Does DebugView use ETW/WPP to receive data RRS feed

  • Question

  • I have been tasked with developing a service that will collect dbgprint output from our kernel mode drivers. I have implemented ETW controller and consumer functionality, and am now looking at our drivers. I have found the tutorial that provides step by step how to add WPP support to an existing driver, and that appears to be straight forward.

    But I was wondering if anyone could tell me how DebugView receives the output from drivers. When running it I see the dbgprint output from my kernel driver, which leads me to think that I can save driver code changes if I used the same interface that it uses. unless of course it uses an undocumented method....

    Thanks in advance

    Tuesday, June 16, 2015 6:33 PM