diagnostics: combine wprp files in a single one with profiles (#14048)
diagnostics: combine wprp files in a single one with profiles (#14048) * diagnostics: combine wprp files in a single one with profiles --------- Co-authored-by: Ben Hillis <benhill@ntdev.microsoft.com>
Ben Hillis committed
Jan 14, 2026 at 09:26 UTC
87ed36a1e4e685deaf3383c101791f10d6553c78
9 files changed
+512
-807
.github/copilot-instructions.md
+7
@@ -173,6 +173,13 @@ python3 distributions/validate.py distributions/DistributionInfo.json
173
wpr -start diagnostics\wsl.wprp -filemode
174
# [reproduce issue]
175
wpr -stop logs.ETL
176
+
177
+# Available profiles:
178
+# - WSL (default) - General WSL tracing
179
+# - WSL-Storage - Enhanced storage tracing
180
+# - WSL-Networking - Comprehensive networking tracing
181
+# - WSL-HvSocket - HvSocket-specific tracing
182
+# Example: wpr -start diagnostics\wsl.wprp!WSL -filemode
183
```
184
185
### Log Analysis Tools
CONTRIBUTING.md
+6
@@ -79,6 +79,12 @@ Set-ExecutionPolicy Bypass -Scope Process -Force
79
```
80
The script will output the path of the log file once done.
81
82
+For specific scenarios, you can use different log profiles:
83
+- `.\collect-wsl-logs.ps1 -LogProfile storage` - Enhanced storage tracing
84
+- `.\collect-wsl-logs.ps1 -LogProfile networking` - Networking-focused tracing
85
+- `.\collect-wsl-logs.ps1 -LogProfile hvsocket` - HvSocket-specific tracing
86
+- `.\collect-networking-logs.ps1` - Alternative script for networking tracing
87
+
88
### 10) Reporting a Windows crash (BSOD)
89
90
To collect a kernel crash dump, first run the following command in an elevated command prompt:
diagnostics/collect-networking-logs.ps1
+9
-8
@@ -124,7 +124,8 @@ function Collect-WindowsNetworkState {
124
$folder = "WslNetworkingLogs-" + (Get-Date -Format "yyyy-MM-dd_HH-mm-ss")
125
mkdir -p $folder
126
127
-$logProfile = "$folder/wsl_networking.wprp"
127
+$wprpFile = "$folder/wsl.wprp"
128
+$wprpProfile = "WSL-Networking"
129
$networkingBashScript = "$folder/networking.sh"
130
131
# Detect the super user first.
@@ -132,14 +133,14 @@ $networkingBashScript = "$folder/networking.sh"
133
$superUser = & wsl.exe -- id -nu 0 # user name of the super user.
134
135
# Copy/Download supporting files
135
-if (Test-Path "$PSScriptRoot/wsl_networking.wprp")
136
+if (Test-Path "$PSScriptRoot/wsl.wprp")
137
{
137
- Copy-Item "$PSScriptRoot/wsl_networking.wprp" $logProfile
138
+ Copy-Item "$PSScriptRoot/wsl.wprp" $wprpFile
139
}
140
else
141
{
141
- Write-Host -ForegroundColor Yellow "wsl_networking.wprp not found in the current directory. Downloading it from GitHub."
142
- Invoke-WebRequest -UseBasicParsing "https://raw.githubusercontent.com/microsoft/WSL/master/diagnostics/wsl_networking.wprp" -OutFile $logProfile
142
+ Write-Host -ForegroundColor Yellow "wsl.wprp not found in the current directory. Downloading it from GitHub."
143
+ Invoke-WebRequest -UseBasicParsing "https://raw.githubusercontent.com/microsoft/WSL/master/diagnostics/wsl.wprp" -OutFile $wprpFile
144
}
145
146
if (Test-Path "$PSScriptRoot/networking.sh")
@@ -183,13 +184,13 @@ if ($RestartWslReproMode)
184
# Start logging.
185
$wprOutputLog = "$folder/wpr.txt"
186
186
-wpr.exe -start $logProfile -filemode 2>&1 >> $wprOutputLog
187
+wpr.exe -start "$wprpFile!$wprpProfile" -filemode 2>&1 >> $wprOutputLog
188
if ($LastExitCode -Ne 0)
189
{
190
Write-Host -ForegroundColor Yellow "Log collection failed to start (exit code: $LastExitCode), trying to reset it."
191
wpr.exe -cancel 2>&1 >> $wprOutputLog
192
192
- wpr.exe -start $logProfile -filemode 2>&1 >> $wprOutputLog
193
+ wpr.exe -start "$wprpFile!$wprpProfile" -filemode 2>&1 >> $wprOutputLog
194
if ($LastExitCode -Ne 0)
195
{
196
Write-Host -ForegroundColor Red "Couldn't start log collection (exitCode: $LastExitCode)"
@@ -309,7 +310,7 @@ if (Test-Path $setupApiPath)
310
Copy-Item $setupApiPath $folder
311
}
312
312
-Remove-Item $logProfile
313
+Remove-Item $wprpFile
314
Remove-Item $networkingBashScript
315
316
$logArchive = "$(Resolve-Path $folder).zip"
diagnostics/collect-wsl-logs.ps1
+37
-15
@@ -11,32 +11,44 @@ Set-StrictMode -Version Latest
11
$folder = "WslLogs-" + (Get-Date -Format "yyyy-MM-dd_HH-mm-ss")
12
mkdir -p $folder | Out-Null
13
14
-if ($LogProfile -eq $null -Or ![System.IO.File]::Exists($LogProfile))
14
+# Check if LogProfile is a custom file path or a profile name
15
+if ($LogProfile -ne $null -And [System.IO.File]::Exists($LogProfile))
16
{
16
- if ($LogProfile -eq $null)
17
+ # User provided a custom .wprp file path - use it directly
18
+ $wprpFile = $LogProfile
19
+ $wprpProfile = $null # Use default profile in the file
20
+}
21
+else
22
+{
23
+ # Map log profile names to WPRP profile names
24
+ $wprpProfile = "WSL"
25
+ if ($LogProfile -eq "storage")
26
{
18
- $url = "https://raw.githubusercontent.com/microsoft/WSL/master/diagnostics/wsl.wprp"
27
+ $wprpProfile = "WSL-Storage"
28
}
20
- elseif ($LogProfile -eq "storage")
29
+ elseif ($LogProfile -eq "networking")
30
{
22
- $url = "https://raw.githubusercontent.com/microsoft/WSL/master/diagnostics/wsl_storage.wprp"
31
+ $wprpProfile = "WSL-Networking"
32
}
33
elseif ($LogProfile -eq "hvsocket")
34
{
26
- $url = "https://raw.githubusercontent.com/microsoft/WSL/master/diagnostics/wsl_hvsocket.wprp"
35
+ $wprpProfile = "WSL-HvSocket"
36
}
28
- else
37
+ elseif ($LogProfile -ne $null)
38
{
30
- Write-Error "Unknown log profile: $LogProfile"
39
+ Write-Error "Unknown log profile: $LogProfile. Valid options are: storage, networking, hvsocket, or a path to a custom .wprp file"
40
exit 1
41
}
42
34
- $LogProfile = "$folder/wsl.wprp"
35
- try {
36
- Invoke-WebRequest -UseBasicParsing $url -OutFile $LogProfile
43
+ # Use the consolidated wsl.wprp file, attempt to use local copy first.
44
+ $wprpFile = "$folder/wsl.wprp"
45
+ if (Test-Path "$PSScriptRoot/wsl.wprp")
46
+ {
47
+ Copy-Item "$PSScriptRoot/wsl.wprp" $wprpFile
48
}
38
- catch {
39
- throw
49
+ else
50
+ {
51
+ Invoke-WebRequest -UseBasicParsing "https://raw.githubusercontent.com/microsoft/WSL/master/diagnostics/wsl.wprp" -OutFile $wprpFile
52
}
53
}
54
@@ -71,13 +83,23 @@ if (Test-Path $uninstallLogs)
83
84
$wprOutputLog = "$folder/wpr.txt"
85
74
-wpr.exe -start $LogProfile -filemode 2>&1 >> $wprOutputLog
86
+# Build wpr command - if wprpProfile is set, use profile syntax, otherwise use file only
87
+if ($wprpProfile -ne $null)
88
+{
89
+ $wprCommand = "$wprpFile!$wprpProfile"
90
+}
91
+else
92
+{
93
+ $wprCommand = $wprpFile
94
+}
95
+
96
+wpr.exe -start $wprCommand -filemode 2>&1 >> $wprOutputLog
97
if ($LastExitCode -Ne 0)
98
{
99
Write-Host -ForegroundColor Yellow "Log collection failed to start (exit code: $LastExitCode), trying to reset it."
100
wpr.exe -cancel 2>&1 >> $wprOutputLog
101
80
- wpr.exe -start $LogProfile -filemode 2>&1 >> $wprOutputLog
102
+ wpr.exe -start $wprCommand -filemode 2>&1 >> $wprOutputLog
103
if ($LastExitCode -Ne 0)
104
{
105
Write-Host -ForegroundColor Red "Couldn't start log collection (exitCode: $LastExitCode)"
diagnostics/wsl.wprp
+445
-79
@@ -1,37 +1,51 @@
1
<?xml version="1.0"?>
2
+<!--
3
+ Available Profiles (use profile name with wpr -start):
4
+ - WSL: General WSL tracing (default)
5
+ - WSL-Storage: WSL with enhanced storage tracing
6
+ - WSL-Networking: WSL with comprehensive networking tracing
7
+ - WSL-HvSocket: WSL with HvSocket-specific tracing
8
+
9
+ Example: wpr -start wsl.wprp!WSL-Networking -filemode
10
+-->
11
<WindowsPerformanceRecorder Version="1">
12
<Profiles>
13
+ <!-- Event Collectors -->
14
<EventCollector Id="Collector" Name="Collector">
5
- <BufferSize Value="256"/>
6
- <Buffers Value="1024"/>
15
+ <BufferSize Value="512"/>
16
+ <Buffers Value="4096"/>
17
</EventCollector>
18
9
- <EventProvider Id="lxcore_kernel" Name="0CD1C309-0878-4515-83DB-749843B3F5C9"/>
10
- <EventProvider Id="lxcore_user" Name="D90B9468-67F0-5B3B-42CC-82AC81FFD960"/>
11
- <EventProvider Id="lxcore_service" Name="B99CDB5A-039C-5046-E672-1A0DE0A40211"/>
12
- <EventProvider Id="wsl_devicehost" Name="9d6c7b9e-2581-4d8a-b8c5-b90b4a17094a"/>
13
- <EventProvider Id="wslclient" Name="8cbb7724-7223-5d6f-8137-564dac45104d"/>
14
- <EventProvider Id="wslaservice" Name="0383CE62-8F86-4766-AFB2-9D66A7FB1E90"/>
15
- <EventProvider Id="wslapi" Name="beb94edf-1a7b-5058-0696-ff9e6b1798d1"/>
16
- <EventProvider Id="vfpext" Name="9F2660EA-CFE7-428F-9850-AECA612619B0" />
17
- <EventProvider Id="vm_chipset" Name="de9ba731-7f33-4f44-98c9-6cac856b9f83"/>
18
- <EventProvider Id="vmcompute_dll" Name="AF7FD3A7-B248-460C-A9F5-FEC39EF8468C"/>
19
- <EventProvider Id="vmcompute" Name="17103E3F-3C6E-4677-BB17-3B267EB5BE57"/>
20
- <EventProvider Id="vmmm" Name="6066F867-7CA1-4418-85FD-36E3F9C0600C"/>
21
- <EventProvider Id="vmwp" Name="51DDFA29-D5C8-4803-BE4B-2ECB715570FE"/>
19
+ <!-- Event Providers -->
20
<EventProvider Id="9p" Name="e13c8d52-b153-571f-78c5-1d4098af2a1e"/>
21
<EventProvider Id="9p_errors" Name="06C601B3-6957-4F8C-A15F-74875B24429D" />
24
- <EventProvider Id="p9rdr" Name="bb1d36f0-e0e0-48cc-9493-fef0e3d0b28c" NonPagedMemory="true" Strict="true"/>
25
- <EventProvider Id="mup" Name="20c46239-d059-4214-a11e-7d6769cbe020" />
26
- <EventProvider Id="rfsmon" Name="51734B23-5B7E-4892-BA8E-45BC110B735C" />
27
- <EventProvider Id="hyperv_storage" Name="c7ad62c6-5c99-5a1b-bbc4-0821ae5b765e" />
28
- <EventProvider Id="hns" Name="0c885e0d-6eb6-476c-a048-2457eed3a5c1" />
29
- <EventProvider Id="netmgmt" Name="93f693dc-9163-4dee-af64-d855218af242" />
22
+ <EventProvider Id="aad_WPP" Name="4DE9BC9C-B27A-43C9-8994-0915F1A5E24F" />
23
+ <EventProvider Id="basecsp_WPP" Name="133A980D-035D-4E2D-B250-94577AD8FCED" />
24
+ <EventProvider Id="BCRYPT_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473302" />
25
+ <EventProvider Id="BFE_WPP" Name="106B464A-8043-46B1-8CB8-E92A0CD7A560" />
26
+ <EventProvider Id="CAPI1_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473305" />
27
+ <EventProvider Id="CHAT_WPP" Name="9B52E09F-0C58-4EAF-877F-70F9B54A7946" />
28
+ <EventProvider Id="cloudap_WPP" Name="EC3CA551-21E9-47D0-9742-1195429831BB" />
29
+ <EventProvider Id="CNG_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473303" />
30
+ <EventProvider Id="credssp_WPP" Name="6165F3E2-AE38-45D4-9B23-6B4818758BD9" />
31
+ <EventProvider Id="CRYPTOWINRT_WPP" Name="786396CD-2FF3-53D3-D1CA-43E41D9FB73B" />
32
+ <EventProvider Id="dclocator_WPP" Name="CA030134-54CD-4130-9177-DAE76A3C5791" />
33
+ <EventProvider Id="digest_WPP" Name="FB6A424F-B5D6-4329-B9B5-A975B3A93EAD" />
34
+ <EventProvider Id="DNS_WPP" Name="609151DD-04F5-4DA7-974C-FC6947EAA323" />
35
+ <EventProvider Id="dpapis_WPP" Name="EA3F84FC-03BB-540E-B6AA-9664F81A31FB" />
36
+ <EventProvider Id="EventProvider_HvSocketTraceProvider" Name="B2ED3BDB-CD74-5B2C-F660-85079CA074B3" NonPagedMemory="true">
37
+ <Keywords>
38
+ <Keyword Value="0x0"/>
39
+ </Keywords>
40
+ </EventProvider>
41
+ <EventProvider Id="EventProvider_Microsoft.Windows.EMPS.Enrollment" Name="E74EFD1A-B62D-4B83-AB00-66F4A166A2D3" />
42
+ <EventProvider Id="EventProvider_Microsoft.Windows.EnterpriseManagement.Enrollment" Name="F9E3B648-9AF1-4DC3-9A8E-BF42C0FBCE9A" />
43
<EventProvider Id="EventProvider_Microsoft.Windows.Mobile.Provisioning.AppDownload" Name="0BBE6221-EF09-4A3F-82EE-BE00DBB6A98A" />
44
<EventProvider Id="EventProvider_Microsoft.Windows.Mobile.Provisioning.Datastore" Name="42C60CEA-0FE7-4541-A86B-9E11F95BD9BF" />
45
<EventProvider Id="EventProvider_Microsoft.Windows.Mobile.Provisioning.PhoneProvisioner" Name="B876B1FC-C7F1-443E-9012-86677F7DE580" />
46
<EventProvider Id="EventProvider_Microsoft.Windows.Mobile.Provisioning.PPOEM" Name="7EDBED09-1FF7-4FEE-B8C3-5DB694420830" />
47
<EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.API" Name="82ADD491-01D7-4B85-9EAD-192C3CAACA23" />
48
+ <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.CommandCsp" Name="00BB69FC-60BC-4502-9438-25608F375CCB" />
49
<EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.CSP" Name="16E12400-A2D8-44B7-9479-004568EC7819" />
50
<EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Engine" Name="A6A847B7-4429-49AA-BBA6-2AD8C191AC8C" />
51
<EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Handlers" Name="0383D92C-2337-4F25-A0B5-A51767F04746" />
@@ -40,129 +54,481 @@
54
<EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Platform" Name="B1F30020-8BC3-4888-BB1B-4DD681F24209" />
55
<EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Plugin.Engine" Name="55239D60-0EB6-495B-874E-15DE5D5F9A70" />
56
<EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Plugin.RemovableMedia" Name="B55883E6-6C45-45C2-AB9D-800BB7B66B13" />
43
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.ProvTool" Name="2BF4B6BA-556E-4D05-8534-CAFEDF19FED8" />
44
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.CommandCsp" Name="00BB69FC-60BC-4502-9438-25608F375CCB" />
57
<EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.ProvLaunch" Name="08FACCFA-125D-4ED6-B0B7-B4A1A912E693" />
46
- <EventProvider Id="EventProvider_Microsoft.Windows.EMPS.Enrollment" Name="E74EFD1A-B62D-4B83-AB00-66F4A166A2D3" />
47
- <EventProvider Id="EventProvider_Microsoft.Windows.EnterpriseManagement.Enrollment" Name="F9E3B648-9AF1-4DC3-9A8E-BF42C0FBCE9A" />
48
- <EventProvider Id="Microsoft.Windows.HyperV.Vid" Name="1111450B-DACC-40A3-84AB-F7DBA4A6E63A" NonPagedMemory="true"/>
49
- <EventProvider Id="Microsoft-Windows-HyperV-Vid" Name="5931D877-4860-4ee7-A95C-610A5F0D1407" NonPagedMemory="true" />
50
- <EventProvider Id="virtdisk_wpp" Name="e14dcdd9-d1ec-4dc3-8395-a606df8ef115" Level="4">
58
+ <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.ProvTool" Name="2BF4B6BA-556E-4D05-8534-CAFEDF19FED8" />
59
+ <EventProvider Id="EventProvider_Telemetry_StorVSP" Name="544d0787-9f6d-432e-8414-e035a8b0541d">
60
<Keywords>
61
<Keyword Value="0xFFFFFFFFFFFFFFFF" />
62
</Keywords>
63
</EventProvider>
55
-
56
- <EventProvider Id="virtdisk" Name="4D20DF22-E177-4514-A369-F1759FEEDEB3" Level="4">
64
+ <EventProvider Id="EventProvider_Trace_Vhdmp" Name="dc284fb3-1eab-4854-828a-b25417280280" Level="3">
65
<Keywords>
66
<Keyword Value="0xFFFFFFFFFFFFFFFF" />
67
</Keywords>
68
</EventProvider>
61
-
62
- <EventProvider Id="vhdmp" Name="E2816346-87F4-4F85-95C3-0C79409AA89D" NonPagedMemory="true" Level="4">
69
+ <EventProvider Id="gMSAClient_WPP" Name="2D45EC97-EF01-4D4F-B9ED-EE3F4D3C11F3" />
70
+ <EventProvider Id="hns" Name="0c885e0d-6eb6-476c-a048-2457eed3a5c1" />
71
+ <EventProvider Id="HTTP_sys_WPP" Name="20F61733-57F1-4127-9F48-4AB7A9308AE2" />
72
+ <EventProvider Id="HyperV_EmulatedStorage" Name="86E15E01-EDF1-4AC7-89CF-B19563FD6894" Level="6">
73
<Keywords>
64
- <Keyword Value="0xFFFFFFFFFFFFFFFD" />
74
+ <Keyword Value="0xFFFFFFFFFFFFFFFF" />
75
</Keywords>
76
</EventProvider>
67
-
68
- <EventProvider Id="vhdmp_wpp" Name="3c70c3b0-2fae-41d3-b68d-8f7fcaf79adb" NonPagedMemory="true" Level="5">
77
+ <EventProvider Id="hyperv_storage" Name="c7ad62c6-5c99-5a1b-bbc4-0821ae5b765e" />
78
+ <EventProvider Id="HyperV_SyntheticStorage" Name="EDACD782-2564-4497-ADE6-7199377850F2" Level="6">
79
<Keywords>
80
<Keyword Value="0xFFFFFFFFFFFFFFFF" />
81
</Keywords>
82
</EventProvider>
73
-
83
+ <EventProvider Id="idcommon_WPP" Name="B1108F75-3252-4B66-9239-80FD47E06494" />
84
+ <EventProvider Id="idlisten_WPP" Name="D93FE84A-795E-4608-80EC-CE29A96C8658" />
85
+ <EventProvider Id="idstore_WPP" Name="82C7D3DF-434D-44FC-A7CC-453A8075144E" />
86
+ <EventProvider Id="IPNat" Name="AE3F6C6D-BF2A-4291-9D07-59E661274EE3" />
87
+ <EventProvider Id="kdc_WPP" Name="1BBA8B19-7F31-43C0-9643-6E911F79A06B" />
88
+ <EventProvider Id="kerb_WPP" Name="6B510852-3583-4E2D-AFFE-A67F9F223438" />
89
+ <EventProvider Id="KerbClientShared_WPP" Name="FACB33C4-4513-4C38-AD1E-57C1F6828FC0" />
90
+ <EventProvider Id="KerbComm_WPP" Name="60A7AB7A-BC57-43E9-B78A-A1D516577AE3" />
91
+ <EventProvider Id="kps_WPP" Name="97A38277-13C0-4394-A0B2-2A70B465D64F" />
92
+ <EventProvider Id="livessp_WPP" Name="C10B942D-AE1B-4786-BC66-052E5B4BE40E" />
93
+ <EventProvider Id="LsaAudit_WPP" Name="DAA76F6A-2D11-4399-A646-1D62B7380F15" />
94
+ <EventProvider Id="LsaDs_WPP" Name="169EC169-5B77-4A3E-9DB6-441799D5CACB" />
95
+ <EventProvider Id="LsaIso_WPP" Name="366B218A-A5AA-4096-8131-0BDAFCC90E93" />
96
+ <EventProvider Id="LsaTrace_WPP" Name="D0B639E0-E650-4D1D-8F39-1580ADE72784" />
97
+ <EventProvider Id="lxcore_kernel" Name="0CD1C309-0878-4515-83DB-749843B3F5C9"/>
98
+ <EventProvider Id="lxcore_service" Name="B99CDB5A-039C-5046-E672-1A0DE0A40211"/>
99
+ <EventProvider Id="lxcore_user" Name="D90B9468-67F0-5B3B-42CC-82AC81FFD960"/>
100
+ <EventProvider Id="Microsoft_OneCore_NetworkingTriage_GetConnected" Name="60523747-6516-48B7-84B1-3264FA2CB359" />
101
+ <EventProvider Id="Microsoft_OneCore_NetworkingTriage_OnDemand" Name="ABB1FC61-49BA-4CC3-809F-7ABE1F8BA315" />
102
+ <EventProvider Id="Microsoft_OneCore_NetworkingTriage_RoutePolicyManagement" Name="923C0FFD-7933-4B52-8A49-121ABF2DC357" />
103
+ <EventProvider Id="Microsoft_OSG_OSS_CredProvFramework_ReportResultStop_WPP" Name="8DB3086D-116F-5BED-CFD5-9AFDA80D28EA" />
104
+ <EventProvider Id="Microsoft_OSG_Wininet_WPP" Name="1A211EE8-52DB-4AF0-BB66-FB8C9F20B0E2" />
105
+ <EventProvider Id="Microsoft_Quic_ETW" Name="ff15e657-4f26-570e-88ab-0796b258d11c" />
106
+ <EventProvider Id="Microsoft_Web_Platform_WPP" Name="FF32ADA1-5A4B-583C-889E-A3C027B201F5" />
107
+ <EventProvider Id="Microsoft_Windows_AppModel_Exec_WPP" Name="EB65A492-86C0-406A-BACE-9912D595BD69" />
108
+ <EventProvider Id="Microsoft_Windows_BranchCacheClientEventProvider" Name="e837619c-a2a8-4689-833f-47b48ebd2442" />
109
+ <EventProvider Id="Microsoft_Windows_BranchCacheEventProvider" Name="dd85457f-4e2d-44a5-a7a7-6253362e34dc" />
110
+ <EventProvider Id="Microsoft_Windows_BrokerInfrastructure_WPP" Name="63B6C2D2-0440-44DE-A674-AA51A251B123" />
111
+ <EventProvider Id="Microsoft_Windows_CAPI2_WPP" Name="5BBCA4A8-B209-48DC-A8C7-B23D3E5216FB" />
112
+ <EventProvider Id="Microsoft_Windows_CertificateServices_Deployment_WPP" Name="B2D1F576-2E85-4489-B504-1861C40544B3" />
113
+ <EventProvider Id="Microsoft_Windows_CertificateServicesClient_AutoEnrollment_WPP" Name="F0DB7EF8-B6F3-4005-9937-FEB77B9E1B43" />
114
+ <EventProvider Id="Microsoft_Windows_CertificateServicesClient_CertEnroll_WPP" Name="54164045-7C50-4905-963F-E5BC1EEF0CCA" />
115
+ <EventProvider Id="Microsoft_Windows_CertificateServicesClient_CredentialRoaming_WPP" Name="89A2278B-C662-4AFF-A06C-46AD3F220BCA" />
116
+ <EventProvider Id="Microsoft_Windows_CertificateServicesClient_Lifecycle_System_WPP" Name="BC0669E1-A10D-4A78-834E-1CA3C806C93B" />
117
+ <EventProvider Id="Microsoft_Windows_CertificateServicesClient_Lifecycle_User_WPP" Name="BEA18B89-126F-4155-9EE4-D36038B02680" />
118
+ <EventProvider Id="Microsoft_Windows_CertificateServicesClient_WPP" Name="73370BD6-85E5-430B-B60A-FEA1285808A7" />
119
+ <EventProvider Id="Microsoft_Windows_CertificationAuthorityClient_CertCli_WPP" Name="98BF1CD3-583E-4926-95EE-A61BF3F46470" />
120
+ <EventProvider Id="Microsoft_Windows_CertPolEng_WPP" Name="AF9CC194-E9A8-42BD-B0D1-834E9CFAB799" />
121
+ <EventProvider Id="Microsoft_Windows_DeviceManagement_Enterprise_Diagnostics_Provider_WPP" Name="3DA494E4-0FE2-415C-B895-FB5265C5C83B" />
122
+ <EventProvider Id="Microsoft_Windows_DeviceManagement_SCEP_WPP" Name="D5A5B540-C580-4DEE-8BB4-185E34AA00C5" />
123
+ <EventProvider Id="Microsoft_Windows_DM_Enrollment_Provider_WPP" Name="9FBF7B95-0697-4935-ADA2-887BE9DF12BC" />
124
+ <EventProvider Id="Microsoft_Windows_DNS_Client" Name="1c95126e-7eea-49a9-a3fe-a378b03ddb4d" />
125
+ <EventProvider Id="Microsoft_Windows_DNS_Client_Configuration_PowerShell" Name="563a50d8-3536-4c8a-a361-b37af04094ec" />
126
+ <EventProvider Id="Microsoft_Windows_DNS_Client_WinRNR" Name="b923f87a-b069-42b5-bd32-35623aba1c48" />
127
+ <EventProvider Id="Microsoft_Windows_HttpService" Name="dd5ef90a-6398-47a4-ad34-4dcecdef795f" />
128
+ <EventProvider Id="Microsoft_Windows_LiveId_WPP" Name="05F02597-FE85-4E67-8542-69567AB8FD4F" />
129
+ <EventProvider Id="Microsoft_Windows_MicrosoftAccount_TBProvider_WPP" Name="5836994D-A677-53E7-1389-588AD1420CC5" />
130
+ <EventProvider Id="Microsoft_Windows_ProcessStateManager_WPP" Name="D49918CF-9489-4BF1-9D7B-014D864CF71F" />
131
+ <EventProvider Id="Microsoft_Windows_ResourceManager_WPP" Name="4180C4F7-E238-5519-338F-EC214F0B49AA" />
132
+ <EventProvider Id="Microsoft_Windows_Runtime_Web_Http" Name="41877cb4-11fc-4188-b590-712c143c881d" />
133
+ <EventProvider Id="Microsoft_Windows_Security_AADAuthHelper_WPP" Name="9EBB3B15-B094-41B1-A3B8-0F141B06BADD" />
134
+ <EventProvider Id="Microsoft_Windows_Security_AADCloudAPPlugin_WPP" Name="556045FD-58C5-4A97-9881-B121F68B79C5" />
135
+ <EventProvider Id="Microsoft_Windows_Security_Biometrics_BioCredProv_WPP" Name="9DADD79B-D556-53F2-67C4-129FA62B7512" />
136
+ <EventProvider Id="Microsoft_Windows_Security_Biometrics_Client_WPP" Name="1B5106B1-7622-4740-AD81-D9C6EE74F124" />
137
+ <EventProvider Id="Microsoft_Windows_Security_Biometrics_CredentialProvider_Face_WPP" Name="1D480C11-3870-4B19-9144-47A53CD973BD" />
138
+ <EventProvider Id="Microsoft_Windows_Security_Biometrics_FingerprintCredential_WPP" Name="225B3FED-0356-59D1-1F82-EED163299FA8" />
139
+ <EventProvider Id="Microsoft_Windows_Security_Biometrics_Service_WPP" Name="39A5AA08-031D-4777-A32D-ED386BF03470" />
140
+ <EventProvider Id="Microsoft_Windows_Security_Biometrics_Trustlet_WPP" Name="9DF19CFA-E122-5343-284B-F3945CCD65B2" />
141
+ <EventProvider Id="Microsoft_Windows_Security_Credentials_UserConsentVerifier_WPP" Name="507C53AE-AF42-5938-AEDE-4A9D908640ED" />
142
+ <EventProvider Id="Microsoft_Windows_Security_DevCredClient_WPP" Name="78983C7D-917F-58DA-E8D4-F393DECF4EC0" />
143
+ <EventProvider Id="Microsoft_Windows_Security_DevCredProv_WPP" Name="7955D36A-450B-5E2A-A079-95876BCA450A" />
144
+ <EventProvider Id="Microsoft_Windows_Security_DevCredSvc_WPP" Name="C3FEB5BF-1A8D-53F3-AAA8-44496392BF69" />
145
+ <EventProvider Id="Microsoft_Windows_Security_DevCredTask_WPP" Name="86D5FE65-0564-4618-B90B-E146049DEBF4" />
146
+ <EventProvider Id="Microsoft_Windows_Security_DevCredWinRt_WPP" Name="36FF4C84-82A2-4B23-8BA5-A25CBDFF3410" />
147
+ <EventProvider Id="Microsoft_Windows_Security_DeviceLock_WPP" Name="2056054C-97A6-5AE4-B181-38BC6B58007E" />
148
+ <EventProvider Id="Microsoft_Windows_Security_Fido_WPP" Name="08B15CE7-C9FF-5E64-0D16-66589573C50F" />
149
+ <EventProvider Id="Microsoft_Windows_Security_LsaSrv_WPP" Name="4D9DFB91-4337-465A-A8B5-05A27D930D48" />
150
+ <EventProvider Id="Microsoft_Windows_Security_NGC_CredProv_WPP" Name="CAC8D861-7B16-5B6B-5FC0-85014776BDAC" />
151
+ <EventProvider Id="Microsoft_Windows_Security_NGC_CryptNgc_WPP" Name="6D7051A0-9C83-5E52-CF8F-0ECAF5D5F6FD" />
152
+ <EventProvider Id="Microsoft_Windows_Security_NGC_CSP_WPP" Name="89F392FF-EE7C-56A3-3F61-2D5B31A36935" />
153
+ <EventProvider Id="Microsoft_Windows_Security_NGC_KeyCredMgr_WPP" Name="34646397-1635-5D14-4D2C-2FEBDCCCF5E9" />
154
+ <EventProvider Id="Microsoft_Windows_Security_NGC_KeyStaging_WPP" Name="9B223F67-67A1-5B53-9126-4593FE81DF25" />
155
+ <EventProvider Id="Microsoft_Windows_Security_NGC_KspSvc_WPP" Name="B66B577F-AE49-5CCF-D2D7-8EB96BFD440C" />
156
+ <EventProvider Id="Microsoft_Windows_Security_NGC_Local_WPP" Name="3B9DBF69-E9F0-5389-D054-A94BC30E33F7" />
157
+ <EventProvider Id="Microsoft_Windows_Security_NGC_LocalAccountMigPlugin_WPP" Name="CDD94AC7-CD2F-5189-E126-2DEB1B2FACBF" />
158
+ <EventProvider Id="Microsoft_Windows_Security_NGC_NgcCtnr_WPP" Name="0ABA6892-455B-551D-7DA8-3A8F85225E1A" />
159
+ <EventProvider Id="Microsoft_Windows_Security_NGC_NgcCtnrSvc_WPP" Name="9DF6A82D-5174-5EBF-842A-39947C48BF2A" />
160
+ <EventProvider Id="Microsoft_Windows_Security_NGC_NgcIsoCtnr_WPP" Name="CDC6BEB9-6D78-5138-D232-D951916AB98F" />
161
