Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

DCStart and DCEnd in trace performance monitor

Posted on 2008-06-12
3
Medium Priority
?
1,075 Views
Last Modified: 2012-05-05
Does anybody know what this word mean (DCStart and DCEnd)?  I use trace logs in performance monitor (Windows XP).  When I create trace, I check "Process creations/deletions".  When the trace is started, it get all event about process creation in Windows.  This produce a .etl file.  When I convert this etl file in csv file, I see every process started on the computer where trace as been activated.  In the trace, I see a lot of starting type method, both of them are DCStart and DCEnd.   Does anybody know what DC mean ?
Thank you.

This is an exemple of log in the file...
     Process          DCStart       0x02F8      1.28577E+17      2008-06-11 18:05      1190      700       0x00014A71      756      668      0      0       "\\NT AUTHORITY\SYSTEM"       "winlogon.exe"
     Process          DCStart       0x0338      1.28577E+17      2008-06-11 18:05      0      0       0x00015673      800      756      0      0       "\\NT AUTHORITY\SYSTEM"       "services.exe"
0
Comment
Question by:swatuser
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 5

Expert Comment

by:squillman
ID: 21771757
DCStart is the event that lists running processes at the start of a kernel session.  DCEnd is the event that lists them at the end of the kernel session.
0
 

Author Comment

by:swatuser
ID: 21772279
Thanks for your post, can you just say to me what is a "Kernel session" ?  When it finish ?  If I start a trace logs in moment x, all running process will be logged as "DCStart" ? (In other word, all new process will be logged as "Start" ?)  This part is not clear for me.  Thanks for your help.
0
 
LVL 5

Accepted Solution

by:
squillman earned 500 total points
ID: 21773639
Sorry, I should have said kernel logging session.  There will be a process with DCStart for each process running at the time the logging session starts and one with DCEnd for each process that was running at the time the logging session ends.  And yes, for a process that starts during your logging session you'll see a Process entry with a Type of Start.  If a process ends during your logging session you'll get an entry with Type of End.

This is also true for threads.
0

Featured Post

Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this post we will be converting StringData saved within a text file into a hash table. This can be further used in a PowerShell script for replacing settings that are dynamic in nature from environment to environment.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question