C++/VB - ETW programming forum

Anyone know which newsgroup is the best for finding people using the ETW
APIs in applications. I assume this one because the only one for ETW on
msft.com is for end users. Thoughts?

  Pavel A. replied to Thomas Bolioli

IMHO this one is ok. Maybe, try also microsoft.public.win32.programmer.wmi

Regards,
--pa

Even on Vista, the sample code I posted failed. Do I have to use some APIs explicitly to reclaim the address space? I've just found a related discussion here, but segments when a certain decommit threshold has bee reached. [Those events should be observable via ETW-traces]. The Virtual Address range, will reamain in use. I apologize if previous posts were reason. Therefore, address space is still in use. I need to study it - I googled ETW and understand that it's a sort of logging manager. I still don't know

the more traces we can enable and thus have richer information. We're currently using ETW to emit traces. While ETW was aimed at providing high throughput low overhead tracing it does have some significant drawbacks problem in itself). 2. Buffer size limitation. I understand that picking a buffer size allows ETW to gain performance, but we have some applications now which say they need to emit changed recently and this caused Windows 2003 not to be able to read XP generated ETW files (or vice versa). - -- -- -- -- -- -- Thanks, Nick nicknospamdu@community.nospam remove "nospam" change community. to msn you have no doubt discovered, there is no silver bullet solution. I have never used ETW, but I expect that however complex it is to use, it is not worse than specify FILE_FLAG_NO_BUFFERING when opening the file. This flag should only used with regualr file IO APIs like ReadFile. - - Pavel Lebedinsky / Windows Kernel Test This posting is provided "AS IS" with no

Managing Multiple Tracing sessions in ETW for Windows C++ / VB Hi! I have been working on ETW on Windows XP (.NET 2.0) for the past couple of weeks and I have 6e4c-4ea8-81ab-7374d3da3425 / wpf-and-the-model-view-vi.aspx Win32 Kernel Discussions Win32.Etw.WMIDPREQUESTCODE (1) Win32.Etw.WMIDPREQUEST (1) Win32.Etw.TRACE (1) Win32.Etw.RegisterTraceGuids (1) Windows XP (1) Marshal.StructureToPtr (1) Marshal.AllocHGlobal (1) Marshal.FreeHGlobal (1) Get they do not need to be static. I have done a bunch of work with ETW in managed code. - - Thanks, Nick nicknospamdu@community.nospam remove "nospam" change community. to msn.com 4, WMI_DISABLE_EVENTS = 5, WMI_ENABLE_COLLECTION = 6, WMI_DISABLE_COLLECTION = 7, WMI_REGINFO = 8, WMI_EXECUTE_METHOD = 9 } private uint TraceControlCallback( Win32.Etw.WMIDPREQUESTCODE requestCode, IntPtr context, ref uint reserved, IntPtr buffer) { . . . } Make sure you create a delegate