#include <guiddef.h>

Include dependency graph for evntrace.h:

This graph shows which files directly or indirectly include this file:

Classes
struct	_EVENT_TRACE_HEADER

struct	_EVENT_INSTANCE_HEADER

struct	_MOF_FIELD

struct	_EVENT_INSTANCE_INFO

struct	_TRACE_GUID_PROPERTIES

struct	_ETW_BUFFER_CONTEXT

struct	_TRACE_ENABLE_INFO

struct	_TRACE_PROVIDER_INSTANCE_INFO

struct	_TRACE_GUID_INFO

struct	_EVENT_TRACE

struct	_TRACE_LOGFILE_HEADER

struct	_TRACE_LOGFILE_HEADER32

struct	_TRACE_LOGFILE_HEADER64

struct	_EVENT_TRACE_PROPERTIES

struct	_TRACE_GUID_REGISTRATION

struct	_EVENT_TRACE_LOGFILEW

struct	_EVENT_TRACE_LOGFILEA

struct	_CLASSIC_EVENT_ID

struct	_ENABLE_TRACE_PARAMETERS

Macros
#define	_EVNTRACE_

#define	WMIAPI DECLSPEC_IMPORT __stdcall

#define	KERNEL_LOGGER_NAMEW L"NT Kernel Logger"

#define	GLOBAL_LOGGER_NAMEW L"GlobalLogger"

#define	EVENT_LOGGER_NAMEW L"EventLog"

#define	DIAG_LOGGER_NAMEW L"DiagLog"

#define	KERNEL_LOGGER_NAMEA "NT Kernel Logger"

#define	GLOBAL_LOGGER_NAMEA "GlobalLogger"

#define	EVENT_LOGGER_NAMEA "EventLog"

#define	DIAG_LOGGER_NAMEA "DiagLog"