+ <EventProvider Id="Microsoft_Windows_Security_NGC_PopKeySrv_WPP" Name="1D6540CE-A81B-4E74-AD35-EEF8463F97F5" />
162
+ <EventProvider Id="Microsoft_Windows_Security_NGC_Recovery_WPP" Name="9D4CA978-8A14-545E-C047-A45991F0E92F" />
163
+ <EventProvider Id="Microsoft_Windows_Security_NGC_Trustlet_WPP" Name="C0B2937D-E634-56A2-1451-7D678AA3BC53" />
164
+ <EventProvider Id="Microsoft_Windows_Security_TokenBroker_WPP" Name="077B8C4A-E425-578D-F1AC-6FDF1220FF68" />
165
+ <EventProvider Id="Microsoft_Windows_Shell_CloudDomainJoin_Client_WPP" Name="AA02D1A4-72D8-5F50-D425-7402EA09253A" />
166
+ <EventProvider Id="Microsoft_Windows_Shell_CloudExperienceHost_WPP" Name="D0034F5E-3686-5A74-DC48-5A22DD4F3D5B" />
167
+ <EventProvider Id="Microsoft_Windows_WBioSrvc_WPP" Name="34BEC984-F11F-4F1F-BB9B-3BA33C8D0132" />
168
+ <EventProvider Id="Microsoft_Windows_WebIO" Name="50b3e73c-9370-461d-bb9f-26f32d68887d" />
169
+ <EventProvider Id="Microsoft_Windows_WinHttp" Name="7d44233d-3055-4b9c-ba64-0d47ca40a232" />
170
+ <EventProvider Id="Microsoft_Windows_WinINet" Name="43d1a55c-76d6-4f7e-995c-64c711e5cafe" />
171
+ <EventProvider Id="Microsoft_Windows_Winsock_NameResolution" Name="55404E71-4DB9-4DEB-A5F5-8F86E46DDE56" />
172
+ <EventProvider Id="Microsoft-Windows-DHCP-Client" Name="15A7A4F8-0072-4EAB-ABAD-F98A4D666AED" />
173
+ <EventProvider Id="Microsoft-Windows-DHCPv6-Client" Name="6A1F2B00-6A90-4C38-95A5-5CAB3B056778" />
174
+ <EventProvider Id="Microsoft-Windows-Host-Network-Management" Name="93f693dc-9163-4dee-af64-d855218af242" />
175
+ <EventProvider Id="Microsoft-Windows-Hyper-V-VfpExt" Name="9F2660EA-CFE7-428F-9850-AECA612619B0"/>
176
+ <EventProvider Id="Microsoft-Windows-Hyper-V-VmSwitch" Name="67DC0D66-3695-47C0-9642-33F76F7BD7AD"/>
177
+ <EventProvider Id="Microsoft-Windows-HyperV-Vid" Name="5931D877-4860-4ee7-A95C-610A5F0D1407" NonPagedMemory="true" />
178
+ <EventProvider Id="Microsoft-Windows-Overlay-HNSPlugin" Name="564368D6-577B-4af5-AD84-1C54464848E6" />
179
+ <EventProvider Id="Microsoft-Windows-SharedAccess_NAT" Name="A6F32731-9A38-4159-A220-3D9B7FC5FE5D" />
180
+ <EventProvider Id="Microsoft-Windows-TCPIP" Name="2f07e2ee-15db-40f1-90ef-9d7ba282188a" NonPagedMemory="true" EventKey="true" Strict="true"/>
181
+ <EventProvider Id="Microsoft-Windows-WinNat" Name="66C07ECD-6667-43FC-93F8-05CF07F446EC" />
182
+ <EventProvider Id="Microsoft.Windows.HostNetworkingService.PrivateCloudPlugin" Name="D0E4BC17-34C7-43fc-9A72-D89A59D6979A" />
183
+ <EventProvider Id="Microsoft.Windows.Hyper.V.NetSetupHelper" Name="94DEB9D1-0A52-449B-B368-41E4426B4F36"/>
184
+ <EventProvider Id="Microsoft.Windows.Hyper.V.VmsIf" Name="6C28C7E5-331B-4437-9C69-5352A2F7F296" />
185
+ <EventProvider Id="Microsoft.Windows.HyperV.Compute" Name="80CE50DE-D264-4581-950D-ABADEEE0D340" />
186
+ <EventProvider Id="Microsoft.Windows.HyperV.Socket" Name="b2ed3bdb-cd74-5b2c-f660-85079ca074b3"/>
187
+ <EventProvider Id="Microsoft.Windows.HyperV.Vid" Name="1111450B-DACC-40A3-84AB-F7DBA4A6E63A" NonPagedMemory="true"/>
188
+ <EventProvider Id="Microsoft.Windows.Networking.FlowSteering" Name="662abf07-6dda-5b25-c2c5-345236dbb2d2"/>
189
+ <EventProvider Id="mpssvcService" Name="5EEFEBDB-E90C-423a-8ABF-0241E7C5B87D" />
190
+ <EventProvider Id="MsQuic_WPP" Name="620FD025-BE51-42EF-A5C0-50F13F183AD9" />
191
+ <EventProvider Id="msxml_WPP" Name="927821F8-D9E6-42E2-84F2-949E18256F3A" />
192
+ <EventProvider Id="mup" Name="20c46239-d059-4214-a11e-7d6769cbe020" />
193
+ <EventProvider Id="NCRYPT_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473301" />
194
+ <EventProvider Id="NCRYPTSSLP_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473304" />
195
+ <EventProvider Id="ndis_wpp" Name="DD7A21E6-A651-46D4-B7C2-66543067B869"/>
196
+ <EventProvider Id="negoexts_WPP" Name="5AF52B0D-E633-4EAD-828A-4B85B8DAAC2B" />
197
+ <EventProvider Id="Netio_WPP" Name="EB004A05-9B1A-11D4-9123-0050047759BC" />
198
+ <EventProvider Id="netmgmt" Name="93f693dc-9163-4dee-af64-d855218af242" />
199
+ <EventProvider Id="ntlm_WPP" Name="5BBB6C18-AA45-49B1-A15F-085F7ED0AA90" />
200
+ <EventProvider Id="NtlmShared_WPP" Name="AC69AE5B-5B21-405F-8266-4424944A43E9" />
201
+ <EventProvider Id="p9rdr" Name="bb1d36f0-e0e0-48cc-9493-fef0e3d0b28c" NonPagedMemory="true" Strict="true"/>
202
+ <EventProvider Id="pku2u_WPP" Name="2A6FAF47-5449-4805-89A3-A504F3E221A6" />
203
+ <EventProvider Id="PortTrackerServer_WPP" Name="090bf343-4490-42d3-b273-8af174d314fb" />
204
+ <EventProvider Id="rfsmon" Name="51734B23-5B7E-4892-BA8E-45BC110B735C" />
205
+ <EventProvider Id="SharedAccessWPP" Name="9B322459-4AD9-4F81-8EEA-DC77CDD18CA6" />
206
<EventProvider Id="storvsp" Name="10b3d268-9782-49a4-aacc-a93c5482cb6f" NonPagedMemory="true" Level="4">
207
<Keywords>
208
<Keyword Value="0xFFFFFFFFFFFFFFFF" />
209
</Keywords>
210
</EventProvider>
79
-
80
- <EventProvider Id="HyperV_SyntheticStorage" Name="EDACD782-2564-4497-ADE6-7199377850F2" Level="6">
211
+ <EventProvider Id="storvsp_io" Name="10b3d268-9782-49a4-aacc-a93c5482cb6f" NonPagedMemory="true">
212
<Keywords>
213
<Keyword Value="0xFFFFFFFFFFFFFFFF" />
214
</Keywords>
215
</EventProvider>
85
-
86
- <EventProvider Id="HyperV_EmulatedStorage" Name="86E15E01-EDF1-4AC7-89CF-B19563FD6894" Level="6">
216
+ <EventProvider Id="storvsp_wpp" Name="f96abc17-6a5e-4a49-a3f4-a2a86fa03846" NonPagedMemory="true" Level="4">
217
<Keywords>
218
<Keyword Value="0xFFFFFFFFFFFFFFFF" />
219
</Keywords>
220
</EventProvider>
91
-
92
- <EventProvider Id="EventProvider_Telemetry_StorVSP" Name="544d0787-9f6d-432e-8414-e035a8b0541d">
221
+ <EventProvider Id="TLS_WPP" Name="37D2C3CD-C5D4-4587-8531-4696C44244C8" />
222
+ <EventProvider Id="TokenBinding_WPP" Name="AEF66A73-A765-4421-B348-B7E0FC8C9898" />
223
+ <EventProvider Id="TPM_WPP" Name="3A8D6942-B034-48E2-B314-F69C2B4655A3" />
224
+ <EventProvider Id="UrlMon_WPP" Name="3FAB3162-24CE-4ED5-B23D-63501544E11D" />
225
+ <EventProvider Id="vault_WPP" Name="7FDD167C-79E5-4403-8C84-B7C0BB9923A1" />
226
+ <EventProvider Id="vfpext" Name="9F2660EA-CFE7-428F-9850-AECA612619B0" />
227
+ <EventProvider Id="vhdmp" Name="E2816346-87F4-4F85-95C3-0C79409AA89D" NonPagedMemory="true" Level="4">
228
+ <Keywords>
229
+ <Keyword Value="0xFFFFFFFFFFFFFFFD" />
230
+ </Keywords>
231
+ </EventProvider>
232
+ <EventProvider Id="vhdmp_wpp" Name="3c70c3b0-2fae-41d3-b68d-8f7fcaf79adb" NonPagedMemory="true" Level="5">
233
<Keywords>
234
<Keyword Value="0xFFFFFFFFFFFFFFFF" />
235
</Keywords>
236
</EventProvider>
97
-
98
- <EventProvider Id="EventProvider_Trace_Vhdmp" Name="dc284fb3-1eab-4854-828a-b25417280280" Level="3">
237
+ <EventProvider Id="virtdisk" Name="4D20DF22-E177-4514-A369-F1759FEEDEB3" Level="4">
238
<Keywords>
239
<Keyword Value="0xFFFFFFFFFFFFFFFF" />
240
</Keywords>
241
</EventProvider>
242
+ <EventProvider Id="virtdisk_wpp" Name="e14dcdd9-d1ec-4dc3-8395-a606df8ef115" Level="4">
243
+ <Keywords>
244
+ <Keyword Value="0xFFFFFFFFFFFFFFFF" />
245
+ </Keywords>
246
+ </EventProvider>
247
+ <EventProvider Id="vm_chipset" Name="de9ba731-7f33-4f44-98c9-6cac856b9f83"/>
248
+ <EventProvider Id="vmcompute" Name="17103E3F-3C6E-4677-BB17-3B267EB5BE57"/>
249
+ <EventProvider Id="vmcompute_dll" Name="AF7FD3A7-B248-460C-A9F5-FEC39EF8468C"/>
250
+ <EventProvider Id="vmmm" Name="6066F867-7CA1-4418-85FD-36E3F9C0600C"/>
251
+ <EventProvider Id="VmSwitch_wpp" Name="1F387CBC-6818-4530-9DB6-5F1058CD7E86"/>
252
+ <EventProvider Id="vmwp" Name="51DDFA29-D5C8-4803-BE4B-2ECB715570FE"/>
253
+ <EventProvider Id="webauth_WPP" Name="EF98103D-8D3A-4BEF-9DF2-2156563E64FA" />
254
+ <EventProvider Id="Webio_WPP" Name="08F93B14-1608-4A72-9CFA-457EECEDBBA7" />
255
+ <EventProvider Id="webplatform_WPP" Name="2A3C6602-411E-4DC6-B138-EA19D64F5BBA" />
256
+ <EventProvider Id="WinHttp_WPP" Name="B3A7698A-0C45-44DA-B73D-E181C9B5C8E6" />
257
+ <EventProvider Id="Wininet_WPP" Name="4E749B6A-667D-4C72-80EF-373EE3246B08" />
258
+ <EventProvider Id="WinNatSys" Name="aa7387cf-3639-496a-b3bf-dc1e79a6fc5a" />
259
+ <EventProvider Id="Winsock_WPP" Name="1D44957B-7181-4835-B70A-D0B16112A4DE" />
260
+ <EventProvider Id="wlidsvc_WPP" Name="3F8B9EF5-BBD2-4C81-B6C9-DA3CDB72D3C5" />
261
+ <EventProvider Id="wsl_devicehost" Name="9d6c7b9e-2581-4d8a-b8c5-b90b4a17094a"/>
262
+ <EventProvider Id="wslapi" Name="beb94edf-1a7b-5058-0696-ff9e6b1798d1"/>
263
+ <EventProvider Id="wslaservice" Name="0383CE62-8F86-4766-AFB2-9D66A7FB1E90"/>
264
+ <EventProvider Id="wslclient" Name="8cbb7724-7223-5d6f-8137-564dac45104d"/>
265
266
+ <!-- PROFILE: General WSL Tracing (Default, also serves as base for other profiles) -->
267
<Profile
268
Id="WSL.Verbose.File"
269
Name="WSL"
107
- Description="Traces for all WSL components"
270
+ Description="General traces for WSL components"
271
LoggingMode="File"
272
DetailLevel="Verbose"
273
>
274
<Collectors>
275
<EventCollectorId Value="Collector">
276
<EventProviders>
114
- <EventProviderId Value="lxcore_kernel"/>
115
- <EventProviderId Value="lxcore_user"/>
116
- <EventProviderId Value="lxcore_service"/>
117
- <EventProviderId Value="wsl_devicehost"/>
118
- <EventProviderId Value="wslclient"/>
119
- <EventProviderId Value="wslaservice"/>
120
- <EventProviderId Value="wslapi"/>
121
- <EventProviderId Value="vfpext"/>
122
- <EventProviderId Value="vm_chipset"/>
123
- <EventProviderId Value="vmcompute_dll"/>
124
- <EventProviderId Value="vmcompute"/>
125
- <EventProviderId Value="vmmm"/>
126
- <EventProviderId Value="vmwp"/>
277
<EventProviderId Value="9p"/>
278
<EventProviderId Value="9p_errors"/>
129
- <EventProviderId Value="p9rdr"/>
130
- <EventProviderId Value="mup"/>
131
- <EventProviderId Value="rfsmon"/>
132
- <EventProviderId Value="hyperv_storage"/>
133
- <EventProviderId Value="hns"/>
134
- <EventProviderId Value="netmgmt"/>
279
+ <EventProviderId Value="EventProvider_Microsoft.Windows.EMPS.Enrollment"/>
280
+ <EventProviderId Value="EventProvider_Microsoft.Windows.EnterpriseManagement.Enrollment"/>
281
<EventProviderId Value="EventProvider_Microsoft.Windows.Mobile.Provisioning.AppDownload"/>
282
<EventProviderId Value="EventProvider_Microsoft.Windows.Mobile.Provisioning.Datastore"/>
283
<EventProviderId Value="EventProvider_Microsoft.Windows.Mobile.Provisioning.PhoneProvisioner"/>
284
<EventProviderId Value="EventProvider_Microsoft.Windows.Mobile.Provisioning.PPOEM"/>
285
+ <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.API"/>
286
+ <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.CommandCsp"/>
287
<EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.CSP"/>
288
<EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Engine"/>
289
+ <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Handlers"/>
290
<EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Migration"/>
142
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Platform"/>
291
<EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Operations"/>
292
+ <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Platform"/>
293
<EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Plugin.Engine"/>
294
<EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Plugin.RemovableMedia"/>
146
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.ProvTool"/>
147
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Operations"/>
148
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.CommandCsp"/>
295
<EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.ProvLaunch"/>
150
- <EventProviderId Value="EventProvider_Microsoft.Windows.EMPS.Enrollment"/>
151
- <EventProviderId Value="EventProvider_Microsoft.Windows.EnterpriseManagement.Enrollment"/>
152
- <EventProviderId Value="Microsoft.Windows.HyperV.Vid"/>
296
+ <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.ProvTool"/>
297
+ <EventProviderId Value="EventProvider_Telemetry_StorVSP"/>
298
+ <EventProviderId Value="EventProvider_Trace_Vhdmp"/>
299
+ <EventProviderId Value="hns"/>
300
+ <EventProviderId Value="HyperV_EmulatedStorage"/>
301
+ <EventProviderId Value="hyperv_storage"/>
