The SDK team just shipped the latest version of the Windows SDK which supports Windows Server 2008 and Vista SP1. The SDK now includes an important new tool; the Windows Performance Tool Kit from the Windows performance team (we call them the xperf tools for short...)
This is the first article in the xperf series, the next one is Xperf Tools Landing Page and Update
The xperf tools have long been an internal tool used by our team, and widely throughout Windows, for system-wide performance analysis. Xperf got its start many years ago as a set of command-line tools that produce reports based off the ETW instrumentation in the kernel. Many other components and applications in Windows are instrumented with ETW and xperf can enable these events, dump them, and analyze them.
Xperf is an important tool for anyone doing system performance work on Windows because it's specifically designed to give you a complete system-wide view of performance over long periods of time (10's of seconds, to minutes). It's also the only tool that knows how to fully process all the events from the kernel and correlate them into something that makes sense.
For example, here is a detail graph of all the disk I/O to the system drive on my laptop for opening this post, editing it a bit, and then closing Live Writer.
Here is an example of the CPU and disk utilization for Outlook 2007 launch:
Here is the same view, but with the data from all processes visible:
In addition to graphical displays, the tools can also display tabular data (what we call "summary data"). The screen capture to the right is a table of sample profile events during a 6.5 second period during a find string operation over a tree of source code. For that period, 73.93% of the total CPU time was in the idle thread, 6.78% was in the find string utility and the reset of the time was distributed around services, the system, xperf itself (at 3%) and other processes. As you start playing with the summary tables, try shifting around the columns to get different types of views on the data; for example, grouping IOs per process, IO type (read/write/...), IO size, IO service time, and so forth.
These simple examples barely scratch the surface of the data that the tools can gather and the richness of the information they can display. The tools have several other important features including:
In the coming weeks, I'll blog more about the tools, how to use them, and the kernel ETW events. We'll also soon have a web page up for the tools. This is where you will soon find updates, additional documentation, and a message forum.
Now! Here is how you can get the tools!
We'll soon have a web page up for the tools on the MSDN site... stay tuned!
 You can see the events supported by the kernel in the docs for the EnableFlags field of the EVENT_TRACE_PROPERTIES structure. I'm going to blog more about these...
 The xperf tools from the Windows Performance Toolkit are very complimentarily to the SysInternals tools.