Microsoft KB Archive/827511

= PRB: Data Loss Occurs When You Use the TraceLogReader Class to Read the Trace Session Log File =

Article ID: 827511

Article Last Modified on 3/20/2004

-

APPLIES TO


 * Microsoft Enterprise Instrumentation Framework

-



SYMPTOMS
The following exception may be thrown when you use the TraceLogReader function to read the trace session log file:

System.NotSupportedException: The GuidPtr field of the EVENT_TRACE_HEADER structure returned from OS is not supported.

at Microsoft.EnterpriseInstrumentation.Readers.TraceLogReader.Read

at Microsoft.EnterpriseInstrumentation.Readers.TraceLogReader.ReadLogFile(String logFileName, EventReadCallback eventReadCallback)



CAUSE
This behavior may occur if any part of the trace session record header (EVENT_TRACE_HEADER) has the WNODE_GUID_PTR_FLAG set.

When the TraceLogReader function encounters this flag, the function throws the exception that is mentioned in the &quot;Symptoms&quot; section and then does not read any more of the log file. Therefore, the trace session log file becomes unusable and data is lost.



RESOLUTION
To resolve this problem, install the latest version of Microsoft Enterprise Instrumentation Framework. The latest version includes, together with other fixes, a fix for the problem that is described in this article.

To download the latest version of Enterprise Instrumentation Framework, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyId=80DF04BC-267D-4919-8BB4-1F84B7EB1368

Make sure that you follow the instructions that are provided with this download.

Keywords: kbprb kbdswmanage2003swept KB827511

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.