#define	MAX_MOF_FIELDS 16

#define	_TRACEHANDLE_DEFINED

#define	SYSTEM_EVENT_TYPE 1

#define	EVENT_TRACE_TYPE_INFO 0x00

#define	EVENT_TRACE_TYPE_START 0x01

#define	EVENT_TRACE_TYPE_END 0x02

#define	EVENT_TRACE_TYPE_STOP 0x02

#define	EVENT_TRACE_TYPE_DC_START 0x03

#define	EVENT_TRACE_TYPE_DC_END 0x04

#define	EVENT_TRACE_TYPE_EXTENSION 0x05

#define	EVENT_TRACE_TYPE_REPLY 0x06

#define	EVENT_TRACE_TYPE_DEQUEUE 0x07

#define	EVENT_TRACE_TYPE_RESUME 0x07

#define	EVENT_TRACE_TYPE_CHECKPOINT 0x08

#define	EVENT_TRACE_TYPE_SUSPEND 0x08

#define	EVENT_TRACE_TYPE_WINEVT_SEND 0x09

#define	EVENT_TRACE_TYPE_WINEVT_RECEIVE 0XF0

#define	TRACE_LEVEL_NONE 0

#define	TRACE_LEVEL_CRITICAL 1

#define	TRACE_LEVEL_FATAL 1

#define	TRACE_LEVEL_ERROR 2

#define	TRACE_LEVEL_WARNING 3

#define	TRACE_LEVEL_INFORMATION 4

#define	TRACE_LEVEL_VERBOSE 5

#define	TRACE_LEVEL_RESERVED6 6

#define	TRACE_LEVEL_RESERVED7 7

#define	TRACE_LEVEL_RESERVED8 8

#define	TRACE_LEVEL_RESERVED9 9

#define	EVENT_TRACE_TYPE_LOAD 0x0A

#define	EVENT_TRACE_TYPE_IO_READ 0x0A

#define	EVENT_TRACE_TYPE_IO_WRITE 0x0B

#define	EVENT_TRACE_TYPE_IO_READ_INIT 0x0C

#define	EVENT_TRACE_TYPE_IO_WRITE_INIT 0x0D

#define	EVENT_TRACE_TYPE_IO_FLUSH 0x0E

#define	EVENT_TRACE_TYPE_IO_FLUSH_INIT 0x0F

#define	EVENT_TRACE_TYPE_MM_TF 0x0A

#define	EVENT_TRACE_TYPE_MM_DZF 0x0B

#define	EVENT_TRACE_TYPE_MM_COW 0x0C

#define	EVENT_TRACE_TYPE_MM_GPF 0x0D

#define	EVENT_TRACE_TYPE_MM_HPF 0x0E

#define	EVENT_TRACE_TYPE_MM_AV 0x0F

#define	EVENT_TRACE_TYPE_SEND 0x0A

#define	EVENT_TRACE_TYPE_RECEIVE 0x0B

#define	EVENT_TRACE_TYPE_CONNECT 0x0C

#define	EVENT_TRACE_TYPE_DISCONNECT 0x0D

#define	EVENT_TRACE_TYPE_RETRANSMIT 0x0E

#define	EVENT_TRACE_TYPE_ACCEPT 0x0F

#define	EVENT_TRACE_TYPE_RECONNECT 0x10

#define	EVENT_TRACE_TYPE_CONNFAIL 0x11

#define	EVENT_TRACE_TYPE_COPY_TCP 0x12

#define	EVENT_TRACE_TYPE_COPY_ARP 0x13

#define	EVENT_TRACE_TYPE_ACKFULL 0x14

#define	EVENT_TRACE_TYPE_ACKPART 0x15

#define	EVENT_TRACE_TYPE_ACKDUP 0x16

#define	EVENT_TRACE_TYPE_GUIDMAP 0x0A

#define	EVENT_TRACE_TYPE_CONFIG 0x0B

#define	EVENT_TRACE_TYPE_SIDINFO 0x0C

#define	EVENT_TRACE_TYPE_SECURITY 0x0D

#define	EVENT_TRACE_TYPE_REGCREATE 0x0A

#define	EVENT_TRACE_TYPE_REGOPEN 0x0B

#define	EVENT_TRACE_TYPE_REGDELETE 0x0C

#define	EVENT_TRACE_TYPE_REGQUERY 0x0D

#define	EVENT_TRACE_TYPE_REGSETVALUE 0x0E

#define	EVENT_TRACE_TYPE_REGDELETEVALUE 0x0F

#define	EVENT_TRACE_TYPE_REGQUERYVALUE 0x10

#define	EVENT_TRACE_TYPE_REGENUMERATEKEY 0x11

#define	EVENT_TRACE_TYPE_REGENUMERATEVALUEKEY 0x12

#define	EVENT_TRACE_TYPE_REGQUERYMULTIPLEVALUE 0x13

#define	EVENT_TRACE_TYPE_REGSETINFORMATION 0x14

#define	EVENT_TRACE_TYPE_REGFLUSH 0x15

#define	EVENT_TRACE_TYPE_REGKCBCREATE 0x16

#define	EVENT_TRACE_TYPE_REGKCBDELETE 0x17

#define	EVENT_TRACE_TYPE_REGKCBRUNDOWNBEGIN 0x18

#define	EVENT_TRACE_TYPE_REGKCBRUNDOWNEND 0x19

#define	EVENT_TRACE_TYPE_REGVIRTUALIZE 0x1A

#define	EVENT_TRACE_TYPE_REGCLOSE 0x1B

#define	EVENT_TRACE_TYPE_REGSETSECURITY 0x1C

#define	EVENT_TRACE_TYPE_REGQUERYSECURITY 0x1D

#define	EVENT_TRACE_TYPE_REGCOMMIT 0x1E

#define	EVENT_TRACE_TYPE_REGPREPARE 0x1F

#define	EVENT_TRACE_TYPE_REGROLLBACK 0x20

#define	EVENT_TRACE_TYPE_REGMOUNTHIVE 0x21

#define	EVENT_TRACE_TYPE_CONFIG_CPU 0x0A

#define	EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK 0x0B

#define	EVENT_TRACE_TYPE_CONFIG_LOGICALDISK 0x0C

#define	EVENT_TRACE_TYPE_CONFIG_NIC 0x0D

#define	EVENT_TRACE_TYPE_CONFIG_VIDEO 0x0E

#define	EVENT_TRACE_TYPE_CONFIG_SERVICES 0x0F

#define	EVENT_TRACE_TYPE_CONFIG_POWER 0x10

#define	EVENT_TRACE_TYPE_CONFIG_NETINFO 0x11

#define	EVENT_TRACE_TYPE_CONFIG_IRQ 0x15

#define	EVENT_TRACE_TYPE_CONFIG_PNP 0x16

#define	EVENT_TRACE_TYPE_CONFIG_IDECHANNEL 0x17

#define	EVENT_TRACE_TYPE_CONFIG_PLATFORM 0x19

#define	EVENT_TRACE_FLAG_PROCESS 0x00000001

#define	EVENT_TRACE_FLAG_THREAD 0x00000002

#define	EVENT_TRACE_FLAG_IMAGE_LOAD 0x00000004

#define	EVENT_TRACE_FLAG_DISK_IO 0x00000100

#define	EVENT_TRACE_FLAG_DISK_FILE_IO 0x00000200

#define	EVENT_TRACE_FLAG_MEMORY_PAGE_FAULTS 0x00001000

#define	EVENT_TRACE_FLAG_MEMORY_HARD_FAULTS 0x00002000

#define	EVENT_TRACE_FLAG_NETWORK_TCPIP 0x00010000

#define	EVENT_TRACE_FLAG_REGISTRY 0x00020000

#define	EVENT_TRACE_FLAG_DBGPRINT 0x00040000

#define	EVENT_TRACE_FLAG_PROCESS_COUNTERS 0x00000008

#define	EVENT_TRACE_FLAG_CSWITCH 0x00000010

#define	EVENT_TRACE_FLAG_DPC 0x00000020

#define	EVENT_TRACE_FLAG_INTERRUPT 0x00000040

#define	EVENT_TRACE_FLAG_SYSTEMCALL 0x00000080

#define	EVENT_TRACE_FLAG_DISK_IO_INIT 0x00000400

#define	EVENT_TRACE_FLAG_ALPC 0x00100000

#define	EVENT_TRACE_FLAG_SPLIT_IO 0x00200000

#define	EVENT_TRACE_FLAG_DRIVER 0x00800000

#define	EVENT_TRACE_FLAG_PROFILE 0x01000000

#define	EVENT_TRACE_FLAG_FILE_IO 0x02000000

#define	EVENT_TRACE_FLAG_FILE_IO_INIT 0x04000000

#define	EVENT_TRACE_FLAG_DISPATCHER 0x00000800

#define	EVENT_TRACE_FLAG_VIRTUAL_ALLOC 0x00004000

#define	EVENT_TRACE_FLAG_EXTENSION 0x80000000

#define	EVENT_TRACE_FLAG_FORWARD_WMI 0x40000000

#define	EVENT_TRACE_FLAG_ENABLE_RESERVE 0x20000000

#define	EVENT_TRACE_FILE_MODE_NONE 0x00000000

#define	EVENT_TRACE_FILE_MODE_SEQUENTIAL 0x00000001

#define	EVENT_TRACE_FILE_MODE_CIRCULAR 0x00000002

#define	EVENT_TRACE_FILE_MODE_APPEND 0x00000004

#define	EVENT_TRACE_REAL_TIME_MODE 0x00000100

#define	EVENT_TRACE_DELAY_OPEN_FILE_MODE 0x00000200

#define	EVENT_TRACE_BUFFERING_MODE 0x00000400

#define	EVENT_TRACE_PRIVATE_LOGGER_MODE 0x00000800

#define	EVENT_TRACE_ADD_HEADER_MODE 0x00001000

#define	EVENT_TRACE_USE_GLOBAL_SEQUENCE 0x00004000

#define	EVENT_TRACE_USE_LOCAL_SEQUENCE 0x00008000

#define	EVENT_TRACE_RELOG_MODE 0x00010000

#define	EVENT_TRACE_USE_PAGED_MEMORY 0x01000000

#define	EVENT_TRACE_FILE_MODE_NEWFILE 0x00000008

#define	EVENT_TRACE_FILE_MODE_PREALLOCATE 0x00000020

#define	EVENT_TRACE_NONSTOPPABLE_MODE 0x00000040

#define	EVENT_TRACE_SECURE_MODE 0x00000080

#define	EVENT_TRACE_USE_KBYTES_FOR_SIZE 0x00002000

#define	EVENT_TRACE_PRIVATE_IN_PROC 0x00020000

#define	EVENT_TRACE_MODE_RESERVED 0x00100000

#define	EVENT_TRACE_NO_PER_PROCESSOR_BUFFERING 0x10000000

#define	EVENT_TRACE_CONTROL_QUERY 0

#define	EVENT_TRACE_CONTROL_STOP 1

#define	EVENT_TRACE_CONTROL_UPDATE 2

#define	EVENT_TRACE_CONTROL_FLUSH 3

#define	TRACE_MESSAGE_SEQUENCE 1

#define	TRACE_MESSAGE_GUID 2

#define	TRACE_MESSAGE_COMPONENTID 4

#define	TRACE_MESSAGE_TIMESTAMP 8

#define	TRACE_MESSAGE_PERFORMANCE_TIMESTAMP 16

#define	TRACE_MESSAGE_SYSTEMINFO 32

#define	TRACE_MESSAGE_POINTER32 0x0040

#define	TRACE_MESSAGE_POINTER64 0x0080

#define	TRACE_MESSAGE_FLAG_MASK 0xFFFF

#define	TRACE_MESSAGE_MAXIMUM_SIZE 8*1024

#define	EVENT_TRACE_USE_PROCTIME 0x0001

#define	EVENT_TRACE_USE_NOCPUTIME 0x0002

#define	TRACE_HEADER_FLAG_USE_TIMESTAMP 0x00000200

#define	TRACE_HEADER_FLAG_TRACED_GUID 0x00020000

#define	TRACE_HEADER_FLAG_LOG_WNODE 0x00040000

#define	TRACE_HEADER_FLAG_USE_GUID_PTR 0x00080000

#define	TRACE_HEADER_FLAG_USE_MOF_PTR 0x00100000

#define	ETW_NULL_TYPE_VALUE 0

#define	ETW_OBJECT_TYPE_VALUE 1

#define	ETW_STRING_TYPE_VALUE 2

#define	ETW_SBYTE_TYPE_VALUE 3

#define	ETW_BYTE_TYPE_VALUE 4

#define	ETW_INT16_TYPE_VALUE 5

#define	ETW_UINT16_TYPE_VALUE 6

#define	ETW_INT32_TYPE_VALUE 7

#define	ETW_UINT32_TYPE_VALUE 8

#define	ETW_INT64_TYPE_VALUE 9

#define	ETW_UINT64_TYPE_VALUE 10

#define	ETW_CHAR_TYPE_VALUE 11

#define	ETW_SINGLE_TYPE_VALUE 12

#define	ETW_DOUBLE_TYPE_VALUE 13

#define	ETW_BOOLEAN_TYPE_VALUE 14

#define	ETW_DECIMAL_TYPE_VALUE 15

#define	ETW_GUID_TYPE_VALUE 101

#define	ETW_ASCIICHAR_TYPE_VALUE 102

#define	ETW_ASCIISTRING_TYPE_VALUE 103

#define	ETW_COUNTED_STRING_TYPE_VALUE 104

#define	ETW_POINTER_TYPE_VALUE 105

#define	ETW_SIZET_TYPE_VALUE 106

#define	ETW_HIDDEN_TYPE_VALUE 107

#define	ETW_BOOL_TYPE_VALUE 108

#define	ETW_COUNTED_ANSISTRING_TYPE_VALUE 109

#define	ETW_REVERSED_COUNTED_STRING_TYPE_VALUE 110

#define	ETW_REVERSED_COUNTED_ANSISTRING_TYPE_VALUE 111

#define	ETW_NON_NULL_TERMINATED_STRING_TYPE_VALUE 112

#define	ETW_REDUCED_ANSISTRING_TYPE_VALUE 113

#define	ETW_REDUCED_STRING_TYPE_VALUE 114

#define	ETW_SID_TYPE_VALUE 115

#define	ETW_VARIANT_TYPE_VALUE 116

#define	ETW_PTVECTOR_TYPE_VALUE 117

#define	ETW_WMITIME_TYPE_VALUE 118

#define	ETW_DATETIME_TYPE_VALUE 119

#define	ETW_REFRENCE_TYPE_VALUE 120

#define	TRACE_PROVIDER_FLAG_LEGACY 0x00000001

#define	TRACE_PROVIDER_FLAG_PRE_ENABLE 0x00000002

#define	EVENT_CONTROL_CODE_DISABLE_PROVIDER 0

#define	EVENT_CONTROL_CODE_ENABLE_PROVIDER 1

#define	EVENT_CONTROL_CODE_CAPTURE_STATE 2

#define	DEFINE_TRACE_MOF_FIELD(MOF, ptr, length, type)

#define	PEVENT_TRACE_HEADER_DEFINED

#define	ENABLE_TRACE_PARAMETERS_VERSION 1

#define	PEVENT_TRACE_BUFFER_CALLBACK PEVENT_TRACE_BUFFER_CALLBACKA

#define	EVENT_TRACE_LOGFILE EVENT_TRACE_LOGFILEA

#define	PEVENT_TRACE_LOGFILE PEVENT_TRACE_LOGFILEA

#define	KERNEL_LOGGER_NAME KERNEL_LOGGER_NAMEA

#define	GLOBAL_LOGGER_NAME GLOBAL_LOGGER_NAMEA

#define	EVENT_LOGGER_NAME EVENT_LOGGER_NAMEA

#define	INVALID_PROCESSTRACE_HANDLE ((TRACEHANDLE)(ULONG_PTR)INVALID_HANDLE_VALUE)

#define	RegisterTraceGuids RegisterTraceGuidsA

#define	StartTrace StartTraceA

#define	ControlTrace ControlTraceA

#define	StopTrace StopTraceA

#define	QueryTrace QueryTraceA

#define	UpdateTrace UpdateTraceA

#define	FlushTrace FlushTraceA

#define	QueryAllTraces QueryAllTracesA

#define	OpenTrace OpenTraceA

Typedefs
typedef ULONG64	TRACEHANDLE

typedef ULONG64 *	PTRACEHANDLE

typedef struct _EVENT_TRACE_HEADER	EVENT_TRACE_HEADER

typedef struct _EVENT_TRACE_HEADER *	PEVENT_TRACE_HEADER

typedef struct _EVENT_INSTANCE_HEADER	EVENT_INSTANCE_HEADER

typedef struct _EVENT_INSTANCE_HEADER *	PEVENT_INSTANCE_HEADER

typedef struct _MOF_FIELD	MOF_FIELD

typedef struct _MOF_FIELD *	PMOF_FIELD

typedef struct _EVENT_INSTANCE_INFO	EVENT_INSTANCE_INFO

typedef struct _EVENT_INSTANCE_INFO *	PEVENT_INSTANCE_INFO

typedef struct _TRACE_GUID_PROPERTIES	TRACE_GUID_PROPERTIES

typedef struct _TRACE_GUID_PROPERTIES *	PTRACE_GUID_PROPERTIES

typedef struct _ETW_BUFFER_CONTEXT	ETW_BUFFER_CONTEXT

typedef struct _ETW_BUFFER_CONTEXT *	PETW_BUFFER_CONTEXT

typedef struct _TRACE_ENABLE_INFO	TRACE_ENABLE_INFO

typedef struct _TRACE_ENABLE_INFO *	PTRACE_ENABLE_INFO

typedef struct _TRACE_PROVIDER_INSTANCE_INFO	TRACE_PROVIDER_INSTANCE_INFO

typedef struct _TRACE_PROVIDER_INSTANCE_INFO *	PTRACE_PROVIDER_INSTANCE_INFO

typedef struct _TRACE_GUID_INFO	TRACE_GUID_INFO

typedef struct _TRACE_GUID_INFO *	PTRACE_GUID_INFO

typedef struct _EVENT_TRACE	EVENT_TRACE

typedef struct _EVENT_TRACE *	PEVENT_TRACE

typedef struct _TRACE_LOGFILE_HEADER	TRACE_LOGFILE_HEADER

typedef struct _TRACE_LOGFILE_HEADER *	PTRACE_LOGFILE_HEADER

typedef struct _TRACE_LOGFILE_HEADER32	TRACE_LOGFILE_HEADER32

typedef struct _TRACE_LOGFILE_HEADER32 *	PTRACE_LOGFILE_HEADER32

typedef struct _TRACE_LOGFILE_HEADER64	TRACE_LOGFILE_HEADER64

typedef struct _TRACE_LOGFILE_HEADER64 *	PTRACE_LOGFILE_HEADER64

typedef struct _EVENT_TRACE_PROPERTIES	EVENT_TRACE_PROPERTIES

typedef struct _EVENT_TRACE_PROPERTIES *	PEVENT_TRACE_PROPERTIES

typedef struct _TRACE_GUID_REGISTRATION	TRACE_GUID_REGISTRATION

typedef struct _TRACE_GUID_REGISTRATION *	PTRACE_GUID_REGISTRATION

typedef struct _EVENT_RECORD	EVENT_RECORD

typedef struct _EVENT_RECORD *	PEVENT_RECORD

typedef struct _EVENT_TRACE_LOGFILEW	EVENT_TRACE_LOGFILEW

typedef struct _EVENT_TRACE_LOGFILEW *	PEVENT_TRACE_LOGFILEW

typedef struct _EVENT_TRACE_LOGFILEA	EVENT_TRACE_LOGFILEA

typedef struct _EVENT_TRACE_LOGFILEA *	PEVENT_TRACE_LOGFILEA

typedef struct _EVENT_FILTER_DESCRIPTOR	EVENT_FILTER_DESCRIPTOR

typedef struct _EVENT_FILTER_DESCRIPTOR *	PEVENT_FILTER_DESCRIPTOR

typedef ULONG(WINAPI *	PEVENT_TRACE_BUFFER_CALLBACKW) (PEVENT_TRACE_LOGFILEW Logfile)

typedef ULONG(WINAPI *	PEVENT_TRACE_BUFFER_CALLBACKA) (PEVENT_TRACE_LOGFILEA Logfile)

typedef VOID(WINAPI *	PEVENT_CALLBACK) (PEVENT_TRACE pEvent)

typedef VOID(WINAPI *	PEVENT_RECORD_CALLBACK) (PEVENT_RECORD EventRecord)

typedef ULONG(WINAPI *	WMIDPREQUEST) (IN WMIDPREQUESTCODE RequestCode, IN PVOID RequestContext, IN OUT ULONG *BufferSize, IN OUT PVOID Buffer)

typedef enum _TRACE_QUERY_INFO_CLASS	TRACE_QUERY_INFO_CLASS

typedef enum _TRACE_QUERY_INFO_CLASS	TRACE_INFO_CLASS

typedef struct _CLASSIC_EVENT_ID	CLASSIC_EVENT_ID

typedef struct _CLASSIC_EVENT_ID *	PCLASSIC_EVENT_ID

typedef struct _ENABLE_TRACE_PARAMETERS	ENABLE_TRACE_PARAMETERS

typedef struct _ENABLE_TRACE_PARAMETERS *	PENABLE_TRACE_PARAMETERS

Enumerations
enum	_TRACE_QUERY_INFO_CLASS { TraceGuidQueryList , TraceGuidQueryInfo , TraceGuidQueryProcess , TraceStackTracingInfo , MaxTraceSetInfoClass }

