TraceDmp Main Topic | Next

TraceDmp Syntax


One Steptracedmp [options] | [-h | -?]

Where:

-o [filename]
Output CSV and summary files. Default output files dumpfile.csv and summary.txt. are placed in the same directory as TraceDmp.

Dumpfile.csv

This file contains a count of all the events that occurred while tracing was being performed. The GUIDs for each event is also displayed. It is important to understand the difference between Event type (start/end) and Event type (DCstart/DCend (DC stands for Data Collection)). The former are those events that started and ended after tracing had begun. They had their lifetime within the tracing period.

There are processes or threads that began before tracing had been turned on, and will continue even after tracing is completed. For such events, the tool recognizes their start as the time tracing was turned on, and their end as the time tracing was turned off. This is the definition of DCstart and DCend.

This file can be opened in Microsoft® Excel. It contains a list of the events as they occurred in chronological order. The various fields are:

Event name Name of the event being traced
TID Thread ID
Clock-time The timestamp of the event occurrence.
Kernel (ms) Time taken by that event in the kernel space.
User (ms) Time taken by the event in the user space.
User data The variable portion of the header. Based on the MOF structure provided in the MOFdata.guid file. This could be more than one column of data. To interpret, look in the Mofdata.guid file or run WEBMTest.
IID Instance ID
PIID Parent Instance ID to which the IID relates.

note-icon

Note

IID and PIID are the last two columns (on the right) of the output file and should not be mistaken for User Data, as this field could span multiple columns.

-guid
MOF definition file. Default GUID file is mofdata.guid. If tracing is done for a provider other than the directory service or the operating system, you must specify the GUID file for that provider.
-rt
generates a real-time trace file. Real-time mode tracing, set from TraceLog, must be active.
-summary
produces summary.txt only.
-debug
debugs display
-begin
-end
[-h | -?]
displays command-line help.