TraceView Utility Overview

Information in this document is subject to change without notice.

TraceView is a utility which can be used to control and display Event Tracing for Windows (ETW) information. The goal of this tool is to facilitate driver developers in using ETW in their drivers. TraceView provides an intuitive, configurable, and easy to use graphical user interface and an optional command-line interface, allowing the user to control trace log sessions. Control of trace log sessions includes starting, stopping, updating and joining currently active log sessions in progress. TraceView can also be used to consume trace events, allowing graphical display of trace event messages either from a real-time trace log provider, or from a saved log file.

Graphical User Interface

Command-Line Interface

TraceView requires that 3 DLLs be present either in the save directory with TraceView.exe or in the execution path on the system where TraceView is being executed. These DLLs are: mspdb70.dll, msvcr70.dll, and traceprt.dll. If any of these 3 DLLs are not present, TraceView will display an error when it is run, identifying the DLL that is missing. You can find mspdb70.dll and msvcr70.dll for x86 architecture systems in the \winddk\buildNumber\bin\x86 directory. You will find traceprt.dll in the \winddk\buildNumber\tools\tracing\i386 directory.