Functions
	DEFINE_GUID (EventTraceGuid, 0x68fdd900, 0x4a3e, 0x11d1, 0x84, 0xf4, 0x00, 0x00, 0xf8, 0x04, 0x64, 0xe3)

	DEFINE_GUID (SystemTraceControlGuid, 0x9e814aad, 0x3204, 0x11d2, 0x9a, 0x82, 0x00, 0x60, 0x08, 0xa8, 0x69, 0x39)

	DEFINE_GUID (EventTraceConfigGuid, 0x01853a65, 0x418f, 0x4f36, 0xae, 0xfc, 0xdc, 0x0f, 0x1d, 0x2f, 0xd2, 0x35)

	DEFINE_GUID (DefaultTraceSecurityGuid, 0x0811c1af, 0x7a07, 0x4a06, 0x82, 0xed, 0x86, 0x94, 0x55, 0xcd, 0xf7, 0x13)

EXTERN_C ULONG WMIAPI	StartTraceW (OUT PTRACEHANDLE TraceHandle, IN LPCWSTR InstanceName, IN OUT PEVENT_TRACE_PROPERTIES Properties)

EXTERN_C ULONG WMIAPI	StartTraceA (OUT PTRACEHANDLE TraceHandle, IN LPCSTR InstanceName, IN OUT PEVENT_TRACE_PROPERTIES Properties)

EXTERN_C ULONG WMIAPI	StopTraceW (IN TRACEHANDLE TraceHandle, IN LPCWSTR InstanceName OPTIONAL, IN OUT PEVENT_TRACE_PROPERTIES Properties)

EXTERN_C ULONG WMIAPI	StopTraceA (IN TRACEHANDLE TraceHandle, IN LPCSTR InstanceName OPTIONAL, IN OUT PEVENT_TRACE_PROPERTIES Properties)

EXTERN_C ULONG WMIAPI	QueryTraceW (IN TRACEHANDLE TraceHandle, IN LPCWSTR InstanceName OPTIONAL, IN OUT PEVENT_TRACE_PROPERTIES Properties)

EXTERN_C ULONG WMIAPI	QueryTraceA (IN TRACEHANDLE TraceHandle, IN LPCSTR InstanceName OPTIONAL, IN OUT PEVENT_TRACE_PROPERTIES Properties)

EXTERN_C ULONG WMIAPI	UpdateTraceW (IN TRACEHANDLE TraceHandle, IN LPCWSTR InstanceName OPTIONAL, IN OUT PEVENT_TRACE_PROPERTIES Properties)

EXTERN_C ULONG WMIAPI	UpdateTraceA (IN TRACEHANDLE TraceHandle, IN LPCSTR InstanceName OPTIONAL, IN OUT PEVENT_TRACE_PROPERTIES Properties)

EXTERN_C ULONG WMIAPI	ControlTraceW (IN TRACEHANDLE TraceHandle, IN LPCWSTR InstanceName OPTIONAL, IN OUT PEVENT_TRACE_PROPERTIES Properties, IN ULONG ControlCode)

EXTERN_C ULONG WMIAPI	ControlTraceA (IN TRACEHANDLE TraceHandle, IN LPCSTR InstanceName OPTIONAL, IN OUT PEVENT_TRACE_PROPERTIES Properties, IN ULONG ControlCode)

EXTERN_C ULONG WMIAPI	QueryAllTracesW (OUT PEVENT_TRACE_PROPERTIES *PropertyArray, IN ULONG PropertyArrayCount, OUT PULONG LoggerCount)

EXTERN_C ULONG WMIAPI	QueryAllTracesA (OUT PEVENT_TRACE_PROPERTIES *PropertyArray, IN ULONG PropertyArrayCount, OUT PULONG LoggerCount)

EXTERN_C ULONG WMIAPI	EnableTrace (IN ULONG Enable, IN ULONG EnableFlag, IN ULONG EnableLevel, IN LPCGUID ControlGuid, IN TRACEHANDLE TraceHandle)

EXTERN_C ULONG WMIAPI	CreateTraceInstanceId (IN HANDLE RegHandle, IN OUT PEVENT_INSTANCE_INFO InstInfo)

EXTERN_C ULONG WMIAPI	TraceEvent (IN TRACEHANDLE TraceHandle, IN PEVENT_TRACE_HEADER EventTrace)

EXTERN_C ULONG WMIAPI	TraceEventInstance (IN TRACEHANDLE TraceHandle, IN PEVENT_INSTANCE_HEADER EventTrace, IN PEVENT_INSTANCE_INFO InstInfo, IN PEVENT_INSTANCE_INFO ParentInstInfo OPTIONAL)

EXTERN_C ULONG WMIAPI	RegisterTraceGuidsW (IN WMIDPREQUEST RequestAddress, IN PVOID RequestContext OPTIONAL, IN LPCGUID ControlGuid, IN ULONG GuidCount, IN PTRACE_GUID_REGISTRATION TraceGuidReg OPTIONAL, IN LPCWSTR MofImagePath OPTIONAL, IN LPCWSTR MofResourceName OPTIONAL, OUT PTRACEHANDLE RegistrationHandle)

EXTERN_C ULONG WMIAPI	RegisterTraceGuidsA (IN WMIDPREQUEST RequestAddress, IN PVOID RequestContext OPTIONAL, IN LPCGUID ControlGuid, IN ULONG GuidCount, IN PTRACE_GUID_REGISTRATION TraceGuidReg OPTIONAL, IN LPCSTR MofImagePath OPTIONAL, IN LPCSTR MofResourceName OPTIONAL, OUT PTRACEHANDLE RegistrationHandle)

EXTERN_C ULONG WMIAPI	UnregisterTraceGuids (IN TRACEHANDLE RegistrationHandle)

EXTERN_C TRACEHANDLE WMIAPI	GetTraceLoggerHandle (IN PVOID Buffer)

EXTERN_C UCHAR WMIAPI	GetTraceEnableLevel (IN TRACEHANDLE TraceHandle)

EXTERN_C ULONG WMIAPI	GetTraceEnableFlags (IN TRACEHANDLE TraceHandle)

EXTERN_C TRACEHANDLE WMIAPI	OpenTraceA (IN OUT PEVENT_TRACE_LOGFILEA Logfile)

EXTERN_C TRACEHANDLE WMIAPI	OpenTraceW (IN OUT PEVENT_TRACE_LOGFILEW Logfile)

EXTERN_C ULONG WMIAPI	ProcessTrace (IN PTRACEHANDLE HandleArray, IN ULONG HandleCount, IN LPFILETIME StartTime OPTIONAL, IN LPFILETIME EndTime OPTIONAL)

EXTERN_C ULONG WMIAPI	CloseTrace (IN TRACEHANDLE TraceHandle)

EXTERN_C ULONG WMIAPI	SetTraceCallback (IN LPCGUID pGuid, IN PEVENT_CALLBACK EventCallback)

EXTERN_C ULONG WMIAPI	RemoveTraceCallback (IN LPCGUID pGuid)

EXTERN_C ULONG __cdecl	TraceMessage (IN TRACEHANDLE LoggerHandle, IN ULONG MessageFlags, IN LPCGUID MessageGuid, IN USHORT MessageNumber,...)

EXTERN_C ULONG WMIAPI	TraceMessageVa (IN TRACEHANDLE LoggerHandle, IN ULONG MessageFlags, IN LPCGUID MessageGuid, IN USHORT MessageNumber, IN va_list MessageArgList)

EXTERN_C ULONG WMIAPI	EnumerateTraceGuids (IN OUT PTRACE_GUID_PROPERTIES *GuidPropertiesArray, IN ULONG PropertyArrayCount, OUT PULONG GuidCount)

EXTERN_C ULONG WMIAPI	FlushTraceW (IN TRACEHANDLE TraceHandle, IN LPCWSTR InstanceName OPTIONAL, IN OUT PEVENT_TRACE_PROPERTIES Properties)

EXTERN_C ULONG WMIAPI	FlushTraceA (IN TRACEHANDLE TraceHandle, IN LPCSTR InstanceName OPTIONAL, IN OUT PEVENT_TRACE_PROPERTIES Properties)

EXTERN_C ULONG WMIAPI	EnableTraceEx (IN LPCGUID ProviderId, IN LPCGUID SourceId OPTIONAL, IN TRACEHANDLE TraceHandle, IN ULONG IsEnabled, IN UCHAR Level, IN ULONGLONG MatchAnyKeyword, IN ULONGLONG MatchAllKeyword, IN ULONG EnableProperty, IN PEVENT_FILTER_DESCRIPTOR EnableFilterDesc OPTIONAL)

EXTERN_C ULONG WMIAPI	EnumerateTraceGuidsEx (IN TRACE_QUERY_INFO_CLASS TraceQueryInfoClass, IN PVOID InBuffer OPTIONAL, IN ULONG InBufferSize, OUT PVOID OutBuffer OPTIONAL, IN ULONG OutBufferSize, OUT PULONG ReturnLength)

EXTERN_C ULONG WMIAPI	EnableTraceEx2 (IN TRACEHANDLE TraceHandle, IN LPCGUID ProviderId, IN ULONG ControlCode, IN UCHAR Level, IN ULONGLONG MatchAnyKeyword, IN ULONGLONG MatchAllKeyword, IN ULONG Timeout, IN PENABLE_TRACE_PARAMETERS EnableParameters OPTIONAL)

EXTERN_C ULONG WMIAPI	TraceSetInformation (IN TRACEHANDLE SessionHandle, IN TRACE_INFO_CLASS InformationClass, IN PVOID TraceInformation, IN ULONG InformationLength)

Macro Definition Documentation

◆ _EVNTRACE_

#define _EVNTRACE_

Definition at line 3 of file evntrace.h.

◆ _TRACEHANDLE_DEFINED

#define _TRACEHANDLE_DEFINED

Definition at line 39 of file evntrace.h.

◆ ControlTrace

#define ControlTrace ControlTraceA

Definition at line 747 of file evntrace.h.

◆ DEFINE_TRACE_MOF_FIELD

#define DEFINE_TRACE_MOF_FIELD	(	MOF,
		ptr,
		length,
		type
	)

Value:

  (MOF)->DataPtr = (ULONG64)(ULONG_PTR) ptr; \
  (MOF)->Length = (ULONG) length; \
  (MOF)->DataType = (ULONG) type;

Definition at line 287 of file evntrace.h.

