We are using McAfee Client Proxy v18.104.22.1688. I have noticed in c:\programdata\McAfee\MCP\Logs a number of files named "McpContinuousEtlTraces.etl", along with a "ContinuousTraceRun.log" file. The etl files range from a few hundred kilobytes to 150 megabytes in size.
These items appeared about a month ago, but I can't tie them to a particular install or policy change.
I see no information about the files in the MCP documentation or the KB. I have not run any connection traces in the MWG interface for my machine that correspond with the etl file dates.
The log file shows activity like this. After each trace action the log files are rolled, saving the last 10.
[21-5-2017] 1:3:14:708 [Function]: stopPreviousRunningTrace started
[21-5-2017] 1:3:14:708 ControlTrace(stop) returned with status = 0x1069
[21-5-2017] 1:3:14:708 The Trace was not Already Running status = ERROR_WMI_INSTANCE_NOT_FOUND
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.