Gathering a Startup, Shutdown, Sleep, Hibernate, or Reboot Trace
Gathering a Startup, Shutdown, Sleep, Hibernate, or Reboot Trace
Getting Traces to Troubleshoot Performance Issues
Published by cluberti
Designer Media Ltd
Microsoft has created a toolset called the Windows Performance Toolkit, or WPT, to help developers and users visualize and troubleshoot performance issues. One of the tools in this toolset is specifically designed to assist with capturing traces of boot, shutdown, or reboot cycles, and can provide insight into drivers, services, winlogon, explorer, disk and CPU utilization, and even help with seeing things like disk fragmentation and driver load order.
Installing the tools
Before gathering any data, you will first need to download the installation packages necessary to install the Windows Performance Toolkit on your Windows 7 machine. The Windows Performance Toolkit is a part of the Windows 7 SDK, but you won’t need to install the entire SDK to get the WPT installation files if you follow this guide. First, you need to download the Windows 7 SDK, which is a 500K web installer (click the “Install Now” link). Once you start the installation, you only need to check the “Windows Performance Toolkit” checkbox under the “Redistributable Packages” section – uncheck EVERYTHING else:
After you click next, it will download (only) the installation .MSI packages needed to actually install the WPT. Once the download of the files is complete and you exit the SDK installer, you will need to actually install the version of the WPT that matches the architecture of your OS (the x86 MSI on a 32bit Windows 7 machine, the x64 MSI on a 64bit Windows 7 machine). The downloaded .MSI files will be located (by default) in C:\Program Files\Microsoft SDKs\Windows\v7.1\Redist\Windows Performance Toolkit:
Install the correct installation file that matches the architecture (32bit or 64bit) of your Windows 7 install, taking all the default options and performing a “Complete” installation.
Disable the Paging of the Kernel Executive on x64 Windows
If you have a 64bit installation of Windows, you will need to modify the registry to enable full tracing to work properly. To do this, you will need to open an ELEVATED CMD PROMPT, then type "regedit.exe" from within that command prompt (minus the quotes of course). Once regedit is open, browse to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management, double-click the "DisablePagingExecutive" value, and change it from "0" to "1". Click "OK" to save the value:
At this point, you *must* reboot for this change to take effect before you start ANY tracing.
Once you've done the above steps, but before you continue, you will need to open an ELEVATED CMD PROMPT to execute any of the trace options described in this guide. Once you've decided which type of trace to take (or which you've been asked to take by a member of this forum), choose the correct trace section below and follow that section only:
Creating a BOOT trace:
First, you will need have that elevated CMD prompt open. Second, to generate a boot trace, you will need to type the following command into the CMD prompt, and press the ENTER key to execute it – note that this command is ALL ONE LINE:
This command will cause your machine to shut down and reboot automatically. Once the system restarts, please log back in (as necessary) as soon as possible to minimize the size of the resulting trace file. Once logged in, the system will present a dialog box letting you know that it is waiting 120 seconds (it will count down) before finishing the trace. DO NOT use your computer to do anything during this time – let the countdown finish and trace files generate:
Once the trace is complete, you will find a large .ETL file and a log file in C:\Boot_Trace. This .ETL file can then be compressed (using 7zip, winrar, winzip, etc.) and uploaded for analysis - however, due to its size, you will need to upload it to a third-party site such as MediaFire, MegaUpload or RapidShare.
Creating a Shutdown trace:
First, you will need have that elevated CMD prompt open. Second, to generate a boot trace, you will need to type the following command into the CMD prompt, and press the ENTER key to execute it – note that this command is ALL ONE LINE:
This command will cause your machine to shut down and reboot automatically. Once the system restarts, please log back in (as necessary) as soon as possible. Once logged in, the system will present a dialog box letting you know that it is waiting 120 seconds (it will count down) before rebooting your machine A SECOND TIME. DO NOT click the countdown dialog, or in any other way utilize your computer to do anything during this time – let the countdown finish and the system restart:
Again, once the system restarts a second time, please log back in (as necessary) as soon as possible. This time, the trace will finalize:
Once the trace is complete, you will find a large .ETL file and a log file in C:\Shutdown_Trace. This .ETL file can then be compressed (using 7zip, winrar, winzip, etc.) and uploaded for analysis - however, due to its size, you will need to upload it to a third-party site such as MediaFire, MegaUpload or RapidShare.