302
+ <EventProviderId Value="HyperV_SyntheticStorage"/>
303
+ <EventProviderId Value="lxcore_kernel"/>
304
+ <EventProviderId Value="lxcore_service"/>
305
+ <EventProviderId Value="lxcore_user"/>
306
<EventProviderId Value="Microsoft-Windows-HyperV-Vid"/>
154
- <EventProviderId Value="virtdisk"/>
155
- <EventProviderId Value="virtdisk_wpp"/>
307
+ <EventProviderId Value="Microsoft.Windows.HyperV.Vid"/>
308
+ <EventProviderId Value="mup"/>
309
+ <EventProviderId Value="netmgmt"/>
310
+ <EventProviderId Value="p9rdr"/>
311
+ <EventProviderId Value="rfsmon"/>
312
+ <EventProviderId Value="storvsp"/>
313
+ <EventProviderId Value="vfpext"/>
314
<EventProviderId Value="vhdmp"/>
315
<EventProviderId Value="vhdmp_wpp"/>
158
- <EventProviderId Value="storvsp"/>
159
- <EventProviderId Value="HyperV_SyntheticStorage"/>
160
- <EventProviderId Value="HyperV_EmulatedStorage"/>
161
- <EventProviderId Value="EventProvider_Telemetry_StorVSP"/>
162
- <EventProviderId Value="EventProvider_Trace_Vhdmp"/>
316
+ <EventProviderId Value="virtdisk"/>
317
+ <EventProviderId Value="virtdisk_wpp"/>
318
+ <EventProviderId Value="vm_chipset"/>
319
+ <EventProviderId Value="vmcompute"/>
320
+ <EventProviderId Value="vmcompute_dll"/>
321
+ <EventProviderId Value="vmmm"/>
322
+ <EventProviderId Value="vmwp"/>
323
+ <EventProviderId Value="wsl_devicehost"/>
324
+ <EventProviderId Value="wslapi"/>
325
+ <EventProviderId Value="wslaservice"/>
326
+ <EventProviderId Value="wslclient"/>
327
+ </EventProviders>
328
+ </EventCollectorId>
329
+ </Collectors>
330
+ </Profile>
331
+
332
+ <!-- PROFILE: Storage-focused WSL Tracing -->
333
+ <Profile
334
+ Id="WSL-Storage.Verbose.File"
335
+ Name="WSL-Storage"
336
+ Description="WSL traces with enhanced storage providers"
337
+ LoggingMode="File"
338
+ DetailLevel="Verbose"
339
+ Base="WSL.Verbose.File"
340
+ >
341
+ <Collectors>
342
+ <EventCollectorId Value="Collector">
343
+ <EventProviders>
344
+ <!-- Additional storage-specific providers -->
345
+ <EventProviderId Value="storvsp_io"/>
346
+ <EventProviderId Value="storvsp_wpp"/>
347
+ </EventProviders>
348
+ </EventCollectorId>
349
+ </Collectors>
350
+ </Profile>
351
+
352
+ <!-- PROFILE: Networking-focused WSL Tracing -->
353
+ <Profile
354
+ Id="WSL-Networking.Verbose.File"
355
+ Name="WSL-Networking"
356
+ Description="WSL traces with comprehensive networking providers"
357
+ LoggingMode="File"
358
+ DetailLevel="Verbose"
359
+ Base="WSL.Verbose.File"
360
+ >
361
+ <Collectors>
362
+ <EventCollectorId Value="Collector">
363
+ <EventProviders>
364
+ <!-- Additional networking-specific providers -->
365
+ <EventProviderId Value="aad_WPP"/>
366
+ <EventProviderId Value="basecsp_WPP"/>
367
+ <EventProviderId Value="BCRYPT_WPP"/>
368
+ <EventProviderId Value="BFE_WPP"/>
369
+ <EventProviderId Value="CAPI1_WPP"/>
370
+ <EventProviderId Value="CHAT_WPP"/>
371
+ <EventProviderId Value="cloudap_WPP"/>
372
+ <EventProviderId Value="CNG_WPP"/>
373
+ <EventProviderId Value="credssp_WPP"/>
374
+ <EventProviderId Value="CRYPTOWINRT_WPP"/>
375
+ <EventProviderId Value="dclocator_WPP"/>
376
+ <EventProviderId Value="digest_WPP"/>
377
+ <EventProviderId Value="DNS_WPP"/>
378
+ <EventProviderId Value="dpapis_WPP"/>
379
+ <EventProviderId Value="gMSAClient_WPP"/>
380
+ <EventProviderId Value="HTTP_sys_WPP"/>
381
+ <EventProviderId Value="idcommon_WPP"/>
382
+ <EventProviderId Value="idlisten_WPP"/>
383
+ <EventProviderId Value="idstore_WPP"/>
384
+ <EventProviderId Value="IPNat"/>
385
+ <EventProviderId Value="kdc_WPP"/>
386
+ <EventProviderId Value="kerb_WPP"/>
387
+ <EventProviderId Value="KerbClientShared_WPP"/>
388
+ <EventProviderId Value="KerbComm_WPP"/>
389
+ <EventProviderId Value="kps_WPP"/>
390
+ <EventProviderId Value="livessp_WPP"/>
391
+ <EventProviderId Value="LsaAudit_WPP"/>
392
+ <EventProviderId Value="LsaDs_WPP"/>
393
+ <EventProviderId Value="LsaIso_WPP"/>
394
+ <EventProviderId Value="LsaTrace_WPP"/>
395
+ <EventProviderId Value="Microsoft_OneCore_NetworkingTriage_GetConnected"/>
396
+ <EventProviderId Value="Microsoft_OneCore_NetworkingTriage_OnDemand"/>
397
+ <EventProviderId Value="Microsoft_OneCore_NetworkingTriage_RoutePolicyManagement"/>
398
+ <EventProviderId Value="Microsoft_OSG_OSS_CredProvFramework_ReportResultStop_WPP"/>
399
+ <EventProviderId Value="Microsoft_OSG_Wininet_WPP"/>
400
+ <EventProviderId Value="Microsoft_Quic_ETW"/>
401
+ <EventProviderId Value="Microsoft_Web_Platform_WPP"/>
402
+ <EventProviderId Value="Microsoft_Windows_AppModel_Exec_WPP"/>
403
+ <EventProviderId Value="Microsoft_Windows_BranchCacheClientEventProvider"/>
404
+ <EventProviderId Value="Microsoft_Windows_BranchCacheEventProvider"/>
405
+ <EventProviderId Value="Microsoft_Windows_BrokerInfrastructure_WPP"/>
406
+ <EventProviderId Value="Microsoft_Windows_CAPI2_WPP"/>
407
+ <EventProviderId Value="Microsoft_Windows_CertificateServices_Deployment_WPP"/>
408
+ <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_AutoEnrollment_WPP"/>
409
+ <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_CertEnroll_WPP"/>
410
+ <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_CredentialRoaming_WPP"/>
411
+ <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_Lifecycle_System_WPP"/>
412
+ <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_Lifecycle_User_WPP"/>
413
+ <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_WPP"/>
414
+ <EventProviderId Value="Microsoft_Windows_CertificationAuthorityClient_CertCli_WPP"/>
415
+ <EventProviderId Value="Microsoft_Windows_CertPolEng_WPP"/>
416
+ <EventProviderId Value="Microsoft_Windows_DeviceManagement_Enterprise_Diagnostics_Provider_WPP"/>
417
+ <EventProviderId Value="Microsoft_Windows_DeviceManagement_SCEP_WPP"/>
418
+ <EventProviderId Value="Microsoft_Windows_DM_Enrollment_Provider_WPP"/>
419
+ <EventProviderId Value="Microsoft_Windows_DNS_Client"/>
420
+ <EventProviderId Value="Microsoft_Windows_DNS_Client_Configuration_PowerShell"/>
421
+ <EventProviderId Value="Microsoft_Windows_DNS_Client_WinRNR"/>
422
+ <EventProviderId Value="Microsoft_Windows_HttpService"/>
423
+ <EventProviderId Value="Microsoft_Windows_LiveId_WPP"/>
424
+ <EventProviderId Value="Microsoft_Windows_MicrosoftAccount_TBProvider_WPP"/>
425
+ <EventProviderId Value="Microsoft_Windows_ProcessStateManager_WPP"/>
426
+ <EventProviderId Value="Microsoft_Windows_ResourceManager_WPP"/>
427
+ <EventProviderId Value="Microsoft_Windows_Runtime_Web_Http"/>
428
+ <EventProviderId Value="Microsoft_Windows_Security_AADAuthHelper_WPP"/>
429
+ <EventProviderId Value="Microsoft_Windows_Security_AADCloudAPPlugin_WPP"/>
430
+ <EventProviderId Value="Microsoft_Windows_Security_Biometrics_BioCredProv_WPP"/>
431
+ <EventProviderId Value="Microsoft_Windows_Security_Biometrics_Client_WPP"/>
432
+ <EventProviderId Value="Microsoft_Windows_Security_Biometrics_CredentialProvider_Face_WPP"/>
433
+ <EventProviderId Value="Microsoft_Windows_Security_Biometrics_FingerprintCredential_WPP"/>
434
+ <EventProviderId Value="Microsoft_Windows_Security_Biometrics_Service_WPP"/>
435
+ <EventProviderId Value="Microsoft_Windows_Security_Biometrics_Trustlet_WPP"/>
436
+ <EventProviderId Value="Microsoft_Windows_Security_Credentials_UserConsentVerifier_WPP"/>
437
+ <EventProviderId Value="Microsoft_Windows_Security_DevCredClient_WPP"/>
438
+ <EventProviderId Value="Microsoft_Windows_Security_DevCredProv_WPP"/>
439
+ <EventProviderId Value="Microsoft_Windows_Security_DevCredSvc_WPP"/>
440
+ <EventProviderId Value="Microsoft_Windows_Security_DevCredTask_WPP"/>
441
+ <EventProviderId Value="Microsoft_Windows_Security_DevCredWinRt_WPP"/>
442
+ <EventProviderId Value="Microsoft_Windows_Security_DeviceLock_WPP"/>
443
+ <EventProviderId Value="Microsoft_Windows_Security_Fido_WPP"/>
444
+ <EventProviderId Value="Microsoft_Windows_Security_LsaSrv_WPP"/>
445
+ <EventProviderId Value="Microsoft_Windows_Security_NGC_CredProv_WPP"/>
446
+ <EventProviderId Value="Microsoft_Windows_Security_NGC_CryptNgc_WPP"/>
447
+ <EventProviderId Value="Microsoft_Windows_Security_NGC_CSP_WPP"/>
448
+ <EventProviderId Value="Microsoft_Windows_Security_NGC_KeyCredMgr_WPP"/>
449
+ <EventProviderId Value="Microsoft_Windows_Security_NGC_KeyStaging_WPP"/>
450
+ <EventProviderId Value="Microsoft_Windows_Security_NGC_KspSvc_WPP"/>
451
+ <EventProviderId Value="Microsoft_Windows_Security_NGC_Local_WPP"/>
452
+ <EventProviderId Value="Microsoft_Windows_Security_NGC_LocalAccountMigPlugin_WPP"/>
453
+ <EventProviderId Value="Microsoft_Windows_Security_NGC_NgcCtnr_WPP"/>
454
+ <EventProviderId Value="Microsoft_Windows_Security_NGC_NgcCtnrSvc_WPP"/>
455
+ <EventProviderId Value="Microsoft_Windows_Security_NGC_NgcIsoCtnr_WPP"/>
456
+ <EventProviderId Value="Microsoft_Windows_Security_NGC_PopKeySrv_WPP"/>
457
+ <EventProviderId Value="Microsoft_Windows_Security_NGC_Recovery_WPP"/>
458
+ <EventProviderId Value="Microsoft_Windows_Security_NGC_Trustlet_WPP"/>
459
+ <EventProviderId Value="Microsoft_Windows_Security_TokenBroker_WPP"/>
460
+ <EventProviderId Value="Microsoft_Windows_Shell_CloudDomainJoin_Client_WPP"/>
461
+ <EventProviderId Value="Microsoft_Windows_Shell_CloudExperienceHost_WPP"/>
462
+ <EventProviderId Value="Microsoft_Windows_WBioSrvc_WPP"/>
463
+ <EventProviderId Value="Microsoft_Windows_WebIO"/>
464
+ <EventProviderId Value="Microsoft_Windows_WinHttp"/>
465
+ <EventProviderId Value="Microsoft_Windows_WinINet"/>
466
+ <EventProviderId Value="Microsoft_Windows_Winsock_NameResolution"/>
467
+ <EventProviderId Value="Microsoft-Windows-DHCP-Client"/>
468
+ <EventProviderId Value="Microsoft-Windows-DHCPv6-Client"/>
469
+ <EventProviderId Value="Microsoft-Windows-Host-Network-Management"/>
470
+ <EventProviderId Value="Microsoft-Windows-Hyper-V-VfpExt"/>
471
+ <EventProviderId Value="Microsoft-Windows-Hyper-V-VmSwitch"/>
472
+ <EventProviderId Value="Microsoft-Windows-Overlay-HNSPlugin"/>
473
+ <EventProviderId Value="Microsoft-Windows-SharedAccess_NAT"/>
474
+ <EventProviderId Value="Microsoft-Windows-TCPIP"/>
475
+ <EventProviderId Value="Microsoft-Windows-WinNat"/>
476
+ <EventProviderId Value="Microsoft.Windows.HostNetworkingService.PrivateCloudPlugin"/>
477
+ <EventProviderId Value="Microsoft.Windows.Hyper.V.NetSetupHelper"/>
478
+ <EventProviderId Value="Microsoft.Windows.Hyper.V.VmsIf"/>
479
+ <EventProviderId Value="Microsoft.Windows.HyperV.Compute"/>
480
+ <EventProviderId Value="Microsoft.Windows.HyperV.Socket"/>
481
+ <EventProviderId Value="Microsoft.Windows.Networking.FlowSteering"/>
482
+ <EventProviderId Value="mpssvcService"/>
483
+ <EventProviderId Value="MsQuic_WPP"/>
484
+ <EventProviderId Value="msxml_WPP"/>
485
+ <EventProviderId Value="NCRYPT_WPP"/>
486
+ <EventProviderId Value="NCRYPTSSLP_WPP"/>
487
+ <EventProviderId Value="ndis_wpp"/>
488
+ <EventProviderId Value="negoexts_WPP"/>
489
+ <EventProviderId Value="Netio_WPP"/>
490
+ <EventProviderId Value="ntlm_WPP"/>
491
+ <EventProviderId Value="NtlmShared_WPP"/>
492
+ <EventProviderId Value="pku2u_WPP"/>
493
+ <EventProviderId Value="PortTrackerServer_WPP"/>
494
+ <EventProviderId Value="SharedAccessWPP"/>
495
+ <EventProviderId Value="TLS_WPP"/>
496
+ <EventProviderId Value="TokenBinding_WPP"/>
497
+ <EventProviderId Value="TPM_WPP"/>
498
+ <EventProviderId Value="UrlMon_WPP"/>
499
+ <EventProviderId Value="vault_WPP"/>
500
+ <EventProviderId Value="VmSwitch_wpp"/>
501
+ <EventProviderId Value="webauth_WPP"/>
502
+ <EventProviderId Value="Webio_WPP"/>
503
+ <EventProviderId Value="webplatform_WPP"/>
504
+ <EventProviderId Value="WinHttp_WPP"/>
505
+ <EventProviderId Value="Wininet_WPP"/>
506
+ <EventProviderId Value="WinNatSys"/>
507
+ <EventProviderId Value="Winsock_WPP"/>
508
+ <EventProviderId Value="wlidsvc_WPP"/>
509
</EventProviders>
510
</EventCollectorId>
511
</Collectors>
512
</Profile>
513
+
514
+ <!-- PROFILE: HvSocket-focused WSL Tracing -->
515
+ <Profile
516
+ Id="WSL-HvSocket.Verbose.File"
517
+ Name="WSL-HvSocket"
