Windows 驱动程序中的软件跟踪入门.docVIP

 STYLEREF Title \* MERGEFORMAT Getting Started with Software Tracing in Windows Drivers -  PAGE 19 WinHEC 2005 Version - April 18, 2005  REF Copyright ? 2005 Microsoft Corporation. All rights reserved. Getting Started with Software Tracing in Windows Drivers WinHEC 2005 Version - April 18, 2005 Abstract Software tracing is an efficient way to examining the behavior of a running driver without the overhead of debug print statements or a checked build. This paper provides a general introduction to software tracing in kernel-mode drivers for the Microsoft? Windows? family of operating systems using Event Tracing for Windows (ETW) and the Windows software trace preprocessor (WPP). It also describes advances in software tracing for Microsoft Windows Vista?. This information applies for the following operating systems: Windows Vista Microsoft Windows Server? 2003 Microsoft Windows XP Microsoft Windows 2000 Future versions of this preview information will be provided in the Windows Driver Kit. The current version of this paper is maintained on the Web at /whdc/DevTools/tools/WPP_Intro.mspx. References and resources discussed here are listed at the end of this paper. Contents  TOC \o 1-2 \h \z \u  HYPERLINK \l _Toc126471894 Introduction  PAGEREF _Toc126471894 \h 3  HYPERLINK \l _Toc126471895 Advantages of Software Tracing for Drivers  PAGEREF _Toc126471895 \h 3  HYPERLINK \l _Toc126471896 Software Tracing Concepts  PAGEREF _Toc126471896 \h 4  HYPERLINK \l _Toc126471897 ETW and the WPP  PAGEREF _Toc126471897 \h 6  HYPERLINK \l _Toc126471898 Instrumenting a Driver for Software Tracing Using the WPP  PAGEREF _Toc126471898 \h 6  HYPERLINK \l _Toc126471899 The DoTraceMessage Macro  PAGEREF _Toc126471899 \h 10  HYPERLINK \l _Toc126471900 Defining a Trace Message Function  PAGEREF _Toc126471900 \h 11  HYPERLINK \l _Toc126471901 Converting Existing Debug Print Statements to Trace Messages  PAGEREF _Toc126471901 \h 1