A. The Windows 2000 Resource Kit provides Tracedmp.exe, which you can use to either process trace log data or poll the trace log realtime and convert the information to a Comma Separated Value (CSV) file. To enable/disable tracing, use the resource kit Tracelog.exe program. The syntax is as follows (see the resource kit Help file for more details):

Usage: tracedmp \[options\]  <etlfile1 etlfile2>
         | \[-h | -? | -help\]
        -o <file>                Output CSV file
        -guid <file>             MOF definition file
        -rt \[LoggerName\]   Realtime tracedmp from the logger
                           \[LoggerName\]
        -summary           Summary.txt only
        -h
        -help
        -?                 Display usage information
</file></file></etlfile1>