@samitouri / QOSAMI-WSL / commits / eb8129d6

Improve network diagnostic scripts (#6452)

Blue committed Jan 22, 2021 at 17:35 UTC eb8129d672de6c6e28a0ec3e3d04c9310d40cedd
4 files changed +341 -5
CONTRIBUTING.md
+5 -3
@@ -110,13 +110,15 @@ Availability Capabilities CapabilityDescriptions
110
111 #### Networking issues
112
113 -If the issue is about networking, download [networking.sh](https://github.com/Microsoft/WSL/blob/master/diagnostics/networking.sh), and execute it inside WSL by running:
113 +If the issue is about networking, run [networking.bat](https://github.com/Microsoft/WSL/blob/master/diagnostics/networking.bat) in an administrative command prompt:
114
115 ```
116 -$ bash ./networking.sh
116 +$ git clone https://github.com/microsoft/WSL --depth=1 %tmp%\WSL
117 +$ cd %tmp%\WSL\diagnostics
118 +$ networking.bat
119 ```
120
119 -Once the script execution is completed, include its output on the issue.
121 +Once the script execution is completed, include **both** its output and the generated log file, `wsl.etl` on the issue.
122
123 <!-- Preserving anchors -->
124 <div id="8-detailed-logs"></div>
diagnostics/networking.bat new
+35
@@ -0,0 +1,35 @@
1 +@echo off
2 +:: Note: This script terminates WSL. Save your work before running it.
3 +
4 +:: Check for administrator access
5 +net session >nul 2>&1 || goto :admin
6 +
7 +:: Validate that required files are here
8 +if not exist wsl_networking.wprp (echo wsl_networking.wprp not found && exit /b 1)
9 +if not exist networking.sh (echo networking.sh not found && exit /b 1)
10 +
11 +:: List all HNS objects
12 +echo HNS objects:
13 +hnsdiag list all -df
14 +
15 +:: The WSL HNS network is created once per boot. Resetting it to collect network creation logs
16 +echo Deleting HNS network
17 +powershell.exe -NoProfile "Get-HnsNetwork | Where-Object {$_.Name -eq 'WSL'} | Remove-HnsNetwork"
18 +
19 +:: Stop WSL
20 +net.exe stop LxssManager
21 +
22 +:: Collect WSL logs
23 +wpr -start wsl_networking.wprp -filemode || goto :fail
24 +wsl.exe tr -d "\r" ^| bash < ./networking.sh
25 +wpr -stop wsl.etl || goto :fail
26 +
27 +exit /b 0
28 +
29 +:fail
30 +echo Failed to collect WSL logs
31 +exit /b 1
32 +
33 +:admin
34 +echo This script needs to run with administrative access
35 +exit /b 1
\ No newline at end of file
diagnostics/networking.sh
+7 -2
@@ -12,7 +12,12 @@ ip route show
12
13 # Validate that the gateway is responsive and can route ICMP correctly
14 gateway=$(ip route show | awk '/default/ { print $3 }')
15 -ping -c 4 "$gateway"
15 +if [ $? != '0' ]; then
16 + echo 'No gateway found'
17 +else
18 + ping -c 4 "$gateway"
19 +fi
20 +
21 ping -c 4 1.1.1.1
22
23 # Validate that the default route is working (won't work if traceroute isn't installed)
@@ -22,5 +27,5 @@ traceroute 1.1.1.1
27 cat /etc/resolv.conf
28
29 # Validate that everything is functionning correctly
25 -curl -m 5000 -v https://microsoft.com
30 +curl -m 5 -v https://microsoft.com
31
diagnostics/wsl_networking.wprp new
+294
@@ -0,0 +1,294 @@
1 +<?xml version="1.0"?>
2 +<WindowsPerformanceRecorder Version="1">
3 + <Profiles>
4 + <EventCollector Id="Collector" Name="Collector">
5 + <BufferSize Value="256"/>
6 + <Buffers Value="4096"/>
7 + </EventCollector>
8 +