Creating a REBOOT trace:
First, you will need have that elevated CMD prompt open. Second, to generate a boot trace, you will need to type the following command into the CMD prompt, and press the ENTER key to execute it – note that this command is ALL ONE LINE:
This command will cause your machine to shut down and reboot automatically. Once the system restarts, please log back in (as necessary) as soon as possible. Once logged in, the system will present a dialog box letting you know that it is waiting 120 seconds (it will count down) before rebooting your machine A SECOND TIME. DO NOT click the countdown dialog, or in any other way utilize your computer to do anything during this time – let the countdown finish and the system restart:
Again, once the system restarts a second time, please log back in (as necessary) as soon as possible. This will start another 120 second countdown, and reboot your machine A THIRD TIME. As before, DO NOT utilize your computer during this time – let the countdown finish (again) and the system restart (again):
Once the system restarts a third time, please log back in (as necessary) as soon as possible. This time, the trace will finalize:
Once the trace is complete, you will find a large .ETL file and a log file in C:\Reboot_Trace. This .ETL file can then be compressed (using 7zip, winrar, winzip, etc.) and uploaded for analysis - however, due to its size, you will need to upload it to a third-party site such as MediaFire, MegaUpload or RapidShare.
I've been reluctant to recommend xperf because of lack of tutorial and also because for the non-serious user I have feared that there would be more problems and situations created than solved.
I do feel like the tool is good for the knowledgeable user.
System Manufacturer/Model Number: Toshiba Satellite S875D-S7239 laptop OS: MS Windows 7 Ultimate SP1 64-bit CPU: AMD A10-4600M Motherboard: AMD Pumori (Socket FT1) Memory: 6.00 GB Dual-Channel DDR3 @ 798MHz (11-11-12-28) Graphics Card: AMD Radeon HD 7660G Sound Card: High Definition Audio Device Monitor(s) Displays: Generic PnP Monitor (1600x900@60Hz) Screen Resolution: 1600x900@60Hz Keyboard: Standard PS/2 Keyboard Mouse: HP Wireless Optical Mobile Mouse Model FHA-3410 Hard Drives: SSD 119GB Corsair CSSD-V128GB2 ATA Device Internet Speed: What the local pub, local coffee shop offers. Other Info: Optical Drive:MATSHITA BD-CMB UJ160B ATA Device
Also have an Asus ha1002xp netbook with Win 7 Ultimate installed.
If I need to find out why my PC is taking 187 seconds instead of the former ~66, do I need all three traces? Which forum do you want them in?
Installed the Windows Performance Toolkit per the tutorial and when booting up the first time I was presented with this BSOD right after the Windows boot animation finished.
I got another at the second boot up about USB_BUGCHECK I believe was the error message. The third time no error message in the BSOD.
Computer Type: PC/Desktop System Manufacturer/Model Number: Home Built Desktop By DataTech OS: Windows 7 Ultimate X64 SP1 CPU: Intel i5-2550K, Differing ~4.4-4.8GHz No built in GPU Motherboard: ASUS P8Z68-V PRO/GEN3 Memory: 16GB G.Skill Sniper 1866MHz @ 2133MHz 2x8GB Graphics Card: ASUS GTX650TIB-DC2OC-2GD5, (650TI Boost) Sound Card: Onboard Realtek 5-1 Monitor(s) Displays: Samsung P2570HD Screen Resolution: 1920x1080 Keyboard: E-Z Eyes, bright yellow keys with large characters Mouse: steelseries SENSEI Laser Pro Gaming PSU: Corsair HX650W Case: Inwin Dragon Rider Cooling: Hyper 212 EVO w/two Noctua fans, push-pull, @1300 RPM Hard Drives: Samsung 840 Pro 256GB SSD for OS, 500GB Seagate Constellation (Enterprise drive) for Data Internet Speed: 48-51Mbs Mbs down, 11 Mbs up Xfinity Cable Browser: IE 10, Opera, Pale Moon if needed Antivirus: Norton Internet Security 2013 Other Info: 4 case fans, LG BluRay-RE, ASUS DVD-RW, Mr. Fusion power supply, 1.21 gigawatts.