518
+ Description="WSL traces with HvSocket-specific providers"
519
+ LoggingMode="File"
520
+ DetailLevel="Verbose"
521
+ Base="WSL.Verbose.File"
522
+ >
523
+ <Collectors>
524
+ <EventCollectorId Value="Collector">
525
+ <EventProviders>
526
+ <!-- Additional providers specific to HvSocket profile -->
527
+ <EventProviderId Value="EventProvider_HvSocketTraceProvider"/>
528
+ </EventProviders>
529
+ </EventCollectorId>
530
+ </Collectors>
531
+ </Profile>
532
+
533
</Profiles>
168
-</WindowsPerformanceRecorder>
\ No newline at end of file
534
+</WindowsPerformanceRecorder>
diagnostics/wsl_hvsocket.wprp
deleted
-172
@@ -1,172 +0,0 @@
1
-<?xml version="1.0"?>
2
-<WindowsPerformanceRecorder Version="1">
3
- <Profiles>
4
- <EventCollector Id="Collector" Name="Collector">
5
- <BufferSize Value="512" />
6
- <Buffers Value="10" PercentageOfTotalMemory="true"/>
7
- </EventCollector>
8
-
9
- <EventProvider Id="EventProvider_HvSocketTraceProvider" Name="B2ED3BDB-CD74-5B2C-F660-85079CA074B3" NonPagedMemory="true">
10
- <Keywords>
11
- <Keyword Value="0x0"/>
12
- </Keywords>
13
- </EventProvider>
14
-
15
-
16
- <EventProvider Id="lxcore_kernel" Name="0CD1C309-0878-4515-83DB-749843B3F5C9"/>
17
- <EventProvider Id="lxcore_user" Name="D90B9468-67F0-5B3B-42CC-82AC81FFD960"/>
18
- <EventProvider Id="lxcore_service" Name="B99CDB5A-039C-5046-E672-1A0DE0A40211"/>
19
- <EventProvider Id="wsl_devicehost" Name="9d6c7b9e-2581-4d8a-b8c5-b90b4a17094a"/>
20
- <EventProvider Id="wslclient" Name="8cbb7724-7223-5d6f-8137-564dac45104d"/>
21
- <EventProvider Id="wslapi" Name="beb94edf-1a7b-5058-0696-ff9e6b1798d1"/>
22
- <EventProvider Id="vm_chipset" Name="de9ba731-7f33-4f44-98c9-6cac856b9f83"/>
23
- <EventProvider Id="vmcompute_dll" Name="AF7FD3A7-B248-460C-A9F5-FEC39EF8468C"/>
24
- <EventProvider Id="vmcompute" Name="17103E3F-3C6E-4677-BB17-3B267EB5BE57"/>
25
- <EventProvider Id="vmmm" Name="6066F867-7CA1-4418-85FD-36E3F9C0600C"/>
26
- <EventProvider Id="vmwp" Name="51DDFA29-D5C8-4803-BE4B-2ECB715570FE"/>
27
- <EventProvider Id="9p" Name="e13c8d52-b153-571f-78c5-1d4098af2a1e"/>
28
- <EventProvider Id="9p_errors" Name="06C601B3-6957-4F8C-A15F-74875B24429D" />
29
- <EventProvider Id="p9rdr" Name="bb1d36f0-e0e0-48cc-9493-fef0e3d0b28c" />
30
- <EventProvider Id="mup" Name="20c46239-d059-4214-a11e-7d6769cbe020" />
31
- <EventProvider Id="rfsmon" Name="51734B23-5B7E-4892-BA8E-45BC110B735C" />
32
- <EventProvider Id="hyperv_storage" Name="c7ad62c6-5c99-5a1b-bbc4-0821ae5b765e" />
33
- <EventProvider Id="hns" Name="0c885e0d-6eb6-476c-a048-2457eed3a5c1" />
34
- <EventProvider Id="netmgmt" Name="93f693dc-9163-4dee-af64-d855218af242" />
35
- <EventProvider Id="EventProvider_Microsoft.Windows.Mobile.Provisioning.AppDownload" Name="0BBE6221-EF09-4A3F-82EE-BE00DBB6A98A" />
36
- <EventProvider Id="EventProvider_Microsoft.Windows.Mobile.Provisioning.Datastore" Name="42C60CEA-0FE7-4541-A86B-9E11F95BD9BF" />
37
- <EventProvider Id="EventProvider_Microsoft.Windows.Mobile.Provisioning.PhoneProvisioner" Name="B876B1FC-C7F1-443E-9012-86677F7DE580" />
38
- <EventProvider Id="EventProvider_Microsoft.Windows.Mobile.Provisioning.PPOEM" Name="7EDBED09-1FF7-4FEE-B8C3-5DB694420830" />
39
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.API" Name="82ADD491-01D7-4B85-9EAD-192C3CAACA23" />
40
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.CSP" Name="16E12400-A2D8-44B7-9479-004568EC7819" />
41
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Engine" Name="A6A847B7-4429-49AA-BBA6-2AD8C191AC8C" />
42
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Handlers" Name="0383D92C-2337-4F25-A0B5-A51767F04746" />
43
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Migration" Name="A0AF985E-83F9-4E1A-B658-338DCFE27893" />
44
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Operations" Name="7F99598F-B2C1-4371-9911-63DEE13B9EB1" />
45
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Platform" Name="B1F30020-8BC3-4888-BB1B-4DD681F24209" />
46
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Plugin.Engine" Name="55239D60-0EB6-495B-874E-15DE5D5F9A70" />
47
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Plugin.RemovableMedia" Name="B55883E6-6C45-45C2-AB9D-800BB7B66B13" />
48
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.ProvTool" Name="2BF4B6BA-556E-4D05-8534-CAFEDF19FED8" />
49
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.CommandCsp" Name="00BB69FC-60BC-4502-9438-25608F375CCB" />
50
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.ProvLaunch" Name="08FACCFA-125D-4ED6-B0B7-B4A1A912E693" />
51
- <EventProvider Id="EventProvider_Microsoft.Windows.EMPS.Enrollment" Name="E74EFD1A-B62D-4B83-AB00-66F4A166A2D3" />
52
- <EventProvider Id="EventProvider_Microsoft.Windows.EnterpriseManagement.Enrollment" Name="F9E3B648-9AF1-4DC3-9A8E-BF42C0FBCE9A" />
53
- <EventProvider Id="Microsoft.Windows.HyperV.Vid" Name="1111450B-DACC-40A3-84AB-F7DBA4A6E63A" NonPagedMemory="true"/>
54
- <EventProvider Id="Microsoft-Windows-HyperV-Vid" Name="5931D877-4860-4ee7-A95C-610A5F0D1407" NonPagedMemory="true" />
55
- <EventProvider Id="virtdisk_wpp" Name="e14dcdd9-d1ec-4dc3-8395-a606df8ef115" Level="4">
56
- <Keywords>
57
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
58
- </Keywords>
59
- </EventProvider>
60
-
61
- <EventProvider Id="virtdisk" Name="4D20DF22-E177-4514-A369-F1759FEEDEB3" Level="4">
62
- <Keywords>
63
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
64
- </Keywords>
65
- </EventProvider>
66
-
67
- <EventProvider Id="vhdmp" Name="E2816346-87F4-4F85-95C3-0C79409AA89D" NonPagedMemory="true" Level="4">
68
- <Keywords>
69
- <Keyword Value="0xFFFFFFFFFFFFFFFD" />
70
- </Keywords>
71
- </EventProvider>
72
-
73
- <EventProvider Id="vhdmp_wpp" Name="3c70c3b0-2fae-41d3-b68d-8f7fcaf79adb" NonPagedMemory="true" Level="5">
74
- <Keywords>
75
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
76
- </Keywords>
77
- </EventProvider>
78
-
79
- <EventProvider Id="storvsp" Name="10b3d268-9782-49a4-aacc-a93c5482cb6f" NonPagedMemory="true" Level="4">
80
- <Keywords>
81
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
82
- </Keywords>
83
- </EventProvider>
84
-
85
- <EventProvider Id="HyperV_SyntheticStorage" Name="EDACD782-2564-4497-ADE6-7199377850F2" Level="6">
86
- <Keywords>
87
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
88
- </Keywords>
89
- </EventProvider>
90
-
91
- <EventProvider Id="HyperV_EmulatedStorage" Name="86E15E01-EDF1-4AC7-89CF-B19563FD6894" Level="6">
92
- <Keywords>
93
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
94
- </Keywords>
95
- </EventProvider>
96
-
97
- <EventProvider Id="EventProvider_Telemetry_StorVSP" Name="544d0787-9f6d-432e-8414-e035a8b0541d">
98
- <Keywords>
99
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
100
- </Keywords>
101
- </EventProvider>
102
-
103
- <EventProvider Id="EventProvider_Trace_Vhdmp" Name="dc284fb3-1eab-4854-828a-b25417280280" Level="3">
104
- <Keywords>
105
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
106
- </Keywords>
107
- </EventProvider>
108
-
109
- <Profile
110
- Id="WSL.Verbose.File"
111
- Name="WSL"
112
- Description="Traces for all WSL components"
113
- LoggingMode="File"
114
- DetailLevel="Verbose"
115
- >
116
- <Collectors>
117
- <EventCollectorId Value="Collector">
118
- <EventProviders>
119
- <EventProviderId Value="lxcore_kernel"/>
120
- <EventProviderId Value="lxcore_user"/>
121
- <EventProviderId Value="lxcore_service"/>
122
- <EventProviderId Value="wsl_devicehost"/>
123
- <EventProviderId Value="wslclient"/>
124
- <EventProviderId Value="wslapi"/>
125
- <EventProviderId Value="vm_chipset"/>
126
- <EventProviderId Value="vmcompute_dll"/>
127
- <EventProviderId Value="vmcompute"/>
128
- <EventProviderId Value="vmmm"/>
129
- <EventProviderId Value="vmwp"/>
130
- <EventProviderId Value="9p"/>
131
- <EventProviderId Value="9p_errors"/>
132
- <EventProviderId Value="p9rdr"/>
133
- <EventProviderId Value="mup"/>
134
- <EventProviderId Value="rfsmon"/>
135
- <EventProviderId Value="hyperv_storage"/>
136
- <EventProviderId Value="hns"/>
137
- <EventProviderId Value="netmgmt"/>
138
- <EventProviderId Value="EventProvider_Microsoft.Windows.Mobile.Provisioning.AppDownload"/>
139
- <EventProviderId Value="EventProvider_Microsoft.Windows.Mobile.Provisioning.Datastore"/>
140
- <EventProviderId Value="EventProvider_Microsoft.Windows.Mobile.Provisioning.PhoneProvisioner"/>
141
- <EventProviderId Value="EventProvider_Microsoft.Windows.Mobile.Provisioning.PPOEM"/>
142
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.CSP"/>
143
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Engine"/>
144
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Migration"/>
145
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Platform"/>
146
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Operations"/>
147
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Plugin.Engine"/>
148
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Plugin.RemovableMedia"/>
149
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.ProvTool"/>
150
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Operations"/>
151
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.CommandCsp"/>
152
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.ProvLaunch"/>
153
- <EventProviderId Value="EventProvider_Microsoft.Windows.EMPS.Enrollment"/>
154
- <EventProviderId Value="EventProvider_Microsoft.Windows.EnterpriseManagement.Enrollment"/>
155
- <EventProviderId Value="Microsoft.Windows.HyperV.Vid"/>
156
- <EventProviderId Value="Microsoft-Windows-HyperV-Vid"/>
157
- <EventProviderId Value="virtdisk"/>
158
- <EventProviderId Value="virtdisk_wpp"/>
159
- <EventProviderId Value="vhdmp"/>
160
- <EventProviderId Value="vhdmp_wpp"/>
161
- <EventProviderId Value="storvsp"/>
162
- <EventProviderId Value="HyperV_SyntheticStorage"/>
163
- <EventProviderId Value="HyperV_EmulatedStorage"/>
164
- <EventProviderId Value="EventProvider_Telemetry_StorVSP"/>
165
- <EventProviderId Value="EventProvider_Trace_Vhdmp"/>
166
- <EventProviderId Value="EventProvider_HvSocketTraceProvider" />
167
- </EventProviders>
168
- </EventCollectorId>
169
- </Collectors>
170
- </Profile>
171
- </Profiles>
172
-</WindowsPerformanceRecorder>
\ No newline at end of file
diagnostics/wsl_networking.wprp
deleted
-410
@@ -1,410 +0,0 @@
1
-<?xml version="1.0"?>
2
-<WindowsPerformanceRecorder Version="1">
3
- <Profiles>
4
- <EventCollector Id="Collector" Name="Collector">
5
- <BufferSize Value="256"/>
6
- <Buffers Value="4096"/>
7
- </EventCollector>
8
-
9
- <EventProvider Id="lxcore_kernel" Name="0CD1C309-0878-4515-83DB-749843B3F5C9"/>
10
- <EventProvider Id="lxcore_user" Name="D90B9468-67F0-5B3B-42CC-82AC81FFD960"/>
11
- <EventProvider Id="lxcore_service" Name="B99CDB5A-039C-5046-E672-1A0DE0A40211"/>
12
- <EventProvider Id="wsl_devicehost" Name="9d6c7b9e-2581-4d8a-b8c5-b90b4a17094a"/>
13
- <EventProvider Id="wslclient" Name="8cbb7724-7223-5d6f-8137-564dac45104d"/>
14
- <EventProvider Id="vm_chipset" Name="de9ba731-7f33-4f44-98c9-6cac856b9f83"/>
15
- <EventProvider Id="vmcompute_dll" Name="AF7FD3A7-B248-460C-A9F5-FEC39EF8468C"/>
16
- <EventProvider Id="vmcompute" Name="17103E3F-3C6E-4677-BB17-3B267EB5BE57"/>
17
- <EventProvider Id="vmmm" Name="6066F867-7CA1-4418-85FD-36E3F9C0600C"/>
18
- <EventProvider Id="vmwp" Name="51DDFA29-D5C8-4803-BE4B-2ECB715570FE"/>
19
- <EventProvider Id="9p" Name="e13c8d52-b153-571f-78c5-1d4098af2a1e"/>
20
- <EventProvider Id="9p_errors" Name="06C601B3-6957-4F8C-A15F-74875B24429D" />
21
- <EventProvider Id="p9rdr" Name="bb1d36f0-e0e0-48cc-9493-fef0e3d0b28c" />
22
- <EventProvider Id="mup" Name="20c46239-d059-4214-a11e-7d6769cbe020" />
23
- <EventProvider Id="rfsmon" Name="51734B23-5B7E-4892-BA8E-45BC110B735C" />
24
- <EventProvider Id="hyperv_storage" Name="c7ad62c6-5c99-5a1b-bbc4-0821ae5b765e" />
25
- <EventProvider Id="hns" Name="0c885e0d-6eb6-476c-a048-2457eed3a5c1" />
26