9 + <EventProvider Id="lxcore_kernel" Name="0CD1C309-0878-4515-83DB-749843B3F5C9"/>
10 + <EventProvider Id="lxcore_user" Name="D90B9468-67F0-5B3B-42CC-82AC81FFD960"/>
11 + <EventProvider Id="lxcore_service" Name="B99CDB5A-039C-5046-E672-1A0DE0A40211"/>
12 + <EventProvider Id="vm_chipset" Name="de9ba731-7f33-4f44-98c9-6cac856b9f83"/>
13 + <EventProvider Id="vmcompute_dll" Name="AF7FD3A7-B248-460C-A9F5-FEC39EF8468C"/>
14 + <EventProvider Id="vmcompute" Name="17103E3F-3C6E-4677-BB17-3B267EB5BE57"/>
15 + <EventProvider Id="vmmm" Name="6066F867-7CA1-4418-85FD-36E3F9C0600C"/>
16 + <EventProvider Id="vmwp" Name="51DDFA29-D5C8-4803-BE4B-2ECB715570FE"/>
17 + <EventProvider Id="9p" Name="e13c8d52-b153-571f-78c5-1d4098af2a1e"/>
18 + <EventProvider Id="p9rdr" Name="bb1d36f0-e0e0-48cc-9493-fef0e3d0b28c" />
19 + <EventProvider Id="mup" Name="20c46239-d059-4214-a11e-7d6769cbe020" />
20 + <EventProvider Id="rfsmon" Name="51734B23-5B7E-4892-BA8E-45BC110B735C" />
21 + <EventProvider Id="hyperv_storage" Name="c7ad62c6-5c99-5a1b-bbc4-0821ae5b765e" />
22 + <EventProvider Id="hns" Name="0c885e0d-6eb6-476c-a048-2457eed3a5c1" />
23 + <EventProvider Id="LsaAudit_WPP" Name="DAA76F6A-2D11-4399-A646-1D62B7380F15" />
24 + <EventProvider Id="Microsoft_Windows_ResourceManager_WPP" Name="4180C4F7-E238-5519-338F-EC214F0B49AA" />
25 + <EventProvider Id="Microsoft_Windows_Security_NGC_KeyCredMgr_WPP" Name="34646397-1635-5D14-4D2C-2FEBDCCCF5E9" />
26 + <EventProvider Id="Microsoft_Windows_Security_NGC_NgcIsoCtnr_WPP" Name="CDC6BEB9-6D78-5138-D232-D951916AB98F" />
27 + <EventProvider Id="Microsoft_OneCore_NetworkingTriage_OnDemand" Name="ABB1FC61-49BA-4CC3-809F-7ABE1F8BA315" />
28 + <EventProvider Id="wlidsvc_WPP" Name="3F8B9EF5-BBD2-4C81-B6C9-DA3CDB72D3C5" />
29 + <EventProvider Id="Microsoft_Windows_WebIO" Name="50b3e73c-9370-461d-bb9f-26f32d68887d" />
30 + <EventProvider Id="msxml_WPP" Name="927821F8-D9E6-42E2-84F2-949E18256F3A" />
31 + <EventProvider Id="Microsoft_Windows_HttpService" Name="dd5ef90a-6398-47a4-ad34-4dcecdef795f" />
32 + <EventProvider Id="Microsoft_Windows_Security_NGC_Trustlet_WPP" Name="C0B2937D-E634-56A2-1451-7D678AA3BC53" />
33 + <EventProvider Id="Microsoft_Web_Platform_WPP" Name="FF32ADA1-5A4B-583C-889E-A3C027B201F5" />
34 + <EventProvider Id="Microsoft_Windows_Shell_CloudDomainJoin_Client_WPP" Name="AA02D1A4-72D8-5F50-D425-7402EA09253A" />
35 + <EventProvider Id="HTTP_sys_WPP" Name="20F61733-57F1-4127-9F48-4AB7A9308AE2" />
36 + <EventProvider Id="CHAT_WPP" Name="9B52E09F-0C58-4EAF-877F-70F9B54A7946" />
37 + <EventProvider Id="Microsoft_Windows_Security_NGC_NgcCtnrSvc_WPP" Name="9DF6A82D-5174-5EBF-842A-39947C48BF2A" />
38 + <EventProvider Id="BFE_WPP" Name="106B464A-8043-46B1-8CB8-E92A0CD7A560" />
39 + <EventProvider Id="kerb_WPP" Name="6B510852-3583-4E2D-AFFE-A67F9F223438" />
40 + <EventProvider Id="Microsoft_Windows_Runtime_Web_Http" Name="41877cb4-11fc-4188-b590-712c143c881d" />
41 + <EventProvider Id="Microsoft_Windows_Shell_CloudExperienceHost_WPP" Name="D0034F5E-3686-5A74-DC48-5A22DD4F3D5B" />
42 + <EventProvider Id="NCRYPT_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473301" />
43 + <EventProvider Id="pku2u_WPP" Name="2A6FAF47-5449-4805-89A3-A504F3E221A6" />
44 + <EventProvider Id="Microsoft_Windows_Security_Biometrics_Service_WPP" Name="39A5AA08-031D-4777-A32D-ED386BF03470" />
