Getting fancy with PowerShell and WMI Last time we got our feet wet with a simple PowerShell script to query Ethernet MAC addresses. It looked easy, but of course, it requires you to know the magic WMI class name "MSNdis_EthernetCurrentAddress". How...

Here is a copy of the TMF decoders for NDIS.SYS on Windows 7 and Windows Server 2008 R2. → Download here . This file was last updated on 3/25/2012, and includes traces for the following versions of NDIS: RTM KB977927 KB981765 ...

Industrial-strength tracing in an industrial-strength debugger Last time we talked about controlling WPP from the command-line.  This is great if you need to send instructions to a customer to collect logs, or if you want to automatically enable...

Industrial-strength tracing WPP is similar to DbgPrint. In fact, for NDIS.SYS, WPP and DbgPrint trace exactly the same messages. However, WPP is easier to enable and works on retail versions of NDIS.SYS. These advantages mean that WPP can be enabled...

Tracing made easy Starting with Windows 7 and Windows Server 2008 R2, NDIS can be configured to emit certain diagnostic information to the event log.  The event log is very easy to use, and it doesn't require any special tools.  It's especially...

Evolving beyond DbgPrint I'd like to take a break from our series on WMI (don't worry -- more WMI is coming soon!) to respond to a recent discussion in the community. Traditionally , we've used DbgPrint to debug NDIS issues. This is convenient, since...