◆ DIAG_LOGGER_NAMEA

#define DIAG_LOGGER_NAMEA "DiagLog"

Definition at line 34 of file evntrace.h.

◆ DIAG_LOGGER_NAMEW

#define DIAG_LOGGER_NAMEW L"DiagLog"

Definition at line 29 of file evntrace.h.

◆ ENABLE_TRACE_PARAMETERS_VERSION

#define ENABLE_TRACE_PARAMETERS_VERSION 1

Definition at line 568 of file evntrace.h.

◆ ETW_ASCIICHAR_TYPE_VALUE

#define ETW_ASCIICHAR_TYPE_VALUE 102

Definition at line 260 of file evntrace.h.

◆ ETW_ASCIISTRING_TYPE_VALUE

#define ETW_ASCIISTRING_TYPE_VALUE 103

Definition at line 261 of file evntrace.h.

◆ ETW_BOOL_TYPE_VALUE

#define ETW_BOOL_TYPE_VALUE 108

Definition at line 266 of file evntrace.h.

◆ ETW_BOOLEAN_TYPE_VALUE

#define ETW_BOOLEAN_TYPE_VALUE 14

Definition at line 256 of file evntrace.h.

◆ ETW_BYTE_TYPE_VALUE

#define ETW_BYTE_TYPE_VALUE 4

Definition at line 246 of file evntrace.h.

◆ ETW_CHAR_TYPE_VALUE

#define ETW_CHAR_TYPE_VALUE 11

Definition at line 253 of file evntrace.h.

◆ ETW_COUNTED_ANSISTRING_TYPE_VALUE

#define ETW_COUNTED_ANSISTRING_TYPE_VALUE 109

Definition at line 267 of file evntrace.h.

◆ ETW_COUNTED_STRING_TYPE_VALUE

#define ETW_COUNTED_STRING_TYPE_VALUE 104

Definition at line 262 of file evntrace.h.

◆ ETW_DATETIME_TYPE_VALUE

#define ETW_DATETIME_TYPE_VALUE 119

Definition at line 277 of file evntrace.h.

◆ ETW_DECIMAL_TYPE_VALUE

#define ETW_DECIMAL_TYPE_VALUE 15

Definition at line 257 of file evntrace.h.

◆ ETW_DOUBLE_TYPE_VALUE

#define ETW_DOUBLE_TYPE_VALUE 13

Definition at line 255 of file evntrace.h.

◆ ETW_GUID_TYPE_VALUE

#define ETW_GUID_TYPE_VALUE 101

Definition at line 259 of file evntrace.h.

◆ ETW_HIDDEN_TYPE_VALUE

#define ETW_HIDDEN_TYPE_VALUE 107

Definition at line 265 of file evntrace.h.

◆ ETW_INT16_TYPE_VALUE

#define ETW_INT16_TYPE_VALUE 5

Definition at line 247 of file evntrace.h.

◆ ETW_INT32_TYPE_VALUE

#define ETW_INT32_TYPE_VALUE 7

Definition at line 249 of file evntrace.h.

◆ ETW_INT64_TYPE_VALUE

#define ETW_INT64_TYPE_VALUE 9

Definition at line 251 of file evntrace.h.

◆ ETW_NON_NULL_TERMINATED_STRING_TYPE_VALUE

#define ETW_NON_NULL_TERMINATED_STRING_TYPE_VALUE 112

Definition at line 270 of file evntrace.h.

◆ ETW_NULL_TYPE_VALUE

#define ETW_NULL_TYPE_VALUE 0

Definition at line 242 of file evntrace.h.

◆ ETW_OBJECT_TYPE_VALUE

#define ETW_OBJECT_TYPE_VALUE 1

Definition at line 243 of file evntrace.h.

◆ ETW_POINTER_TYPE_VALUE

#define ETW_POINTER_TYPE_VALUE 105

Definition at line 263 of file evntrace.h.

◆ ETW_PTVECTOR_TYPE_VALUE

#define ETW_PTVECTOR_TYPE_VALUE 117

Definition at line 275 of file evntrace.h.

◆ ETW_REDUCED_ANSISTRING_TYPE_VALUE

#define ETW_REDUCED_ANSISTRING_TYPE_VALUE 113

Definition at line 271 of file evntrace.h.

◆ ETW_REDUCED_STRING_TYPE_VALUE

#define ETW_REDUCED_STRING_TYPE_VALUE 114

Definition at line 272 of file evntrace.h.

◆ ETW_REFRENCE_TYPE_VALUE

#define ETW_REFRENCE_TYPE_VALUE 120

Definition at line 278 of file evntrace.h.

◆ ETW_REVERSED_COUNTED_ANSISTRING_TYPE_VALUE

#define ETW_REVERSED_COUNTED_ANSISTRING_TYPE_VALUE 111

Definition at line 269 of file evntrace.h.

◆ ETW_REVERSED_COUNTED_STRING_TYPE_VALUE

#define ETW_REVERSED_COUNTED_STRING_TYPE_VALUE 110

Definition at line 268 of file evntrace.h.

◆ ETW_SBYTE_TYPE_VALUE

#define ETW_SBYTE_TYPE_VALUE 3

Definition at line 245 of file evntrace.h.

◆ ETW_SID_TYPE_VALUE

#define ETW_SID_TYPE_VALUE 115

Definition at line 273 of file evntrace.h.

◆ ETW_SINGLE_TYPE_VALUE

#define ETW_SINGLE_TYPE_VALUE 12

Definition at line 254 of file evntrace.h.

◆ ETW_SIZET_TYPE_VALUE

#define ETW_SIZET_TYPE_VALUE 106

Definition at line 264 of file evntrace.h.

◆ ETW_STRING_TYPE_VALUE

#define ETW_STRING_TYPE_VALUE 2

Definition at line 244 of file evntrace.h.

◆ ETW_UINT16_TYPE_VALUE

#define ETW_UINT16_TYPE_VALUE 6

Definition at line 248 of file evntrace.h.

◆ ETW_UINT32_TYPE_VALUE

#define ETW_UINT32_TYPE_VALUE 8

Definition at line 250 of file evntrace.h.

◆ ETW_UINT64_TYPE_VALUE

#define ETW_UINT64_TYPE_VALUE 10

Definition at line 252 of file evntrace.h.

◆ ETW_VARIANT_TYPE_VALUE

#define ETW_VARIANT_TYPE_VALUE 116

Definition at line 274 of file evntrace.h.

◆ ETW_WMITIME_TYPE_VALUE

#define ETW_WMITIME_TYPE_VALUE 118

Definition at line 276 of file evntrace.h.

◆ EVENT_CONTROL_CODE_CAPTURE_STATE

#define EVENT_CONTROL_CODE_CAPTURE_STATE 2

Definition at line 285 of file evntrace.h.

◆ EVENT_CONTROL_CODE_DISABLE_PROVIDER

#define EVENT_CONTROL_CODE_DISABLE_PROVIDER 0

Definition at line 283 of file evntrace.h.

◆ EVENT_CONTROL_CODE_ENABLE_PROVIDER

#define EVENT_CONTROL_CODE_ENABLE_PROVIDER 1

Definition at line 284 of file evntrace.h.

◆ EVENT_LOGGER_NAME

#define EVENT_LOGGER_NAME EVENT_LOGGER_NAMEA

Definition at line 688 of file evntrace.h.

◆ EVENT_LOGGER_NAMEA

#define EVENT_LOGGER_NAMEA "EventLog"

Definition at line 33 of file evntrace.h.

◆ EVENT_LOGGER_NAMEW

#define EVENT_LOGGER_NAMEW L"EventLog"

Definition at line 28 of file evntrace.h.

◆ EVENT_TRACE_ADD_HEADER_MODE

#define EVENT_TRACE_ADD_HEADER_MODE 0x00001000

Definition at line 193 of file evntrace.h.

◆ EVENT_TRACE_BUFFERING_MODE

#define EVENT_TRACE_BUFFERING_MODE 0x00000400

Definition at line 191 of file evntrace.h.

◆ EVENT_TRACE_CONTROL_FLUSH

#define EVENT_TRACE_CONTROL_FLUSH 3

Definition at line 217 of file evntrace.h.

◆ EVENT_TRACE_CONTROL_QUERY

#define EVENT_TRACE_CONTROL_QUERY 0

Definition at line 213 of file evntrace.h.

◆ EVENT_TRACE_CONTROL_STOP

#define EVENT_TRACE_CONTROL_STOP 1

Definition at line 214 of file evntrace.h.

◆ EVENT_TRACE_CONTROL_UPDATE

#define EVENT_TRACE_CONTROL_UPDATE 2

Definition at line 215 of file evntrace.h.

◆ EVENT_TRACE_DELAY_OPEN_FILE_MODE

#define EVENT_TRACE_DELAY_OPEN_FILE_MODE 0x00000200

Definition at line 190 of file evntrace.h.

◆ EVENT_TRACE_FILE_MODE_APPEND

#define EVENT_TRACE_FILE_MODE_APPEND 0x00000004

Definition at line 187 of file evntrace.h.

◆ EVENT_TRACE_FILE_MODE_CIRCULAR

#define EVENT_TRACE_FILE_MODE_CIRCULAR 0x00000002

Definition at line 186 of file evntrace.h.

◆ EVENT_TRACE_FILE_MODE_NEWFILE

#define EVENT_TRACE_FILE_MODE_NEWFILE 0x00000008

Definition at line 202 of file evntrace.h.

◆ EVENT_TRACE_FILE_MODE_NONE

#define EVENT_TRACE_FILE_MODE_NONE 0x00000000

Definition at line 184 of file evntrace.h.

◆ EVENT_TRACE_FILE_MODE_PREALLOCATE

#define EVENT_TRACE_FILE_MODE_PREALLOCATE 0x00000020

Definition at line 203 of file evntrace.h.

◆ EVENT_TRACE_FILE_MODE_SEQUENTIAL

#define EVENT_TRACE_FILE_MODE_SEQUENTIAL 0x00000001

Definition at line 185 of file evntrace.h.

◆ EVENT_TRACE_FLAG_ALPC

#define EVENT_TRACE_FLAG_ALPC 0x00100000

Definition at line 169 of file evntrace.h.

◆ EVENT_TRACE_FLAG_CSWITCH

#define EVENT_TRACE_FLAG_CSWITCH 0x00000010

Definition at line 162 of file evntrace.h.

◆ EVENT_TRACE_FLAG_DBGPRINT

#define EVENT_TRACE_FLAG_DBGPRINT 0x00040000

Definition at line 159 of file evntrace.h.

◆ EVENT_TRACE_FLAG_DISK_FILE_IO

#define EVENT_TRACE_FLAG_DISK_FILE_IO 0x00000200

Definition at line 151 of file evntrace.h.

◆ EVENT_TRACE_FLAG_DISK_IO

#define EVENT_TRACE_FLAG_DISK_IO 0x00000100

Definition at line 150 of file evntrace.h.

◆ EVENT_TRACE_FLAG_DISK_IO_INIT

#define EVENT_TRACE_FLAG_DISK_IO_INIT 0x00000400

Definition at line 167 of file evntrace.h.

