etw

Jul 26, 2022

Changes in this version

type PoolSession

+ func (s *PoolSession) Process(cb EventCallback) error

+ func (s *PoolSession) SubscribeToProvider(guid string) error

Jul 26, 2022

Changes in this version

+ type PoolSession struct

+ func NewPoolSession(options ...Option) (*PoolSession, error)

Jul 15, 2022

Changes in this version

+ const EVENT_ENABLE_PROPERTY_EXCLUDE_INPRIVATE — windows/amd64

+ const EVENT_ENABLE_PROPERTY_IGNORE_KEYWORD_0 — windows/amd64

+ const EVENT_ENABLE_PROPERTY_SID — windows/amd64

+ const EVENT_ENABLE_PROPERTY_STACK_TRACE — windows/amd64

+ const EVENT_ENABLE_PROPERTY_TS_ID — windows/amd64

+ const TRACE_LEVEL_CRITICAL — windows/amd64

+ const TRACE_LEVEL_ERROR — windows/amd64

+ const TRACE_LEVEL_INFORMATION — windows/amd64

+ const TRACE_LEVEL_VERBOSE — windows/amd64

+ const TRACE_LEVEL_WARNING — windows/amd64

+ func KillSession(name string) error — windows/amd64

+ type EnableProperty C.ULONG — windows/amd64

+ type Event struct — windows/amd64

+ Header EventHeader

+ func (e *Event) EventProperties() (map[string]interface{}, error)

+ func (e *Event) ExtendedInfo() ExtendedEventInfo

+ type EventCallback func(e *Event) — windows/amd64

+ type EventDescriptor struct — windows/amd64

+ Channel uint8

+ ID uint16

+ Keyword uint64

+ Level uint8

+ OpCode uint8

+ Task uint16

+ Version uint8

+ type EventHeader struct — windows/amd64

+ ActivityID windows.GUID

+ Flags uint16

+ KernelTime uint32

+ ProcessID uint32

+ ProcessorTime uint64

+ ProviderID windows.GUID

+ ThreadID uint32

+ TimeStamp time.Time

+ UserTime uint32

+ func (h EventHeader) HasCPUTime() bool

+ type EventInstanceInfo struct — windows/amd64

+ InstanceID uint32

+ ParentGUID windows.GUID

+ ParentInstanceID uint32

+ type EventStackTrace struct — windows/amd64

+ Addresses []uint64

+ MatchedID uint64

+ type ExistsError struct — windows/amd64

+ SessionName string

+ func (e ExistsError) Error() string

+ type ExtendedEventInfo struct — windows/amd64

+ ActivityID *windows.GUID

+ InstanceInfo *EventInstanceInfo

+ SessionID *uint32

+ StackTrace *EventStackTrace

+ UserSID *windows.SID

+ type Option func(cfg *SessionOptions) — windows/amd64

+ func WithLevel(lvl TraceLevel) Option

+ func WithMatchKeywords(anyKeyword, allKeyword uint64) Option

+ func WithName(name string) Option

+ func WithProperty(p EnableProperty) Option

+ type Session struct — windows/amd64

+ func NewSession(providerGUID windows.GUID, options ...Option) (*Session, error)

+ func (s *Session) Close() error

+ func (s *Session) Process(cb EventCallback) error

+ func (s *Session) UpdateOptions(options ...Option) error

+ type SessionOptions struct — windows/amd64

+ EnableProperties []EnableProperty

+ Level TraceLevel

+ MatchAllKeyword uint64

+ MatchAnyKeyword uint64

+ Name string

+ type TraceLevel C.UCHAR — windows/amd64