45 + <EventProvider Id="CAPI1_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473305" />
46 + <EventProvider Id="Microsoft_Windows_Security_DevCredTask_WPP" Name="86D5FE65-0564-4618-B90B-E146049DEBF4" />
47 + <EventProvider Id="MsQuic_WPP" Name="620FD025-BE51-42EF-A5C0-50F13F183AD9" />
48 + <EventProvider Id="Microsoft_Windows_Security_DevCredClient_WPP" Name="78983C7D-917F-58DA-E8D4-F393DECF4EC0" />
49 + <EventProvider Id="Microsoft_Windows_Security_NGC_Local_WPP" Name="3B9DBF69-E9F0-5389-D054-A94BC30E33F7" />
50 + <EventProvider Id="Microsoft_Windows_DM_Enrollment_Provider_WPP" Name="9FBF7B95-0697-4935-ADA2-887BE9DF12BC" />
51 + <EventProvider Id="TokenBinding_WPP" Name="AEF66A73-A765-4421-B348-B7E0FC8C9898" />
52 + <EventProvider Id="KerbClientShared_WPP" Name="FACB33C4-4513-4C38-AD1E-57C1F6828FC0" />
53 + <EventProvider Id="Microsoft_OneCore_NetworkingTriage_RoutePolicyManagement" Name="923C0FFD-7933-4B52-8A49-121ABF2DC357" />
54 + <EventProvider Id="ntlm_WPP" Name="5BBB6C18-AA45-49B1-A15F-085F7ED0AA90" />
55 + <EventProvider Id="NCRYPTSSLP_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473304" />
56 + <EventProvider Id="Microsoft_Windows_CAPI2_WPP" Name="5BBCA4A8-B209-48DC-A8C7-B23D3E5216FB" />
57 + <EventProvider Id="DNS_WPP" Name="609151DD-04F5-4DA7-974C-FC6947EAA323" />
58 + <EventProvider Id="Microsoft_Windows_CertificateServicesClient_CertEnroll_WPP" Name="54164045-7C50-4905-963F-E5BC1EEF0CCA" />
59 + <EventProvider Id="Webio_WPP" Name="08F93B14-1608-4A72-9CFA-457EECEDBBA7" />
60 + <EventProvider Id="TPM_WPP" Name="3A8D6942-B034-48E2-B314-F69C2B4655A3" />
61 + <EventProvider Id="Microsoft_Windows_CertificateServicesClient_Lifecycle_User_WPP" Name="BEA18B89-126F-4155-9EE4-D36038B02680" />
62 + <EventProvider Id="Microsoft_Windows_MicrosoftAccount_TBProvider_WPP" Name="5836994D-A677-53E7-1389-588AD1420CC5" />
63 + <EventProvider Id="vault_WPP" Name="7FDD167C-79E5-4403-8C84-B7C0BB9923A1" />
64 + <EventProvider Id="Microsoft_Windows_Security_Biometrics_Client_WPP" Name="1B5106B1-7622-4740-AD81-D9C6EE74F124" />
65 + <EventProvider Id="Microsoft_Windows_BranchCacheClientEventProvider" Name="e837619c-a2a8-4689-833f-47b48ebd2442" />
66 + <EventProvider Id="CRYPTOWINRT_WPP" Name="786396CD-2FF3-53D3-D1CA-43E41D9FB73B" />
67 + <EventProvider Id="Microsoft_Windows_Security_NGC_CryptNgc_WPP" Name="6D7051A0-9C83-5E52-CF8F-0ECAF5D5F6FD" />
68 + <EventProvider Id="Microsoft_Windows_CertificateServicesClient_AutoEnrollment_WPP" Name="F0DB7EF8-B6F3-4005-9937-FEB77B9E1B43" />
69 + <EventProvider Id="Microsoft_Windows_CertPolEng_WPP" Name="AF9CC194-E9A8-42BD-B0D1-834E9CFAB799" />
70 + <EventProvider Id="dpapis_WPP" Name="EA3F84FC-03BB-540E-B6AA-9664F81A31FB" />
71 + <EventProvider Id="Microsoft_Windows_CertificationAuthorityClient_CertCli_WPP" Name="98BF1CD3-583E-4926-95EE-A61BF3F46470" />
72 + <EventProvider Id="KerbComm_WPP" Name="60A7AB7A-BC57-43E9-B78A-A1D516577AE3" />
73 + <EventProvider Id="Microsoft_Windows_Security_LsaSrv_WPP" Name="4D9DFB91-4337-465A-A8B5-05A27D930D48" />
74 + <EventProvider Id="Microsoft_Windows_Security_AADAuthHelper_WPP" Name="9EBB3B15-B094-41B1-A3B8-0F141B06BADD" />
75 + <EventProvider Id="TLS_WPP" Name="37D2C3CD-C5D4-4587-8531-4696C44244C8" />