◆ EVENT_TRACE_FLAG_DISPATCHER

#define EVENT_TRACE_FLAG_DISPATCHER 0x00000800

Definition at line 177 of file evntrace.h.

◆ EVENT_TRACE_FLAG_DPC

#define EVENT_TRACE_FLAG_DPC 0x00000020

Definition at line 163 of file evntrace.h.

◆ EVENT_TRACE_FLAG_DRIVER

#define EVENT_TRACE_FLAG_DRIVER 0x00800000

Definition at line 172 of file evntrace.h.

◆ EVENT_TRACE_FLAG_ENABLE_RESERVE

#define EVENT_TRACE_FLAG_ENABLE_RESERVE 0x20000000

Definition at line 182 of file evntrace.h.

◆ EVENT_TRACE_FLAG_EXTENSION

#define EVENT_TRACE_FLAG_EXTENSION 0x80000000

Definition at line 180 of file evntrace.h.

◆ EVENT_TRACE_FLAG_FILE_IO

#define EVENT_TRACE_FLAG_FILE_IO 0x02000000

Definition at line 174 of file evntrace.h.

◆ EVENT_TRACE_FLAG_FILE_IO_INIT

#define EVENT_TRACE_FLAG_FILE_IO_INIT 0x04000000

Definition at line 175 of file evntrace.h.

◆ EVENT_TRACE_FLAG_FORWARD_WMI

#define EVENT_TRACE_FLAG_FORWARD_WMI 0x40000000

Definition at line 181 of file evntrace.h.

◆ EVENT_TRACE_FLAG_IMAGE_LOAD

#define EVENT_TRACE_FLAG_IMAGE_LOAD 0x00000004

Definition at line 148 of file evntrace.h.

◆ EVENT_TRACE_FLAG_INTERRUPT

#define EVENT_TRACE_FLAG_INTERRUPT 0x00000040

Definition at line 164 of file evntrace.h.

◆ EVENT_TRACE_FLAG_MEMORY_HARD_FAULTS

#define EVENT_TRACE_FLAG_MEMORY_HARD_FAULTS 0x00002000

Definition at line 154 of file evntrace.h.

◆ EVENT_TRACE_FLAG_MEMORY_PAGE_FAULTS

#define EVENT_TRACE_FLAG_MEMORY_PAGE_FAULTS 0x00001000

Definition at line 153 of file evntrace.h.

◆ EVENT_TRACE_FLAG_NETWORK_TCPIP

#define EVENT_TRACE_FLAG_NETWORK_TCPIP 0x00010000

Definition at line 156 of file evntrace.h.

◆ EVENT_TRACE_FLAG_PROCESS

#define EVENT_TRACE_FLAG_PROCESS 0x00000001

Definition at line 146 of file evntrace.h.

◆ EVENT_TRACE_FLAG_PROCESS_COUNTERS

#define EVENT_TRACE_FLAG_PROCESS_COUNTERS 0x00000008

Definition at line 161 of file evntrace.h.

◆ EVENT_TRACE_FLAG_PROFILE

#define EVENT_TRACE_FLAG_PROFILE 0x01000000

Definition at line 173 of file evntrace.h.

◆ EVENT_TRACE_FLAG_REGISTRY

#define EVENT_TRACE_FLAG_REGISTRY 0x00020000

Definition at line 158 of file evntrace.h.

◆ EVENT_TRACE_FLAG_SPLIT_IO

#define EVENT_TRACE_FLAG_SPLIT_IO 0x00200000

Definition at line 170 of file evntrace.h.

◆ EVENT_TRACE_FLAG_SYSTEMCALL

#define EVENT_TRACE_FLAG_SYSTEMCALL 0x00000080

Definition at line 165 of file evntrace.h.

◆ EVENT_TRACE_FLAG_THREAD

#define EVENT_TRACE_FLAG_THREAD 0x00000002

Definition at line 147 of file evntrace.h.

◆ EVENT_TRACE_FLAG_VIRTUAL_ALLOC

#define EVENT_TRACE_FLAG_VIRTUAL_ALLOC 0x00004000

Definition at line 178 of file evntrace.h.

◆ EVENT_TRACE_LOGFILE

#define EVENT_TRACE_LOGFILE EVENT_TRACE_LOGFILEA

Definition at line 684 of file evntrace.h.

◆ EVENT_TRACE_MODE_RESERVED

#define EVENT_TRACE_MODE_RESERVED 0x00100000

Definition at line 209 of file evntrace.h.

◆ EVENT_TRACE_NO_PER_PROCESSOR_BUFFERING

#define EVENT_TRACE_NO_PER_PROCESSOR_BUFFERING 0x10000000

Definition at line 211 of file evntrace.h.

◆ EVENT_TRACE_NONSTOPPABLE_MODE

#define EVENT_TRACE_NONSTOPPABLE_MODE 0x00000040

Definition at line 205 of file evntrace.h.

◆ EVENT_TRACE_PRIVATE_IN_PROC

#define EVENT_TRACE_PRIVATE_IN_PROC 0x00020000

Definition at line 208 of file evntrace.h.

◆ EVENT_TRACE_PRIVATE_LOGGER_MODE

#define EVENT_TRACE_PRIVATE_LOGGER_MODE 0x00000800

Definition at line 192 of file evntrace.h.

◆ EVENT_TRACE_REAL_TIME_MODE

#define EVENT_TRACE_REAL_TIME_MODE 0x00000100

Definition at line 189 of file evntrace.h.

◆ EVENT_TRACE_RELOG_MODE

#define EVENT_TRACE_RELOG_MODE 0x00010000

Definition at line 198 of file evntrace.h.

◆ EVENT_TRACE_SECURE_MODE

#define EVENT_TRACE_SECURE_MODE 0x00000080

Definition at line 206 of file evntrace.h.

◆ EVENT_TRACE_TYPE_ACCEPT

#define EVENT_TRACE_TYPE_ACCEPT 0x0F

Definition at line 93 of file evntrace.h.

◆ EVENT_TRACE_TYPE_ACKDUP

#define EVENT_TRACE_TYPE_ACKDUP 0x16

Definition at line 100 of file evntrace.h.

◆ EVENT_TRACE_TYPE_ACKFULL

#define EVENT_TRACE_TYPE_ACKFULL 0x14

Definition at line 98 of file evntrace.h.

◆ EVENT_TRACE_TYPE_ACKPART

#define EVENT_TRACE_TYPE_ACKPART 0x15

Definition at line 99 of file evntrace.h.

◆ EVENT_TRACE_TYPE_CHECKPOINT

#define EVENT_TRACE_TYPE_CHECKPOINT 0x08

Definition at line 55 of file evntrace.h.

◆ EVENT_TRACE_TYPE_CONFIG

#define EVENT_TRACE_TYPE_CONFIG 0x0B

Definition at line 103 of file evntrace.h.

◆ EVENT_TRACE_TYPE_CONFIG_CPU

#define EVENT_TRACE_TYPE_CONFIG_CPU 0x0A

Definition at line 132 of file evntrace.h.

◆ EVENT_TRACE_TYPE_CONFIG_IDECHANNEL

#define EVENT_TRACE_TYPE_CONFIG_IDECHANNEL 0x17

Definition at line 143 of file evntrace.h.

◆ EVENT_TRACE_TYPE_CONFIG_IRQ

#define EVENT_TRACE_TYPE_CONFIG_IRQ 0x15

Definition at line 141 of file evntrace.h.

◆ EVENT_TRACE_TYPE_CONFIG_LOGICALDISK

#define EVENT_TRACE_TYPE_CONFIG_LOGICALDISK 0x0C

Definition at line 134 of file evntrace.h.

◆ EVENT_TRACE_TYPE_CONFIG_NETINFO

#define EVENT_TRACE_TYPE_CONFIG_NETINFO 0x11

Definition at line 139 of file evntrace.h.

◆ EVENT_TRACE_TYPE_CONFIG_NIC

#define EVENT_TRACE_TYPE_CONFIG_NIC 0x0D

Definition at line 135 of file evntrace.h.

◆ EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK

#define EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK 0x0B

Definition at line 133 of file evntrace.h.

◆ EVENT_TRACE_TYPE_CONFIG_PLATFORM

#define EVENT_TRACE_TYPE_CONFIG_PLATFORM 0x19

Definition at line 144 of file evntrace.h.

◆ EVENT_TRACE_TYPE_CONFIG_PNP

#define EVENT_TRACE_TYPE_CONFIG_PNP 0x16

Definition at line 142 of file evntrace.h.

◆ EVENT_TRACE_TYPE_CONFIG_POWER

#define EVENT_TRACE_TYPE_CONFIG_POWER 0x10

Definition at line 138 of file evntrace.h.

◆ EVENT_TRACE_TYPE_CONFIG_SERVICES

#define EVENT_TRACE_TYPE_CONFIG_SERVICES 0x0F

Definition at line 137 of file evntrace.h.

◆ EVENT_TRACE_TYPE_CONFIG_VIDEO

#define EVENT_TRACE_TYPE_CONFIG_VIDEO 0x0E

Definition at line 136 of file evntrace.h.

◆ EVENT_TRACE_TYPE_CONNECT

#define EVENT_TRACE_TYPE_CONNECT 0x0C

Definition at line 90 of file evntrace.h.

◆ EVENT_TRACE_TYPE_CONNFAIL

#define EVENT_TRACE_TYPE_CONNFAIL 0x11

Definition at line 95 of file evntrace.h.

◆ EVENT_TRACE_TYPE_COPY_ARP

#define EVENT_TRACE_TYPE_COPY_ARP 0x13

Definition at line 97 of file evntrace.h.

◆ EVENT_TRACE_TYPE_COPY_TCP

#define EVENT_TRACE_TYPE_COPY_TCP 0x12

Definition at line 96 of file evntrace.h.

◆ EVENT_TRACE_TYPE_DC_END

#define EVENT_TRACE_TYPE_DC_END 0x04

Definition at line 50 of file evntrace.h.

◆ EVENT_TRACE_TYPE_DC_START

#define EVENT_TRACE_TYPE_DC_START 0x03

Definition at line 49 of file evntrace.h.

◆ EVENT_TRACE_TYPE_DEQUEUE

#define EVENT_TRACE_TYPE_DEQUEUE 0x07

Definition at line 53 of file evntrace.h.

◆ EVENT_TRACE_TYPE_DISCONNECT

#define EVENT_TRACE_TYPE_DISCONNECT 0x0D

Definition at line 91 of file evntrace.h.

◆ EVENT_TRACE_TYPE_END

#define EVENT_TRACE_TYPE_END 0x02

Definition at line 47 of file evntrace.h.

◆ EVENT_TRACE_TYPE_EXTENSION

#define EVENT_TRACE_TYPE_EXTENSION 0x05

Definition at line 51 of file evntrace.h.

◆ EVENT_TRACE_TYPE_GUIDMAP

#define EVENT_TRACE_TYPE_GUIDMAP 0x0A

Definition at line 102 of file evntrace.h.

◆ EVENT_TRACE_TYPE_INFO

#define EVENT_TRACE_TYPE_INFO 0x00

Definition at line 45 of file evntrace.h.

◆ EVENT_TRACE_TYPE_IO_FLUSH

#define EVENT_TRACE_TYPE_IO_FLUSH 0x0E

Definition at line 78 of file evntrace.h.

