a unknown driver. I have over 5gb in non paged pool memory (which I suspect is a driver). I have used xperf to create a file for WPA but when I open the file in WPA and I open the memory section, only Memory utilization,
hard faults, and virtual memory snapshots appear. I'm new to using WPA however the videos I watched show people doing the same thing as me and able to see the pool graphs. I need to view the pool graph so I can see what driver and processes are behind a specific
pool tag.
Here is the xperf command I ran as admin:
xperf -on Base+CSwitch+POOL -stackwalk PoolAlloc+PoolAllocSession -PoolTag ADNI -BufferSize 1024 -MaxBuffers 1024 -MaxFile 1024 -FileMode Circular
↧