- <EventProvider Id="netmgmt" Name="93f693dc-9163-4dee-af64-d855218af242" />
27
- <EventProvider Id="EventProvider_Microsoft.Windows.Mobile.Provisioning.AppDownload" Name="0BBE6221-EF09-4A3F-82EE-BE00DBB6A98A" />
28
- <EventProvider Id="EventProvider_Microsoft.Windows.Mobile.Provisioning.Datastore" Name="42C60CEA-0FE7-4541-A86B-9E11F95BD9BF" />
29
- <EventProvider Id="EventProvider_Microsoft.Windows.Mobile.Provisioning.PhoneProvisioner" Name="B876B1FC-C7F1-443E-9012-86677F7DE580" />
30
- <EventProvider Id="EventProvider_Microsoft.Windows.Mobile.Provisioning.PPOEM" Name="7EDBED09-1FF7-4FEE-B8C3-5DB694420830" />
31
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.API" Name="82ADD491-01D7-4B85-9EAD-192C3CAACA23" />
32
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.CSP" Name="16E12400-A2D8-44B7-9479-004568EC7819" />
33
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Engine" Name="A6A847B7-4429-49AA-BBA6-2AD8C191AC8C" />
34
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Handlers" Name="0383D92C-2337-4F25-A0B5-A51767F04746" />
35
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Migration" Name="A0AF985E-83F9-4E1A-B658-338DCFE27893" />
36
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Operations" Name="7F99598F-B2C1-4371-9911-63DEE13B9EB1" />
37
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Platform" Name="B1F30020-8BC3-4888-BB1B-4DD681F24209" />
38
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Plugin.Engine" Name="55239D60-0EB6-495B-874E-15DE5D5F9A70" />
39
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.Plugin.RemovableMedia" Name="B55883E6-6C45-45C2-AB9D-800BB7B66B13" />
40
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.ProvTool" Name="2BF4B6BA-556E-4D05-8534-CAFEDF19FED8" />
41
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.CommandCsp" Name="00BB69FC-60BC-4502-9438-25608F375CCB" />
42
- <EventProvider Id="EventProvider_Microsoft.Windows.Provisioning.ProvLaunch" Name="08FACCFA-125D-4ED6-B0B7-B4A1A912E693" />
43
- <EventProvider Id="EventProvider_Microsoft.Windows.EMPS.Enrollment" Name="E74EFD1A-B62D-4B83-AB00-66F4A166A2D3" />
44
- <EventProvider Id="EventProvider_Microsoft.Windows.EnterpriseManagement.Enrollment" Name="F9E3B648-9AF1-4DC3-9A8E-BF42C0FBCE9A" />
45
- <EventProvider Id="virtdisk_wpp" Name="e14dcdd9-d1ec-4dc3-8395-a606df8ef115" Level="4">
46
- <Keywords>
47
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
48
- </Keywords>
49
- </EventProvider>
50
-
51
- <EventProvider Id="virtdisk" Name="4D20DF22-E177-4514-A369-F1759FEEDEB3" Level="4">
52
- <Keywords>
53
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
54
- </Keywords>
55
- </EventProvider>
56
-
57
- <EventProvider Id="vhdmp" Name="E2816346-87F4-4F85-95C3-0C79409AA89D" NonPagedMemory="true" Level="4">
58
- <Keywords>
59
- <Keyword Value="0xFFFFFFFFFFFFFFFD" />
60
- </Keywords>
61
- </EventProvider>
62
-
63
- <EventProvider Id="vhdmp_wpp" Name="3c70c3b0-2fae-41d3-b68d-8f7fcaf79adb" NonPagedMemory="true" Level="5">
64
- <Keywords>
65
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
66
- </Keywords>
67
- </EventProvider>
68
- <EventProvider Id="LsaAudit_WPP" Name="DAA76F6A-2D11-4399-A646-1D62B7380F15" />
69
- <EventProvider Id="Microsoft_Windows_ResourceManager_WPP" Name="4180C4F7-E238-5519-338F-EC214F0B49AA" />
70
- <EventProvider Id="Microsoft_Windows_Security_NGC_KeyCredMgr_WPP" Name="34646397-1635-5D14-4D2C-2FEBDCCCF5E9" />
71
- <EventProvider Id="Microsoft_Windows_Security_NGC_NgcIsoCtnr_WPP" Name="CDC6BEB9-6D78-5138-D232-D951916AB98F" />
72
- <EventProvider Id="Microsoft_OneCore_NetworkingTriage_OnDemand" Name="ABB1FC61-49BA-4CC3-809F-7ABE1F8BA315" />
73
- <EventProvider Id="wlidsvc_WPP" Name="3F8B9EF5-BBD2-4C81-B6C9-DA3CDB72D3C5" />
74
- <EventProvider Id="Microsoft_Windows_WebIO" Name="50b3e73c-9370-461d-bb9f-26f32d68887d" />
75
- <EventProvider Id="msxml_WPP" Name="927821F8-D9E6-42E2-84F2-949E18256F3A" />
76
- <EventProvider Id="Microsoft_Windows_HttpService" Name="dd5ef90a-6398-47a4-ad34-4dcecdef795f" />
77
- <EventProvider Id="Microsoft_Windows_Security_NGC_Trustlet_WPP" Name="C0B2937D-E634-56A2-1451-7D678AA3BC53" />
78
- <EventProvider Id="Microsoft_Web_Platform_WPP" Name="FF32ADA1-5A4B-583C-889E-A3C027B201F5" />
79
- <EventProvider Id="Microsoft_Windows_Shell_CloudDomainJoin_Client_WPP" Name="AA02D1A4-72D8-5F50-D425-7402EA09253A" />
80
- <EventProvider Id="HTTP_sys_WPP" Name="20F61733-57F1-4127-9F48-4AB7A9308AE2" />
81
- <EventProvider Id="CHAT_WPP" Name="9B52E09F-0C58-4EAF-877F-70F9B54A7946" />
82
- <EventProvider Id="Microsoft_Windows_Security_NGC_NgcCtnrSvc_WPP" Name="9DF6A82D-5174-5EBF-842A-39947C48BF2A" />
83
- <EventProvider Id="Microsoft_Windows_BranchCacheEventProvider" Name="dd85457f-4e2d-44a5-a7a7-6253362e34dc" />
84
- <EventProvider Id="BFE_WPP" Name="106B464A-8043-46B1-8CB8-E92A0CD7A560" />
85
- <EventProvider Id="kerb_WPP" Name="6B510852-3583-4E2D-AFFE-A67F9F223438" />
86
- <EventProvider Id="Microsoft_Windows_Runtime_Web_Http" Name="41877cb4-11fc-4188-b590-712c143c881d" />
87
- <EventProvider Id="Microsoft_Windows_Shell_CloudExperienceHost_WPP" Name="D0034F5E-3686-5A74-DC48-5A22DD4F3D5B" />
88
- <EventProvider Id="NCRYPT_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473301" />
89
- <EventProvider Id="pku2u_WPP" Name="2A6FAF47-5449-4805-89A3-A504F3E221A6" />
90
- <EventProvider Id="Microsoft_Windows_Security_Biometrics_Service_WPP" Name="39A5AA08-031D-4777-A32D-ED386BF03470" />
91
- <EventProvider Id="CAPI1_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473305" />
92
- <EventProvider Id="Microsoft_Windows_Security_DevCredTask_WPP" Name="86D5FE65-0564-4618-B90B-E146049DEBF4" />
93
- <EventProvider Id="MsQuic_WPP" Name="620FD025-BE51-42EF-A5C0-50F13F183AD9" />
94
- <EventProvider Id="Microsoft_Windows_Security_DevCredClient_WPP" Name="78983C7D-917F-58DA-E8D4-F393DECF4EC0" />
95
- <EventProvider Id="Microsoft_Windows_Security_NGC_Local_WPP" Name="3B9DBF69-E9F0-5389-D054-A94BC30E33F7" />
96
- <EventProvider Id="Microsoft_Windows_DM_Enrollment_Provider_WPP" Name="9FBF7B95-0697-4935-ADA2-887BE9DF12BC" />
97
- <EventProvider Id="TokenBinding_WPP" Name="AEF66A73-A765-4421-B348-B7E0FC8C9898" />
98
- <EventProvider Id="KerbClientShared_WPP" Name="FACB33C4-4513-4C38-AD1E-57C1F6828FC0" />
99
- <EventProvider Id="Microsoft_OneCore_NetworkingTriage_RoutePolicyManagement" Name="923C0FFD-7933-4B52-8A49-121ABF2DC357" />
100
- <EventProvider Id="ntlm_WPP" Name="5BBB6C18-AA45-49B1-A15F-085F7ED0AA90" />
101
- <EventProvider Id="NCRYPTSSLP_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473304" />
102
- <EventProvider Id="Microsoft_Windows_CAPI2_WPP" Name="5BBCA4A8-B209-48DC-A8C7-B23D3E5216FB" />
103
- <EventProvider Id="DNS_WPP" Name="609151DD-04F5-4DA7-974C-FC6947EAA323" />
104
- <EventProvider Id="Microsoft_Windows_CertificateServicesClient_CertEnroll_WPP" Name="54164045-7C50-4905-963F-E5BC1EEF0CCA" />
105
- <EventProvider Id="Webio_WPP" Name="08F93B14-1608-4A72-9CFA-457EECEDBBA7" />
106
- <EventProvider Id="TPM_WPP" Name="3A8D6942-B034-48E2-B314-F69C2B4655A3" />
107
- <EventProvider Id="Microsoft_Windows_CertificateServicesClient_Lifecycle_User_WPP" Name="BEA18B89-126F-4155-9EE4-D36038B02680" />
108
- <EventProvider Id="Microsoft_Windows_MicrosoftAccount_TBProvider_WPP" Name="5836994D-A677-53E7-1389-588AD1420CC5" />
109
- <EventProvider Id="vault_WPP" Name="7FDD167C-79E5-4403-8C84-B7C0BB9923A1" />
110
- <EventProvider Id="Microsoft_Windows_Security_Biometrics_Client_WPP" Name="1B5106B1-7622-4740-AD81-D9C6EE74F124" />
111
- <EventProvider Id="Microsoft_Windows_BranchCacheClientEventProvider" Name="e837619c-a2a8-4689-833f-47b48ebd2442" />
112
- <EventProvider Id="CRYPTOWINRT_WPP" Name="786396CD-2FF3-53D3-D1CA-43E41D9FB73B" />
113
- <EventProvider Id="Microsoft_Windows_Security_NGC_CryptNgc_WPP" Name="6D7051A0-9C83-5E52-CF8F-0ECAF5D5F6FD" />
114
- <EventProvider Id="Microsoft_Windows_CertificateServicesClient_AutoEnrollment_WPP" Name="F0DB7EF8-B6F3-4005-9937-FEB77B9E1B43" />
115
- <EventProvider Id="Microsoft_Windows_CertPolEng_WPP" Name="AF9CC194-E9A8-42BD-B0D1-834E9CFAB799" />
116
- <EventProvider Id="dpapis_WPP" Name="EA3F84FC-03BB-540E-B6AA-9664F81A31FB" />
117
- <EventProvider Id="Microsoft_Windows_CertificationAuthorityClient_CertCli_WPP" Name="98BF1CD3-583E-4926-95EE-A61BF3F46470" />
118
- <EventProvider Id="KerbComm_WPP" Name="60A7AB7A-BC57-43E9-B78A-A1D516577AE3" />
119
- <EventProvider Id="Microsoft_Windows_Security_LsaSrv_WPP" Name="4D9DFB91-4337-465A-A8B5-05A27D930D48" />
120
- <EventProvider Id="Microsoft_Windows_Security_AADAuthHelper_WPP" Name="9EBB3B15-B094-41B1-A3B8-0F141B06BADD" />
121
- <EventProvider Id="TLS_WPP" Name="37D2C3CD-C5D4-4587-8531-4696C44244C8" />
122
- <EventProvider Id="webauth_WPP" Name="EF98103D-8D3A-4BEF-9DF2-2156563E64FA" />
123
- <EventProvider Id="idlisten_WPP" Name="D93FE84A-795E-4608-80EC-CE29A96C8658" />
124
- <EventProvider Id="Winsock_WPP" Name="1D44957B-7181-4835-B70A-D0B16112A4DE" />
125
- <EventProvider Id="Microsoft_Windows_Security_NGC_KspSvc_WPP" Name="B66B577F-AE49-5CCF-D2D7-8EB96BFD440C" />
126
- <EventProvider Id="aad_WPP" Name="4DE9BC9C-B27A-43C9-8994-0915F1A5E24F" />
127
- <EventProvider Id="LsaIso_WPP" Name="366B218A-A5AA-4096-8131-0BDAFCC90E93" />
128
- <EventProvider Id="Microsoft_Windows_Security_TokenBroker_WPP" Name="077B8C4A-E425-578D-F1AC-6FDF1220FF68" />
129
- <EventProvider Id="CNG_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473303" />
130
- <EventProvider Id="NtlmShared_WPP" Name="AC69AE5B-5B21-405F-8266-4424944A43E9" />
131
- <EventProvider Id="Microsoft_Windows_CertificateServicesClient_Lifecycle_System_WPP" Name="BC0669E1-A10D-4A78-834E-1CA3C806C93B" />
132
- <EventProvider Id="Microsoft_Windows_DeviceManagement_SCEP_WPP" Name="D5A5B540-C580-4DEE-8BB4-185E34AA00C5" />
133
- <EventProvider Id="Microsoft_Windows_Security_Biometrics_CredentialProvider_Face_WPP" Name="1D480C11-3870-4B19-9144-47A53CD973BD" />
134
- <EventProvider Id="credssp_WPP" Name="6165F3E2-AE38-45D4-9B23-6B4818758BD9" />
135
- <EventProvider Id="basecsp_WPP" Name="133A980D-035D-4E2D-B250-94577AD8FCED" />
136
- <EventProvider Id="gMSAClient_WPP" Name="2D45EC97-EF01-4D4F-B9ED-EE3F4D3C11F3" />
137
- <EventProvider Id="Microsoft_Windows_Security_DeviceLock_WPP" Name="2056054C-97A6-5AE4-B181-38BC6B58007E" />
138
- <EventProvider Id="Microsoft_Windows_Security_Biometrics_FingerprintCredential_WPP" Name="225B3FED-0356-59D1-1F82-EED163299FA8" />
139
- <EventProvider Id="BCRYPT_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473302" />
140
- <EventProvider Id="idstore_WPP" Name="82C7D3DF-434D-44FC-A7CC-453A8075144E" />
141
- <EventProvider Id="Wininet_WPP" Name="4E749B6A-667D-4C72-80EF-373EE3246B08" />
142
- <EventProvider Id="idcommon_WPP" Name="B1108F75-3252-4B66-9239-80FD47E06494" />
143
- <EventProvider Id="Microsoft_Windows_DNS_Client" Name="1c95126e-7eea-49a9-a3fe-a378b03ddb4d" />
144
- <EventProvider Id="Microsoft_Windows_DNS_Client_Configuration_PowerShell" Name="563a50d8-3536-4c8a-a361-b37af04094ec" />
145
- <EventProvider Id="Microsoft-Windows-DHCP-Client" Name="15A7A4F8-0072-4EAB-ABAD-F98A4D666AED" />
146
- <EventProvider Id="Microsoft-Windows-DHCPv6-Client" Name="6A1F2B00-6A90-4C38-95A5-5CAB3B056778" />
147
- <EventProvider Id="Microsoft_Windows_AppModel_Exec_WPP" Name="EB65A492-86C0-406A-BACE-9912D595BD69" />
148
- <EventProvider Id="Microsoft_Windows_Security_DevCredSvc_WPP" Name="C3FEB5BF-1A8D-53F3-AAA8-44496392BF69" />
149
- <EventProvider Id="Microsoft_Quic_ETW" Name="ff15e657-4f26-570e-88ab-0796b258d11c" />
150
- <EventProvider Id="LsaDs_WPP" Name="169EC169-5B77-4A3E-9DB6-441799D5CACB" />
151
- <EventProvider Id="Microsoft_Windows_WBioSrvc_WPP" Name="34BEC984-F11F-4F1F-BB9B-3BA33C8D0132" />
152
- <EventProvider Id="Microsoft_Windows_Security_AADCloudAPPlugin_WPP" Name="556045FD-58C5-4A97-9881-B121F68B79C5" />
153
- <EventProvider Id="Microsoft_Windows_CertificateServices_Deployment_WPP" Name="B2D1F576-2E85-4489-B504-1861C40544B3" />
