1983 lines
129 KiB
Plaintext
1983 lines
129 KiB
Plaintext
<?xml version="1.0" encoding="utf-8"?>
|
|
<AssetCollection xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
|
|
<Metadata>
|
|
<UniqueId>ce8b6744-ee4a-4b74-bda5-c0898f298b45</UniqueId>
|
|
<GroupId>ce8b6744-ee4a-4b74-bda5-c0898f298b45</GroupId>
|
|
<Name>Message Analyzer Trace Scenarios</Name>
|
|
<AssetType>TraceScenarioAsset</AssetType>
|
|
<VersionNumber>1</VersionNumber>
|
|
<Author>Message Analyzer</Author>
|
|
<Corporation>Microsoft</Corporation>
|
|
<PublishedDate>2013-09-01T00:00:00</PublishedDate>
|
|
<ModifiedDate>2015-05-19T00:00:00</ModifiedDate>
|
|
<Revision>11</Revision>
|
|
<Description>The official release of trace scenarios from the Message Analyzer Team. Download and sync this set to get periodic updates.</Description>
|
|
<Rating>0</Rating>
|
|
</Metadata>
|
|
<Assets>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>b96da411-4f14-4b5e-9037-83a1aba38f01</UniqueId>
|
|
<Name>Local Network Interfaces (Win 8.1 and later)</Name>
|
|
<Description>Capture local Link Layer traffic from NDIS. OS: Windows 8.1/Windows Server 2012 R2 and later.</Description>
|
|
<Category>Network</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>2ed6006e-4729-4609-b423-3ee7bcd678ef</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings xsi:type="EtwMessageSourcePluginSettingsNdiscap">
|
|
<__Id>2ed6006e-4729-4609-b423-3ee7bcd678ef</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
<AdapterConfigs />
|
|
<AllLayers>false</AllLayers>
|
|
<TruncationLength>0</TruncationLength>
|
|
<EtherTypes />
|
|
<MacAddresses />
|
|
<IpAddresses />
|
|
<Protocols />
|
|
<Direction>Both</Direction>
|
|
<TargetType>Both</TargetType>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>256</BufferSizeKB>
|
|
<MinBufferCount>4</MinBufferCount>
|
|
<MaxBufferCount>16</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>RemoteRpcTunnelEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<CaptureFilter />
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>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</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>d121de6a-3b01-4f1a-80ea-73931f23ac43</UniqueId>
|
|
<Name>Local Network Interfaces (Win 8 and earlier)</Name>
|
|
<Description>Capture local Link Layer traffic from NDIS. OS: Windows7/Windows 8/Windows Server 2012.</Description>
|
|
<Category>Network</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>9de85b12-1202-467c-8047-ed308fb776c3</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings xsi:type="EtwMessageSourcePluginSettingsPefNdis">
|
|
<__Id>9de85b12-1202-467c-8047-ed308fb776c3</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
<adapters />
|
|
<FastFilters>
|
|
<PefNdisFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefNdisFastFilter>
|
|
<PefNdisFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefNdisFastFilter>
|
|
<PefNdisFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefNdisFastFilter>
|
|
<PefNdisFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefNdisFastFilter>
|
|
</FastFilters>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>256</BufferSizeKB>
|
|
<MinBufferCount>4</MinBufferCount>
|
|
<MaxBufferCount>16</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>LocalEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>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</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>a3260a37-a7e3-4c2c-83bb-f5429ea9dab7</UniqueId>
|
|
<Name>Remote Network Interfaces with Drop Information</Name>
|
|
<Description>Remote capture on Link Layer including event data to indicate dropped messages. Truncation is set to 128 bytes. OS: target machines with Windows 8.1/Windows Server 2012 R2 and later.</Description>
|
|
<Category>Network</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>2ed6006e-4729-4609-b423-3ee7bcd678ef</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings xsi:type="EtwMessageSourcePluginSettingsNdiscap">
|
|
<__Id>2ed6006e-4729-4609-b423-3ee7bcd678ef</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
<AdapterConfigs />
|
|
<AllLayers>false</AllLayers>
|
|
<TruncationLength>128</TruncationLength>
|
|
<EtherTypes />
|
|
<MacAddresses />
|
|
<IpAddresses />
|
|
<Protocols />
|
|
<Direction>Both</Direction>
|
|
<TargetType>Both</TargetType>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>0c478c5b-0351-41b1-8c58-4a6737da32e3</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>0c478c5b-0351-41b1-8c58-4a6737da32e3</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>1099511627776</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>11c5d8ad-756a-42c2-8087-eb1b4a72a846</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>11c5d8ad-756a-42c2-8087-eb1b4a72a846</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>1099511627776</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>2f07e2ee-15db-40f1-90ef-9d7ba282188a</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>2f07e2ee-15db-40f1-90ef-9d7ba282188a</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>1099511627776</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>67dc0d66-3695-47c0-9642-33f76f7bd7ad</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>67dc0d66-3695-47c0-9642-33f76f7bd7ad</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>1099511627776</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>914ed502-b70d-4add-b758-95692854f8a3</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>914ed502-b70d-4add-b758-95692854f8a3</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>1099511627776</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>b72c6994-9fe0-45ad-83b3-8f5885f20e0e</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>b72c6994-9fe0-45ad-83b3-8f5885f20e0e</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>1099511627776</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>e53c6823-7bb8-44bb-90dc-3f86090d48a6</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>e53c6823-7bb8-44bb-90dc-3f86090d48a6</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>1099511627776</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>256</BufferSizeKB>
|
|
<MinBufferCount>4</MinBufferCount>
|
|
<MaxBufferCount>16</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
</SessionSettings>
|
|
<CaptureFilter />
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAABGdBTUEAALGPC/xhBQAAAAlwSFlzAAAOwQAADsEBuJFr7QAAABp0RVh0U29mdHdhcmUAUGFpbnQuTkVUIHYzLjUuMTAw9HKhAAADJUlEQVRYR+2Ua0iTURjHD2qSUlQUmGaRRXYT3ZdckSRe0llGpaFZWcPynpptpmiBtryvGLVMzdSopqir1FK8JOK8zOY0c9vrLrZmpqCJgR8EjfM0cR8k3i4Yvn7ZD37w8j/P+Z8DB15kxIgRI0aWg3aCsOnT6MIHh0fSeYJqR0O8/EiUQ86qL6Px375Px2jVaoZGozxe2dLOMSz/nuoOsXv3oDqg7YPC3hD9M7VYwbk6Wz4Uoilswj/wWQDwHBsb85UOqjIaxD2dguo3DMMoObGPBVZfx8djldphluLzSH7fkE4oUWqefBj4xKZPZiSazkS3WkB8qs3cLQ99ufn8nkPA3bMfZ7x0nbkLFnImmD1ngHkKHTJr8m8T2i/Zot4BMa+wOE0/ajU//0fSBZWOpXVN/DZJb+TExMQpjOe8McY+8umvcZtH48AfiuEkFAENssECWLAOJ+D1cAOsp9iwpYmJN7JdsMkJO0DeWyE4O0mTV/IsSV/794MX4xpw/krYzTuC+2VCkbC1q1mm0T2Mqs4pRvzDgKq8MBL5wU7iGj49ysPnpovgwtxTPH8xB/2l1kIybFBFYJOAXaCvslloXBometfa02gHgmNZUeGclBcWIU5gdtkBUOQ+QIk0QJl0jPKPACrzAFTnC7adoeA0kABH37Lh/SfZrFSlaxET6oeiPll4TVePC59fsWahemmYuEadCnVOPiOkpwaO7Us+AZsiDsKqi/sBXbIHFL4XEMsJIy4ddif4YLvrHtAgbr1BaLUsuXY4i9CNFPZqPr/qIlSvuxTqHG7FK6ahd0mYbkOW1scSgoO9OMwSt3Sm0j2LCdtj3AAF7gBGcQxcF+ZOfZ+cDlSr1Sfl8o+ePeIOd2l3N0PS3x/Ur1LFVzW35kY/KPqvJ1rM/HOty+Zxfdl5nHtud0OkbG5WUt6LikfljS3vXreL20UyxTMJoUyTymRh9Y2NfpX1DdFhBQWWC9uXGVtb2y1B0fH+iVxeRm6poPaBsKa/tlPCNyyvCKv1rlr4/AX9z2VFJQ2plDSkUtKQSklDKiUNqZQ0pFLSkEpJQyolDakT0E+CFz02DZFSDgAAAABJRU5ErkJggg==</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>4e69c817-99c0-4099-82f2-4a7f94b5f00d</UniqueId>