◆ EVENT_TRACE_TYPE_IO_FLUSH_INIT

#define EVENT_TRACE_TYPE_IO_FLUSH_INIT 0x0F

Definition at line 79 of file evntrace.h.

◆ EVENT_TRACE_TYPE_IO_READ

#define EVENT_TRACE_TYPE_IO_READ 0x0A

Definition at line 74 of file evntrace.h.

◆ EVENT_TRACE_TYPE_IO_READ_INIT

#define EVENT_TRACE_TYPE_IO_READ_INIT 0x0C

Definition at line 76 of file evntrace.h.

◆ EVENT_TRACE_TYPE_IO_WRITE

#define EVENT_TRACE_TYPE_IO_WRITE 0x0B

Definition at line 75 of file evntrace.h.

◆ EVENT_TRACE_TYPE_IO_WRITE_INIT

#define EVENT_TRACE_TYPE_IO_WRITE_INIT 0x0D

Definition at line 77 of file evntrace.h.

◆ EVENT_TRACE_TYPE_LOAD

#define EVENT_TRACE_TYPE_LOAD 0x0A

Definition at line 72 of file evntrace.h.

◆ EVENT_TRACE_TYPE_MM_AV

#define EVENT_TRACE_TYPE_MM_AV 0x0F

Definition at line 86 of file evntrace.h.

◆ EVENT_TRACE_TYPE_MM_COW

#define EVENT_TRACE_TYPE_MM_COW 0x0C

Definition at line 83 of file evntrace.h.

◆ EVENT_TRACE_TYPE_MM_DZF

#define EVENT_TRACE_TYPE_MM_DZF 0x0B

Definition at line 82 of file evntrace.h.

◆ EVENT_TRACE_TYPE_MM_GPF

#define EVENT_TRACE_TYPE_MM_GPF 0x0D

Definition at line 84 of file evntrace.h.

◆ EVENT_TRACE_TYPE_MM_HPF

#define EVENT_TRACE_TYPE_MM_HPF 0x0E

Definition at line 85 of file evntrace.h.

◆ EVENT_TRACE_TYPE_MM_TF

#define EVENT_TRACE_TYPE_MM_TF 0x0A

Definition at line 81 of file evntrace.h.

◆ EVENT_TRACE_TYPE_RECEIVE

#define EVENT_TRACE_TYPE_RECEIVE 0x0B

Definition at line 89 of file evntrace.h.

◆ EVENT_TRACE_TYPE_RECONNECT

#define EVENT_TRACE_TYPE_RECONNECT 0x10

Definition at line 94 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGCLOSE

#define EVENT_TRACE_TYPE_REGCLOSE 0x1B

Definition at line 124 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGCOMMIT

#define EVENT_TRACE_TYPE_REGCOMMIT 0x1E

Definition at line 127 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGCREATE

#define EVENT_TRACE_TYPE_REGCREATE 0x0A

Definition at line 107 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGDELETE

#define EVENT_TRACE_TYPE_REGDELETE 0x0C

Definition at line 109 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGDELETEVALUE

#define EVENT_TRACE_TYPE_REGDELETEVALUE 0x0F

Definition at line 112 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGENUMERATEKEY

#define EVENT_TRACE_TYPE_REGENUMERATEKEY 0x11

Definition at line 114 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGENUMERATEVALUEKEY

#define EVENT_TRACE_TYPE_REGENUMERATEVALUEKEY 0x12

Definition at line 115 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGFLUSH

#define EVENT_TRACE_TYPE_REGFLUSH 0x15

Definition at line 118 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGKCBCREATE

#define EVENT_TRACE_TYPE_REGKCBCREATE 0x16

Definition at line 119 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGKCBDELETE

#define EVENT_TRACE_TYPE_REGKCBDELETE 0x17

Definition at line 120 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGKCBRUNDOWNBEGIN

#define EVENT_TRACE_TYPE_REGKCBRUNDOWNBEGIN 0x18

Definition at line 121 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGKCBRUNDOWNEND

#define EVENT_TRACE_TYPE_REGKCBRUNDOWNEND 0x19

Definition at line 122 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGMOUNTHIVE

#define EVENT_TRACE_TYPE_REGMOUNTHIVE 0x21

Definition at line 130 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGOPEN

#define EVENT_TRACE_TYPE_REGOPEN 0x0B

Definition at line 108 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGPREPARE

#define EVENT_TRACE_TYPE_REGPREPARE 0x1F

Definition at line 128 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGQUERY

#define EVENT_TRACE_TYPE_REGQUERY 0x0D

Definition at line 110 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGQUERYMULTIPLEVALUE

#define EVENT_TRACE_TYPE_REGQUERYMULTIPLEVALUE 0x13

Definition at line 116 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGQUERYSECURITY

#define EVENT_TRACE_TYPE_REGQUERYSECURITY 0x1D

Definition at line 126 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGQUERYVALUE

#define EVENT_TRACE_TYPE_REGQUERYVALUE 0x10

Definition at line 113 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGROLLBACK

#define EVENT_TRACE_TYPE_REGROLLBACK 0x20

Definition at line 129 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGSETINFORMATION

#define EVENT_TRACE_TYPE_REGSETINFORMATION 0x14

Definition at line 117 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGSETSECURITY

#define EVENT_TRACE_TYPE_REGSETSECURITY 0x1C

Definition at line 125 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGSETVALUE

#define EVENT_TRACE_TYPE_REGSETVALUE 0x0E

Definition at line 111 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REGVIRTUALIZE

#define EVENT_TRACE_TYPE_REGVIRTUALIZE 0x1A

Definition at line 123 of file evntrace.h.

◆ EVENT_TRACE_TYPE_REPLY

#define EVENT_TRACE_TYPE_REPLY 0x06

Definition at line 52 of file evntrace.h.

◆ EVENT_TRACE_TYPE_RESUME

#define EVENT_TRACE_TYPE_RESUME 0x07

Definition at line 54 of file evntrace.h.

◆ EVENT_TRACE_TYPE_RETRANSMIT

#define EVENT_TRACE_TYPE_RETRANSMIT 0x0E

Definition at line 92 of file evntrace.h.

◆ EVENT_TRACE_TYPE_SECURITY

#define EVENT_TRACE_TYPE_SECURITY 0x0D

Definition at line 105 of file evntrace.h.

◆ EVENT_TRACE_TYPE_SEND

#define EVENT_TRACE_TYPE_SEND 0x0A

Definition at line 88 of file evntrace.h.

◆ EVENT_TRACE_TYPE_SIDINFO

#define EVENT_TRACE_TYPE_SIDINFO 0x0C

Definition at line 104 of file evntrace.h.

◆ EVENT_TRACE_TYPE_START

#define EVENT_TRACE_TYPE_START 0x01

Definition at line 46 of file evntrace.h.

◆ EVENT_TRACE_TYPE_STOP

#define EVENT_TRACE_TYPE_STOP 0x02

Definition at line 48 of file evntrace.h.

◆ EVENT_TRACE_TYPE_SUSPEND

#define EVENT_TRACE_TYPE_SUSPEND 0x08

Definition at line 56 of file evntrace.h.

◆ EVENT_TRACE_TYPE_WINEVT_RECEIVE

#define EVENT_TRACE_TYPE_WINEVT_RECEIVE 0XF0

Definition at line 58 of file evntrace.h.

◆ EVENT_TRACE_TYPE_WINEVT_SEND

#define EVENT_TRACE_TYPE_WINEVT_SEND 0x09

Definition at line 57 of file evntrace.h.

◆ EVENT_TRACE_USE_GLOBAL_SEQUENCE

#define EVENT_TRACE_USE_GLOBAL_SEQUENCE 0x00004000

Definition at line 195 of file evntrace.h.

◆ EVENT_TRACE_USE_KBYTES_FOR_SIZE

#define EVENT_TRACE_USE_KBYTES_FOR_SIZE 0x00002000

Definition at line 207 of file evntrace.h.

◆ EVENT_TRACE_USE_LOCAL_SEQUENCE

#define EVENT_TRACE_USE_LOCAL_SEQUENCE 0x00008000

Definition at line 196 of file evntrace.h.

◆ EVENT_TRACE_USE_NOCPUTIME

#define EVENT_TRACE_USE_NOCPUTIME 0x0002

Definition at line 234 of file evntrace.h.

◆ EVENT_TRACE_USE_PAGED_MEMORY

#define EVENT_TRACE_USE_PAGED_MEMORY 0x01000000

Definition at line 200 of file evntrace.h.

◆ EVENT_TRACE_USE_PROCTIME

#define EVENT_TRACE_USE_PROCTIME 0x0001

Definition at line 233 of file evntrace.h.

◆ FlushTrace

#define FlushTrace FlushTraceA

Definition at line 764 of file evntrace.h.

◆ GLOBAL_LOGGER_NAME

#define GLOBAL_LOGGER_NAME GLOBAL_LOGGER_NAMEA

Definition at line 687 of file evntrace.h.

◆ GLOBAL_LOGGER_NAMEA

#define GLOBAL_LOGGER_NAMEA "GlobalLogger"

Definition at line 32 of file evntrace.h.

◆ GLOBAL_LOGGER_NAMEW

#define GLOBAL_LOGGER_NAMEW L"GlobalLogger"

Definition at line 27 of file evntrace.h.

◆ INVALID_PROCESSTRACE_HANDLE

#define INVALID_PROCESSTRACE_HANDLE ((TRACEHANDLE)(ULONG_PTR)INVALID_HANDLE_VALUE)

Definition at line 714 of file evntrace.h.

◆ KERNEL_LOGGER_NAME

#define KERNEL_LOGGER_NAME KERNEL_LOGGER_NAMEA

Definition at line 686 of file evntrace.h.

◆ KERNEL_LOGGER_NAMEA

#define KERNEL_LOGGER_NAMEA "NT Kernel Logger"

Definition at line 31 of file evntrace.h.

◆ KERNEL_LOGGER_NAMEW

#define KERNEL_LOGGER_NAMEW L"NT Kernel Logger"

Definition at line 26 of file evntrace.h.

◆ MAX_MOF_FIELDS

#define MAX_MOF_FIELDS 16

Definition at line 36 of file evntrace.h.

◆ OpenTrace

#define OpenTrace ( void ) OpenTraceA

Definition at line 768 of file evntrace.h.

◆ PEVENT_TRACE_BUFFER_CALLBACK

#define PEVENT_TRACE_BUFFER_CALLBACK PEVENT_TRACE_BUFFER_CALLBACKA

Definition at line 683 of file evntrace.h.

◆ PEVENT_TRACE_HEADER_DEFINED

#define PEVENT_TRACE_HEADER_DEFINED

Definition at line 330 of file evntrace.h.

◆ PEVENT_TRACE_LOGFILE

#define PEVENT_TRACE_LOGFILE PEVENT_TRACE_LOGFILEA

Definition at line 685 of file evntrace.h.

◆ QueryAllTraces

#define QueryAllTraces QueryAllTracesA

Definition at line 767 of file evntrace.h.

◆ QueryTrace

#define QueryTrace QueryTraceA

Definition at line 758 of file evntrace.h.

◆ RegisterTraceGuids

#define RegisterTraceGuids RegisterTraceGuidsA

Definition at line 745 of file evntrace.h.