154
- <EventProvider Id="Microsoft_Windows_Security_NGC_CSP_WPP" Name="89F392FF-EE7C-56A3-3F61-2D5B31A36935" />
155
- <EventProvider Id="kps_WPP" Name="97A38277-13C0-4394-A0B2-2A70B465D64F" />
156
- <EventProvider Id="WinHttp_WPP" Name="B3A7698A-0C45-44DA-B73D-E181C9B5C8E6" />
157
- <EventProvider Id="Microsoft_Windows_Security_NGC_NgcCtnr_WPP" Name="0ABA6892-455B-551D-7DA8-3A8F85225E1A" />
158
- <EventProvider Id="Microsoft_Windows_Security_DevCredWinRt_WPP" Name="36FF4C84-82A2-4B23-8BA5-A25CBDFF3410" />
159
- <EventProvider Id="Microsoft_Windows_Security_NGC_KeyStaging_WPP" Name="9B223F67-67A1-5B53-9126-4593FE81DF25" />
160
- <EventProvider Id="dclocator_WPP" Name="CA030134-54CD-4130-9177-DAE76A3C5791" />
161
- <EventProvider Id="webplatform_WPP" Name="2A3C6602-411E-4DC6-B138-EA19D64F5BBA" />
162
- <EventProvider Id="Microsoft_Windows_Security_NGC_CredProv_WPP" Name="CAC8D861-7B16-5B6B-5FC0-85014776BDAC" />
163
- <EventProvider Id="Microsoft_Windows_ProcessStateManager_WPP" Name="D49918CF-9489-4BF1-9D7B-014D864CF71F" />
164
- <EventProvider Id="Microsoft_Windows_CertificateServicesClient_CredentialRoaming_WPP" Name="89A2278B-C662-4AFF-A06C-46AD3F220BCA" />
165
- <EventProvider Id="Microsoft_Windows_LiveId_WPP" Name="05F02597-FE85-4E67-8542-69567AB8FD4F" />
166
- <EventProvider Id="Microsoft_Windows_Security_Fido_WPP" Name="08B15CE7-C9FF-5E64-0D16-66589573C50F" />
167
- <EventProvider Id="Microsoft_Windows_Security_DevCredProv_WPP" Name="7955D36A-450B-5E2A-A079-95876BCA450A" />
168
- <EventProvider Id="kdc_WPP" Name="1BBA8B19-7F31-43C0-9643-6E911F79A06B" />
169
- <EventProvider Id="Microsoft_Windows_Security_Credentials_UserConsentVerifier_WPP" Name="507C53AE-AF42-5938-AEDE-4A9D908640ED" />
170
- <EventProvider Id="Microsoft_OSG_OSS_CredProvFramework_ReportResultStop_WPP" Name="8DB3086D-116F-5BED-CFD5-9AFDA80D28EA" />
171
- <EventProvider Id="livessp_WPP" Name="C10B942D-AE1B-4786-BC66-052E5B4BE40E" />
172
- <EventProvider Id="Netio_WPP" Name="EB004A05-9B1A-11D4-9123-0050047759BC" />
173
- <EventProvider Id="PortTrackerServer_WPP" Name="090bf343-4490-42d3-b273-8af174d314fb" />
174
- <EventProvider Id="mpssvcService" Name="5EEFEBDB-E90C-423a-8ABF-0241E7C5B87D" />
175
- <EventProvider Id="Microsoft_Windows_DNS_Client_WinRNR" Name="b923f87a-b069-42b5-bd32-35623aba1c48" />
176
- <EventProvider Id="digest_WPP" Name="FB6A424F-B5D6-4329-B9B5-A975B3A93EAD" />
177
- <EventProvider Id="Microsoft_Windows_CertificateServicesClient_WPP" Name="73370BD6-85E5-430B-B60A-FEA1285808A7" />
178
- <EventProvider Id="negoexts_WPP" Name="5AF52B0D-E633-4EAD-828A-4B85B8DAAC2B" />
179
- <EventProvider Id="Microsoft_Windows_Security_NGC_LocalAccountMigPlugin_WPP" Name="CDD94AC7-CD2F-5189-E126-2DEB1B2FACBF" />
180
- <EventProvider Id="LsaTrace_WPP" Name="D0B639E0-E650-4D1D-8F39-1580ADE72784" />
181
- <EventProvider Id="Microsoft_Windows_DeviceManagement_Enterprise_Diagnostics_Provider_WPP" Name="3DA494E4-0FE2-415C-B895-FB5265C5C83B" />
182
- <EventProvider Id="Microsoft_OSG_Wininet_WPP" Name="1A211EE8-52DB-4AF0-BB66-FB8C9F20B0E2" />
183
- <EventProvider Id="Microsoft_Windows_Security_NGC_PopKeySrv_WPP" Name="1D6540CE-A81B-4E74-AD35-EEF8463F97F5" />
184
- <EventProvider Id="UrlMon_WPP" Name="3FAB3162-24CE-4ED5-B23D-63501544E11D" />
185
- <EventProvider Id="Microsoft_Windows_WinINet" Name="43d1a55c-76d6-4f7e-995c-64c711e5cafe" />
186
- <EventProvider Id="Microsoft_Windows_Security_Biometrics_BioCredProv_WPP" Name="9DADD79B-D556-53F2-67C4-129FA62B7512" />
187
- <EventProvider Id="Microsoft_OneCore_NetworkingTriage_GetConnected" Name="60523747-6516-48B7-84B1-3264FA2CB359" />
188
- <EventProvider Id="Microsoft_Windows_Security_NGC_Recovery_WPP" Name="9D4CA978-8A14-545E-C047-A45991F0E92F" />
189
- <EventProvider Id="Microsoft_Windows_Winsock_NameResolution" Name="55404E71-4DB9-4DEB-A5F5-8F86E46DDE56" />
190
- <EventProvider Id="Microsoft_Windows_WinHttp" Name="7d44233d-3055-4b9c-ba64-0d47ca40a232" />
191
- <EventProvider Id="Microsoft_Windows_Security_Biometrics_Trustlet_WPP" Name="9DF19CFA-E122-5343-284B-F3945CCD65B2" />
192
- <EventProvider Id="cloudap_WPP" Name="EC3CA551-21E9-47D0-9742-1195429831BB" />
193
- <EventProvider Id="Microsoft_Windows_BrokerInfrastructure_WPP" Name="63B6C2D2-0440-44DE-A674-AA51A251B123" />
194
- <EventProvider Id="IPNat" Name="AE3F6C6D-BF2A-4291-9D07-59E661274EE3" />
195
- <EventProvider Id="SharedAccessWPP" Name="9B322459-4AD9-4F81-8EEA-DC77CDD18CA6" />
196
- <EventProvider Id="WinNatSys" Name="aa7387cf-3639-496a-b3bf-dc1e79a6fc5a" />
197
- <EventProvider Id="Microsoft-Windows-TCPIP" Name="2f07e2ee-15db-40f1-90ef-9d7ba282188a" NonPagedMemory="true" EventKey="true" Strict="true"/>
198
- <EventProvider Id="Microsoft-Windows-WinNat" Name="66C07ECD-6667-43FC-93F8-05CF07F446EC" />
199
- <EventProvider Id="Microsoft-Windows-Overlay-HNSPlugin" Name="564368D6-577B-4af5-AD84-1C54464848E6" />
200
- <EventProvider Id="Microsoft.Windows.HyperV.Compute" Name="80CE50DE-D264-4581-950D-ABADEEE0D340" />
201
- <EventProvider Id="Microsoft.Windows.HostNetworkingService.PrivateCloudPlugin" Name="D0E4BC17-34C7-43fc-9A72-D89A59D6979A" />
202
- <EventProvider Id="Microsoft-Windows-Host-Network-Management" Name="93f693dc-9163-4dee-af64-d855218af242" />
203
- <EventProvider Id="Microsoft-Windows-SharedAccess_NAT" Name="A6F32731-9A38-4159-A220-3D9B7FC5FE5D" />
204
- <EventProvider Id="Microsoft.Windows.Hyper.V.VmsIf" Name="6C28C7E5-331B-4437-9C69-5352A2F7F296" />
205
- <EventProvider Id="VmSwitch_wpp" Name="1F387CBC-6818-4530-9DB6-5F1058CD7E86"/>
206
- <EventProvider Id="ndis_wpp" Name="DD7A21E6-A651-46D4-B7C2-66543067B869"/>
207
- <EventProvider Id="Microsoft-Windows-Hyper-V-VmSwitch" Name="67DC0D66-3695-47C0-9642-33F76F7BD7AD"/>
208
- <EventProvider Id="Microsoft.Windows.Hyper.V.NetSetupHelper" Name="94DEB9D1-0A52-449B-B368-41E4426B4F36"/>
209
- <EventProvider Id="Microsoft-Windows-Hyper-V-VfpExt" Name="9F2660EA-CFE7-428F-9850-AECA612619B0"/>
210
- <EventProvider Id="Microsoft.Windows.Networking.FlowSteering" Name="662abf07-6dda-5b25-c2c5-345236dbb2d2"/>
211
- <EventProvider Id="Microsoft.Windows.HyperV.Socket" Name="b2ed3bdb-cd74-5b2c-f660-85079ca074b3"/>
212
- <Profile
213
- Id="WSL.Verbose.File"
214
- Name="WSL"
215
- Description="Traces for all WSL components"
216
- LoggingMode="File"
217
- DetailLevel="Verbose"
218
- >
219
- <Collectors>
220
- <EventCollectorId Value="Collector">
221
- <EventProviders>
222
- <EventProviderId Value="lxcore_kernel"/>
223
- <EventProviderId Value="lxcore_user"/>
224
- <EventProviderId Value="lxcore_service"/>
225
- <EventProviderId Value="wsl_devicehost"/>
226
- <EventProviderId Value="wslclient"/>
227
- <EventProviderId Value="vm_chipset"/>
228
- <EventProviderId Value="vmcompute_dll"/>
229
- <EventProviderId Value="vmcompute"/>
230
- <EventProviderId Value="vmmm"/>
231
- <EventProviderId Value="vmwp"/>
232
- <EventProviderId Value="9p"/>
233
- <EventProviderId Value="9p_errors"/>
234
- <EventProviderId Value="p9rdr"/>
235
- <EventProviderId Value="mup"/>
236
- <EventProviderId Value="rfsmon"/>
237
- <EventProviderId Value="hyperv_storage"/>
238
- <EventProviderId Value="hns"/>
239
- <EventProviderId Value="netmgmt"/>
240
- <EventProviderId Value="EventProvider_Microsoft.Windows.Mobile.Provisioning.AppDownload"/>
241
- <EventProviderId Value="EventProvider_Microsoft.Windows.Mobile.Provisioning.Datastore"/>
242
- <EventProviderId Value="EventProvider_Microsoft.Windows.Mobile.Provisioning.PhoneProvisioner"/>
243
- <EventProviderId Value="EventProvider_Microsoft.Windows.Mobile.Provisioning.PPOEM"/>
244
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.CSP"/>
245
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Engine"/>
246
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Migration"/>
247
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Platform"/>
248
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Operations"/>
249
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Plugin.Engine"/>
250
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Plugin.RemovableMedia"/>
251
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.ProvTool"/>
252
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.Operations"/>
253
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.CommandCsp"/>
254
- <EventProviderId Value="EventProvider_Microsoft.Windows.Provisioning.ProvLaunch"/>
255
- <EventProviderId Value="EventProvider_Microsoft.Windows.EMPS.Enrollment"/>
256
- <EventProviderId Value="EventProvider_Microsoft.Windows.EnterpriseManagement.Enrollment"/>
257
- <EventProviderId Value="virtdisk"/>
258
- <EventProviderId Value="virtdisk_wpp"/>
259
- <EventProviderId Value="vhdmp"/>
260
- <EventProviderId Value="vhdmp_wpp"/>
261
- <EventProviderId Value="LsaAudit_WPP"/>
262
- <EventProviderId Value="Microsoft_Windows_ResourceManager_WPP"/>
263
- <EventProviderId Value="Microsoft_Windows_Security_NGC_KeyCredMgr_WPP"/>
264
- <EventProviderId Value="Microsoft_Windows_Security_NGC_NgcIsoCtnr_WPP"/>
265
- <EventProviderId Value="Microsoft_OneCore_NetworkingTriage_OnDemand"/>
266
- <EventProviderId Value="wlidsvc_WPP"/>
267
- <EventProviderId Value="Microsoft_Windows_WebIO"/>
268
- <EventProviderId Value="msxml_WPP"/>
269
- <EventProviderId Value="Microsoft_Windows_HttpService"/>
270
- <EventProviderId Value="Microsoft_Windows_Security_NGC_Trustlet_WPP"/>
271
- <EventProviderId Value="Microsoft_Web_Platform_WPP"/>
272
- <EventProviderId Value="Microsoft_Windows_Shell_CloudDomainJoin_Client_WPP"/>
273
- <EventProviderId Value="HTTP_sys_WPP"/>
274
- <EventProviderId Value="CHAT_WPP"/>
275
- <EventProviderId Value="Microsoft_Windows_Security_NGC_NgcCtnrSvc_WPP"/>
276
- <EventProviderId Value="Microsoft_Windows_BranchCacheEventProvider"/>
277
- <EventProviderId Value="BFE_WPP"/>
278
- <EventProviderId Value="kerb_WPP"/>
279
- <EventProviderId Value="Microsoft_Windows_Runtime_Web_Http"/>
280
- <EventProviderId Value="Microsoft_Windows_Shell_CloudExperienceHost_WPP"/>
281
- <EventProviderId Value="NCRYPT_WPP"/>
282
- <EventProviderId Value="pku2u_WPP"/>
283
- <EventProviderId Value="Microsoft_Windows_Security_Biometrics_Service_WPP"/>
284
- <EventProviderId Value="CAPI1_WPP"/>
285
- <EventProviderId Value="Microsoft_Windows_Security_DevCredTask_WPP"/>
286
- <EventProviderId Value="MsQuic_WPP"/>
287
- <EventProviderId Value="Microsoft_Windows_Security_DevCredClient_WPP"/>
288
- <EventProviderId Value="Microsoft_Windows_Security_NGC_Local_WPP"/>
289
- <EventProviderId Value="Microsoft_Windows_DM_Enrollment_Provider_WPP"/>
290
- <EventProviderId Value="TokenBinding_WPP"/>
291
- <EventProviderId Value="KerbClientShared_WPP"/>
292
- <EventProviderId Value="Microsoft_OneCore_NetworkingTriage_RoutePolicyManagement"/>
293
- <EventProviderId Value="ntlm_WPP"/>
294
- <EventProviderId Value="NCRYPTSSLP_WPP"/>
295
- <EventProviderId Value="Microsoft_Windows_CAPI2_WPP"/>
296
- <EventProviderId Value="DNS_WPP"/>
297
- <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_CertEnroll_WPP"/>
298
- <EventProviderId Value="Webio_WPP"/>
299
- <EventProviderId Value="TPM_WPP"/>
300
- <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_Lifecycle_User_WPP"/>
301
- <EventProviderId Value="Microsoft_Windows_MicrosoftAccount_TBProvider_WPP"/>
302
- <EventProviderId Value="vault_WPP"/>
303
- <EventProviderId Value="Microsoft_Windows_Security_Biometrics_Client_WPP"/>
304
- <EventProviderId Value="Microsoft_Windows_BranchCacheClientEventProvider"/>
305
- <EventProviderId Value="CRYPTOWINRT_WPP"/>
306
- <EventProviderId Value="Microsoft_Windows_Security_NGC_CryptNgc_WPP"/>
307
- <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_AutoEnrollment_WPP"/>
308
- <EventProviderId Value="Microsoft_Windows_CertPolEng_WPP"/>
309
- <EventProviderId Value="dpapis_WPP"/>
310
- <EventProviderId Value="Microsoft_Windows_CertificationAuthorityClient_CertCli_WPP"/>
311
- <EventProviderId Value="KerbComm_WPP"/>
312
