Can WinDbg use the IptTraceStream of a Minidump?

Question

Can WinDbg use the IptTraceStream of a Minidump?

Domani Johannes 15

If I enable Intel Process Trace for a process, and then later create a minidump file for the same process with the MiniDumpWithIptTrace flag added in the MiniDumpWriteDump() call, I get an IptTraceStream in the minidump file. Presumably it contains the latest IPT data for each thread of the process at the time of the minidump creation, so I wonder if WinDbg can use this for time travel debugging of the last steps of each thread, as this could be very helpful in crashdump analysis. And if WinDbg can not do this, is there another program that can?

Grayson Clark 0 Reputation points

2024-11-16T21:07:46.0833333+00:00

+1, also very interested in this, and if it's possible currently or is planned to be supported in the future
Domani Johannes 15 Reputation points

2024-11-18T09:44:00.7666667+00:00

@Grayson Clark If you're curious, I've ported the IPT reverse debugging variant in gdb (record btrace pt) to Windows (see here). I've then also added loading a minidump file with IPT data with record btrace restore, which is basically what I was asking for here.