Windows sysinternals

242 Part II Usage Guide
the crash dump file. This can be helpful if, for example, you are trying to diagnose a crash
involving a kernel-mode driver you are developing. You can also instrument your driver to
produce debug output so that users who experience a crash using your driver can send you a
debug output file instead of an entire memory dump.
Choose Process Crash Dump from the File menu to select a crash dump file for DebugView
to analyze. DebugView will search the file for its debug output buffers. If it finds them,
DebugView will prompt you for the name of a log file in which to save the output. You can
load saved output files into DebugView for viewing. Note that the system must be configured
to create a kernel or full dump (not a minidump) for this feature to work. DebugView
saves all capture configuration settings on exit and restores them the next time it runs.
Note that if it had been running elevated and capturing kernel or global (session 0) debug
output, DebugView displays error messages and disables those options if it doesn’t have
administrative rights the next time it runs under the same user account, because it will not be
able to capture output from those sources. You can avoid these error messages by starting
DebugView with the /kn option to disable kernel capture and /gn to disable global capture.
Searching, Filtering, and Highlighting Output
DebugView has several features that can help you focus on the debug output you are
interested in. These capabilities include searching, filtering, highlighting, and limiting the
number of debug output lines saved in the display.
Clearing the Display
To clear the display of all captured debug text, press Ctrl+X or click the Clear icon in the
toolbar. You can also clear the DebugView output from a debug output source: when
DebugView sees the special debug output string DBGVIEWCLEAR (all capitals) anywhere in
an input line, DebugView clears the output. Clearing the output also resets the sequence
number and elapsed timer to 0.
Searching
If you want to search for a line containing text of interest, press Ctrl+F to display the Find
dialog box. If the text you specify matches text in the output window, DebugView selects the
next matching line and turns off the Autoscroll feature to keep the line in the window. Press
F3 to repeat a successful search. You can press Shift+F3 to reverse the search direction.
Filtering
Another way to isolate output you are interested in is to use DebugView’s filtering capability.
Click the Filter/Highlight button in the DebugView toolbar to display the Filter dialog box,
www.it-ebooks.info