UIforETW with timer, perf counter, and lab improvements

This release of UIforETW adds monitoring of changes to the Windows system-wide timer resolution, adds sampling of arbitrary performance counters, adds EventEmitter.exe and LabScripts for command-line recording of ETW traces with UIforETW's custom events. For best results I recommend copying the newly updated WPA startup profile to get the new timer resolution events graph - click the button in the UIforETW settings dialog.

The list of important recent changes is:

46d5b17 Monitor Windows system-wide timer resolution events
d361ca9 Enable /Zc:strictStrings in debug builds
2f4db8c Get lab scripts to use EventEmitter.exe if found
22bd354 Get GPUTracing lab script to listen to more user providers
180ce9d Add EventEmitter project, for lab usage emittin of ETW events
c58afa2 Make UIforETW source files easier to reuse in separate projects
449c9ca Add sampling of arbitrary performance counters
0124c9f Add files for 'lab' measurement of GPU usage
d34d792 Add WPA profile showing filtering for shortcuts
709cf9d Add currently pressed meta keys to the key name data so we can filter on shortcut combinations

As usual the etwpackage.zip file contains 32-bit and 64-bit versions of UIforETW.exe, statically linked so that they will run anywhere. No compilation required. It also includes 64-bit versions of the Windows Performance Toolkit (WPT) installers.

To use this release just download and unzip etwpackage.zip and run bin\UIforETW. WPT 10 will be installed as needed. etwsymbols.zip (with source indexing) can be downloaded if needed for debugging.

Some anti-virus programs have occasionally flagged UIforETW*.exe as being malware. The cause of this flagging is not known but the flagging is assumed to be spurious. See #71 for a discussion of this issue.

For more information see https://tinyurl.com/etwcentral (aka https://randomascii.wordpress.com/2015/09/24/etw-central/)

UIforETW with Chrome symbols workaround

This release of UIforETW works around a WPA bug that prevents downloading of Chrome's symbols. It also adds a new CPU Usage (Precise) flame graph, and includes many previous improvements. For best results I recommend copying the newly updated WPA startup profile to get the new context switch flame graph - click the button in the UIforETW settings dialog.

For details on the flame graph changes see https://randomascii.wordpress.com/2016/09/05/etw-flame-graphs-made-easy/

The list of important recent changes is:

7591c9f Get StripChromeSymbols.py to download all Chrome symbols
dd8e5b5 Delete MyPresets.wpaPresets when copying startup profile
1daee90 Add Randomascii flame by Process, thread, Time Since Last
e2c640c Fix source indexing to reference correct hash

As usual the etwpackage.zip file contains 32-bit and 64-bit versions of UIforETW.exe, statically linked so that they will run anywhere. No compilation required. It also includes 64-bit versions of the Windows Performance Toolkit (WPT) installers.

To use this release just download and unzip etwpackage.zip and run bin\UIforETW. WPT 10 will be installed as needed. etwsymbols.zip (with source indexing) can be downloaded if needed for debugging.

Some anti-virus programs have occasionally flagged UIforETW*.exe as being malware. The cause of this flagging is not known but the flagging is assumed to be spurious. See #71 for a discussion of this issue.

For more information see https://tinyurl.com/etwcentral (aka https://randomascii.wordpress.com/2015/09/24/etw-central/)

UIforETW with new icon, and more flame graphs

This minor release of UIforETW has an improved icon, a minimize button, available symbols, and improved flame graph support. For best results I recommend copying the newly updated WPA startup profile to get the context switch flame graph - click the button in the UIforETW settings dialog.

For details on the flame graph changes see https://randomascii.wordpress.com/2016/09/05/etw-flame-graphs-made-easy/

The list of recent changes is:

ea1129d Add source indexing to package_etw.bat
ff77f9e New startup profile with context switch flame graph
06bdbe3 Replace default MFC icon with new one.
6c6f740 Add minimize and maximum buttons

As usual the etwpackage.zip file contains 32-bit and 64-bit versions of UIforETW.exe, statically linked so that they will run anywhere. No compilation required. It also includes 64-bit versions of the Windows Performance Toolkit (WPT) installers.

To use this release just download and unzip etwpackage.zip and run bin\UIforETW. WPT 10 will be installed as needed. etwsymbols.zip (with source indexing) can be downloaded if needed for debugging.

Some anti-virus programs have occasionally flagged UIforETW*.exe as being malware. The cause of this flagging is not known but the flagging is assumed to be spurious. See #71 for a discussion of this issue.

