Accelerated Windows Software Trace Analysis: Training Course Transcript

Feel frustrated when opening a software trace with millions of messages from hundreds of software components, threads and processes? Go beyond simple CPU and disk hog monitoring or searching for errors in a text and learn how to efficiently and effectively analyze software traces and logs from complex software environments. Covered popular software logs and trace formats from Microsoft and Citrix products and tools including Event Tracing for Windows (ETW) and Citrix Common Diagnostics Format (CDF). This course teaches using pioneering and innovative pattern-driven and pattern-based analysis of abnormal software behavior incidents developed by Software Diagnostics Institute. Windows Memory Dump Analysis and Debugging Introduction 7 What's it all About? 8 Prerequisites 9 Training Goals 10 Training Principles 11 Schedule Summary 12 Part 1: Fundamentals 13 Basic Concepts 14 Software Trace (Log) 15 Process 16 Thread 17 Adjoint Thread 18 Exercise T0 19 Module / Source 20 File and Function 21 Trace Message 22 Stack Trace 23 Trace Recording Tools 24 Trace Analysis Tools 25 Minimal Trace Graphs 26 Trace Formats 27 Pattern-Driven Analysis 28 Pattern-Based Analysis 29 Pattern Hierarchy 30 Pattern Classification 31 Part 2: Individual Patterns 32 Vocabulary Patterns 33 Basic Facts 34 Basic Facts Taxonomy 35 Vocabulary Index 36 Error Patterns 37 Error Message 38 Exception Stack Trace 39 Periodic Error 40 False Positive Error 41 Error Distribution 42 Trace as a Whole 43 Partition 44 Circular Trace 45 Message Density 46 Message Current 47 Trace Acceleration 48 No Trace Metafile 49 Empty Trace 50 Missing Module 51 Guest Module 52 Truncated Trace 53 Visibility Limit 54 Sparse Trace 55 Large Scale Patterns 56 Bird's Eye Binary View 57 Characteristic Block 58 Background Modules 59 Foreground Modules 60 Layered Periodization 61 Focus of Tracing 62 Event Sequence Order 63 Frames (Source Code) 64 Trace Frames 65 Activity Patterns 66 Thread of Activity 67 Adjoint Thread of Activity 68 No Activity 69 Activity Region 70 Discontinuity 71 Time Delta 72 Glued Activity 73 Break-in Activity 74 Resume Activity 75 Data Flow 76 Message Patterns 77 Significant Event 78 Poetry of Software Traces 79 Defamiliarizing Effect 80 Anchor Messages 81 Message Interleave 82 Diegetic Messages 83 Message Change 84 Implementation Discourse 85 Message Invariant 86 UI Message 87 Original Message 88 Linked Messages 89 Gossip 90 Counter Value 91 Message Context 92 Marked Messages 93 Fiber Bundle 94 Incomplete History 95 Opposition Messages 96 Block Patterns 97 Macrofunction 98 Periodic Message Block 99 Intra-Correlation 100 Trace Set Patterns 101 Master Trace 102 Bifurcation Point 103 Inter-Correlation 104 Relative Density 105 News Value 106 Impossible Trace 107 Split Trace 108 12.12.12 109 Part 3: Practice Exercises 113 Links 114 Process Monitor Examples 115 Exercise T1 116 Exercise T2 117 Exercise T3 118 Exercise T4 119 Exercise T5 120 Exercise T6 121 Using Excel for Analysis 122 Resources 123 App Source Code 125