Repro Help
System Operations & Filtering
Repro dynamically instruments the following System Operations:
Disk - records file create, delete, open, read, and write
operations.
Internet - records connect, listen, accept, send, and
receive operations.
Exceptions - records exceptions.
GUI - records mouse clicks.
ODBC - records connect, execute, prepare, bind, row count,
fetch, and fetch scroll operations.
Registry - records create, open, delete, set value, query
value, delete value, and close key operations.
Custom Messages - in C++ programs, calls to
OutputDebugString() are recorded. You can sprinkle your own custom
messages that you want to see in the Repro.
It is common for Repro files to contain tens of thousands of System Operations. You can use advanced filters to search through and isolate System Operations of interest.
Filtering
To filter System Operations right click on the System Operations window, and select "Filter System Operations." You can then choose to show or hide any of the seven classes of operations defined above by checking or unchecking the corresponding check box. For a more granular filter, specify a search string.
Supported Search Strings
Repro supports case insensitive binary search strings which are used by many search engines. The following types of searches are supported.
"AND" Searches
To retrieve operations that include both word A and word B, use a space between the two terms. For example, to search for an Operation that contains both write and test.txt, type:
write text
"- " Searches
You can exclude a word from your search by putting a minus sign ("-") immediately in front of the term you want to avoid. (Be sure to include a space before the minus sign.) For example, to find System Operations that contain send, but not "post", type:
send -post
"OR" Searches
Repro supports the logical "OR" operator. To retrieve operations that include either word A or word B, use an uppercase OR between terms. For example, to search for an Operation that contains HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER, type:
HKEY_LOCAL_MACHINE OR HKEY_CURRENT_USER
"Quoted" Searches
To search for an Operation with two terms next to each other, include the two terms in quotes. For example, to search for an Operation that contains Send and 127.0.0.1 right next to each other, type:
"Send 127.0.0.1"