Hi. I am doing a clean install with Gregrockers guidance and help. I was going through the event logs and found boot delay, standby degradation, delays caused by usb stick, sleep and hibernation errors. It all seems to point to bios yet Greg refered me to you first. I have a Mutt Mobo from Hp which does not support Win7 drivers for my system. So it does make me nervous to flash bios with a Universal driver for Amd that I found.
I installed tool and ran all three traces. Boot trace delays 300 seconds (did it twice) 216Mb. Reboot trace ask for elevated permission before each 120 sec delay (did it three times... one time it quit trace due to an error) 241Mb.
Shutdown trace 28Mb.
However I did not leave in USB stick when doing trace.....which was causing part of the delay errors.
I will greatly appreciate any help. Yet, do help Britton first..... he is definitely priority. Just let me know if I need to redo traces w/stick plugged in.
Thanks.
System Manufacturer/Model Number: Hp presario v6620us 6500notebook series. OS: 7 professional CPU: Your Processor type and speed - AMD ATHLON(tm) 64X2 DUAL-COR Motherboard: Quanta 30CF Memory: 2.5gb Graphics Card: NVIDIA GeForce 7150/nForce 64MB Sound Card: conextant smartaudio hd2 Keyboard: Yep Mouse: Nope PSU: Wth? is this Case: The judge threw it out. Not enough evidence. Cooling: sometimes. Hard Drives: FUJITSU PLATA 160GB IDE Internet Speed: fast
If I need to find out why my PC is taking 187 seconds instead of the former ~66, do I need all three traces? Which forum do you want them in?
You would want just a boot trace. As to the BSOD, sometimes the +DRIVERS portion of the command line can cause it. If you get frequent BSODs when attempting to trace, remove "+DRIVERS" from the command line for a trace and that should avoid a BSOD when taking a trace.
ariel5345 said:
I installed tool and ran all three traces. Boot trace delays 300 seconds (did it twice) 216Mb. Reboot trace ask for elevated permission before each 120 sec delay (did it three times... one time it quit trace due to an error) 241Mb.
Shutdown trace 28Mb.
However I did not leave in USB stick when doing trace.....which was causing part of the delay errors.
I will greatly appreciate any help. Yet, do help Britton first..... he is definitely priority. Just let me know if I need to redo traces w/stick plugged in.
Thanks.
You only need a boot trace, unless you want to get info on the others. I would recommend, if a USB key causes additional delays, that you take a boot trace with a USB key in.
If you need help with traces, create a thread in the performance section and point me to it.
Computer Type: PC/Desktop System Manufacturer/Model Number: Home Built Desktop By DataTech OS: Windows 7 Ultimate X64 SP1 CPU: Intel i5-2550K, Differing ~4.4-4.8GHz No built in GPU Motherboard: ASUS P8Z68-V PRO/GEN3 Memory: 16GB G.Skill Sniper 1866MHz @ 2133MHz 2x8GB Graphics Card: ASUS GTX650TIB-DC2OC-2GD5, (650TI Boost) Sound Card: Onboard Realtek 5-1 Monitor(s) Displays: Samsung P2570HD Screen Resolution: 1920x1080 Keyboard: E-Z Eyes, bright yellow keys with large characters Mouse: steelseries SENSEI Laser Pro Gaming PSU: Corsair HX650W Case: Inwin Dragon Rider Cooling: Hyper 212 EVO w/two Noctua fans, push-pull, @1300 RPM Hard Drives: Samsung 840 Pro 256GB SSD for OS, 500GB Seagate Constellation (Enterprise drive) for Data Internet Speed: 48-51Mbs Mbs down, 11 Mbs up Xfinity Cable Browser: IE 10, Opera, Pale Moon if needed Antivirus: Norton Internet Security 2013 Other Info: 4 case fans, LG BluRay-RE, ASUS DVD-RW, Mr. Fusion power supply, 1.21 gigawatts.
For the past few days Windows refuses to shutdown. Everytime I select the sleep, hibernate or shutdown options it will reboot/reawaken straight away. I have tested the RAM which had no problems, I reinstalled Windows completely which didn't help & I checked power settings in BIOS to disable...
Hello,
So I am stumped I have searched the net over and over. So I have come here for some advice.
Win 7
- x86 (32-bit) or x64 ?
-- x64
- the original installed OS on the system?
-- 32 bit vista
- an OEM or full retail version?