etw

Documentation

Index

• func WithBufferCallback(fn BufferStatsCallback) option
• func WithDiskIO(enabled bool) option
• func WithEventCallback(fn ProcessEventCallback) option
• func WithFile(enabled bool) option
• func WithImage(enabled bool) option
• func WithProcess(enabled bool) option
• func WithRegistry(enabled bool) option
• func WithTcpIP(enabled bool) option
• func WithThread(enabled bool) option
• type BufferStatsCallback
• type EventTrace
  • func NewEventTrace(options ...option) *EventTrace
  • func (e *EventTrace) Close() error
  • func (e *EventTrace) Process() error
  • func (e *EventTrace) Start() error
• type ProcessEventCallback

Functions

func WithBufferCallback

func WithBufferCallback(fn BufferStatsCallback) option

func WithDiskIO

func WithDiskIO(enabled bool) option

func WithEventCallback

func WithEventCallback(fn ProcessEventCallback) option

func WithFile

func WithFile(enabled bool) option

func WithImage

func WithImage(enabled bool) option

func WithProcess

func WithProcess(enabled bool) option

func WithRegistry

func WithRegistry(enabled bool) option

func WithTcpIP

func WithTcpIP(enabled bool) option

func WithThread

func WithThread(enabled bool) option

Types

type BufferStatsCallback

type BufferStatsCallback func(*evntrace.EventTraceLogFile) uintptr

type EventTrace

type EventTrace struct {
	// contains filtered or unexported fields
}

func NewEventTrace

func NewEventTrace(options ...option) *EventTrace

func (*EventTrace) Close

func (e *EventTrace) Close() error

func (*EventTrace) Process

func (e *EventTrace) Process() error

func (*EventTrace) Start

func (e *EventTrace) Start() error

type ProcessEventCallback

type ProcessEventCallback func(*tdh.EventRecord) uintptr