etw Questions
5
Solved
I am trying to wrap my head around ETW and how to integrate t into a high Performance application.
We all know the old dreaded EventLog with it's non structured (and thus not so optimal) API.
Now...
3
Solved
Is there a way to get the total number of allocations (note - number of allocations, not bytes allocated)? It can be either for the current thread, or globally, whichever is easier.
I want to chec...
Singleness asked 7/4, 2020 at 13:24
2
Solved
Every example of tracing in .NET people remove the "Default" listener:
<configuration>
<system.diagnostics>
<sources>
<source name="TraceSourceApp" switchName="SourceSwitch...
3
Solved
I am interested in listening to ETW (event tracing for Windows) TPL events, in particular I'd like to know when a Task starts and when it stops.
Here's a sample program I've used for testing:
us...
Analogical asked 16/2, 2015 at 11:46
2
Solved
> wevtutil.exe gp <provider-name> /ge /gm /f:xml
prints the manifest given a provider, except for its data templates. Is there a tool I am missing that would display the templates defined...
Carrell asked 22/8, 2016 at 22:12
3
Solved
I am working with Event Tracing for Windows API, and from time to time, I run my application and it does not manage to close the ETW trace controller session after opening it.
Basically I do ::Sta...
Fenestella asked 7/8, 2011 at 18:54
2
How can I use the TCB value from the ETW Microsoft-Windows-TCPIP provider to get the TCB information
I am trying to capture real time data on TCP connections on a machine using ETW and the Microsoft-Windows-TCPIP provider and the Microsoft TraceEvent Library.
One of the values you can get from th...
1
Solved
I am looking at my performance profile of one of my slowest requests, and I see an AWAIT_TIME of more than 6 seconds, but I am not able to get any more information regarding it. How do I figure out...
Housemaster asked 24/7, 2017 at 20:17
4
Solved
The larger question is how to consume real-time ETW network stack events in general but I'm particularly interested in the Microsoft-Windows-NDIS-PacketCapture provider. All other network stack pro...
Gyrus asked 27/2, 2012 at 18:23
3
I'm working on a large product consisting of a three windows services and several normal windows applications (.exe). Now we want to move to ETW and Semantic Logging, and use the Microsoft.Diagnost...
Tutor asked 12/10, 2014 at 18:30
1
Solved
I recorded a trace of an application performing Local RPC calls on Windows. I used xperf with the Microsoft-Windows-RPC provider enabled. After opening the trace, I realized that it's not that simp...
2
Solved
I'm running the very first sample of ServiceFabric (Preview version 1.4.87): https://azure.microsoft.com/en-us/documentation/articles/service-fabric-create-your-first-application-in-visual-studio/ ...
Brickyard asked 10/2, 2016 at 19:4
1
Solved
I'm trying to replicate the following from the Event Viewer:
I'm having trouble with a few things.
Some of the names I get back are not the display names or friendly names. For example, for "M...
Squarrose asked 6/6, 2016 at 16:21
3
Solved
I'm instrumenting my .NET 4.5 applications to emit ETW events using the EventSource class. The goal is to be able to capture some of these events (the Error level events) for error logging.
After...
Exert asked 22/6, 2013 at 0:48
5
Solved
I'm trying to use Event Tracing for Windows (ETW) in my .NET application via the EventSource class that was included in .NET 4.5. I'm subclassing EventSource as MyEventSource and trying to implemen...
Liriodendron asked 30/4, 2013 at 13:48
2
Solved
I have been investigating Event Tracing for Windows (ETW) for use within existing backend/server applications.
MSDN and other sources have sold the power of the framework and its integration ...
4
I need help solving the "Provider '' resources not accessible when trying to create a windows event provider. I create my manifest file with the ManGen utility, and name my '.exe' file as my messag...
1
I have code that uses the Microsoft.Diagnostics.Tracing.TraceEvent NuGet package, and I wrote the following code:
using (var session = new TraceEventSession("mine"))
{
session.StopOnDispose = tru...
1
Solved
Since Windows 7 it is possible to activate callstacks for usermode events. This works fine, but sometimes activating stacks for all tasks/Events in a provider is not needed and it would be nice to ...
Deed asked 17/5, 2015 at 17:36
1
I'd like to be able to declare an EventSource which has a minimum of several methods which by default provide regular logging facilities.
e.g.
Info()
Warn()
Error()
In addition I'd like to be ...
Staminody asked 25/9, 2013 at 10:55
0
My task is to make an ETW real-time consumer with events provided by 'Microsoft Windows Security Auditing'.
I made a simple controller and consumer application, basing on this example http://msdn....
2
Solved
I'm researching Event Tracing for Windows (ETW) to allow a user-mode windows client to write out tracing information. The existing documentation is, to put it lightly, insanely incomplete. What wou...
1
Solved
I've started using ETW and the out-of-process Semantic Logging Block from Entlib 6. When I use async/await, the CurrentThreadActivityId is not set on the continuation thread and the TPL framework d...
Spool asked 14/10, 2014 at 13:0
3
We have an application that parts of it are in .net, c++ usermode and C++ drivers. The application is divided into several executables that run on demand and communication with each other using LPC...
Eckmann asked 26/2, 2010 at 12:26
3
Solved
Is there a standard way to log exceptions using ETW?
As far as I have seen the only way to do this is to log the message and possibly the inner exception message as there is not strongly typed par...
Christlike asked 27/9, 2013 at 14:29
1 Next >
© 2022 - 2025 — McMap. All rights reserved.