For more information see https://tinyurl.com/etwcentral (aka https://randomascii.wordpress.com/2015/09/24/etw-central/)

UIforETW with latest WPA and Windows 7 fixes

This release of UIforETW includes the Windows 10 Anniversary edition of WPA, which will auto install when you run this release, except on Windows 7 where the previous version will install. For best results I recommend copying the newly updated WPA startup profile - click the button in the UIforETW settings dialog.

If the Anniversary edition of WPA was previously installed on Windows 7 (VS 2015 appears to do this) then this will be detected and warned about.

UIforETW now also displays the size of the selected ETW trace.

The list of important recent changes is:

28725f1 Support Windows 7
936170b Update startup profile
def4822 Updates for Win 10.0.14393.33 WPT
01deb6a Add display of trace sizes

As usual the etwpackage.zip file contains 32-bit and 64-bit versions of UIforETW.exe, statically linked so that they will run anywhere. No compilation required. It also includes 64-bit versions of the Windows Performance Toolkit (WPT) installers.

To use this release just download and unzip etwpackage.zip and run bin\UIforETW. WPT 10 will be installed as needed.

Some anti-virus programs have occasionally flagged UIforETW*.exe as being malware. The cause of this flagging is not known but the flagging is assumed to be spurious. See #71 for a discussion of this issue.

For more information see https://tinyurl.com/etwcentral (aka https://randomascii.wordpress.com/2015/09/24/etw-central/)

UIforETW with updated WPA

This release of UIforETW includes the Windows 10 Anniversary edition of WPA, which will auto install when you run this release. The new WPA fixes the very useful Windows In Focus graph. For best results I recommend copying the newly updated WPA startup profile - click the button in the UIforETW settings dialog.

UIforETW now also displays the size of the selected ETW trace.

The list of important changes is:

936170b Update startup profile
def4822 Updates for Win 10.0.14393.33 WPT
01deb6a Add display of trace sizes

As usual the etwpackage.zip file contains 32-bit and 64-bit versions of UIforETW.exe, statically linked so that they will run anywhere. No compilation required. It also includes 64-bit versions of the Windows Performance Toolkit (WPT) installers.

To use this release just download and unzip etwpackage.zip and run bin\UIforETW. WPT 10 will be installed as needed.

Some anti-virus programs have occasionally flagged UIforETW*.exe as being malware. The cause of this flagging is not known but the flagging is assumed to be spurious. See #71 for a discussion of this issue.

For more information see https://tinyurl.com/etwcentral (aka https://randomascii.wordpress.com/2015/09/24/etw-central/)

UIforETW with custom user-mode provider recording and fixed version check

This release of UIforETW allows arbitrary user-mode providers to be specified, so that the trace recording is now fully customizable. And the version checking has been fixed so that UIforETW will now reliably notice when new versions are available.

The list of important changes is:

852c5cd Increment version number from 1.32 to 1.40
6c5a34d Fixed version checking code - oops

And, this change from the previous release is important enough to list again.
8c73a88 Add option to record extra user mode providers

As usual the etwpackage.zip file contains 32-bit and 64-bit versions of UIforETW.exe, statically linked so that they will run anywhere. No compilation required. It also includes 64-bit versions of the Windows Performance Toolkit (WPT) installers.

To use this release just download and unzip etwpackage.zip and run bin\UIforETW. WPT 10 will be installed as needed.

Some anti-virus programs have occasionally flagged UIforETW*.exe as being malware. The cause of this flagging is not known but the flagging is assumed to be spurious. See #71 for a discussion of this issue.

For more information see https://tinyurl.com/etwcentral (aka https://randomascii.wordpress.com/2015/09/24/etw-central/)

UIforETW with custom user-mode provider recording

This release of UIforETW allows arbitrary user-mode providers to be specified, so that the trace recording is now fully customizable.

The list of important changes is:

8c73a88 Add option to record extra user mode providers
e9caec6 Add checks for Python 2.7 to all scripts using subprocess
756b1cb Fix printing bug introduced during refactoring by ariccio
f9f56ea Increment version number to 1.32
fc74c20 Show version number in about box
de143e9 Hack IdentifyChromeProcesses.py to handle "missing" --type=

As usual the etwpackage.zip file contains 32-bit and 64-bit versions of UIforETW.exe, statically linked so that they will run anywhere. No compilation required. It also includes 64-bit versions of the Windows Performance Toolkit (WPT) installers.