|
|
<Name>Remote Network Interfaces</Name>
|
|
<Description>Remote capture on Link Layer. OS: target machines with Windows 8.1/Windows Server 2012 R2 and later.</Description>
|
|
<Category>Network</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>2ed6006e-4729-4609-b423-3ee7bcd678ef</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings xsi:type="EtwMessageSourcePluginSettingsNdiscap">
|
|
<__Id>2ed6006e-4729-4609-b423-3ee7bcd678ef</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
<AdapterConfigs />
|
|
<AllLayers>false</AllLayers>
|
|
<TruncationLength>128</TruncationLength>
|
|
<EtherTypes />
|
|
<MacAddresses />
|
|
<IpAddresses />
|
|
<Protocols />
|
|
<Direction>Both</Direction>
|
|
<TargetType>Both</TargetType>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>256</BufferSizeKB>
|
|
<MinBufferCount>4</MinBufferCount>
|
|
<MaxBufferCount>16</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>RemoteRpcTunnelEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<CaptureFilter />
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAABGdBTUEAALGPC/xhBQAAAAlwSFlzAAAOwQAADsEBuJFr7QAAABp0RVh0U29mdHdhcmUAUGFpbnQuTkVUIHYzLjUuMTAw9HKhAAADJUlEQVRYR+2Ua0iTURjHD2qSUlQUmGaRRXYT3ZdckSRe0llGpaFZWcPynpptpmiBtryvGLVMzdSopqir1FK8JOK8zOY0c9vrLrZmpqCJgR8EjfM0cR8k3i4Yvn7ZD37w8j/P+Z8DB15kxIgRI0aWg3aCsOnT6MIHh0fSeYJqR0O8/EiUQ86qL6Px375Px2jVaoZGozxe2dLOMSz/nuoOsXv3oDqg7YPC3hD9M7VYwbk6Wz4Uoilswj/wWQDwHBsb85UOqjIaxD2dguo3DMMoObGPBVZfx8djldphluLzSH7fkE4oUWqefBj4xKZPZiSazkS3WkB8qs3cLQ99ufn8nkPA3bMfZ7x0nbkLFnImmD1ngHkKHTJr8m8T2i/Zot4BMa+wOE0/ajU//0fSBZWOpXVN/DZJb+TExMQpjOe8McY+8umvcZtH48AfiuEkFAENssECWLAOJ+D1cAOsp9iwpYmJN7JdsMkJO0DeWyE4O0mTV/IsSV/794MX4xpw/krYzTuC+2VCkbC1q1mm0T2Mqs4pRvzDgKq8MBL5wU7iGj49ysPnpovgwtxTPH8xB/2l1kIybFBFYJOAXaCvslloXBometfa02gHgmNZUeGclBcWIU5gdtkBUOQ+QIk0QJl0jPKPACrzAFTnC7adoeA0kABH37Lh/SfZrFSlaxET6oeiPll4TVePC59fsWahemmYuEadCnVOPiOkpwaO7Us+AZsiDsKqi/sBXbIHFL4XEMsJIy4ddif4YLvrHtAgbr1BaLUsuXY4i9CNFPZqPr/qIlSvuxTqHG7FK6ahd0mYbkOW1scSgoO9OMwSt3Sm0j2LCdtj3AAF7gBGcQxcF+ZOfZ+cDlSr1Sfl8o+ePeIOd2l3N0PS3x/Ur1LFVzW35kY/KPqvJ1rM/HOty+Zxfdl5nHtud0OkbG5WUt6LikfljS3vXreL20UyxTMJoUyTymRh9Y2NfpX1DdFhBQWWC9uXGVtb2y1B0fH+iVxeRm6poPaBsKa/tlPCNyyvCKv1rlr4/AX9z2VFJQ2plDSkUtKQSklDKiUNqZQ0pFLSkEpJQyolDakT0E+CFz02DZFSDgAAAABJRU5ErkJggg==</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>0fc4660c-cb8e-4a97-956d-6b2218450092</UniqueId>
|
|
<Name>Loopback and Unencrypted IPSEC</Name>
|
|
<Description>Captures above IPv4/IPv6 layer using Windows Filtering Platform. This exposes Loopback traffic in two directions and unencrypted IPSEC traffic. OS: Windows 7 and later.</Description>
|
|
<Category>Network</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>c22d1b14-c242-49de-9f17-1d76b8b9c458</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings xsi:type="EtwMessageSourcePluginSettingsWfpCapture">
|
|
<__Id>c22d1b14-c242-49de-9f17-1d76b8b9c458</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
<fastFilters>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
</fastFilters>
|
|
<LayerSets>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
</LayerSets>
|
|
<EnableDiscardEvents>false</EnableDiscardEvents>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>256</BufferSizeKB>
|
|
<MinBufferCount>4</MinBufferCount>
|
|
<MaxBufferCount>16</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>LocalEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAAXNSR0IArs4c6QAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9sHCxcxAuA2zjYAAAmTSURBVFjDrZd7jF3XVYe/dR73Nffe8Yw940fsOE+HJHaCTdQmalQUQZMigtKGOCIUJKwKiFQVtWqBUqRGBIqQUikSEZBS2iiCViURMUqjqqiVKsgDcJ20sY3rRyf22OOZzIxn5t577rnnnP1a/GHHQm2AOLCl/c+S9l6f9vrt/dsL3sVQVQBCCPSL8h2t+fWnX3jbuFxu8hACURRhXeDN+AeyTfZo9XMaf/yBlz919wfy+6Mq7O7EE7XvzYg9dGbs9UjN/q99+fUv8Oo+owoPfeVZvv7Rve8eAODQmQG7tr2KyF380jd//7F04tindzfqXNvYjRndQZps4J6tDT71rRyTCzfcdJSFvPeXX7zn4Y8B7H3yszz78J9ePoCqIiKonkVkG7/4zKNnuOW5bTdUd+qieYRd6UuStXfSids0B54Dy5bGyKobWljKpH7b02t/fedfTQLccv+THHruYaLLARARDh7+LiLbeP9jj7/Zu+qr28JqXTcmp+SO9TPy4LVL3Ls+48T4Jl7trKOxrg0V4udHItGKbtlxauITBz/aAzj03MMAlwcAcNuuu7j9N578u+LuL25cF7e12UJ2Rp/gvk0r2Pj9hHgzNzYdY82EMDJoCGgtYvGNKYlPvU9PfO1949e/58+eAXjPx37nXQBs+fbWpR37P5LUYh1FpaxPuoxtfJF+mGYUX40b20gtiggu4CNwKKgSRUpISqk7r5t3lntv+PSHrzjwF39+AeCpP/mDd1D/EwAUVx77I4lKlteWmT1VMqs9Xiuu4/nkNk7GKWddYHHkKQpLaTzWBpwLSFzxjc/9Ag8+cpD7fu9ldr43fQQg+benHuf2fZ8E4PD+p3Z12s0HzCjbrlX5epn1j62emz1+1+e+9IbIDgCyUf5QEQZMfufnZXxqB+m6wIv6INOas1KPMQGikSUZlhRDS730hDJgq0DSKFkenJJ+njM2ueEh4LeS2/d9kle+/PgzE1Mb9nbH2yQSaNbWEYJjrDPG2Nar+cHf34rN86wl5uhLR8vm2dZ1unrkp+V073p8knDWrLJWtWg1AvgAhcGtVejAoUMHuacaBDbddAJKxcWR9mWxDZAAFPPze83cac46rwGROE2JI8VObgqdKEStZk3HGmlHvL73Z2+J1ZtdhNtWMeEVfBkz//pLqCnIkibL9UnWautZZZys7NAfdigGjtGqIWoJq4VhZmGVM6uBCeY6CYCimtbqUkuDmKogVENwjmMzi7p7a5dF40SSFOsV56z44LATG5msxyRiWS8OKwWdcsCmfAERoRjlzC/1WT03wz9O/Q2jNYNLU54/fZRs3uPMNWzgCpMAYK3EcYKxBoJV74MEY4jiiDhJiZ0nwZMES2lKIuc5+sMZdnYF66H0gbTVJniLEDi1sMiRmTkS9XRTS6EF1hT42S7xy/dRLwbSmL+Jw0iVABxZzr5fF9kdqYelORmvxXQ6bYyJCc4SCXjn1Acv1ljUVFRWqCctVC0tIIx6BOtwAebOnUe9I04TRCy2KomTCmol+q97cJJR64Z/vqSBaybHdjcaNYb9LHDPh3zV70VnVtbCRLcbHT510rliFHfKTNrNGrVEUOcIPlb1VlBQ7/Becap457GAiqCqRKpE9YKICokdUGlnvCXDlbUvXAJIgtFmiMTERLOv/Xu0a6rNlprEZb+Pm2jgJsb8jFxFrxyRDzJcOYz8xKQcOnuatjq6jZSA4n3Aer3gMMGzbCxz0zcSj0EsSr2eaK1RE2JZOPgPH39hxx2fvQCADyKieGcBxfkAKJF69YNMYm/jc+cyf+/Oq+OVpEQ2tSnLoZbbt8uqC5wuDOICxWAA5Yi5ImA7U1zRqtFZPU7+UynNeleTJKLVbTJ/dnUPwOLsCxcA3uib/4iWeje7tRV03SRiEqwqVVngg2JKi1ORsshp1FNMMYKyksYoY4v3zMwPuGP7RvJmoKzXkNBlcW4OHSU4b5m6ZkJrjUgarSY/fOU7H3n1bx/pxWkz6s8fCgnA5nWtm+utqZDdcKNGtSaHTh7XUJnIr56PxqqS9e0G3lh8aTDBqXVBFKUqK1QV4wOuHGHzEaKwttbDKYSAEpTp6zeJUR/+5ck//u3T333uJMgOb4szQC8BaKjTZrEWtYoeBMfYGOTecX7nz7hUgsysZmze3pJD5057hlncDZY6AacBUxm8U7XOS2UthXEEDQRVFYLYKOXwi998/sATn3kayC84sA6B8pIIVREkIoSAek9srSa+lJUfnYj2TMRRu7SYXHDNlHJsOizklS5LXWrDHs4UkjWCrJ7vUVQlQRVnHZWzskxCK6nlB574zOeBCjgP9IEREC4BHJ9dWNwS+43jnQaKYJyTojQ4lxCkRhwHas6rFpnUvY+2+sByLuwYE4puTbc1O/7MaFyKPFebDVmWYST1NldhqceMAQf+O5e98A7csjNacaKz8wsB56Kw/CbpqC+m0Y3KLOBFKK3FO08IgdJ6fEgwWaa5cSK6FE8ax9A4LEJZ5YyqirKWUE/q/6PNX7iGi3NTG11F3B/E/e56ndq2SRe5Mkw3Wrx2/BjirHSLLGqkEU7BaMBpU0vx4rwHhcI6vA8Yaymdx/qAD6r6v/w7E4Asy7QmKnll1BkjLutL13mch+kUQhzr0dpGP5km2HzIsN+XUarRWr+HjyOMV7yieVmKBsVaR+kczTiW4/3cXMwVA/5tAVaWVqXbTMnyUlwyYuStGuPEB49zXlGVQW8lvq4dMSKm265rHqfhzWgaX1TYUErIM2l6T+k9znl6xutSHMn2elQDbrqo+hUge0uAb1Fx8OTcE1JWZwbGu1Flrq+bKqqsY1RWlFUlhTE6XwXZkEBZVVoMh+KygSTDTCJTyKyDq67cpotJXV1S13NlhSSpXCFWWzFyvJd/+7+cQAXYSwC/evN1HFheKY70su99f2nl6wfnFh4dVv4brqyWsrxYPyqr6UiR8yGmi8X5gAtK5ayYEPDW6IKPZLPJxa+tSCNYSUOQqhipSCSJwI8GxcsXARYvzrfvjJ597PPs/d0//Amh7G6P3VN2OnffWOPXWmkyXUtinPd4lOC8Hqcut9Yhr0pEYhbKikFRaTOJ6dZS+adz5x8FngWOXFZvuGv9OIdX+j8ebt463v7liXpyfxpFH27HEaeSJjsTjwkKqC5Ujt5oJI04Zqly+2eHxW9erP//rTnd3m0zOxj+ePjabqt1765m+kAjljvbacKyCyzlo/6pkdnnQ9j/ViLl/3novg/+RKwWRXtunhj/lXe6x38CP527xjcvwEoAAAAASUVORK5CYII=</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<!-- Bug 60665 : Remove Firewall with discarded packets trace scenario and MessageProviderUM provider
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>db1590c9-2f80-4557-b466-aa3fe2800fcf</UniqueId>
|
|
<Name>Firewall with Discarded Packets (Administrator privilege required)</Name>
|
|
<Description>Windows Filtering Platform Tracing with Discarded Packets and WFP Filter Information. Administrator privilege is required.</Description>
|
|
<Category>Network</Category>
|
|