- <EventProviderId Value="Microsoft_Windows_Security_LsaSrv_WPP"/>
313
- <EventProviderId Value="Microsoft_Windows_Security_AADAuthHelper_WPP"/>
314
- <EventProviderId Value="TLS_WPP"/>
315
- <EventProviderId Value="webauth_WPP"/>
316
- <EventProviderId Value="idlisten_WPP"/>
317
- <EventProviderId Value="Winsock_WPP"/>
318
- <EventProviderId Value="Microsoft_Windows_Security_NGC_KspSvc_WPP"/>
319
- <EventProviderId Value="aad_WPP"/>
320
- <EventProviderId Value="LsaIso_WPP"/>
321
- <EventProviderId Value="Microsoft_Windows_Security_TokenBroker_WPP"/>
322
- <EventProviderId Value="CNG_WPP"/>
323
- <EventProviderId Value="NtlmShared_WPP"/>
324
- <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_Lifecycle_System_WPP"/>
325
- <EventProviderId Value="Microsoft_Windows_DeviceManagement_SCEP_WPP"/>
326
- <EventProviderId Value="Microsoft_Windows_Security_Biometrics_CredentialProvider_Face_WPP"/>
327
- <EventProviderId Value="credssp_WPP"/>
328
- <EventProviderId Value="basecsp_WPP"/>
329
- <EventProviderId Value="gMSAClient_WPP"/>
330
- <EventProviderId Value="Microsoft_Windows_Security_DeviceLock_WPP"/>
331
- <EventProviderId Value="Microsoft_Windows_Security_Biometrics_FingerprintCredential_WPP"/>
332
- <EventProviderId Value="BCRYPT_WPP"/>
333
- <EventProviderId Value="idstore_WPP"/>
334
- <EventProviderId Value="Wininet_WPP"/>
335
- <EventProviderId Value="idcommon_WPP"/>
336
- <EventProviderId Value="Microsoft_Windows_DNS_Client"/>
337
- <EventProviderId Value="Microsoft_Windows_DNS_Client_Configuration_PowerShell"/>
338
- <EventProviderId Value="Microsoft-Windows-DHCP-Client"/>
339
- <EventProviderId Value="Microsoft-Windows-DHCPv6-Client"/>
340
- <EventProviderId Value="Microsoft_Windows_AppModel_Exec_WPP"/>
341
- <EventProviderId Value="Microsoft_Windows_Security_DevCredSvc_WPP"/>
342
- <EventProviderId Value="Microsoft_Quic_ETW"/>
343
- <EventProviderId Value="LsaDs_WPP"/>
344
- <EventProviderId Value="Microsoft_Windows_WBioSrvc_WPP"/>
345
- <EventProviderId Value="Microsoft_Windows_Security_AADCloudAPPlugin_WPP"/>
346
- <EventProviderId Value="Microsoft_Windows_CertificateServices_Deployment_WPP"/>
347
- <EventProviderId Value="Microsoft_Windows_Security_NGC_CSP_WPP"/>
348
- <EventProviderId Value="kps_WPP"/>
349
- <EventProviderId Value="WinHttp_WPP"/>
350
- <EventProviderId Value="Microsoft_Windows_Security_NGC_NgcCtnr_WPP"/>
351
- <EventProviderId Value="Microsoft_Windows_Security_DevCredWinRt_WPP"/>
352
- <EventProviderId Value="Microsoft_Windows_Security_NGC_KeyStaging_WPP"/>
353
- <EventProviderId Value="dclocator_WPP"/>
354
- <EventProviderId Value="webplatform_WPP"/>
355
- <EventProviderId Value="Microsoft_Windows_Security_NGC_CredProv_WPP"/>
356
- <EventProviderId Value="Microsoft_Windows_ProcessStateManager_WPP"/>
357
- <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_CredentialRoaming_WPP"/>
358
- <EventProviderId Value="Microsoft_Windows_LiveId_WPP"/>
359
- <EventProviderId Value="Microsoft_Windows_Security_Fido_WPP"/>
360
- <EventProviderId Value="Microsoft_Windows_Security_DevCredProv_WPP"/>
361
- <EventProviderId Value="kdc_WPP"/>
362
- <EventProviderId Value="Microsoft_Windows_Security_Credentials_UserConsentVerifier_WPP"/>
363
- <EventProviderId Value="Microsoft_OSG_OSS_CredProvFramework_ReportResultStop_WPP"/>
364
- <EventProviderId Value="livessp_WPP"/>
365
- <EventProviderId Value="Netio_WPP"/>
366
- <EventProviderId Value="PortTrackerServer_WPP"/>
367
- <EventProviderId Value="mpssvcService"/>
368
- <EventProviderId Value="Microsoft_Windows_DNS_Client_WinRNR"/>
369
- <EventProviderId Value="digest_WPP"/>
370
- <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_WPP"/>
371
- <EventProviderId Value="negoexts_WPP"/>
372
- <EventProviderId Value="Microsoft_Windows_Security_NGC_LocalAccountMigPlugin_WPP"/>
373
- <EventProviderId Value="LsaTrace_WPP"/>
374
- <EventProviderId Value="Microsoft_Windows_DeviceManagement_Enterprise_Diagnostics_Provider_WPP"/>
375
- <EventProviderId Value="Microsoft_OSG_Wininet_WPP"/>
376
- <EventProviderId Value="Microsoft_Windows_Security_NGC_PopKeySrv_WPP"/>
377
- <EventProviderId Value="UrlMon_WPP"/>
378
- <EventProviderId Value="Microsoft_Windows_WinINet"/>
379
- <EventProviderId Value="Microsoft_Windows_Security_Biometrics_BioCredProv_WPP"/>
380
- <EventProviderId Value="Microsoft_OneCore_NetworkingTriage_GetConnected"/>
381
- <EventProviderId Value="Microsoft_Windows_Security_NGC_Recovery_WPP"/>
382
- <EventProviderId Value="Microsoft_Windows_Winsock_NameResolution"/>
383
- <EventProviderId Value="Microsoft_Windows_WinHttp"/>
384
- <EventProviderId Value="Microsoft_Windows_Security_Biometrics_Trustlet_WPP"/>
385
- <EventProviderId Value="cloudap_WPP"/>
386
- <EventProviderId Value="Microsoft_Windows_BrokerInfrastructure_WPP"/>
387
- <EventProviderId Value="IPNat"/>
388
- <EventProviderId Value="SharedAccessWPP"/>
389
- <EventProviderId Value="WinNatSys"/>
390
- <EventProviderId Value="Microsoft-Windows-TCPIP"/>
391
- <EventProviderId Value="Microsoft-Windows-WinNat"/>
392
- <EventProviderId Value="Microsoft-Windows-Overlay-HNSPlugin"/>
393
- <EventProviderId Value="Microsoft.Windows.HyperV.Compute"/>
394
- <EventProviderId Value="Microsoft.Windows.HostNetworkingService.PrivateCloudPlugin"/>
395
- <EventProviderId Value="Microsoft-Windows-Host-Network-Management"/>
396
- <EventProviderId Value="Microsoft-Windows-SharedAccess_NAT"/>
397
- <EventProviderId Value="Microsoft.Windows.Hyper.V.VmsIf"/>
398
- <EventProviderId Value="VmSwitch_wpp"/>
399
- <EventProviderId Value="ndis_wpp"/>
400
- <EventProviderId Value="Microsoft-Windows-Hyper-V-VmSwitch"/>
401
- <EventProviderId Value="Microsoft.Windows.Hyper.V.NetSetupHelper"/>
402
- <EventProviderId Value="Microsoft-Windows-Hyper-V-VfpExt"/>
403
- <EventProviderId Value="Microsoft.Windows.Networking.FlowSteering"/>
404
- <EventProviderId Value="Microsoft.Windows.HyperV.Socket"/>
405
- </EventProviders>
406
- </EventCollectorId>
407
- </Collectors>
408
- </Profile>
409
- </Profiles>
410
-</WindowsPerformanceRecorder>
\ No newline at end of file
diagnostics/wsl_storage.wprp
deleted
-123
@@ -1,123 +0,0 @@
1
-<?xml version="1.0"?>
2
-<WindowsPerformanceRecorder Version="1">
3
- <Profiles>
4
- <EventCollector Id="Collector" Name="Collector">
5
- <BufferSize Value="256"/>
6
- <Buffers Value="1024"/>
7
- </EventCollector>
8
-
9
- <EventProvider Id="lxcore_kernel" Name="0CD1C309-0878-4515-83DB-749843B3F5C9"/>
10
- <EventProvider Id="lxcore_user" Name="D90B9468-67F0-5B3B-42CC-82AC81FFD960"/>
11
- <EventProvider Id="lxcore_service" Name="B99CDB5A-039C-5046-E672-1A0DE0A40211"/>
12
- <EventProvider Id="vm_chipset" Name="de9ba731-7f33-4f44-98c9-6cac856b9f83"/>
13
- <EventProvider Id="vmcompute_dll" Name="AF7FD3A7-B248-460C-A9F5-FEC39EF8468C"/>
14
- <EventProvider Id="vmcompute" Name="17103E3F-3C6E-4677-BB17-3B267EB5BE57"/>
15
- <EventProvider Id="vmmm" Name="6066F867-7CA1-4418-85FD-36E3F9C0600C"/>
16
- <EventProvider Id="vmwp" Name="51DDFA29-D5C8-4803-BE4B-2ECB715570FE"/>
17
- <EventProvider Id="9p" Name="e13c8d52-b153-571f-78c5-1d4098af2a1e"/>
18
- <EventProvider Id="p9rdr" Name="bb1d36f0-e0e0-48cc-9493-fef0e3d0b28c" />
19
- <EventProvider Id="mup" Name="20c46239-d059-4214-a11e-7d6769cbe020" />
20
- <EventProvider Id="rfsmon" Name="51734B23-5B7E-4892-BA8E-45BC110B735C" />
21
- <EventProvider Id="hyperv_storage" Name="c7ad62c6-5c99-5a1b-bbc4-0821ae5b765e" />
22
- <EventProvider Id="hns" Name="0c885e0d-6eb6-476c-a048-2457eed3a5c1" />
23
- <EventProvider Id="netmgmt" Name="93f693dc-9163-4dee-af64-d855218af242" />
24
- <EventProvider Id="storvsp_io" Name="10b3d268-9782-49a4-aacc-a93c5482cb6f" NonPagedMemory="true">
25
- <Keywords>
26
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
27
- </Keywords>
28
- </EventProvider>
29
-
30
- <EventProvider Id="virtdisk_wpp" Name="e14dcdd9-d1ec-4dc3-8395-a606df8ef115" Level="4">
31
- <Keywords>
32
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
33
- </Keywords>
34
- </EventProvider>
35
-
36
- <EventProvider Id="virtdisk" Name="4D20DF22-E177-4514-A369-F1759FEEDEB3" Level="4">
37
- <Keywords>
38
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
39
- </Keywords>
40
- </EventProvider>
41
- <EventProvider Id="vhdmp" Name="E2816346-87F4-4F85-95C3-0C79409AA89D" NonPagedMemory="true" Level="5">
42
- <Keywords>
43
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
44
- </Keywords>
45
- </EventProvider>
46
-
47
- <EventProvider Id="vhdmp_wpp" Name="3c70c3b0-2fae-41d3-b68d-8f7fcaf79adb" NonPagedMemory="true" Level="5">
48
- <Keywords>
49
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
50
- </Keywords>
51
- </EventProvider>
52
-
53
- <EventProvider Id="HyperV_SyntheticStorage" Name="EDACD782-2564-4497-ADE6-7199377850F2" Level="6">
54
- <Keywords>
55
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
56
- </Keywords>
57
- </EventProvider>
58
-
59
- <EventProvider Id="HyperV_EmulatedStorage" Name="86E15E01-EDF1-4AC7-89CF-B19563FD6894" Level="6">
60
- <Keywords>
61
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
62
- </Keywords>
63
- </EventProvider>
64
-
65
- <EventProvider Id="EventProvider_Telemetry_StorVSP" Name="544d0787-9f6d-432e-8414-e035a8b0541d">
66
- <Keywords>
67
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
68
- </Keywords>
69
- </EventProvider>
70
-
71
- <EventProvider Id="EventProvider_Trace_Vhdmp" Name="dc284fb3-1eab-4854-828a-b25417280280" Level="3">
72
- <Keywords>
73
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
74
- </Keywords>
75
- </EventProvider>
76
-
77
- <EventProvider Id="storvsp_wpp" Name="f96abc17-6a5e-4a49-a3f4-a2a86fa03846" NonPagedMemory="true" Level="4">
78
- <Keywords>
79
- <Keyword Value="0xFFFFFFFFFFFFFFFF" />
80
- </Keywords>
81
- </EventProvider>
82
-
83
- <Profile
84
- Id="WSL.Verbose.File"
85
- Name="WSL"
86
- Description="Traces for all WSL components"
87
- LoggingMode="File"
88
- DetailLevel="Verbose"
89
- >
90
- <Collectors>
91
- <EventCollectorId Value="Collector">
92
- <EventProviders>
93
- <EventProviderId Value="lxcore_kernel"/>
94
- <EventProviderId Value="lxcore_user"/>
95
- <EventProviderId Value="lxcore_service"/>
96
- <EventProviderId Value="vm_chipset"/>
97
- <EventProviderId Value="vmcompute_dll"/>
98
- <EventProviderId Value="vmcompute"/>
99
- <EventProviderId Value="vmmm"/>
100
- <EventProviderId Value="vmwp"/>
101
- <EventProviderId Value="9p"/>
102
- <EventProviderId Value="p9rdr"/>
103
- <EventProviderId Value="mup"/>
104
- <EventProviderId Value="rfsmon"/>
105
- <EventProviderId Value="hyperv_storage"/>
106
- <EventProviderId Value="hns"/>
107
- <EventProviderId Value="netmgmt"/>
108
- <EventProviderId Value="storvsp_io"/>
109
- <EventProviderId Value="virtdisk"/>
110
- <EventProviderId Value="virtdisk_wpp"/>
111
- <EventProviderId Value="vhdmp"/>
112
- <EventProviderId Value="vhdmp_wpp"/>
113
- <EventProviderId Value="HyperV_SyntheticStorage"/>
114
- <EventProviderId Value="HyperV_EmulatedStorage"/>
115
- <EventProviderId Value="EventProvider_Telemetry_StorVSP"/>
116
- <EventProviderId Value="EventProvider_Trace_Vhdmp"/>
117
- <EventProviderId Value="storvsp_wpp"/>
118
- </EventProviders>
119
- </EventCollectorId>
120
- </Collectors>
121
- </Profile>
122
- </Profiles>
123
-</WindowsPerformanceRecorder>
\ No newline at end of file
doc/docs/debugging.md
+8
@@ -14,6 +14,14 @@ wpr -start wsl.wprp -filemode
14
wpr -stop logs.ETL
15
```
16
17
+The consolidated `wsl.wprp` file includes multiple profiles for different scenarios:
18
+- `WSL` - General WSL tracing (default)
19
+- `WSL-Storage` - Enhanced storage tracing
20
+- `WSL-Networking` - Comprehensive networking tracing
21
+- `WSL-HvSocket` - HvSocket-specific tracing
22
+
23
+To use a specific profile, append `!ProfileName` to the wprp file, e.g., `wpr -start wsl.wprp!WSL-Networking -filemode`
24
+
25
Once the log file is saved, you can use [WPA](https://apps.microsoft.com/detail/9n58qrw40dfw?hl=en-US&gl=US) to view the logs.
26
27
Notable ETL providers: