Reply to thread

Hello,


The error "xperf: error: NT Kernel Logger: Cannot Create File when that file already exists. (oxb7)" in most cases are caused by other programs (or another XPERF instance), capturing ETW data, running at the same time. Please make sure to close LatencyMon, Process Monitor, Resource Monitor or other similar programs before proceeding with the next steps:


  1. Download Windows Software Development Kit (SDK) for Windows and run the setup.
  2. Select Windows Performance Toolkit feature (all the others can be unchecked) and proceed with the download/installation.
  3. Once the installation finishes, open an elevated Command Prompt by right-clicking on CMD.EXE shortcut in your start menu and selecting Run As Administrator from the context menu.
  4. Type the following command, which will start tracing, in the Command Prompt window you just opened:
    [CODE]xperf -on PROC_THREAD+LOADER+PROFILE+INTERRUPT+DPC+DRIVERS+POWER+IDLE_STATES -stackwalk Profile -BufferSize 1024 -MinBuffers 256 -MaxBuffers 256 -MaxFile 256 -FileMode Circular[/CODE]
    If you see a yellow warning "xperf: warning: This system is not fully configured for x64 stack tracing" after running the above command, please complete these extra steps (otherwise, proceed to the step #5):
    [HIDE]
    1. Run the following command which will stop the tracing:
      [CODE]xperf -stop[/CODE]
    2. Run the following command to enable stack tracing (by disabling Paging Executive):
      [CODE]REG ADD "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management" -v DisablePagingExecutive -d 0x1 -t REG_DWORD -f[/CODE]
    3. Reboot the computer
    4. Once computer reboots, proceed from the step #3
    [/HIDE]
    If you see a red error  "xperf: error: NT Kernel Logger: A device attached to the system is not functioning. (0x1f)" after running the above command, please complete these extra steps (otherwise, proceed to the step #5):
    [HIDE]
    1. Run the following command to disable Driver Verifier, which causes the above error:
      [CODE]verifier /reset[/CODE]
    2. Reboot the computer
    3. Once computer reboots, proceed from the step #3
    [/HIDE]
    If you see a red error "xperf: error: NT Kernel Logger: Cannot create a file when that file already exists. (0xb7)", please do the following (otherwise, proceed to the step #5):
    [HIDE]
    Make sure you do not have any programs that captures ETW data already running. Some examples of these are:

    • Process Explorer
    • Process Hacker
    • Resource Monitor
    • Process Monitor
    • Latency Monitor
    • Another instance of XPERF or WPR
    [/HIDE]
  5. Perform some activities with your computer for few minutes, making sure the issues you reported are reproduced.
  6. Run the following command, which will stop the tracing, in the command prompt window you already have opened:
    [CODE]xperf -stop -d C:\CPU.etl[/CODE]
  7. Compress file C:\CPU.etl
  8. Upload the compressed file to a file sharing service (e.g. OneDrive or DropBox).
  9. Share the download link here.

Thank you.


Back
Top