Questions tagged [windows-wpp]

Windows Software Trace Preprocessor (WPP preprocessor)

The Windows software trace preprocessor (abbreviated WPP; the preprocessor and related support tools are known as WPP Software Tracing) is a preprocessor that simplifies the use of WMI event tracing to implement efficient software tracing in drivers and applications that target Windows 2000 and later operating systems.

WPP was created by Microsoft and is included in the Windows DDK. Although WPP is wide in its applicability, it is not included in the Windows SDK, and therefore is primarily used for drivers and driver support software produced by software vendors that purchase the Windows DDK

16 questions
3
votes
0 answers

Macro aliases for WPP tracing

I started using WPP for tracing in my driver. I defined the macro DoTraceLevelMessage in order to support log level (similar to TraceDrv sample code). My tracing code looks like this: DoTraceLevelMessage(TRACE_LEVEL_INFORMATION, DEFAULT_FLAG,…
michael
  • 530
  • 4
  • 16
2
votes
0 answers

Logman flush buffers to file periodically

I am troubleshooting NDIS miniport filter driver causing BSOD randomly. I enabled driver verifier for my driver. I am also trying to collect my driver trace logs by logman using the following command - logman create trace myndis -p {MY_GUID} -ct…
Mahesh
  • 34,573
  • 20
  • 89
  • 115
2
votes
1 answer

Change of behavior of tracewpp between versions 10.0.15063.0 and 10.0.17134.0 of Windows SDK

I have an application relying on user mode tracing via wpp framework. However, Microsoft introduced some changes in the couple of latest version of Windows SDK which broke the tracewpp.exe tool somehow. The actual problem I'm seeing looks as…
1
vote
0 answers

Enable WPP tracing in a CMake generated Visual Studio project

I have a C++ dll project, that is generated from a CmakeLists.txt file, that looks something like this (using Visual Studio 2019): cmake_minimum_required (VERSION 3.23) include(CMakeParseArguments) project(test_sln) set(CMAKE_GENERATOR_TOOLSET…
user2281752
  • 145
  • 1
  • 9
1
vote
1 answer

UMDF PnP Driver creates no trace logs

Im trying to create trace log messages for this Idd Sample Driver. I am following this document. I add WPP_INIT_TRACING(pDriverObject, pRegistryPath) to the DriverEntry, and WPP_CLEANUP(pDriverObject)to the…
vulkur
  • 21
  • 5
1
vote
1 answer

Unresolved external symbol WppAutoLogTrace when building a driver with Dmf Framework

I'm trying to build a driver with Microsoft Dmf Framework https://github.com/microsoft/DMF I builded Dmf from the provided sln file in this repository. It results in DmfK.lib (I build a kernel mode driver), then I add this lib to my driver…
SamT
  • 528
  • 4
  • 14
1
vote
0 answers

Evntrace API: logs are not written after StartTrace() (using WPP tracing)

I need to start Logging session when my app is being started. I wrote logging init / deinit functions, *.etl file is created but it's empty after the session. I'm using WPP tracing (for kernel as well as for user space). I can't figure out what I…
1
vote
2 answers

WPP tracing for linux

I'm looking for a way to output traces to a log file in my code, which runs on linux. I don't want to include the printing information in the binary, in every place I deploy it. It windows, I simply used WPP to trace without putting the actual…
1
vote
1 answer

How to add my driver's WPP provider to a Windows Performance Recorder profile?

I have a Driver configured with WPP tracing. I'm interested in seeing my driver's WPP tracing messages appearing in the WPA timeline, alongside the rest of the system events. I tried adding the driver's WPP provider GUID as an EventProvider to a…
Sirotnikov
  • 444
  • 4
  • 10
0
votes
0 answers

How to collect WPP traces in realtime by user space app?

I'm working on Windows user space app development. Also in the same time i'm developing Windows kernel mode driver. Driver has enabled WPP traces on particular GUID. Let's call it DRIVER_PROVIDER_GUID. For now i was using tool like TraceView to…
0
votes
0 answers

Missing WPP Tracing Configuration option in VS2022

I'm running Windows 11 22H2 https://learn.microsoft.com/en-us/windows-hardware/drivers/download-the-wdk I've installed VS2022 Community version Windows SDK (22H2) WDK (22H2) I created a new project using the CPP KMDF template. Building this throws…
m_c
  • 59
  • 1
  • 9
0
votes
1 answer

Unable to generate wpp trace in a simple driver

I try to display wpp logs from a very simple driver. I followed this tutorial. Below code of my simple driver: #include #include #include "trace.h" #include "driver.tmh" DRIVER_INITIALIZE DriverEntry; EVT_WDF_DRIVER_DEVICE_ADD…
Pouet
  • 1
  • 2
0
votes
1 answer

What could be the simplest way to incorporate Windows WPP Software Tracing into SCons builds?

I ask my question in such a specific way because I am afraid that a more generic form could lead to excessively theoretic discussions of how the things should be done best and in the most appropriate way (like a question about pre and post-process…
Mtm 3.14
  • 29
  • 5
0
votes
1 answer

How to turn on ETW/WPP for particular driver?

Like in topic I would like to know how to "turn on" ETW or WPP for particular windows driver. Lets for an example take a vdrvroot.sys. When we disassemble this driver we see at the beginning of DriverEntry couple function…
user3305379
  • 35
  • 1
  • 7
0
votes
1 answer

How to use WPP Tracing in user mode application with WppEnabled flag

I want to use WPP Tracing in user mode application as below: true
Terry Chen
  • 369
  • 3
  • 16
1
2