76 + <EventProvider Id="webauth_WPP" Name="EF98103D-8D3A-4BEF-9DF2-2156563E64FA" />
77 + <EventProvider Id="idlisten_WPP" Name="D93FE84A-795E-4608-80EC-CE29A96C8658" />
78 + <EventProvider Id="Winsock_WPP" Name="1D44957B-7181-4835-B70A-D0B16112A4DE" />
79 + <EventProvider Id="Microsoft_Windows_Security_NGC_KspSvc_WPP" Name="B66B577F-AE49-5CCF-D2D7-8EB96BFD440C" />
80 + <EventProvider Id="aad_WPP" Name="4DE9BC9C-B27A-43C9-8994-0915F1A5E24F" />
81 + <EventProvider Id="LsaIso_WPP" Name="366B218A-A5AA-4096-8131-0BDAFCC90E93" />
82 + <EventProvider Id="Microsoft_Windows_Security_TokenBroker_WPP" Name="077B8C4A-E425-578D-F1AC-6FDF1220FF68" />
83 + <EventProvider Id="CNG_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473303" />
84 + <EventProvider Id="NtlmShared_WPP" Name="AC69AE5B-5B21-405F-8266-4424944A43E9" />
85 + <EventProvider Id="Microsoft_Windows_CertificateServicesClient_Lifecycle_System_WPP" Name="BC0669E1-A10D-4A78-834E-1CA3C806C93B" />
86 + <EventProvider Id="Microsoft_Windows_DeviceManagement_SCEP_WPP" Name="D5A5B540-C580-4DEE-8BB4-185E34AA00C5" />
87 + <EventProvider Id="Microsoft_Windows_Security_Biometrics_CredentialProvider_Face_WPP" Name="1D480C11-3870-4B19-9144-47A53CD973BD" />
88 + <EventProvider Id="credssp_WPP" Name="6165F3E2-AE38-45D4-9B23-6B4818758BD9" />
89 + <EventProvider Id="basecsp_WPP" Name="133A980D-035D-4E2D-B250-94577AD8FCED" />
90 + <EventProvider Id="gMSAClient_WPP" Name="2D45EC97-EF01-4D4F-B9ED-EE3F4D3C11F3" />
91 + <EventProvider Id="Microsoft_Windows_Security_DeviceLock_WPP" Name="2056054C-97A6-5AE4-B181-38BC6B58007E" />
92 + <EventProvider Id="Microsoft_Windows_Security_Biometrics_FingerprintCredential_WPP" Name="225B3FED-0356-59D1-1F82-EED163299FA8" />
93 + <EventProvider Id="BCRYPT_WPP" Name="A74EFE00-14BE-4EF9-9DA9-1484D5473302" />
94 + <EventProvider Id="idstore_WPP" Name="82C7D3DF-434D-44FC-A7CC-453A8075144E" />
95 + <EventProvider Id="Wininet_WPP" Name="4E749B6A-667D-4C72-80EF-373EE3246B08" />
96 + <EventProvider Id="idcommon_WPP" Name="B1108F75-3252-4B66-9239-80FD47E06494" />
97 + <EventProvider Id="Microsoft_Windows_DNS_Client" Name="1c95126e-7eea-49a9-a3fe-a378b03ddb4d" />
98 + <EventProvider Id="Microsoft_Windows_DNS_Client_Configuration_PowerShell" Name="563a50d8-3536-4c8a-a361-b37af04094ec" />
99 + <EventProvider Id="Microsoft_Windows_AppModel_Exec_WPP" Name="EB65A492-86C0-406A-BACE-9912D595BD69" />
100 + <EventProvider Id="Microsoft_Windows_Security_DevCredSvc_WPP" Name="C3FEB5BF-1A8D-53F3-AAA8-44496392BF69" />
101 + <EventProvider Id="Microsoft_Quic_ETW" Name="ff15e657-4f26-570e-88ab-0796b258d11c" />
102 + <EventProvider Id="LsaDs_WPP" Name="169EC169-5B77-4A3E-9DB6-441799D5CACB" />
103 + <EventProvider Id="Microsoft_Windows_WBioSrvc_WPP" Name="34BEC984-F11F-4F1F-BB9B-3BA33C8D0132" />
104 + <EventProvider Id="Microsoft_Windows_Security_AADCloudAPPlugin_WPP" Name="556045FD-58C5-4A97-9881-B121F68B79C5" />
105 + <EventProvider Id="Microsoft_Windows_CertificateServices_Deployment_WPP" Name="B2D1F576-2E85-4489-B504-1861C40544B3" />
106 + <EventProvider Id="Microsoft_Windows_Security_NGC_CSP_WPP" Name="89F392FF-EE7C-56A3-3F61-2D5B31A36935" />
107 + <EventProvider Id="kps_WPP" Name="97A38277-13C0-4394-A0B2-2A70B465D64F" />
