114 lines
3.8 KiB
HTML
114 lines
3.8 KiB
HTML
<html>
|
||
|
||
<head>
|
||
<meta http-equiv=Content-Type content="text/html; charset=windows-1252">
|
||
<meta name=Generator content="Microsoft Word 10 (filtered)">
|
||
<title>Joining Existing Trace Log Sessions</title>
|
||
|
||
<style>
|
||
<!--
|
||
/* Font Definitions */
|
||
@font-face
|
||
{font-family:Verdana;
|
||
panose-1:2 11 6 4 3 5 4 4 2 4;}
|
||
@font-face
|
||
{font-family:"MS Sans Serif";
|
||
panose-1:0 0 0 0 0 0 0 0 0 0;}
|
||
/* Style Definitions */
|
||
p.MsoNormal, li.MsoNormal, div.MsoNormal
|
||
{margin:0in;
|
||
margin-bottom:.0001pt;
|
||
font-size:12.0pt;
|
||
font-family:"Times New Roman";}
|
||
h3
|
||
{margin-right:0in;
|
||
margin-left:0in;
|
||
font-size:13.5pt;
|
||
font-family:"Times New Roman";
|
||
font-weight:bold;}
|
||
a:link, span.MsoHyperlink
|
||
{color:blue;
|
||
text-decoration:underline;}
|
||
a:visited, span.MsoHyperlinkFollowed
|
||
{color:purple;
|
||
text-decoration:underline;}
|
||
p
|
||
{margin-right:0in;
|
||
margin-left:0in;
|
||
font-size:12.0pt;
|
||
font-family:"Times New Roman";}
|
||
@page Section1
|
||
{size:8.5in 11.0in;
|
||
margin:1.0in 1.25in 1.0in 1.25in;}
|
||
div.Section1
|
||
{page:Section1;}
|
||
/* List Definitions */
|
||
ol
|
||
{margin-bottom:0in;}
|
||
ul
|
||
{margin-bottom:0in;}
|
||
-->
|
||
</style>
|
||
|
||
</head>
|
||
|
||
<body lang=EN-US link=blue vlink=purple>
|
||
|
||
<div class=Section1>
|
||
|
||
<p><b><span style='font-size:24.0pt'>Joining Existing Trace Log Sessions</span></b></p>
|
||
|
||
<p style='margin-bottom:12.0pt'>If an attempt is made to create or start a
|
||
trace log session in TraceView, as described in <a
|
||
href="CreatingNewTraceLogSessions.htm">Creating New Trace Log Sessions</a>, and
|
||
that trace log session is already active on the system, a warning dialog is
|
||
displayed:</p>
|
||
|
||
<p style='margin-bottom:12.0pt'> <img border=0 width=875 height=410
|
||
src="JoiningExistingTraceLogSessions_files/image001.jpg"></p>
|
||
|
||
<p style='margin-bottom:12.0pt'> <span style='font-family:Verdana'><br>
|
||
</span>The user is given three possible options at this point:</p>
|
||
|
||
<p style='margin-left:50.25pt;text-indent:-32.25pt'>1.)<span style='font:7.0pt "Times New Roman"'>
|
||
</span>Stop the session and restart it, allowing TraceView to exercise full control
|
||
over the session.<span style='font-size:7.0pt'> </span></p>
|
||
|
||
<p style='margin-left:50.25pt;text-indent:-32.25pt'>2.)<span style='font:7.0pt "Times New Roman"'>
|
||
</span>Join the session in progress. TraceView will still allow updates
|
||
to the session, but will never attempt to stop such a session. As such,
|
||
the trace log session will be unstoppable and non-removable without restarting
|
||
TraceView.<span style='font-size:7.0pt'> </span></p>
|
||
|
||
<p style='margin-left:50.25pt;text-indent:-32.25pt'>3.)<span style='font:7.0pt "Times New Roman"'>
|
||
</span>Abort the start operation altogether.</p>
|
||
|
||
<p style='margin-bottom:12.0pt'>It can be desirable to have multiple trace
|
||
event consumers consume events from the same trace provider. In addition,
|
||
it is often desirable to join the NT Kernel Logger in process to access system
|
||
events, or events from boot-start drivers.</p>
|
||
|
||
<p class=MsoNormal style='margin-left:.25in'> </p>
|
||
|
||
<table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 width=873
|
||
style='width:654.65pt'>
|
||
<tr style='height:.05in'>
|
||
<td style='background:aqua;padding:.75pt .75pt .75pt .75pt;height:.05in'>
|
||
<p class=MsoNormal style='line-height:3.6pt'><span style='font-size:2.0pt'> </span></p>
|
||
</td>
|
||
</tr>
|
||
</table>
|
||
|
||
<p><b><span style='font-size:10.0pt;font-family:"MS Sans Serif"'><EFBFBD> Microsoft
|
||
Corporation 2002</span></b></p>
|
||
|
||
<h3><span style='font-weight:normal'> </span></h3>
|
||
|
||
<p style='margin-bottom:12.0pt'> </p>
|
||
|
||
</div>
|
||
|
||
</body>
|
||
|
||
</html>
|