◆ StartTrace

#define StartTrace StartTraceA

Definition at line 746 of file evntrace.h.

◆ StopTrace

#define StopTrace StopTraceA

Definition at line 757 of file evntrace.h.

◆ SYSTEM_EVENT_TYPE

#define SYSTEM_EVENT_TYPE 1

Definition at line 43 of file evntrace.h.

◆ TRACE_HEADER_FLAG_LOG_WNODE

#define TRACE_HEADER_FLAG_LOG_WNODE 0x00040000

Definition at line 238 of file evntrace.h.

◆ TRACE_HEADER_FLAG_TRACED_GUID

#define TRACE_HEADER_FLAG_TRACED_GUID 0x00020000

Definition at line 237 of file evntrace.h.

◆ TRACE_HEADER_FLAG_USE_GUID_PTR

#define TRACE_HEADER_FLAG_USE_GUID_PTR 0x00080000

Definition at line 239 of file evntrace.h.

◆ TRACE_HEADER_FLAG_USE_MOF_PTR

#define TRACE_HEADER_FLAG_USE_MOF_PTR 0x00100000

Definition at line 240 of file evntrace.h.

◆ TRACE_HEADER_FLAG_USE_TIMESTAMP

#define TRACE_HEADER_FLAG_USE_TIMESTAMP 0x00000200

Definition at line 236 of file evntrace.h.

◆ TRACE_LEVEL_CRITICAL

#define TRACE_LEVEL_CRITICAL 1

Definition at line 61 of file evntrace.h.

◆ TRACE_LEVEL_ERROR

#define TRACE_LEVEL_ERROR 2

Definition at line 63 of file evntrace.h.

◆ TRACE_LEVEL_FATAL

#define TRACE_LEVEL_FATAL 1

Definition at line 62 of file evntrace.h.

◆ TRACE_LEVEL_INFORMATION

#define TRACE_LEVEL_INFORMATION 4

Definition at line 65 of file evntrace.h.

◆ TRACE_LEVEL_NONE

#define TRACE_LEVEL_NONE 0

Definition at line 60 of file evntrace.h.

◆ TRACE_LEVEL_RESERVED6

#define TRACE_LEVEL_RESERVED6 6

Definition at line 67 of file evntrace.h.

◆ TRACE_LEVEL_RESERVED7

#define TRACE_LEVEL_RESERVED7 7

Definition at line 68 of file evntrace.h.

◆ TRACE_LEVEL_RESERVED8

#define TRACE_LEVEL_RESERVED8 8

Definition at line 69 of file evntrace.h.

◆ TRACE_LEVEL_RESERVED9

#define TRACE_LEVEL_RESERVED9 9

Definition at line 70 of file evntrace.h.

◆ TRACE_LEVEL_VERBOSE

#define TRACE_LEVEL_VERBOSE 5

Definition at line 66 of file evntrace.h.

◆ TRACE_LEVEL_WARNING

#define TRACE_LEVEL_WARNING 3

Definition at line 64 of file evntrace.h.

◆ TRACE_MESSAGE_COMPONENTID

#define TRACE_MESSAGE_COMPONENTID 4

Definition at line 221 of file evntrace.h.

◆ TRACE_MESSAGE_FLAG_MASK

#define TRACE_MESSAGE_FLAG_MASK 0xFFFF

Definition at line 229 of file evntrace.h.

◆ TRACE_MESSAGE_GUID

#define TRACE_MESSAGE_GUID 2

Definition at line 220 of file evntrace.h.

◆ TRACE_MESSAGE_MAXIMUM_SIZE

#define TRACE_MESSAGE_MAXIMUM_SIZE 8*1024

Definition at line 231 of file evntrace.h.

◆ TRACE_MESSAGE_PERFORMANCE_TIMESTAMP

#define TRACE_MESSAGE_PERFORMANCE_TIMESTAMP 16

Definition at line 223 of file evntrace.h.

◆ TRACE_MESSAGE_POINTER32

#define TRACE_MESSAGE_POINTER32 0x0040

Definition at line 226 of file evntrace.h.

◆ TRACE_MESSAGE_POINTER64

#define TRACE_MESSAGE_POINTER64 0x0080

Definition at line 227 of file evntrace.h.

◆ TRACE_MESSAGE_SEQUENCE

#define TRACE_MESSAGE_SEQUENCE 1

Definition at line 219 of file evntrace.h.

◆ TRACE_MESSAGE_SYSTEMINFO

#define TRACE_MESSAGE_SYSTEMINFO 32

Definition at line 224 of file evntrace.h.

◆ TRACE_MESSAGE_TIMESTAMP

#define TRACE_MESSAGE_TIMESTAMP 8

Definition at line 222 of file evntrace.h.

◆ TRACE_PROVIDER_FLAG_LEGACY

#define TRACE_PROVIDER_FLAG_LEGACY 0x00000001

Definition at line 280 of file evntrace.h.

◆ TRACE_PROVIDER_FLAG_PRE_ENABLE

#define TRACE_PROVIDER_FLAG_PRE_ENABLE 0x00000002

Definition at line 281 of file evntrace.h.

◆ UpdateTrace

#define UpdateTrace UpdateTraceA

Definition at line 759 of file evntrace.h.

◆ WMIAPI

#define WMIAPI DECLSPEC_IMPORT __stdcall

Definition at line 10 of file evntrace.h.

Typedef Documentation

◆ CLASSIC_EVENT_ID

typedef struct _CLASSIC_EVENT_ID CLASSIC_EVENT_ID

◆ ENABLE_TRACE_PARAMETERS

typedef struct _ENABLE_TRACE_PARAMETERS ENABLE_TRACE_PARAMETERS

◆ ETW_BUFFER_CONTEXT

typedef struct _ETW_BUFFER_CONTEXT ETW_BUFFER_CONTEXT

◆ EVENT_FILTER_DESCRIPTOR

typedef struct _EVENT_FILTER_DESCRIPTOR EVENT_FILTER_DESCRIPTOR

Definition at line 600 of file evntrace.h.

◆ EVENT_INSTANCE_HEADER

typedef struct _EVENT_INSTANCE_HEADER EVENT_INSTANCE_HEADER

◆ EVENT_INSTANCE_INFO

typedef struct _EVENT_INSTANCE_INFO EVENT_INSTANCE_INFO

◆ EVENT_RECORD

typedef struct _EVENT_RECORD EVENT_RECORD

Definition at line 596 of file evntrace.h.

◆ EVENT_TRACE

typedef struct _EVENT_TRACE EVENT_TRACE

◆ EVENT_TRACE_HEADER

typedef struct _EVENT_TRACE_HEADER EVENT_TRACE_HEADER

◆ EVENT_TRACE_LOGFILEA

typedef struct _EVENT_TRACE_LOGFILEA EVENT_TRACE_LOGFILEA

Definition at line 598 of file evntrace.h.

◆ EVENT_TRACE_LOGFILEW

typedef struct _EVENT_TRACE_LOGFILEW EVENT_TRACE_LOGFILEW

Definition at line 597 of file evntrace.h.

◆ EVENT_TRACE_PROPERTIES

typedef struct _EVENT_TRACE_PROPERTIES EVENT_TRACE_PROPERTIES

◆ MOF_FIELD

typedef struct _MOF_FIELD MOF_FIELD

◆ PCLASSIC_EVENT_ID

typedef struct _CLASSIC_EVENT_ID * PCLASSIC_EVENT_ID

◆ PENABLE_TRACE_PARAMETERS

typedef struct _ENABLE_TRACE_PARAMETERS * PENABLE_TRACE_PARAMETERS

◆ PETW_BUFFER_CONTEXT

typedef struct _ETW_BUFFER_CONTEXT * PETW_BUFFER_CONTEXT

◆ PEVENT_CALLBACK

typedef VOID(WINAPI * PEVENT_CALLBACK) (PEVENT_TRACE pEvent)

Definition at line 611 of file evntrace.h.

◆ PEVENT_FILTER_DESCRIPTOR

typedef struct _EVENT_FILTER_DESCRIPTOR * PEVENT_FILTER_DESCRIPTOR

Definition at line 600 of file evntrace.h.

◆ PEVENT_INSTANCE_HEADER

typedef struct _EVENT_INSTANCE_HEADER * PEVENT_INSTANCE_HEADER

◆ PEVENT_INSTANCE_INFO

typedef struct _EVENT_INSTANCE_INFO * PEVENT_INSTANCE_INFO

◆ PEVENT_RECORD

typedef struct _EVENT_RECORD * PEVENT_RECORD

Definition at line 596 of file evntrace.h.

◆ PEVENT_RECORD_CALLBACK

typedef VOID(WINAPI * PEVENT_RECORD_CALLBACK) (PEVENT_RECORD EventRecord)

Definition at line 615 of file evntrace.h.

◆ PEVENT_TRACE

typedef struct _EVENT_TRACE * PEVENT_TRACE

◆ PEVENT_TRACE_BUFFER_CALLBACKA

typedef ULONG(WINAPI * PEVENT_TRACE_BUFFER_CALLBACKA) (PEVENT_TRACE_LOGFILEA Logfile)

Definition at line 607 of file evntrace.h.

◆ PEVENT_TRACE_BUFFER_CALLBACKW

typedef ULONG(WINAPI * PEVENT_TRACE_BUFFER_CALLBACKW) (PEVENT_TRACE_LOGFILEW Logfile)

Definition at line 603 of file evntrace.h.

◆ PEVENT_TRACE_HEADER

typedef struct _EVENT_TRACE_HEADER* PEVENT_TRACE_HEADER

Definition at line 331 of file evntrace.h.

◆ PEVENT_TRACE_LOGFILEA

typedef struct _EVENT_TRACE_LOGFILEA * PEVENT_TRACE_LOGFILEA

Definition at line 598 of file evntrace.h.

◆ PEVENT_TRACE_LOGFILEW

typedef struct _EVENT_TRACE_LOGFILEW * PEVENT_TRACE_LOGFILEW

Definition at line 597 of file evntrace.h.

◆ PEVENT_TRACE_PROPERTIES

typedef struct _EVENT_TRACE_PROPERTIES * PEVENT_TRACE_PROPERTIES

◆ PMOF_FIELD

typedef struct _MOF_FIELD * PMOF_FIELD

◆ PTRACE_ENABLE_INFO

typedef struct _TRACE_ENABLE_INFO * PTRACE_ENABLE_INFO

◆ PTRACE_GUID_INFO

typedef struct _TRACE_GUID_INFO * PTRACE_GUID_INFO

◆ PTRACE_GUID_PROPERTIES

typedef struct _TRACE_GUID_PROPERTIES * PTRACE_GUID_PROPERTIES

◆ PTRACE_GUID_REGISTRATION

typedef struct _TRACE_GUID_REGISTRATION * PTRACE_GUID_REGISTRATION

◆ PTRACE_LOGFILE_HEADER

typedef struct _TRACE_LOGFILE_HEADER * PTRACE_LOGFILE_HEADER

◆ PTRACE_LOGFILE_HEADER32

typedef struct _TRACE_LOGFILE_HEADER32 * PTRACE_LOGFILE_HEADER32

◆ PTRACE_LOGFILE_HEADER64

typedef struct _TRACE_LOGFILE_HEADER64 * PTRACE_LOGFILE_HEADER64

◆ PTRACE_PROVIDER_INSTANCE_INFO

typedef struct _TRACE_PROVIDER_INSTANCE_INFO * PTRACE_PROVIDER_INSTANCE_INFO

◆ PTRACEHANDLE

typedef ULONG64 * PTRACEHANDLE

Definition at line 40 of file evntrace.h.

