Debugging TV Frames episode 0x14 discusses multibraiding and adjoint threading in software log and trace analysis with practical examples from Process Monitor, Excel, and Citrix CDFAnalyzer.

1. Frame 0x14
Presenter: Dmitry Vostokov
Sponsors
Debugging.TV

2. • Thread
• Adjoint Thread
• Software Trace Analysis Patterns
• Examples (Procmon, CDFAnalyzer, Excel)
Topics
© 2012 Software Diagnostics Institute

3. Thread
© 2012 Software Diagnostics Institute
Time
# PID TID Time Func Message
{ msg | TID = N }
SELECT * FROM Messages WHERE Messages.TID = N
<T|A> <Constant|Variable>
Time
# PID TID Time Func Message

4. Adjoint Thread
© 2012 Software Diagnostics Institute
Time
# PID TID Time Func Message
{ msg | Func = ‘Text’ }
SELECT * FROM Messages
WHERE Messages.Func = ‘CreateProcess’
<T|A> <-> <A|T>
From mathematics: Adjoint
Time
# PID TID Time Func Message

5. Log Analysis Patterns
© 2012 Software Diagnostics Institute
• Discontinuity
• Time Delta
• Anchor Messages
• Fiber Bundle
Complex adjoint
threads:
nested filtering

6. Suggested Reading
© 2012 Software Diagnostics Institute
Articles on adjoint threading:
• Extending Multithreading to Multibraiding
• What is an Adjoint Thread?
Tools supporting adjoint threading:
• Process Monitor
• Citrix CDFAnalyzer

7. !Ad Hardcore Software Support Training
November 2-5, 2012 Accelerated Windows Software Trace Analysis
November 16-26, 2012 Accelerated Windows Memory Dump Analysis
December 7-10, 2012 Accelerated Windows Malware Analysis
December 17, 2012 Philosophy of Software Diagnostics (FREE)
Early 2013 The New Old Debugging
© 2012 Software Diagnostics Institute
Coming soon

8. Debugging.TV
Now on YouTube!
http://www.youtube.com/DebuggingTV