title: Windows - see active ETW sessions so that I can close one of them
body: <p>I am working with Event Tracing for Windows API, and from time to time,  I run my application and it does not manage to close the ETW trace controller session after opening it.</p>
  
  <p>Basically I do <code>::StartTrace([out] handle...)</code> and do not close that handle when I'm finished with it (closing done by using <code>::StopTrace()</code> function)</p>
  
  <p>I'm looking for a tool that shows me the active sessions so I can close it manually. Without it I have to restart my PC in order for the controller session to be closed at shutdown.</p>
  
  <p>Also, i the same ETW area (on Win 7), I understand that I should be able to see the data layouts for public MOF descriptions using wbemtest.exe. There I am supposed to enter in </p>
  
  <pre><code>- Connect -&gt; Namespace = \\root\wmi\EventTrace
  </code></pre>
  
  <p>to see MOF data. But I get <strong>"The RPC server is unavailable"</strong>. Using in that screen the dafaults values: IWBemLocator(Namespaces), How to interpret passsword = null, Authentication level = packet.</p>
  
  <p>In the credentials area I have user and Password (which I tried) but there is another empty field - Authority. Is there a way to see MOF data ? I runed this elevated under Win 7.</p>