<Rating>0</Rating>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>95c3e301-7837-4e66-852d-848ee5e6d941</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings xsi:type="EtwMessageSourcePluginSettingsWfpCaptureUM">
|
|
<__Id>95c3e301-7837-4e66-852d-848ee5e6d941</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
<EnableFilterEvents>true</EnableFilterEvents>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>c22d1b14-c242-49de-9f17-1d76b8b9c458</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings xsi:type="EtwMessageSourcePluginSettingsWfpCapture">
|
|
<__Id>c22d1b14-c242-49de-9f17-1d76b8b9c458</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
<fastFilters>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
</fastFilters>
|
|
<LayerSets>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
</LayerSets>
|
|
<EnableDiscardEvents>true</EnableDiscardEvents>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>256</BufferSizeKB>
|
|
<MinBufferCount>4</MinBufferCount>
|
|
<MaxBufferCount>16</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>LocalEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<CaptureFilter />
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>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</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
-->
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>449fa9fb-1076-4af3-bc7a-c575d6d49d0b</UniqueId>
|
|
<Name>Pre-Encryption for HTTPS</Name>
|
|
<Description>Capture HTTPS client-side unencrypted traffic by using the Web Proxy-Fiddler provider.</Description>
|
|
<Category>Network</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>6ef4653a-71f9-4ad3-b093-61c38c9c299f</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings xsi:type="EtwMessageSourcePluginSettingsWebProxy">
|
|
<__Id>6ef4653a-71f9-4ad3-b093-61c38c9c299f</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>256</BufferSizeKB>
|
|
<MinBufferCount>4</MinBufferCount>
|
|
<MaxBufferCount>16</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>LocalEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>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</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>f2df6041-7ffa-4fb6-8626-8b0f37ac1e01</UniqueId>
|
|
<Name>Pre-Encrypted HTTPS Direct</Name>
|
|
<Description>Captures HTTP directly from the Microsoft-Windows-WinInet provider for enhanced HTTPS troubleshooting. OS: Windows 10 and later.”</Description>
|
|
<Category>Network</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>a70ff94f-570b-4979-ba5c-e59c9feab61b</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>a70ff94f-570b-4979-ba5c-e59c9feab61b</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<CaptureFilter />
|
|
<VisualizerId>00000000-0000-0000-0000-000000000000</VisualizerId>
|
|
<Icon>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</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>4f1c233d-dd0a-4afa-963e-c12452585e15</UniqueId>
|
|
<Name>Wired Local Area Network (Win 8.1 and later)</Name>
|
|
<Description>Troubleshoot LAN issues and capture interface and component traffic to expose deep OS behavior. Similar to the "netsh trace start scenario=LAN" command. OS: Windows 8.1/Windows Server 2012 R2 and later. Capture interface and component traffic to expose deep OS behavior.</Description>
|
|
<Category>Network</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>2ed6006e-4729-4609-b423-3ee7bcd678ef</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings xsi:type="EtwMessageSourcePluginSettingsNdiscap">
|
|
<__Id>2ed6006e-4729-4609-b423-3ee7bcd678ef</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>85fe7609-ff4a-48e9-9d50-12918e43e1da</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>85fe7609-ff4a-48e9-9d50-12918e43e1da</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>b92cf7fd-dc10-4c6b-a72d-1613bf25e597</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>b92cf7fd-dc10-4c6b-a72d-1613bf25e597</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>6eb8db94-fe96-443f-a366-5fe0cee7fb1c</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>6eb8db94-fe96-443f-a366-5fe0cee7fb1c</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>ab0d8ef9-866d-4d39-b83f-453f3b8f6325</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>ab0d8ef9-866d-4d39-b83f-453f3b8f6325</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>cdead503-17f5-4a3e-b7ae-df8cc2902eb9</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>cdead503-17f5-4a3e-b7ae-df8cc2902eb9</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>256</BufferSizeKB>
|
|
<MinBufferCount>8</MinBufferCount>
|
|
<MaxBufferCount>24</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>LocalEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>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</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>2dcd44c7-2df8-4eea-b570-5627a41be136</UniqueId>
|
|
<Name>Wired Local Area Network (Win 8 and earlier)</Name>
|
|
<Description>Troubleshoot LAN issues on Windows 8/Windows Server 2012 and earlier. Capture interface and component traffic to expose deep OS behavior. Similar to the "netsh trace start scenario=LAN" command.</Description>
|
|
<Category>Network</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>9de85b12-1202-467c-8047-ed308fb776c3</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings xsi:type="EtwMessageSourcePluginSettingsPefNdis">
|
|
<__Id>9de85b12-1202-467c-8047-ed308fb776c3</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
<adapters>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{0108A5C9-67FF-417A-8DF4-0A560D6A8EE3}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{F8599686-CC39-41BF-BDDB-25A35DF1AC02}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{AB8A6947-F3F6-4F59-9FE6-53D875077F48}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{B5407DB1-E27A-42BD-BC2F-D618D83FF61A}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{F32E1736-A662-4859-A668-592C47DCDCD8}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{BC19B78E-D365-43D6-A196-102C6648AC2C}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{C6A00184-942B-49D5-BCCA-62937C4A5348}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{2FB81C03-D99C-4118-96A9-E0AAC47938C5}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{A87A49E1-F61C-42C2-86C3-09DEEA5BBF7E}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{F35515C1-64CA-43B2-907B-0EF9BCC39AC4}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{10F96D64-D959-4678-AB1A-249857E82FCC}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
</adapters>
|
|
<FastFilters>
|
|
<PefNdisFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefNdisFastFilter>
|
|
<PefNdisFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefNdisFastFilter>
|
|
<PefNdisFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefNdisFastFilter>
|
|
<PefNdisFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefNdisFastFilter>
|
|
</FastFilters>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>85fe7609-ff4a-48e9-9d50-12918e43e1da</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>85fe7609-ff4a-48e9-9d50-12918e43e1da</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>b92cf7fd-dc10-4c6b-a72d-1613bf25e597</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>b92cf7fd-dc10-4c6b-a72d-1613bf25e597</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>6eb8db94-fe96-443f-a366-5fe0cee7fb1c</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>6eb8db94-fe96-443f-a366-5fe0cee7fb1c</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>ab0d8ef9-866d-4d39-b83f-453f3b8f6325</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>ab0d8ef9-866d-4d39-b83f-453f3b8f6325</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>cdead503-17f5-4a3e-b7ae-df8cc2902eb9</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>cdead503-17f5-4a3e-b7ae-df8cc2902eb9</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>256</BufferSizeKB>