108 + <EventProvider Id="WinHttp_WPP" Name="B3A7698A-0C45-44DA-B73D-E181C9B5C8E6" />
109 + <EventProvider Id="Microsoft_Windows_Security_NGC_NgcCtnr_WPP" Name="0ABA6892-455B-551D-7DA8-3A8F85225E1A" />
110 + <EventProvider Id="Microsoft_Windows_Security_DevCredWinRt_WPP" Name="36FF4C84-82A2-4B23-8BA5-A25CBDFF3410" />
111 + <EventProvider Id="Microsoft_Windows_BranchCacheEventProvider" Name="dd85457f-4e2d-44a5-a7a7-6253362e34dc" />
112 + <EventProvider Id="Microsoft_Windows_Security_NGC_KeyStaging_WPP" Name="9B223F67-67A1-5B53-9126-4593FE81DF25" />
113 + <EventProvider Id="dclocator_WPP" Name="CA030134-54CD-4130-9177-DAE76A3C5791" />
114 + <EventProvider Id="webplatform_WPP" Name="2A3C6602-411E-4DC6-B138-EA19D64F5BBA" />
115 + <EventProvider Id="Microsoft_Windows_Security_NGC_CredProv_WPP" Name="CAC8D861-7B16-5B6B-5FC0-85014776BDAC" />
116 + <EventProvider Id="Microsoft_Windows_ProcessStateManager_WPP" Name="D49918CF-9489-4BF1-9D7B-014D864CF71F" />
117 + <EventProvider Id="Microsoft_Windows_CertificateServicesClient_CredentialRoaming_WPP" Name="89A2278B-C662-4AFF-A06C-46AD3F220BCA" />
118 + <EventProvider Id="Microsoft_Windows_LiveId_WPP" Name="05F02597-FE85-4E67-8542-69567AB8FD4F" />
119 + <EventProvider Id="Microsoft_Windows_Security_Fido_WPP" Name="08B15CE7-C9FF-5E64-0D16-66589573C50F" />
120 + <EventProvider Id="Microsoft_Windows_Security_DevCredProv_WPP" Name="7955D36A-450B-5E2A-A079-95876BCA450A" />
121 + <EventProvider Id="kdc_WPP" Name="1BBA8B19-7F31-43C0-9643-6E911F79A06B" />
122 + <EventProvider Id="Microsoft_Windows_Security_Credentials_UserConsentVerifier_WPP" Name="507C53AE-AF42-5938-AEDE-4A9D908640ED" />
123 + <EventProvider Id="Microsoft_OSG_OSS_CredProvFramework_ReportResultStop_WPP" Name="8DB3086D-116F-5BED-CFD5-9AFDA80D28EA" />
124 + <EventProvider Id="livessp_WPP" Name="C10B942D-AE1B-4786-BC66-052E5B4BE40E" />
125 + <EventProvider Id="WFP_WPP" Name="EB004A05-9B1A-11D4-9123-0050047759BC" />
126 + <EventProvider Id="Microsoft_Windows_DNS_Client_WinRNR" Name="b923f87a-b069-42b5-bd32-35623aba1c48" />
127 + <EventProvider Id="digest_WPP" Name="FB6A424F-B5D6-4329-B9B5-A975B3A93EAD" />
128 + <EventProvider Id="Microsoft_Windows_CertificateServicesClient_WPP" Name="73370BD6-85E5-430B-B60A-FEA1285808A7" />
129 + <EventProvider Id="negoexts_WPP" Name="5AF52B0D-E633-4EAD-828A-4B85B8DAAC2B" />
130 + <EventProvider Id="Microsoft_Windows_Security_NGC_LocalAccountMigPlugin_WPP" Name="CDD94AC7-CD2F-5189-E126-2DEB1B2FACBF" />
131 + <EventProvider Id="LsaTrace_WPP" Name="D0B639E0-E650-4D1D-8F39-1580ADE72784" />
132 + <EventProvider Id="Microsoft_Windows_DeviceManagement_Enterprise_Diagnostics_Provider_WPP" Name="3DA494E4-0FE2-415C-B895-FB5265C5C83B" />
133 + <EventProvider Id="Microsoft_OSG_Wininet_WPP" Name="1A211EE8-52DB-4AF0-BB66-FB8C9F20B0E2" />
134 + <EventProvider Id="Microsoft_Windows_Security_NGC_PopKeySrv_WPP" Name="1D6540CE-A81B-4E74-AD35-EEF8463F97F5" />
135 + <EventProvider Id="UrlMon_WPP" Name="3FAB3162-24CE-4ED5-B23D-63501544E11D" />
136 + <EventProvider Id="Microsoft_Windows_WinINet" Name="43d1a55c-76d6-4f7e-995c-64c711e5cafe" />
137 + <EventProvider Id="Microsoft_Windows_Security_Biometrics_BioCredProv_WPP" Name="9DADD79B-D556-53F2-67C4-129FA62B7512" />