To use this release just download and unzip etwpackage.zip and run bin\UIforETW. WPT 10 will be installed as needed.

Some anti-virus programs have occasionally flagged UIforETW*.exe as being malware. The cause of this flagging is not known but the flagging is assumed to be spurious. See #71 for a discussion of this issue.

For more information see https://tinyurl.com/etwcentral (aka https://randomascii.wordpress.com/2015/09/24/etw-central/)

UIforETW with better memory tracking and better idle behavior

This release of UIforETW uses the Microsoft-Windows-Kernel-Memory provider to give better per-process memory tracking, with less overhead. It also reduces the CPU/power consumption of UIforETW when it is idle. This version will also (optionally, but by default) check for new versions so that you will know what you are missing when new versions appear.

The list of important changes is:

d76e1a6 Command-line tool for monitoring Intel power MSRs
85eecc8 Check for python 2.7 or higher
72c71dd Keep UIforETW idle when tracing is off
957f163 Add checking for new versions
be07ba7 Make flamegraph generation python script more flexible
d7100e3 Use Microsoft-Windows-Kernel-Memory instead of WS thread on 8.1+
762ac3a Update packaging script - error checking and deleting old code

As usual the etwpackage.zip file contains 32-bit and 64-bit versions of UIforETW.exe, statically linked so that they will run anywhere. No compilation required. It also includes 64-bit versions of the Windows Performance Toolkit (WPT) installers.

To use this release just download and unzip etwpackage.zip and run bin\UIforETW. WPT 10 will be installed as needed.

Some anti-virus programs have occasionally flagged UIforETW*.exe as being malware. The cause of this flagging is not known but the flagging is assumed to be spurious. See #71 for a discussion of this issue.

For more information see https://tinyurl.com/etwcentral (aka https://randomascii.wordpress.com/2015/09/24/etw-central/)

UIforETW with fastlink and CLR tracing support

This release of UIforETW fixes StripChromeSymbols.py to work with symbols created with VC++ 2015's /debug:fastlink feature. It also adds a checkbox to enable CLR tracing.

The list of important changes is:

b89a373 Add mspdbcmf (un-fastlink) support to StripChromeSymbols.py
923dd7a add CLR runtime tracing support
fd1aecb Upgrade ETWInsights to VC++ 2015
7c519e9 Source compatibility with clang.

As usual the etwpackage.zip file contains 32-bit and 64-bit versions of UIforETW.exe, statically linked so that they will run anywhere. No compilation required. It also includes 64-bit versions of the Windows Performance Toolkit (WPT) installers.

To use this release just download and unzip etwpackage.zip and run bin\UIforETW. WPT 10 will be installed as needed.

Some anti-virus programs have occasionally flagged UIforETW*.exe as being malware. The cause of this flagging is not known but the flagging is assumed to be spurious. See #71 for a discussion of this issue.

For more information see https://tinyurl.com/etwcentral (aka https://randomascii.wordpress.com/2015/09/24/etw-central/)

UIforETW with miscellaneous polish and fixes

This release of UIforETW fixes some glitches in StripChromeSymbols.py to make it work more reliably and fail better. It also fixes many bugs with spaces in paths, in various batch files. Also the output window now horizontally resizes when the window is resized.

The full list of changes is:

b90feeb Tweak _NT_SYMBOL_PATH message to be runnable
d3bd5a7 Select the most recent trace at startup
4b2f225 Resize output window horizontally when sizing UIforETW
c80719c Tweaks to StripChromeSymbols.py
c9e3deb Tweak the slow trace saving message
41e8da4 Ignore new VS 2015 intellisense DB files
9914f47 Detect bad processes
cf5e5c9 Fix various space-in-path bugs in batch files

As usual the etwpackage.zip file contains 32-bit and 64-bit versions of UIforETW.exe, statically linked so that they will run anywhere. No compilation required. It also includes 64-bit versions of the Windows Performance Toolkit (WPT) installers.

To use this release just download and unzip etwpackage.zip and run bin\UIforETW. WPT 10 will be installed as needed.

Some anti-virus programs flag UIforETW*.exe as being malware. The cause of this flagging is not known but the flagging is assumed to be spurious. See #71 for a discussion of this issue.

For more information see https://tinyurl.com/etwcentral (aka https://randomascii.wordpress.com/2015/09/24/etw-central/)