|
|
<MinBufferCount>8</MinBufferCount>
|
|
<MaxBufferCount>24</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>LocalEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAABGdBTUEAALGPC/xhBQAAAAlwSFlzAAAOwQAADsEBuJFr7QAAABp0RVh0U29mdHdhcmUAUGFpbnQuTkVUIHYzLjUuMTAw9HKhAAADJUlEQVRYR+2Ua0iTURjHD2qSUlQUmGaRRXYT3ZdckSRe0llGpaFZWcPynpptpmiBtryvGLVMzdSopqir1FK8JOK8zOY0c9vrLrZmpqCJgR8EjfM0cR8k3i4Yvn7ZD37w8j/P+Z8DB15kxIgRI0aWg3aCsOnT6MIHh0fSeYJqR0O8/EiUQ86qL6Px375Px2jVaoZGozxe2dLOMSz/nuoOsXv3oDqg7YPC3hD9M7VYwbk6Wz4Uoilswj/wWQDwHBsb85UOqjIaxD2dguo3DMMoObGPBVZfx8djldphluLzSH7fkE4oUWqefBj4xKZPZiSazkS3WkB8qs3cLQ99ufn8nkPA3bMfZ7x0nbkLFnImmD1ngHkKHTJr8m8T2i/Zot4BMa+wOE0/ajU//0fSBZWOpXVN/DZJb+TExMQpjOe8McY+8umvcZtH48AfiuEkFAENssECWLAOJ+D1cAOsp9iwpYmJN7JdsMkJO0DeWyE4O0mTV/IsSV/794MX4xpw/krYzTuC+2VCkbC1q1mm0T2Mqs4pRvzDgKq8MBL5wU7iGj49ysPnpovgwtxTPH8xB/2l1kIybFBFYJOAXaCvslloXBometfa02gHgmNZUeGclBcWIU5gdtkBUOQ+QIk0QJl0jPKPACrzAFTnC7adoeA0kABH37Lh/SfZrFSlaxET6oeiPll4TVePC59fsWahemmYuEadCnVOPiOkpwaO7Us+AZsiDsKqi/sBXbIHFL4XEMsJIy4ddif4YLvrHtAgbr1BaLUsuXY4i9CNFPZqPr/qIlSvuxTqHG7FK6ahd0mYbkOW1scSgoO9OMwSt3Sm0j2LCdtj3AAF7gBGcQxcF+ZOfZ+cDlSr1Sfl8o+ePeIOd2l3N0PS3x/Ur1LFVzW35kY/KPqvJ1rM/HOty+Zxfdl5nHtud0OkbG5WUt6LikfljS3vXreL20UyxTMJoUyTymRh9Y2NfpX1DdFhBQWWC9uXGVtb2y1B0fH+iVxeRm6poPaBsKa/tlPCNyyvCKv1rlr4/AX9z2VFJQ2plDSkUtKQSklDKiUNqZQ0pFLSkEpJQyolDakT0E+CFz02DZFSDgAAAABJRU5ErkJggg==</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>5ccae114-562f-4cea-84ba-3165a9a2596e</UniqueId>
|
|
<Name>Wireless Local Area Network (Win 8.1 and later)</Name>
|
|
<Description>Troubleshoot LAN issues on Windows 8.1/Windows Server 2012 R2 and later. Capture interface and component traffic to expose deep OS behavior. Similar to the "netsh trace start scenario=WLAN" command.</Description>
|
|
<Category>Network</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>2ed6006e-4729-4609-b423-3ee7bcd678ef</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings xsi:type="EtwMessageSourcePluginSettingsNdiscap">
|
|
<__Id>2ed6006e-4729-4609-b423-3ee7bcd678ef</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>85fe7609-ff4a-48e9-9d50-12918e43e1da</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>85fe7609-ff4a-48e9-9d50-12918e43e1da</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>6eb8db94-fe96-443f-a366-5fe0cee7fb1c</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>6eb8db94-fe96-443f-a366-5fe0cee7fb1c</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>ab0d8ef9-866d-4d39-b83f-453f3b8f6325</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>ab0d8ef9-866d-4d39-b83f-453f3b8f6325</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>cdead503-17f5-4a3e-b7ae-df8cc2902eb9</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>cdead503-17f5-4a3e-b7ae-df8cc2902eb9</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>9580d7dd-0379-4658-9870-d5be7d52d6de</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>9580d7dd-0379-4658-9870-d5be7d52d6de</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>0bd3506a-9030-4f76-9b88-3e8fe1f7cfb6</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>0bd3506a-9030-4f76-9b88-3e8fe1f7cfb6</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>314b2b0d-81ee-4474-b6e0-c2aaec0ddbde</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>314b2b0d-81ee-4474-b6e0-c2aaec0ddbde</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>256</BufferSizeKB>
|
|
<MinBufferCount>8</MinBufferCount>
|
|
<MaxBufferCount>24</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>LocalEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>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</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>74b66baf-54c0-42a7-9968-d5433f2a1dc5</UniqueId>
|
|
<Name>Wireless Area Network (Win 8 and earlier)</Name>
|
|
<Description>Troubleshoot LAN issues for Windows 8/Windows Server 2012 and earlier. Capture interface and component traffic which allow exposes deep OS behavior. Similar to the "netsh trace start scenario=WLAN" command.</Description>
|
|
<Category>Network</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>9de85b12-1202-467c-8047-ed308fb776c3</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings xsi:type="EtwMessageSourcePluginSettingsPefNdis">
|
|
<__Id>9de85b12-1202-467c-8047-ed308fb776c3</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
<adapters>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{0108A5C9-67FF-417A-8DF4-0A560D6A8EE3}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{F8599686-CC39-41BF-BDDB-25A35DF1AC02}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{AB8A6947-F3F6-4F59-9FE6-53D875077F48}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{B5407DB1-E27A-42BD-BC2F-D618D83FF61A}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{F32E1736-A662-4859-A668-592C47DCDCD8}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{BC19B78E-D365-43D6-A196-102C6648AC2C}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{C6A00184-942B-49D5-BCCA-62937C4A5348}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{2FB81C03-D99C-4118-96A9-E0AAC47938C5}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{A87A49E1-F61C-42C2-86C3-09DEEA5BBF7E}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{F35515C1-64CA-43B2-907B-0EF9BCC39AC4}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
<PefNdisStack>
|
|
<SymbolicName>Pefndis_{10F96D64-D959-4678-AB1A-249857E82FCC}-{BD583A2D-7410-4BD1-B9C0-ECA0E65E6980}-0000</SymbolicName>
|
|
<Selected>true</Selected>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
</PefNdisStack>
|
|
</adapters>
|
|
<FastFilters>
|
|
<PefNdisFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefNdisFastFilter>
|
|
<PefNdisFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefNdisFastFilter>
|
|
<PefNdisFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefNdisFastFilter>
|
|
<PefNdisFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefNdisFastFilter>
|
|
</FastFilters>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>85fe7609-ff4a-48e9-9d50-12918e43e1da</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>85fe7609-ff4a-48e9-9d50-12918e43e1da</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>6eb8db94-fe96-443f-a366-5fe0cee7fb1c</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>6eb8db94-fe96-443f-a366-5fe0cee7fb1c</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>ab0d8ef9-866d-4d39-b83f-453f3b8f6325</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>ab0d8ef9-866d-4d39-b83f-453f3b8f6325</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>cdead503-17f5-4a3e-b7ae-df8cc2902eb9</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>cdead503-17f5-4a3e-b7ae-df8cc2902eb9</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>9580d7dd-0379-4658-9870-d5be7d52d6de</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>9580d7dd-0379-4658-9870-d5be7d52d6de</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>0bd3506a-9030-4f76-9b88-3e8fe1f7cfb6</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>0bd3506a-9030-4f76-9b88-3e8fe1f7cfb6</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>314b2b0d-81ee-4474-b6e0-c2aaec0ddbde</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>314b2b0d-81ee-4474-b6e0-c2aaec0ddbde</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>256</BufferSizeKB>
