PRB: Data Loss Occurs When You Use the TraceLogReader Class to Read the Trace Session Log File (827511)

SYMPTOMS

The following exception may be thrown when you use the TraceLogReader function to read the trace session log file:

System.NotSupportedException: The GuidPtr field of the EVENT_TRACE_HEADER structure returned from OS is not supported.
at Microsoft.EnterpriseInstrumentation.Readers.TraceLogReader.Read()
at Microsoft.EnterpriseInstrumentation.Readers.TraceLogReader.ReadLogFile(String logFileName, EventReadCallback eventReadCallback)

CAUSE

This behavior may occur if any part of the trace session record header (EVENT_TRACE_HEADER) has the WNODE_GUID_PTR_FLAG set.

When the TraceLogReader function encounters this flag, the function throws the exception that is mentioned in the "Symptoms" section and then does not read any more of the log file. Therefore, the trace session log file becomes unusable and data is lost.

RESOLUTION

To resolve this problem, install the latest version of Microsoft Enterprise Instrumentation Framework. The latest version includes, together with other fixes, a fix for the problem that is described in this article.

To download the latest version of Enterprise Instrumentation Framework, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyId=80DF04BC-267D-4919-8BB4-1F84B7EB1368

Make sure that you follow the instructions that are provided with this download.