138 + <EventProvider Id="Microsoft_OneCore_NetworkingTriage_GetConnected" Name="60523747-6516-48B7-84B1-3264FA2CB359" />
139 + <EventProvider Id="Microsoft_Windows_Security_NGC_Recovery_WPP" Name="9D4CA978-8A14-545E-C047-A45991F0E92F" />
140 + <EventProvider Id="Microsoft_Windows_Winsock_NameResolution" Name="55404E71-4DB9-4DEB-A5F5-8F86E46DDE56" />
141 + <EventProvider Id="Microsoft_Windows_WinHttp" Name="7d44233d-3055-4b9c-ba64-0d47ca40a232" />
142 + <EventProvider Id="Microsoft_Windows_Security_Biometrics_Trustlet_WPP" Name="9DF19CFA-E122-5343-284B-F3945CCD65B2" />
143 + <EventProvider Id="cloudap_WPP" Name="EC3CA551-21E9-47D0-9742-1195429831BB" />
144 + <EventProvider Id="Microsoft_Windows_BrokerInfrastructure_WPP" Name="63B6C2D2-0440-44DE-A674-AA51A251B123" />
145 + <EventProvider Id="IPNat" Name="AE3F6C6D-BF2A-4291-9D07-59E661274EE3" />
146 + <EventProvider Id="IpNatHlp" Name="9B322459-4AD9-4F81-8EEA-DC77CDD18CA6" />
147 + <EventProvider Id="WinNatSys" Name="aa7387cf-3639-496a-b3bf-dc1e79a6fc5a" />
148 + <EventProvider Id="Microsoft-Windows-TCPIP" Name="2f07e2ee-15db-40f1-90ef-9d7ba282188a" NonPagedMemory="true" EventKey="true" Strict="true"/>
149 + <EventProvider Id="WinNat" Name="66C07ECD-6667-43FC-93F8-05CF07F446EC" />
150 + <EventProvider Id="VmSwitch" Name="67DC0D66-3695-47C0-9642-33F76F7BD7AD" />
151 + <Profile
152 + Id="WSL.Verbose.File"
153 + Name="WSL"
154 + Description="Traces for all WSL components"
155 + LoggingMode="File"
156 + DetailLevel="Verbose"
157 + >
158 + <Collectors>
159 + <EventCollectorId Value="Collector">
160 + <EventProviders>
161 + <EventProviderId Value="LsaAudit_WPP"/>
162 + <EventProviderId Value="Microsoft_Windows_ResourceManager_WPP"/>
163 + <EventProviderId Value="Microsoft_Windows_Security_NGC_KeyCredMgr_WPP"/>
164 + <EventProviderId Value="Microsoft_Windows_Security_NGC_NgcIsoCtnr_WPP"/>
165 + <EventProviderId Value="Microsoft_OneCore_NetworkingTriage_OnDemand"/>
166 + <EventProviderId Value="wlidsvc_WPP"/>
167 + <EventProviderId Value="Microsoft_Windows_WebIO"/>
168 + <EventProviderId Value="msxml_WPP"/>
169 + <EventProviderId Value="Microsoft_Windows_HttpService"/>
170 + <EventProviderId Value="Microsoft_Windows_Security_NGC_Trustlet_WPP"/>
171 + <EventProviderId Value="Microsoft_Web_Platform_WPP"/>
172 + <EventProviderId Value="Microsoft_Windows_Shell_CloudDomainJoin_Client_WPP"/>
173 + <EventProviderId Value="HTTP_sys_WPP"/>
174 + <EventProviderId Value="CHAT_WPP"/>
175 + <EventProviderId Value="Microsoft_Windows_Security_NGC_NgcCtnrSvc_WPP"/>
176 + <EventProviderId Value="Microsoft_Windows_BranchCacheEventProvider"/>
177 + <EventProviderId Value="BFE_WPP"/>
178 + <EventProviderId Value="kerb_WPP"/>
179 + <EventProviderId Value="Microsoft_Windows_Runtime_Web_Http"/>
180 + <EventProviderId Value="Microsoft_Windows_Shell_CloudExperienceHost_WPP"/>
181 + <EventProviderId Value="NCRYPT_WPP"/>
182 + <EventProviderId Value="pku2u_WPP"/>
183 + <EventProviderId Value="Microsoft_Windows_Security_Biometrics_Service_WPP"/>
184 + <EventProviderId Value="CAPI1_WPP"/>
185 + <EventProviderId Value="Microsoft_Windows_Security_DevCredTask_WPP"/>
186 + <EventProviderId Value="MsQuic_WPP"/>
187 + <EventProviderId Value="Microsoft_Windows_Security_DevCredClient_WPP"/>