|
|
<MinBufferCount>8</MinBufferCount>
|
|
<MaxBufferCount>24</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>LocalEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>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</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>57fb5764-bf0e-48a7-b110-f83e631b1327</UniqueId>
|
|
<Name>VPN</Name>
|
|
<Description>Troubleshoot VPN related issues. OS: Windows 8.1/Windows Server 2012 R2 and later.</Description>
|
|
<Category>Network</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>2ed6006e-4729-4609-b423-3ee7bcd678ef</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings xsi:type="EtwMessageSourcePluginSettingsNdiscap">
|
|
<__Id>2ed6006e-4729-4609-b423-3ee7bcd678ef</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
<AdapterConfigs />
|
|
<AllLayers>false</AllLayers>
|
|
<TruncationLength>0</TruncationLength>
|
|
<EtherTypes />
|
|
<MacAddresses />
|
|
<IpAddresses />
|
|
<Protocols />
|
|
<Direction>Both</Direction>
|
|
<TargetType>Both</TargetType>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>d84521f7-2235-4237-a7c0-14e3a9676286</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>d84521f7-2235-4237-a7c0-14e3a9676286</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>cdead503-17f5-4a3e-b7ae-df8cc2902eb9</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>cdead503-17f5-4a3e-b7ae-df8cc2902eb9</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>c91ef675-842f-4fcf-a5c9-6ea93f2e4f8b</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>c91ef675-842f-4fcf-a5c9-6ea93f2e4f8b</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>0c478c5b-0351-41b1-8c58-4a6737da32e3</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>0c478c5b-0351-41b1-8c58-4a6737da32e3</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>2f07e2ee-15db-40f1-90ef-9d7ba282188a</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>2f07e2ee-15db-40f1-90ef-9d7ba282188a</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>256</BufferSizeKB>
|
|
<MinBufferCount>4</MinBufferCount>
|
|
<MaxBufferCount>16</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>LocalEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<CaptureFilter />
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>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</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>024bbde4-6c64-4c9c-8051-ce0c70b4cded</UniqueId>
|
|
<Name>USB 2</Name>
|
|
<Description>Troubleshoot USB 2 issues. OS: Any supported.</Description>
|
|
<Category>Device</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>c88a4ef5-d048-4013-9408-e04b7db2814a</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>c88a4ef5-d048-4013-9408-e04b7db2814a</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>7426a56b-e2d5-4b30-bdef-b31815c1a74a</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>7426a56b-e2d5-4b30-bdef-b31815c1a74a</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>256</BufferSizeKB>
|
|
<MinBufferCount>4</MinBufferCount>
|
|
<MaxBufferCount>16</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>LocalEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>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</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>d74e668b-2156-4732-acec-f4914a47e3ea</UniqueId>
|
|
<Name>USB 3</Name>
|
|
<Description>USB tracing for USB 3 host controllers (USB 2 and USB 3 devices). OS: Windows 8/Windows Server 2012 and later.</Description>
|
|
<Category>Device</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>30e1d284-5d88-459c-83fd-6345b39b19ec</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>30e1d284-5d88-459c-83fd-6345b39b19ec</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>129</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>36da592d-e43a-4e28-af6f-4bc57c5a11e8</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>36da592d-e43a-4e28-af6f-4bc57c5a11e8</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>129</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>ac52ad17-cc01-4f85-8df5-4dce4333c99b</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>ac52ad17-cc01-4f85-8df5-4dce4333c99b</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>129</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>256</BufferSizeKB>
|
|
<MinBufferCount>0</MinBufferCount>
|
|
<MaxBufferCount>16</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>LocalEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>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</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>d63b2b05-e42a-4c53-ac40-975e89723fd1</UniqueId>
|
|
<Name>Bluetooth</Name>
|
|
<Description>Troubleshoot Bluetooth issues. OS: Windows 8/Windows Server 2012 or later.</Description>
|
|
<Category>Device</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>33693e1d-246a-471b-83be-3e75f47a832d</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>33693e1d-246a-471b-83be-3e75f47a832d</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>eb492407-201e-4281-8531-cdfb141ca69f</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>eb492407-201e-4281-8531-cdfb141ca69f</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>8a1f9517-3a8c-4a9e-a018-4f17a200f277</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>8a1f9517-3a8c-4a9e-a018-4f17a200f277</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>53f6879f-9e16-4d1d-99b0-a6a67ab4aa40</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>53f6879f-9e16-4d1d-99b0-a6a67ab4aa40</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>db25b328-a6f6-444f-9d97-a50e20217d16</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>db25b328-a6f6-444f-9d97-a50e20217d16</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>512</BufferSizeKB>
|
|
<MinBufferCount>8</MinBufferCount>
|
|
<MaxBufferCount>32</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>LocalEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<CaptureFilter />
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsIAAA7CARUoSoAAAAAadEVYdFNvZnR3YXJlAFBhaW50Lk5FVCB2My41LjEwMPRyoQAAArdJREFUWEfVl01oE0EUgAMLjYqsnrTXotcgusFbLt5ELznNIRbbSwwE9KLU9SSJeFMQvHoWehPsQUEIlVrwUOyhFKUgNYoFI067hULN5vleNrtON7MzO8lWcOAdmr5975v3NzO53H+3GC/kGJ9BcWNCv11MsZ8i6jxBmUM5lUIfVRi3UGZRPqCARkiHdC2JcadYLO7XajWoVqtg2/ZbPQDjNhp7LXN6dHpbBUPf2DEHD1utFjiOA81mE+r1OqgBGD+ORpaTdvx8aR/O3NxRQdC3IsT1RqMBlUoFXNeFUqm0rQN4oAr34vpv+NLx4ewtJcRTwUnesqxn5XJ5D1PxHX+/mgzA+BQ67+oAANfmDyUE2ZiKOTqJf+d1u7+nKziKQLhWN7tgzyTWxCN9sYkajE+g83ZagI0tv8+x/CkRgmxNpIdgfDLunPI8eePgDsMIOK4H7ze6fYh3H7twYlYaiXMmAFdEgCI6+LXbg7WvPpyu/jUeAhAcCRUkrSU5xGUTAJpyUXsducZhYSXI9/o3H87Pef3/iQB51Hm1Guh0vB4U7gQ6gtw3AXgcTwE5eDmAIAcX7noRQOG2FwF2dnoRYMzGvAnAvKwACYLS0N8lOgpDvvI5yD+BhdGRfD8+ABmlQlxrBxDiIiCKiqJzsgGIIAaRCHeucU5g2QGIRUkAlJZ4ix5aCsh5WIxiCigtGojxI0BFGLajrAjjc2KcLhi5DSkS4rASIIwikDiIxD5PGkQJNWE0iIZGsbfXG+rzpFGccDwbjeKhw+hSY3eoz2WHkeKCYnQYHcPcbZkex+2fftIVrWN2HNPQZtzoQkI7V9wPDS8kAcBhXslSnkuMZ30pTek4VMv+Wm4IEKSCHiYvZAWpeZjQN/GHyQgAAQQ9zRjKG11nDHRIV/Y0GxHg4I1Z9TgtZODh35r4A56c2O34b1LkAAAAAElFTkSuQmCC</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>f927576f-11d6-4e8c-903a-132a5b1841cf</UniqueId>
|
|
<Name>RPC</Name>
|
|
<Description>Troubleshoot issues related to RPC framework</Description>
|
|
