DCStart and DCEnd in trace performance monitor
Posted on 2008-06-12
Does anybody know what this word mean (DCStart and DCEnd)? I use trace logs in performance monitor (Windows XP). When I create trace, I check "Process creations/deletions". When the trace is started, it get all event about process creation in Windows. This produce a .etl file. When I convert this etl file in csv file, I see every process started on the computer where trace as been activated. In the trace, I see a lot of starting type method, both of them are DCStart and DCEnd. Does anybody know what DC mean ?
This is an exemple of log in the file...
Process DCStart 0x02F8 1.28577E+17 2008-06-11 18:05 1190 700 0x00014A71 756 668 0 0 "\\NT AUTHORITY\SYSTEM" "winlogon.exe"
Process DCStart 0x0338 1.28577E+17 2008-06-11 18:05 0 0 0x00015673 800 756 0 0 "\\NT AUTHORITY\SYSTEM" "services.exe"