Trace Analysis Patterns (Part 53)

Periodic Message Block is similar to Periodic Error but not limited to errors or failure reports. One such example we recently encountered is when some adjoint activity (such as messages from specific PID) stop to appear after the middle of the trace and after that there are repeated blocks of similar messages from different PIDs with their threads checking for some condition (waiting for event and reporting timeouts):

- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -

Forthcoming Accelerated Windows Software Trace Analysis Training.

One Response to “Trace Analysis Patterns (Part 53)”

  1. Dmitry Vostokov Says:

    May show polling activities, such as registry access in Process Monitor

Leave a Reply