<Category>System</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>6ad52b32-d609-4be9-ae07-ce8dae937e39</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>6ad52b32-d609-4be9-ae07-ce8dae937e39</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>256</BufferSizeKB>
|
|
<MinBufferCount>4</MinBufferCount>
|
|
<MaxBufferCount>16</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>LocalEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>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</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>a10255e4-f14b-4cf5-896d-79ff0658a0df</UniqueId>
|
|
<Name>SMB2 Client Full Payloads</Name>
|
|
<Description>Capture SMB2 client provider traffic with the payload; exposes data being transferred in Reads and Writes. Also capture encrypted and DMA- transferred SMB traffic. OS: Windows 8/Windows Server 2012 or later.</Description>
|
|
<Category>File Sharing</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>988c59c5-0a1c-45b6-a555-0c62276e327d</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>988c59c5-0a1c-45b6-a555-0c62276e327d</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>576676269467369472</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>512</BufferSizeKB>
|
|
<MinBufferCount>8</MinBufferCount>
|
|
<MaxBufferCount>32</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>LocalEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsIAAA7CARUoSoAAAAc3SURBVFhH7ZZ5TJv3HcY7rdIOqVun9VhXqVuOtpnarU1MpaUlDWRN0EiygFaaKVEQba4CSUOBhIK5zOEkhSSQYI7QzMnaEM4GG1JgUErSZARomqwhMbbB5jA2GCj4wDd+9v29tgN/JMiTOmmahvTwsyXLn+d5vt/39fvQQ///+29rYKa3uXqkOR8e5Xl1FCNNR6BpOkwSYlpxNfk/4tswcD12tP0YXBPNgPEL0mXARDJeAQz0fuYzOLS1GL9cgLFbzXnfuQl1o5AADcC0BPi2ks5agtbTazqnLwCT54CJs3AMn8dY+3G3XtEd9Z2aUEtzoZbmkLI5DUqzSAIMNWTSmYkhaQaGpel0ptGZihEpHyOSFE4aaTK9/wAaCUmahFHJIXp9iM6D0HYV9vhldIAMwPg53IZWSt4C93QTqRHuKQnmJj7FnL4arvEKOHUfw6kVw6kph2OkBPahItgHC2FXHYNt4EPYlIdhVebCqsiGVS5AW94W+GWgX5LDGZjTiz0aPwPXWDknp66MoCVwjhbTKYJj9BQcmpNkoAD24ROkY2Qkn0QG1EdJZEKVC0tvqv8G5BezadnavGAvXHeagKWkYoKKyEARB7aPUGICO4aPw0Zg21DeArAQ1oEcWAayYb75Hlo/9LMBWW0WV/3cOEt8Gi4dA5fQYvrAlJrALDUD24dYagIP+hJ7wFYCW/sFsPRnYvbrfWg56qeBOzUCMtA8XzeldlJqh2Y+tWOE6iYwl5iBB4/A6q2bgS39WbAoCa7MwKwiDeYbsWg68if/duB2VSbXgGfWC8AaSszAvjkP0pwJzM1ZPZ/awqUmsDKd4KmYlfNh+ioanwn9NPDNhQzaAWqAm7Ovbgb21G1jC0aprWpKrSKwylO3ZYBSU92+1LPyVJjlKTD3fQBTdzQacvw0cPN8Ot106G63cLu5OdOS3UsthI2226qiOTOwkubM6qbUFi51Cmb7kgmeBLMsCcauvZBkbfZvBDc+TiUDn9KG03YPsdRsu9ll5a2bgbklY4m9c74H5nNwltosOwTT3YOkRBiv78HFTD8NfHWODEz8bUFiz3bbfHX3s9TeOSvYknnm7Knbm5qBZQyeANOdeBg6d6M2fZN/DXSJ+XDrKzx1sznf2252TQvo0vLVnbYAPl+3mQMnkuIJ/j6MvXFkYBeqUxcxEBcX18nn828lJyf37o+KgKQiDa0VMVxqM91KjX05MMnplGVSUu92K6juvgV1c5XPg00ENt4m9b4Hwz92ooq/8cENxMbG4syZMxCJRKitrcWYXo+meila895G94VidFdX4+v6epIEvU2NdFN5F/LGfTRn36wZ2FM3S83gpt4DZGA/jN/s5wxcSFmkgR07drgEAgHi4+NRV1cH9idTyOj/OOkO/Qx3wKm/DKPmc3qvIM3AbrmB9sLdaBMVY/haIsavx3J1myix8TbTfqibI3H59GG0CiNRGB7w4AbCwsJcMTEx2LZtG8RiMQxmC6530gMI/arhDuluIb0WAZoSeh4QA1YJjNoyaNXZsJsrIL+UiAbBX9Bf9xZmrkahq2ADvhDloL1sD+aMZYCzHsKgF2G1Wn9431/EkJAQV0REBNavX4+ioiJMfmvAtSv09HMzD7hGV0XLXtJuOKsjMFP4Kub+Ggzdyd+gLf1nMEu2AIMXoW4vwJfFW9EhFkDRlAXbbTJtOA/oPkFDzGYcDF+rmp6efvS+BgIDA13r1q3DypUvIy8/HxNTBnS0NWFOugsuaTQgeQeo2wx8tBL9B34NachjOLv6p6gIehR/D38cV2Nfwd0DS2A/GwpTRwacPXygm/aj6l1kBP5ucl9UlLizs/P3Tqfz4fsa4PF4roAAHpYuXYrc3FwMDmvQWFuDkqCnpktCV8wUBi83Vr21wqLJfMGtz34Rsrhn0RL+NCqDn0DdhifRFfUMprJXAFWrgYpAzBznoX7rs9ZdrwbcEAqFyT09PQE2m+0HD3wgCQh4zbVqVRCWLVuFlJRMFJwsRHFJiSMxMTEvKSnpSEJCQv7enTs/ilzz2jX+6uXaTzb9avbK9mfQF/8crCdepmZeAUpXQZ70HE78YcnUviDeP+NiY4voivqzRqN52uVyfX/Rp6GAgPVzPN6beP75UCQmZuDUqQKIysWQyWQrJicnfz4xMfGYSqVa0tLSsiE/Pz8hOjLy3Pub13Snb/it6sQby6ZOvrFkJv2PK5UxG4O/TEtNza6pqXlTqVQun52d/bFfj2E8Xjh4vGi89FIM1q4Ns23Zskm+bfv2Kzqd7he+L3C73d9jNTJDzNilS5dCS0tL96alpOTyqaXy8vJd7e3twaOjo79kYPZ5v+DsQ6GhG2+tWbNW9frrweqwsPAO9sUNDQ2bHpSAVWqxWH5kMBh+MjY29qRWq33KaDQ+suicF3NTWVm5lUHLysr2NDc3h+j1+sf9rY8l/bfS3s8Ic8/EErFkflf3v/LBfwFDRfLWFJTOGgAAAABJRU5ErkJggg==</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>8af3b6c2-e4dc-4265-94af-7b60a1b7aa65</UniqueId>
|
|
<Name>SMB2 Client Header Only</Name>
|
|
<Description>Capture SMB2 client provider traffic without the payload; increases performance by capturing less data. Also capture encrypted and DMA-transferred SMB traffic. OS: Windows 8/Windows Server 2012 or later.</Description>
|
|
<Category>File Sharing</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>988c59c5-0a1c-45b6-a555-0c62276e327d</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>988c59c5-0a1c-45b6-a555-0c62276e327d</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>576535531979014144</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>512</BufferSizeKB>
|
|
<MinBufferCount>8</MinBufferCount>
|
|
<MaxBufferCount>32</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>LocalEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsIAAA7CARUoSoAAAAc3SURBVFhH7ZZ5TJv3HcY7rdIOqVun9VhXqVuOtpnarU1MpaUlDWRN0EiygFaaKVEQba4CSUOBhIK5zOEkhSSQYI7QzMnaEM4GG1JgUErSZARomqwhMbbB5jA2GCj4wDd+9v29tgN/JMiTOmmahvTwsyXLn+d5vt/39fvQQ///+29rYKa3uXqkOR8e5Xl1FCNNR6BpOkwSYlpxNfk/4tswcD12tP0YXBPNgPEL0mXARDJeAQz0fuYzOLS1GL9cgLFbzXnfuQl1o5AADcC0BPi2ks5agtbTazqnLwCT54CJs3AMn8dY+3G3XtEd9Z2aUEtzoZbmkLI5DUqzSAIMNWTSmYkhaQaGpel0ptGZihEpHyOSFE4aaTK9/wAaCUmahFHJIXp9iM6D0HYV9vhldIAMwPg53IZWSt4C93QTqRHuKQnmJj7FnL4arvEKOHUfw6kVw6kph2OkBPahItgHC2FXHYNt4EPYlIdhVebCqsiGVS5AW94W+GWgX5LDGZjTiz0aPwPXWDknp66MoCVwjhbTKYJj9BQcmpNkoAD24ROkY2Qkn0QG1EdJZEKVC0tvqv8G5BezadnavGAvXHeagKWkYoKKyEARB7aPUGICO4aPw0Zg21DeArAQ1oEcWAayYb75Hlo/9LMBWW0WV/3cOEt8Gi4dA5fQYvrAlJrALDUD24dYagIP+hJ7wFYCW/sFsPRnYvbrfWg56qeBOzUCMtA8XzeldlJqh2Y+tWOE6iYwl5iBB4/A6q2bgS39WbAoCa7MwKwiDeYbsWg68if/duB2VSbXgGfWC8AaSszAvjkP0pwJzM1ZPZ/awqUmsDKd4KmYlfNh+ioanwn9NPDNhQzaAWqAm7Ovbgb21G1jC0aprWpKrSKwylO3ZYBSU92+1LPyVJjlKTD3fQBTdzQacvw0cPN8Ot106G63cLu5OdOS3UsthI2226qiOTOwkubM6qbUFi51Cmb7kgmeBLMsCcauvZBkbfZvBDc+TiUDn9KG03YPsdRsu9ll5a2bgbklY4m9c74H5nNwltosOwTT3YOkRBiv78HFTD8NfHWODEz8bUFiz3bbfHX3s9TeOSvYknnm7Knbm5qBZQyeANOdeBg6d6M2fZN/DXSJ+XDrKzx1sznf2252TQvo0vLVnbYAPl+3mQMnkuIJ/j6MvXFkYBeqUxcxEBcX18nn828lJyf37o+KgKQiDa0VMVxqM91KjX05MMnplGVSUu92K6juvgV1c5XPg00ENt4m9b4Hwz92ooq/8cENxMbG4syZMxCJRKitrcWYXo+meila895G94VidFdX4+v6epIEvU2NdFN5F/LGfTRn36wZ2FM3S83gpt4DZGA/jN/s5wxcSFmkgR07drgEAgHi4+NRV1cH9idTyOj/OOkO/Qx3wKm/DKPmc3qvIM3AbrmB9sLdaBMVY/haIsavx3J1myix8TbTfqibI3H59GG0CiNRGB7w4AbCwsJcMTEx2LZtG8RiMQxmC6530gMI/arhDuluIb0WAZoSeh4QA1YJjNoyaNXZsJsrIL+UiAbBX9Bf9xZmrkahq2ADvhDloL1sD+aMZYCzHsKgF2G1Wn9431/EkJAQV0REBNavX4+ioiJMfmvAtSv09HMzD7hGV0XLXtJuOKsjMFP4Kub+Ggzdyd+gLf1nMEu2AIMXoW4vwJfFW9EhFkDRlAXbbTJtOA/oPkFDzGYcDF+rmp6efvS+BgIDA13r1q3DypUvIy8/HxNTBnS0NWFOugsuaTQgeQeo2wx8tBL9B34NachjOLv6p6gIehR/D38cV2Nfwd0DS2A/GwpTRwacPXygm/aj6l1kBP5ucl9UlLizs/P3Tqfz4fsa4PF4roAAHpYuXYrc3FwMDmvQWFuDkqCnpktCV8wUBi83Vr21wqLJfMGtz34Rsrhn0RL+NCqDn0DdhifRFfUMprJXAFWrgYpAzBznoX7rs9ZdrwbcEAqFyT09PQE2m+0HD3wgCQh4zbVqVRCWLVuFlJRMFJwsRHFJiSMxMTEvKSnpSEJCQv7enTs/ilzz2jX+6uXaTzb9avbK9mfQF/8crCdepmZeAUpXQZ70HE78YcnUviDeP+NiY4voivqzRqN52uVyfX/Rp6GAgPVzPN6beP75UCQmZuDUqQKIysWQyWQrJicnfz4xMfGYSqVa0tLSsiE/Pz8hOjLy3Pub13Snb/it6sQby6ZOvrFkJv2PK5UxG4O/TEtNza6pqXlTqVQun52d/bFfj2E8Xjh4vGi89FIM1q4Ns23Zskm+bfv2Kzqd7he+L3C73d9jNTJDzNilS5dCS0tL96alpOTyqaXy8vJd7e3twaOjo79kYPZ5v+DsQ6GhG2+tWbNW9frrweqwsPAO9sUNDQ2bHpSAVWqxWH5kMBh+MjY29qRWq33KaDQ+suicF3NTWVm5lUHLysr2NDc3h+j1+sf9rY8l/bfS3s8Ic8/EErFkflf3v/LBfwFDRfLWFJTOGgAAAABJRU5ErkJggg==</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>a1145bb5-467f-4516-9055-fb2477aa8149</UniqueId>
|
|
<Name>SMB2 Server Full Payloads</Name>
|
|
