Edit

Share via

!ndiskd.dbgsystems

  • Article

The !ndiskd.dbgsystems extension displays and optionally changes the NDIS subsystems that have debug traces enabled.

Warning   !ndiskd.dbgsystems has been superseded by WPP (Windows software trace preprocessor) and Driver Verifier. !ndiskd will give you the following warning if your target system does not support !ndiskd.dbgsystems.

0: kd> !ndiskd.dbgsystems
    This target does not support tracing through !ndiskd.dbglevel or
    !ndiskd.dbgsystems.
    Learn how to collect traces with WPP

If you click on the link at the bottom of the warning, !ndiskd will give you more information.

0: kd> !ndiskd.help wpptracing
    WPP traces are fast, flexible, and detailed.  Plus, starting with Windows 8
    and Windows Server 2012, you can automatically decode NDIS traces using the
    symbol file.  Just point TraceView (or tracepdb.exe) at NDIS.PDB, and it
    will be able to get all the TMFs it needs to trace NDIS activity.
    
    If you would like traces to be printed in the debugger window, you use the
    !wmitrace extension.  For example, you might enable traces with this:

    !wmitrace.searchpath c:\path\to\TMF\files
    !wmitrace.start ndis -kd
    !wmitrace.enable ndis {DD7A21E6-A651-46D4-B7C2-66543067B869} -level 4 -flag 0x31f3

For more information about WPP, see WPP Software Tracing.

For more information about Driver Verifier, see Driver Verifier.

For more information about WMI tracing, see WMI Tracing Extensions (Wmitrace.dll).

!ndiskd.dbgsystems [-subsystem <any>]

Parameters

-subsystem
The subsystem to toggle.

If multiple components are selected, separate them with spaces. If a previously-selected component is repeated, its debug monitoring will be toggled off. The following values are possible:

Value

Meaning

INIT

Traces adapter initialization.

CONFIG

Traces adapter configuration.

SEND

Traces sending data over the network.

RECV

Traces receiving data from the network.

PROTOCOL

Traces protocol operations.

BIND

Traces binding operations.

BUS_QUERY

Traces bus queries.

REGISTRY

Traces registry operations.

MEMORY

Traces memory management.

FILTER

Traces filter operations.

REQUEST

Traces requests.

WORK_ITEM

Traces work-item operations.

PNP

Traces Plug and Play operations.

PM

Traces Power Management operations.

OPEN

Traces operations that open reference objects.

LOCKS

Traces locking operations.

RESET

Traces resetting operations.

WMI

Traces Windows Management Instrumentation operations.

NDIS_CO

Traces Connection-Oriented NDIS.

REFERENCE

Traces reference operations.

DLL

Ndiskd.dll

Remarks

This extension applies to checked NDIS.sys only. To check the build info of NDIS.sys, run the !ndiskd.ndis extension.

See also

Network Driver Design Guide

Windows Vista and Later Networking Reference

Debugging the Network Stack

NDIS extensions (Ndiskd.dll)

!ndiskd.help

!ndiskd.ndis

WPP Software Tracing

Driver Verifier

WMI Tracing Extensions (Wmitrace.dll)