Defrag Tools: #46 - WPT - Driver Analysis

In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue walking you through the Windows Performance Toolkit (WPT). Example xPerf scripts.
Resources:
Defrag Tools: #23 - Windows 8 SDK
Defrag Tools: #29 - WinDbg - ETW Logging
Windows Performance Analysis Developer Center
Windows Performance Toolkit
Channel 9 Videos
NTDebugging Blog Article
PFE Blog Series
Timeline:
{T00:00] - Filters & MiniFilters
[04:48] - xperf -on PROC_THREAD+LOADER+PROFILE+FLT_IO_INIT+FLT_IO+FLT_FASTIO+FLT_IO_FAILURE+FILENAME -stackwalk ...
[07:30] - WPA
[09:48] - IRP - Major Function
[11:30] - Filter to Major Functiom, then sort by Mini-Filter Driver
[14:20] - Zoom and then look at other graphs - e.g. CPU Usage (Sampled)
[15:25] - Summary
Example: "xperf - Collect MiniFilter.cmd"
@echo off
echo Press a key when ready to start...
pause
echo .
echo ...Capturing...
echo .
xperf -on PROC_THREAD+LOADER+PROFILE+FLT_IO_INIT+FLT_IO+FLT_FASTIO+FLT_IO_FAILURE+FILENAME -stackwalk Profile+MiniFilterPreOpInit+MiniFilterPostOpInit -BufferSize 1024 -MinBuffers 256 -MaxBuffers 256 -MaxFile 256 -FileMode Circular
echo Press a key when you want to stop...
pause
echo .
echo ...Stopping...
echo .
xperf -stop -d minifilter.etl
There doesn't appear to be any audio on the High Quality WMV download.
I always downlaod the high WMV and I have audio.
I redownloaded the file tonight and it is fine. Yesterday the High WMV and Mid MP4 had no audio, but the Mid WMV was fine. Watching the file on the site worked fine yesterday. This was all done using FF v22 on Windows 8 x64. The WMVs were played in WMP on the desktop and the MP4 was played with the Windows 8 Video player.
Who knows, but at least it's all better now.
Is there some other option to record mini-filter events? I have ESET NOD32 Antivirus (with its eamonm.sys driver) but even if I run a scan nothing gets logged in minifilter.etl
@wallaby: Are you using Win8?
No
Windows 7 64bit
@wallaby: MiniFilter tracing is only in Win8.
Oh, that explains all ;)
Thanks for your reply.