Trace Analysis Patterns (Part 58)

Most of the time it is not possible to trace from the beginning. Obviously, internal application tracing cannot trace anything before that application start and its early initialization. The same is for system wide tracing which cannot trace before the tracing subsystem or service starts. Therefore, each log has its Visibility Limit in addition to possible truncation or missing components:

One of solutions would be to use different tracing tools and inter-correlation to glue activities, for example, Process Monitor and CDFControl.

- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -

One Response to “Trace Analysis Patterns (Part 58)”

  1. Dan Skwire Says:

    Good point, Dmitry! Every process supported by a trace table is limited by when the process starts and ends - tracing the startup and endup of that process requires another process’ trace table. Synching the timestamps is important. I haven’t seen this point stated anywhere, though it is important and easy to understand.

Leave a Reply