188 + <EventProviderId Value="Microsoft_Windows_Security_NGC_Local_WPP"/>
189 + <EventProviderId Value="Microsoft_Windows_DM_Enrollment_Provider_WPP"/>
190 + <EventProviderId Value="TokenBinding_WPP"/>
191 + <EventProviderId Value="KerbClientShared_WPP"/>
192 + <EventProviderId Value="Microsoft_OneCore_NetworkingTriage_RoutePolicyManagement"/>
193 + <EventProviderId Value="ntlm_WPP"/>
194 + <EventProviderId Value="NCRYPTSSLP_WPP"/>
195 + <EventProviderId Value="Microsoft_Windows_CAPI2_WPP"/>
196 + <EventProviderId Value="DNS_WPP"/>
197 + <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_CertEnroll_WPP"/>
198 + <EventProviderId Value="Webio_WPP"/>
199 + <EventProviderId Value="TPM_WPP"/>
200 + <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_Lifecycle_User_WPP"/>
201 + <EventProviderId Value="Microsoft_Windows_MicrosoftAccount_TBProvider_WPP"/>
202 + <EventProviderId Value="vault_WPP"/>
203 + <EventProviderId Value="Microsoft_Windows_Security_Biometrics_Client_WPP"/>
204 + <EventProviderId Value="Microsoft_Windows_BranchCacheClientEventProvider"/>
205 + <EventProviderId Value="CRYPTOWINRT_WPP"/>
206 + <EventProviderId Value="Microsoft_Windows_Security_NGC_CryptNgc_WPP"/>
207 + <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_AutoEnrollment_WPP"/>
208 + <EventProviderId Value="Microsoft_Windows_CertPolEng_WPP"/>
209 + <EventProviderId Value="dpapis_WPP"/>
210 + <EventProviderId Value="Microsoft_Windows_CertificationAuthorityClient_CertCli_WPP"/>
211 + <EventProviderId Value="KerbComm_WPP"/>
212 + <EventProviderId Value="Microsoft_Windows_Security_LsaSrv_WPP"/>
213 + <EventProviderId Value="Microsoft_Windows_Security_AADAuthHelper_WPP"/>
214 + <EventProviderId Value="TLS_WPP"/>
215 + <EventProviderId Value="webauth_WPP"/>
216 + <EventProviderId Value="idlisten_WPP"/>
217 + <EventProviderId Value="Winsock_WPP"/>
218 + <EventProviderId Value="Microsoft_Windows_Security_NGC_KspSvc_WPP"/>
219 + <EventProviderId Value="aad_WPP"/>
220 + <EventProviderId Value="LsaIso_WPP"/>
221 + <EventProviderId Value="Microsoft_Windows_Security_TokenBroker_WPP"/>
222 + <EventProviderId Value="CNG_WPP"/>
223 + <EventProviderId Value="NtlmShared_WPP"/>
224 + <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_Lifecycle_System_WPP"/>
225 + <EventProviderId Value="Microsoft_Windows_DeviceManagement_SCEP_WPP"/>
226 + <EventProviderId Value="Microsoft_Windows_Security_Biometrics_CredentialProvider_Face_WPP"/>
227 + <EventProviderId Value="credssp_WPP"/>
228 + <EventProviderId Value="basecsp_WPP"/>
229 + <EventProviderId Value="gMSAClient_WPP"/>
230 + <EventProviderId Value="Microsoft_Windows_Security_DeviceLock_WPP"/>
231 + <EventProviderId Value="Microsoft_Windows_Security_Biometrics_FingerprintCredential_WPP"/>
232 + <EventProviderId Value="BCRYPT_WPP"/>
233 + <EventProviderId Value="idstore_WPP"/>
234 + <EventProviderId Value="Wininet_WPP"/>
235 + <EventProviderId Value="idcommon_WPP"/>
236 + <EventProviderId Value="Microsoft_Windows_DNS_Client"/>
237 + <EventProviderId Value="Microsoft_Windows_DNS_Client_Configuration_PowerShell"/>
238 + <EventProviderId Value="Microsoft_Windows_AppModel_Exec_WPP"/>
239 + <EventProviderId Value="Microsoft_Windows_Security_DevCredSvc_WPP"/>
240 + <EventProviderId Value="Microsoft_Quic_ETW"/>