<Description>Capture SMB2 server provider traffic with the payload; exposes data being transferred in Reads and Writes. Also capture encrypted and DMA-transferred SMB traffic. OS: Windows 8/Windows Server 2012 or later.</Description>
|
|
<Category>File Sharing</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>d48ce617-33a2-4bc3-a5c7-11aa4f29619e</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>d48ce617-33a2-4bc3-a5c7-11aa4f29619e</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>576676269467369472</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>512</BufferSizeKB>
|
|
<MinBufferCount>8</MinBufferCount>
|
|
<MaxBufferCount>32</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>LocalEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>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</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>9eb33ef9-0f6b-46c4-b156-9537b3088050</UniqueId>
|
|
<Name>SMB2 Server Header Only</Name>
|
|
<Description>Capture SMB2 server provider traffic without the payload; increases performance by capturing less data. Also capture encrypted and DMA-transferred SMB traffic. OS: Windows 8/Windows Server 2012 or later.</Description>
|
|
<Category>File Sharing</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>d48ce617-33a2-4bc3-a5c7-11aa4f29619e</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>d48ce617-33a2-4bc3-a5c7-11aa4f29619e</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>576535531979014144</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>512</BufferSizeKB>
|
|
<MinBufferCount>8</MinBufferCount>
|
|
<MaxBufferCount>32</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>LocalEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>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</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>2e3b02f6-5b20-40d0-b338-950d507037f5</UniqueId>
|
|
<Name>SMB2 Client and Firewall</Name>
|
|
<Description>Capture SMB2 client provider traffic with headers only, combined with the Firewall provider. Associate network traffic with SMB2 client traffic. OS: Windows 8/Windows Server 2012 or later.</Description>
|
|
<Category>File Sharing</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>988c59c5-0a1c-45b6-a555-0c62276e327d</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<__Id>988c59c5-0a1c-45b6-a555-0c62276e327d</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
<EtwProvider>
|
|
<Id>c22d1b14-c242-49de-9f17-1d76b8b9c458</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings xsi:type="EtwMessageSourcePluginSettingsWfpCapture">
|
|
<__Id>c22d1b14-c242-49de-9f17-1d76b8b9c458</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
<fastFilters>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
</fastFilters>
|
|
<LayerSets>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
</LayerSets>
|
|
<EnableDiscardEvents>false</EnableDiscardEvents>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>256</BufferSizeKB>
|
|
<MinBufferCount>8</MinBufferCount>
|
|
<MaxBufferCount>32</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
<DataChannelType>LocalEtwSession</DataChannelType>
|
|
</SessionSettings>
|
|
<CaptureFilter>smb2 || smb || microsoft_windows_smbclient</CaptureFilter>
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsIAAA7CARUoSoAAAAc3SURBVFhH7ZZ5TJv3HcY7rdIOqVun9VhXqVuOtpnarU1MpaUlDWRN0EiygFaaKVEQba4CSUOBhIK5zOEkhSSQYI7QzMnaEM4GG1JgUErSZARomqwhMbbB5jA2GCj4wDd+9v29tgN/JMiTOmmahvTwsyXLn+d5vt/39fvQQ///+29rYKa3uXqkOR8e5Xl1FCNNR6BpOkwSYlpxNfk/4tswcD12tP0YXBPNgPEL0mXARDJeAQz0fuYzOLS1GL9cgLFbzXnfuQl1o5AADcC0BPi2ks5agtbTazqnLwCT54CJs3AMn8dY+3G3XtEd9Z2aUEtzoZbmkLI5DUqzSAIMNWTSmYkhaQaGpel0ptGZihEpHyOSFE4aaTK9/wAaCUmahFHJIXp9iM6D0HYV9vhldIAMwPg53IZWSt4C93QTqRHuKQnmJj7FnL4arvEKOHUfw6kVw6kph2OkBPahItgHC2FXHYNt4EPYlIdhVebCqsiGVS5AW94W+GWgX5LDGZjTiz0aPwPXWDknp66MoCVwjhbTKYJj9BQcmpNkoAD24ROkY2Qkn0QG1EdJZEKVC0tvqv8G5BezadnavGAvXHeagKWkYoKKyEARB7aPUGICO4aPw0Zg21DeArAQ1oEcWAayYb75Hlo/9LMBWW0WV/3cOEt8Gi4dA5fQYvrAlJrALDUD24dYagIP+hJ7wFYCW/sFsPRnYvbrfWg56qeBOzUCMtA8XzeldlJqh2Y+tWOE6iYwl5iBB4/A6q2bgS39WbAoCa7MwKwiDeYbsWg68if/duB2VSbXgGfWC8AaSszAvjkP0pwJzM1ZPZ/awqUmsDKd4KmYlfNh+ioanwn9NPDNhQzaAWqAm7Ovbgb21G1jC0aprWpKrSKwylO3ZYBSU92+1LPyVJjlKTD3fQBTdzQacvw0cPN8Ot106G63cLu5OdOS3UsthI2226qiOTOwkubM6qbUFi51Cmb7kgmeBLMsCcauvZBkbfZvBDc+TiUDn9KG03YPsdRsu9ll5a2bgbklY4m9c74H5nNwltosOwTT3YOkRBiv78HFTD8NfHWODEz8bUFiz3bbfHX3s9TeOSvYknnm7Knbm5qBZQyeANOdeBg6d6M2fZN/DXSJ+XDrKzx1sznf2252TQvo0vLVnbYAPl+3mQMnkuIJ/j6MvXFkYBeqUxcxEBcX18nn828lJyf37o+KgKQiDa0VMVxqM91KjX05MMnplGVSUu92K6juvgV1c5XPg00ENt4m9b4Hwz92ooq/8cENxMbG4syZMxCJRKitrcWYXo+meila895G94VidFdX4+v6epIEvU2NdFN5F/LGfTRn36wZ2FM3S83gpt4DZGA/jN/s5wxcSFmkgR07drgEAgHi4+NRV1cH9idTyOj/OOkO/Qx3wKm/DKPmc3qvIM3AbrmB9sLdaBMVY/haIsavx3J1myix8TbTfqibI3H59GG0CiNRGB7w4AbCwsJcMTEx2LZtG8RiMQxmC6530gMI/arhDuluIb0WAZoSeh4QA1YJjNoyaNXZsJsrIL+UiAbBX9Bf9xZmrkahq2ADvhDloL1sD+aMZYCzHsKgF2G1Wn9431/EkJAQV0REBNavX4+ioiJMfmvAtSv09HMzD7hGV0XLXtJuOKsjMFP4Kub+Ggzdyd+gLf1nMEu2AIMXoW4vwJfFW9EhFkDRlAXbbTJtOA/oPkFDzGYcDF+rmp6efvS+BgIDA13r1q3DypUvIy8/HxNTBnS0NWFOugsuaTQgeQeo2wx8tBL9B34NachjOLv6p6gIehR/D38cV2Nfwd0DS2A/GwpTRwacPXygm/aj6l1kBP5ucl9UlLizs/P3Tqfz4fsa4PF4roAAHpYuXYrc3FwMDmvQWFuDkqCnpktCV8wUBi83Vr21wqLJfMGtz34Rsrhn0RL+NCqDn0DdhifRFfUMprJXAFWrgYpAzBznoX7rs9ZdrwbcEAqFyT09PQE2m+0HD3wgCQh4zbVqVRCWLVuFlJRMFJwsRHFJiSMxMTEvKSnpSEJCQv7enTs/ilzz2jX+6uXaTzb9avbK9mfQF/8crCdepmZeAUpXQZ70HE78YcnUviDeP+NiY4voivqzRqN52uVyfX/Rp6GAgPVzPN6beP75UCQmZuDUqQKIysWQyWQrJicnfz4xMfGYSqVa0tLSsiE/Pz8hOjLy3Pub13Snb/it6sQby6ZOvrFkJv2PK5UxG4O/TEtNza6pqXlTqVQun52d/bFfj2E8Xjh4vGi89FIM1q4Ns23Zskm+bfv2Kzqd7he+L3C73d9jNTJDzNilS5dCS0tL96alpOTyqaXy8vJd7e3twaOjo79kYPZ5v+DsQ6GhG2+tWbNW9frrweqwsPAO9sUNDQ2bHpSAVWqxWH5kMBh+MjY29qRWq33KaDQ+suicF3NTWVm5lUHLysr2NDc3h+j1+sf9rY8l/bfS3s8Ic8/EErFkflf3v/LBfwFDRfLWFJTOGgAAAABJRU5ErkJggg==</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>4b7e0280-ca14-46f9-84bb-2cf3e0fec6f3</UniqueId>
|
|
<Name>Network Tunnel Traffic and Unencrypted IPSEC</Name>
|
|
<Description>Capture network traffic in the VPN/Direct Access tunnel by using the Firewall provider. Also captures unencrypted IPSEC traffic.</Description>
|
|
<Category>Network</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>c22d1b14-c242-49de-9f17-1d76b8b9c458</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings xsi:type="EtwMessageSourcePluginSettingsWfpCapture">
|
|
<__Id>c22d1b14-c242-49de-9f17-1d76b8b9c458</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
<fastFilters>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
</fastFilters>
|
|
<LayerSets>
|
|
<PefWfpLayer>
|
|
<LayerIndex>LAYER_INBOUND_TRANSPORT_V4</LayerIndex>
|
|
<Name>INBOUND_TRANSPORT_V4</Name>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<LayerIndex>LAYER_OUTBOUND_TRANSPORT_V4</LayerIndex>
|
|
<Name>OUTBOUND_TRANSPORT_V4</Name>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<LayerIndex>LAYER_INBOUND_TRANSPORT_V6</LayerIndex>
|
|
<Name>INBOUND_TRANSPORT_V6</Name>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<LayerIndex>LAYER_OUTBOUND_TRANSPORT_V6</LayerIndex>
|
|
<Name>OUTBOUND_TRANSPORT_V6</Name>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
</LayerSets>
|
|
<EnableDiscardEvents>false</EnableDiscardEvents>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>256</BufferSizeKB>
|
|
<MinBufferCount>4</MinBufferCount>
|
|
<MaxBufferCount>16</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
</SessionSettings>
|
|
<CaptureFilter>WFPCapture.Address != 127.0.0.1
|
|
and
|
|
WFPCapture.Address != ::1</CaptureFilter>
