The Windows Event Tracing framework (ETW) can be used to log a lot of information about the system internals. The tracefmt.exe
tool that comes with Windows SDK can be used to convert the .etl
log files into text.
However, it requires .tmf
message format files to process the messages. Otherwise the data fill just appear as unknowns:
Unknown( 25): GUID=72e5b5cd-5b46-3568-7f3a-3eb074bedc0f (No Format Information found).
How can I download the needed .tmf
files?