The computer quits when you enable an Event Tracing for Windows trace session in Windows Server 2003, in Windows XP, or in Windows 2000

In Microsoft Windows Server 2003, in Microsoft Windows XP, or in Microsoft Windows 2000, the computer quits (crashes) when you enable an Event Tracing for Windows (ETW) trace session. This issue occurs when you configure the trace session to use a buffer that is more than 4 kilobytes (KB).

The kernel debugger has a buffer limit of 4 KB. This issue occurs if you use a buffer that is more than 4 KB and you have the KD filter mode enabled when you start the ETW trace session. The computer quits because the kernel debugger (KD) tries to write beyond the kernel debugger's allocated memory.

To work around this issue, you can change the buffer size. Use a buffer that is less than 4KB when you start the ETW trace session.