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAAXNSR0IArs4c6QAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9sHCxcxAuA2zjYAAAmTSURBVFjDrZd7jF3XVYe/dR73Nffe8Yw940fsOE+HJHaCTdQmalQUQZMigtKGOCIUJKwKiFQVtWqBUqRGBIqQUikSEZBS2iiCViURMUqjqqiVKsgDcJ20sY3rRyf22OOZzIxn5t577rnnnP1a/GHHQm2AOLCl/c+S9l6f9vrt/dsL3sVQVQBCCPSL8h2t+fWnX3jbuFxu8hACURRhXeDN+AeyTfZo9XMaf/yBlz919wfy+6Mq7O7EE7XvzYg9dGbs9UjN/q99+fUv8Oo+owoPfeVZvv7Rve8eAODQmQG7tr2KyF380jd//7F04tindzfqXNvYjRndQZps4J6tDT71rRyTCzfcdJSFvPeXX7zn4Y8B7H3yszz78J9ePoCqIiKonkVkG7/4zKNnuOW5bTdUd+qieYRd6UuStXfSids0B54Dy5bGyKobWljKpH7b02t/fedfTQLccv+THHruYaLLARARDh7+LiLbeP9jj7/Zu+qr28JqXTcmp+SO9TPy4LVL3Ls+48T4Jl7trKOxrg0V4udHItGKbtlxauITBz/aAzj03MMAlwcAcNuuu7j9N578u+LuL25cF7e12UJ2Rp/gvk0r2Pj9hHgzNzYdY82EMDJoCGgtYvGNKYlPvU9PfO1949e/58+eAXjPx37nXQBs+fbWpR37P5LUYh1FpaxPuoxtfJF+mGYUX40b20gtiggu4CNwKKgSRUpISqk7r5t3lntv+PSHrzjwF39+AeCpP/mDd1D/EwAUVx77I4lKlteWmT1VMqs9Xiuu4/nkNk7GKWddYHHkKQpLaTzWBpwLSFzxjc/9Ag8+cpD7fu9ldr43fQQg+benHuf2fZ8E4PD+p3Z12s0HzCjbrlX5epn1j62emz1+1+e+9IbIDgCyUf5QEQZMfufnZXxqB+m6wIv6INOas1KPMQGikSUZlhRDS730hDJgq0DSKFkenJJ+njM2ueEh4LeS2/d9kle+/PgzE1Mb9nbH2yQSaNbWEYJjrDPG2Nar+cHf34rN86wl5uhLR8vm2dZ1unrkp+V073p8knDWrLJWtWg1AvgAhcGtVejAoUMHuacaBDbddAJKxcWR9mWxDZAAFPPze83cac46rwGROE2JI8VObgqdKEStZk3HGmlHvL73Z2+J1ZtdhNtWMeEVfBkz//pLqCnIkibL9UnWautZZZys7NAfdigGjtGqIWoJq4VhZmGVM6uBCeY6CYCimtbqUkuDmKogVENwjmMzi7p7a5dF40SSFOsV56z44LATG5msxyRiWS8OKwWdcsCmfAERoRjlzC/1WT03wz9O/Q2jNYNLU54/fZRs3uPMNWzgCpMAYK3EcYKxBoJV74MEY4jiiDhJiZ0nwZMES2lKIuc5+sMZdnYF66H0gbTVJniLEDi1sMiRmTkS9XRTS6EF1hT42S7xy/dRLwbSmL+Jw0iVABxZzr5fF9kdqYelORmvxXQ6bYyJCc4SCXjn1Acv1ljUVFRWqCctVC0tIIx6BOtwAebOnUe9I04TRCy2KomTCmol+q97cJJR64Z/vqSBaybHdjcaNYb9LHDPh3zV70VnVtbCRLcbHT510rliFHfKTNrNGrVEUOcIPlb1VlBQ7/Becap457GAiqCqRKpE9YKICokdUGlnvCXDlbUvXAJIgtFmiMTERLOv/Xu0a6rNlprEZb+Pm2jgJsb8jFxFrxyRDzJcOYz8xKQcOnuatjq6jZSA4n3Aer3gMMGzbCxz0zcSj0EsSr2eaK1RE2JZOPgPH39hxx2fvQCADyKieGcBxfkAKJF69YNMYm/jc+cyf+/Oq+OVpEQ2tSnLoZbbt8uqC5wuDOICxWAA5Yi5ImA7U1zRqtFZPU7+UynNeleTJKLVbTJ/dnUPwOLsCxcA3uib/4iWeje7tRV03SRiEqwqVVngg2JKi1ORsshp1FNMMYKyksYoY4v3zMwPuGP7RvJmoKzXkNBlcW4OHSU4b5m6ZkJrjUgarSY/fOU7H3n1bx/pxWkz6s8fCgnA5nWtm+utqZDdcKNGtSaHTh7XUJnIr56PxqqS9e0G3lh8aTDBqXVBFKUqK1QV4wOuHGHzEaKwttbDKYSAEpTp6zeJUR/+5ck//u3T333uJMgOb4szQC8BaKjTZrEWtYoeBMfYGOTecX7nz7hUgsysZmze3pJD5057hlncDZY6AacBUxm8U7XOS2UthXEEDQRVFYLYKOXwi998/sATn3kayC84sA6B8pIIVREkIoSAek9srSa+lJUfnYj2TMRRu7SYXHDNlHJsOizklS5LXWrDHs4UkjWCrJ7vUVQlQRVnHZWzskxCK6nlB574zOeBCjgP9IEREC4BHJ9dWNwS+43jnQaKYJyTojQ4lxCkRhwHas6rFpnUvY+2+sByLuwYE4puTbc1O/7MaFyKPFebDVmWYST1NldhqceMAQf+O5e98A7csjNacaKz8wsB56Kw/CbpqC+m0Y3KLOBFKK3FO08IgdJ6fEgwWaa5cSK6FE8ax9A4LEJZ5YyqirKWUE/q/6PNX7iGi3NTG11F3B/E/e56ndq2SRe5Mkw3Wrx2/BjirHSLLGqkEU7BaMBpU0vx4rwHhcI6vA8Yaymdx/qAD6r6v/w7E4Asy7QmKnll1BkjLutL13mch+kUQhzr0dpGP5km2HzIsN+XUarRWr+HjyOMV7yieVmKBsVaR+kczTiW4/3cXMwVA/5tAVaWVqXbTMnyUlwyYuStGuPEB49zXlGVQW8lvq4dMSKm265rHqfhzWgaX1TYUErIM2l6T+k9znl6xutSHMn2elQDbrqo+hUge0uAb1Fx8OTcE1JWZwbGu1Flrq+bKqqsY1RWlFUlhTE6XwXZkEBZVVoMh+KygSTDTCJTyKyDq67cpotJXV1S13NlhSSpXCFWWzFyvJd/+7+cQAXYSwC/evN1HFheKY70su99f2nl6wfnFh4dVv4brqyWsrxYPyqr6UiR8yGmi8X5gAtK5ayYEPDW6IKPZLPJxa+tSCNYSUOQqhipSCSJwI8GxcsXARYvzrfvjJ597PPs/d0//Amh7G6P3VN2OnffWOPXWmkyXUtinPd4lOC8Hqcut9Yhr0pEYhbKikFRaTOJ6dZS+adz5x8FngWOXFZvuGv9OIdX+j8ebt463v7liXpyfxpFH27HEaeSJjsTjwkKqC5Ujt5oJI04Zqly+2eHxW9erP//rTnd3m0zOxj+ePjabqt1765m+kAjljvbacKyCyzlo/6pkdnnQ9j/ViLl/3novg/+RKwWRXtunhj/lXe6x38CP527xjcvwEoAAAAASUVORK5CYII=</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>9100cf75-b701-4646-a692-230a7e110c56</UniqueId>
|
|
<Name>Local Loopback Network</Name>
|
|
<Description>Capture loopback network traffic that references the loopback addresses of 127.0.0.1 and ::1. If the traffic uses one of the local IP addresses, the scenario should be updated to include those. To display the addresses, use IPConfig /all at a command prompt. </Description>
|
|
<Category>Network</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>c22d1b14-c242-49de-9f17-1d76b8b9c458</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings xsi:type="EtwMessageSourcePluginSettingsWfpCapture">
|
|
<__Id>c22d1b14-c242-49de-9f17-1d76b8b9c458</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Information</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>0</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
<fastFilters>
|
|
<PefWfpFastFilter>
|
|
<Type>IPv4Address</Type>
|
|
<FilterString>127.0.0.1</FilterString>
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>IPv6Address</Type>
|
|
<FilterString>::1</FilterString>
|
|
</PefWfpFastFilter>
|
|
<PefWfpFastFilter>
|
|
<Type>None</Type>
|
|
<FilterString />
|
|
</PefWfpFastFilter>
|
|
</fastFilters>
|
|
<LayerSets>
|
|
<PefWfpLayer>
|
|
<LayerIndex>LAYER_INBOUND_TRANSPORT_V4</LayerIndex>
|
|
<Name>INBOUND_TRANSPORT_V4</Name>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<LayerIndex>LAYER_OUTBOUND_TRANSPORT_V4</LayerIndex>
|
|
<Name>OUTBOUND_TRANSPORT_V4</Name>
|
|
<AdminEnabled>false</AdminEnabled>
|
|
<Selected>false</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<LayerIndex>LAYER_INBOUND_TRANSPORT_V6</LayerIndex>
|
|
<Name>INBOUND_TRANSPORT_V6</Name>
|
|
<AdminEnabled>true</AdminEnabled>
|
|
<Selected>true</Selected>
|
|
</PefWfpLayer>
|
|
<PefWfpLayer>
|
|
<LayerIndex>LAYER_OUTBOUND_TRANSPORT_V6</LayerIndex>
|
|
<Name>OUTBOUND_TRANSPORT_V6</Name>
|
|
<AdminEnabled>false</AdminEnabled>
|
|
<Selected>false</Selected>
|
|
</PefWfpLayer>
|
|
</LayerSets>
|
|
<EnableDiscardEvents>false</EnableDiscardEvents>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<SessionSettings>
|
|
<ClockMode>QPC</ClockMode>
|
|
<BufferSizeKB>256</BufferSizeKB>
|
|
<MinBufferCount>4</MinBufferCount>
|
|
<MaxBufferCount>16</MaxBufferCount>
|
|
<FlushTimerInSec>1</FlushTimerInSec>
|
|
<LogFileMode>256</LogFileMode>
|
|
</SessionSettings>
|
|
<CaptureFilter>// You'll need to add your local IPv4 and IPv6 addresses to this filter in case
|
|
// the traffic references them instead of the loopback address. You can also add
|
|
// fast filters for these to potential increase capture performance.
|
|
//
|
|
// WFPCapture.SourceAddress == YOURIPv4Address && WFPCapture.SourceAddress == YOURIPv4Address
|
|
// or
|
|
// WFPCapture.SourceAddress == YOURIPv6Address && WFPCapture.SourceAddress == YOURIPv6Address
|
|
</CaptureFilter>
|
|
<VisualizerId>df824f50-bedd-4f03-b1b8-d50534fcd1fd</VisualizerId>
|
|
<VisualizerName />
|
|
<Icon>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</Icon>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
<Asset>
|
|
<Metadata>
|
|
<UniqueId>B766EF9B-BE40-45FD-830D-2172FEA827E7</UniqueId>
|
|
<Name>SASL LDAP pre-encryption</Name>
|
|
<Description>Capture pre-encrypted LDAP frames and information using the LDAP client provider.</Description>
|
|
<Category>Network</Category>
|
|
<Properties />
|
|
</Metadata>
|
|
<Content xsi:type="TraceScenarioAsset">
|
|
<Providers>
|
|
<EtwProvider>
|
|
<Id>099614a5-5dd7-4788-8bc9-e29f43db28fc</Id>
|
|
<IsEnabled>true</IsEnabled>
|
|
<Settings>
|
|
<MajorVersion>0</MajorVersion>
|
|
<MinorVersion>0</MinorVersion>
|
|
<__Id>099614a5-5dd7-4788-8bc9-e29f43db28fc</__Id>
|
|
<TimeOut>0</TimeOut>
|
|
<Level>Verbose</Level>
|
|
<KeywordToMask>true</KeywordToMask>
|
|
<MatchAnyKeyword>442085283</MatchAnyKeyword>
|
|
<MatchAllKeyword>0</MatchAllKeyword>
|
|
</Settings>
|
|
</EtwProvider>
|
|
</Providers>
|
|
<CaptureFilter />
|
|
<VisualizerId>00000000-0000-0000-0000-000000000000</VisualizerId>
|
|
</Content>
|
|
<Properties />
|
|
</Asset>
|
|
</Assets>
|
|
<Properties />
|
|
</AssetCollection>
|