241 + <EventProviderId Value="LsaDs_WPP"/>
242 + <EventProviderId Value="Microsoft_Windows_WBioSrvc_WPP"/>
243 + <EventProviderId Value="Microsoft_Windows_Security_AADCloudAPPlugin_WPP"/>
244 + <EventProviderId Value="Microsoft_Windows_CertificateServices_Deployment_WPP"/>
245 + <EventProviderId Value="Microsoft_Windows_Security_NGC_CSP_WPP"/>
246 + <EventProviderId Value="kps_WPP"/>
247 + <EventProviderId Value="WinHttp_WPP"/>
248 + <EventProviderId Value="Microsoft_Windows_Security_NGC_NgcCtnr_WPP"/>
249 + <EventProviderId Value="Microsoft_Windows_Security_DevCredWinRt_WPP"/>
250 + <EventProviderId Value="Microsoft_Windows_Security_NGC_KeyStaging_WPP"/>
251 + <EventProviderId Value="dclocator_WPP"/>
252 + <EventProviderId Value="webplatform_WPP"/>
253 + <EventProviderId Value="Microsoft_Windows_Security_NGC_CredProv_WPP"/>
254 + <EventProviderId Value="Microsoft_Windows_ProcessStateManager_WPP"/>
255 + <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_CredentialRoaming_WPP"/>
256 + <EventProviderId Value="Microsoft_Windows_LiveId_WPP"/>
257 + <EventProviderId Value="Microsoft_Windows_Security_Fido_WPP"/>
258 + <EventProviderId Value="Microsoft_Windows_Security_DevCredProv_WPP"/>
259 + <EventProviderId Value="kdc_WPP"/>
260 + <EventProviderId Value="Microsoft_Windows_Security_Credentials_UserConsentVerifier_WPP"/>
261 + <EventProviderId Value="Microsoft_OSG_OSS_CredProvFramework_ReportResultStop_WPP"/>
262 + <EventProviderId Value="livessp_WPP"/>
263 + <EventProviderId Value="WFP_WPP"/>
264 + <EventProviderId Value="Microsoft_Windows_DNS_Client_WinRNR"/>
265 + <EventProviderId Value="digest_WPP"/>
266 + <EventProviderId Value="Microsoft_Windows_CertificateServicesClient_WPP"/>
267 + <EventProviderId Value="negoexts_WPP"/>
268 + <EventProviderId Value="Microsoft_Windows_Security_NGC_LocalAccountMigPlugin_WPP"/>
269 + <EventProviderId Value="LsaTrace_WPP"/>
270 + <EventProviderId Value="Microsoft_Windows_DeviceManagement_Enterprise_Diagnostics_Provider_WPP"/>
271 + <EventProviderId Value="Microsoft_OSG_Wininet_WPP"/>
272 + <EventProviderId Value="Microsoft_Windows_Security_NGC_PopKeySrv_WPP"/>
273 + <EventProviderId Value="UrlMon_WPP"/>
274 + <EventProviderId Value="Microsoft_Windows_WinINet"/>
275 + <EventProviderId Value="Microsoft_Windows_Security_Biometrics_BioCredProv_WPP"/>
276 + <EventProviderId Value="Microsoft_OneCore_NetworkingTriage_GetConnected"/>
277 + <EventProviderId Value="Microsoft_Windows_Security_NGC_Recovery_WPP"/>
278 + <EventProviderId Value="Microsoft_Windows_Winsock_NameResolution"/>
279 + <EventProviderId Value="Microsoft_Windows_WinHttp"/>
280 + <EventProviderId Value="Microsoft_Windows_Security_Biometrics_Trustlet_WPP"/>
281 + <EventProviderId Value="cloudap_WPP"/>
282 + <EventProviderId Value="Microsoft_Windows_BrokerInfrastructure_WPP"/>
283 + <EventProviderId Value="IPNat"/>
284 + <EventProviderId Value="IpNatHlp"/>
285 + <EventProviderId Value="WinNat"/>
286 + <EventProviderId Value="WinNatSys"/>
287 + <EventProviderId Value="Microsoft-Windows-TCPIP"/>
288 + <EventProviderId Value="VmSwitch"/>
289 + </EventProviders>
290 + </EventCollectorId>
291 + </Collectors>
292 + </Profile>
293 + </Profiles>
294 +</WindowsPerformanceRecorder>
\ No newline at end of file