◆ TRACE_ENABLE_INFO

typedef struct _TRACE_ENABLE_INFO TRACE_ENABLE_INFO

◆ TRACE_GUID_INFO

typedef struct _TRACE_GUID_INFO TRACE_GUID_INFO

◆ TRACE_GUID_PROPERTIES

typedef struct _TRACE_GUID_PROPERTIES TRACE_GUID_PROPERTIES

◆ TRACE_GUID_REGISTRATION

typedef struct _TRACE_GUID_REGISTRATION TRACE_GUID_REGISTRATION

◆ TRACE_INFO_CLASS

typedef enum _TRACE_QUERY_INFO_CLASS TRACE_INFO_CLASS

◆ TRACE_LOGFILE_HEADER

typedef struct _TRACE_LOGFILE_HEADER TRACE_LOGFILE_HEADER

◆ TRACE_LOGFILE_HEADER32

typedef struct _TRACE_LOGFILE_HEADER32 TRACE_LOGFILE_HEADER32

◆ TRACE_LOGFILE_HEADER64

typedef struct _TRACE_LOGFILE_HEADER64 TRACE_LOGFILE_HEADER64

◆ TRACE_PROVIDER_INSTANCE_INFO

typedef struct _TRACE_PROVIDER_INSTANCE_INFO TRACE_PROVIDER_INSTANCE_INFO

◆ TRACE_QUERY_INFO_CLASS

typedef enum _TRACE_QUERY_INFO_CLASS TRACE_QUERY_INFO_CLASS

◆ TRACEHANDLE

typedef ULONG64 TRACEHANDLE

Definition at line 40 of file evntrace.h.

◆ WMIDPREQUEST

typedef ULONG(WINAPI * WMIDPREQUEST) (IN WMIDPREQUESTCODE RequestCode, IN PVOID RequestContext, IN OUT ULONG *BufferSize, IN OUT PVOID Buffer)

Definition at line 619 of file evntrace.h.

Enumeration Type Documentation

◆ _TRACE_QUERY_INFO_CLASS

enum _TRACE_QUERY_INFO_CLASS

Enumerator
TraceGuidQueryList
TraceGuidQueryInfo
TraceGuidQueryProcess
TraceStackTracingInfo
MaxTraceSetInfoClass

Definition at line 692 of file evntrace.h.

                                     {
  TraceGuidQueryList,
  TraceGuidQueryInfo,
  TraceGuidQueryProcess,
  TraceStackTracingInfo,
  MaxTraceSetInfoClass
} TRACE_QUERY_INFO_CLASS, TRACE_INFO_CLASS;

Function Documentation

◆ CloseTrace()

EXTERN_C ULONG WMIAPI CloseTrace ( IN TRACEHANDLE TraceHandle )

◆ ControlTraceA()

EXTERN_C ULONG WMIAPI ControlTraceA	(	IN TRACEHANDLE	TraceHandle,
		IN LPCSTR InstanceName	OPTIONAL,
		IN OUT PEVENT_TRACE_PROPERTIES	Properties,
		IN ULONG	ControlCode
	)

Referenced by test_start_trace().

◆ ControlTraceW()

EXTERN_C ULONG WMIAPI ControlTraceW	(	IN TRACEHANDLE	TraceHandle,
		IN LPCWSTR InstanceName	OPTIONAL,
		IN OUT PEVENT_TRACE_PROPERTIES	Properties,
		IN ULONG	ControlCode
	)

◆ CreateTraceInstanceId()

EXTERN_C ULONG WMIAPI CreateTraceInstanceId	(	IN HANDLE	RegHandle,
		IN OUT PEVENT_INSTANCE_INFO	InstInfo
	)

◆ DEFINE_GUID() [1/4]

DEFINE_GUID	(	DefaultTraceSecurityGuid	,
		0x0811c1af	,
		0x7a07	,
		0x4a06	,
		0x82	,
		0xed	,
		0x86	,
		0x94	,
		0x55	,
		0xcd	,
		0xf7	,
		0x13
	)

◆ DEFINE_GUID() [2/4]

DEFINE_GUID	(	EventTraceConfigGuid	,
		0x01853a65	,
		0x418f	,
		0x4f36	,
		0xae	,
		0xfc	,
		0xdc	,
		0x0f	,
		0x1d	,
		0x2f	,
		0xd2	,
		0x35
	)

◆ DEFINE_GUID() [3/4]

DEFINE_GUID	(	EventTraceGuid	,
		0x68fdd900	,
		0x4a3e	,
		0x11d1	,
		0x84	,
		0xf4	,
		0x00	,
		0x00	,
		0xf8	,
		0x04	,
		0x64	,
		0xe3
	)

◆ DEFINE_GUID() [4/4]

DEFINE_GUID	(	SystemTraceControlGuid	,
		0x9e814aad	,
		0x3204	,
		0x11d2	,
		0x9a	,
		0x82	,
		0x00	,
		0x60	,
		0x08	,
		0xa8	,
		0x69	,
		0x39
	)

◆ EnableTrace()

EXTERN_C ULONG WMIAPI EnableTrace	(	IN ULONG	Enable,
		IN ULONG	EnableFlag,
		IN ULONG	EnableLevel,
		IN LPCGUID	ControlGuid,
		IN TRACEHANDLE	TraceHandle
	)

◆ EnableTraceEx()

EXTERN_C ULONG WMIAPI EnableTraceEx	(	IN LPCGUID	ProviderId,
		IN LPCGUID SourceId	OPTIONAL,
		IN TRACEHANDLE	TraceHandle,
		IN ULONG	IsEnabled,
		IN UCHAR	Level,
		IN ULONGLONG	MatchAnyKeyword,
		IN ULONGLONG	MatchAllKeyword,
		IN ULONG	EnableProperty,
		IN PEVENT_FILTER_DESCRIPTOR EnableFilterDesc	OPTIONAL
	)

◆ EnableTraceEx2()

EXTERN_C ULONG WMIAPI EnableTraceEx2	(	IN TRACEHANDLE	TraceHandle,
		IN LPCGUID	ProviderId,
		IN ULONG	ControlCode,
		IN UCHAR	Level,
		IN ULONGLONG	MatchAnyKeyword,
		IN ULONGLONG	MatchAllKeyword,
		IN ULONG	Timeout,
		IN PENABLE_TRACE_PARAMETERS EnableParameters	OPTIONAL
	)

◆ EnumerateTraceGuids()

EXTERN_C ULONG WMIAPI EnumerateTraceGuids	(	IN OUT PTRACE_GUID_PROPERTIES *	GuidPropertiesArray,
		IN ULONG	PropertyArrayCount,
		OUT PULONG	GuidCount
	)

◆ EnumerateTraceGuidsEx()

EXTERN_C ULONG WMIAPI EnumerateTraceGuidsEx	(	IN TRACE_QUERY_INFO_CLASS	TraceQueryInfoClass,
		IN PVOID InBuffer	OPTIONAL,
		IN ULONG	InBufferSize,
		OUT PVOID OutBuffer	OPTIONAL,
		IN ULONG	OutBufferSize,
		OUT PULONG	ReturnLength
	)

◆ FlushTraceA()

EXTERN_C ULONG WMIAPI FlushTraceA	(	IN TRACEHANDLE	TraceHandle,
		IN LPCSTR InstanceName	OPTIONAL,
		IN OUT PEVENT_TRACE_PROPERTIES	Properties
	)

◆ FlushTraceW()

EXTERN_C ULONG WMIAPI FlushTraceW	(	IN TRACEHANDLE	TraceHandle,
		IN LPCWSTR InstanceName	OPTIONAL,
		IN OUT PEVENT_TRACE_PROPERTIES	Properties
	)

◆ GetTraceEnableFlags()

EXTERN_C ULONG WMIAPI GetTraceEnableFlags ( IN TRACEHANDLE TraceHandle )

◆ GetTraceEnableLevel()

EXTERN_C UCHAR WMIAPI GetTraceEnableLevel ( IN TRACEHANDLE TraceHandle )

◆ GetTraceLoggerHandle()

EXTERN_C TRACEHANDLE WMIAPI GetTraceLoggerHandle ( IN PVOID Buffer )

◆ OpenTraceA()

EXTERN_C TRACEHANDLE WMIAPI OpenTraceA ( IN OUT PEVENT_TRACE_LOGFILEA Logfile )

◆ OpenTraceW()

EXTERN_C TRACEHANDLE WMIAPI OpenTraceW ( IN OUT PEVENT_TRACE_LOGFILEW Logfile )

◆ ProcessTrace()

EXTERN_C ULONG WMIAPI ProcessTrace	(	IN PTRACEHANDLE	HandleArray,
		IN ULONG	HandleCount,
		IN LPFILETIME StartTime	OPTIONAL,
		IN LPFILETIME EndTime	OPTIONAL
	)

Definition at line 35 of file evntrace.c.

{
    UNIMPLEMENTED;
    return ERROR_NOACCESS;
}

◆ QueryAllTracesA()

EXTERN_C ULONG WMIAPI QueryAllTracesA	(	OUT PEVENT_TRACE_PROPERTIES *	PropertyArray,
		IN ULONG	PropertyArrayCount,
		OUT PULONG	LoggerCount
	)

◆ QueryAllTracesW()

EXTERN_C ULONG WMIAPI QueryAllTracesW	(	OUT PEVENT_TRACE_PROPERTIES *	PropertyArray,
		IN ULONG	PropertyArrayCount,
		OUT PULONG	LoggerCount
	)

◆ QueryTraceA()

EXTERN_C ULONG WMIAPI QueryTraceA	(	IN TRACEHANDLE	TraceHandle,
		IN LPCSTR InstanceName	OPTIONAL,
		IN OUT PEVENT_TRACE_PROPERTIES	Properties
	)

◆ QueryTraceW()

EXTERN_C ULONG WMIAPI QueryTraceW	(	IN TRACEHANDLE	TraceHandle,
		IN LPCWSTR InstanceName	OPTIONAL,
		IN OUT PEVENT_TRACE_PROPERTIES	Properties
	)

◆ RegisterTraceGuidsA()

EXTERN_C ULONG WMIAPI RegisterTraceGuidsA	(	IN WMIDPREQUEST	RequestAddress,
		IN PVOID RequestContext	OPTIONAL,
		IN LPCGUID	ControlGuid,
		IN ULONG	GuidCount,
		IN PTRACE_GUID_REGISTRATION TraceGuidReg	OPTIONAL,
		IN LPCSTR MofImagePath	OPTIONAL,
		IN LPCSTR MofResourceName	OPTIONAL,
		OUT PTRACEHANDLE	RegistrationHandle
	)

◆ RegisterTraceGuidsW()

EXTERN_C ULONG WMIAPI RegisterTraceGuidsW	(	IN WMIDPREQUEST	RequestAddress,
		IN PVOID RequestContext	OPTIONAL,
		IN LPCGUID	ControlGuid,
		IN ULONG	GuidCount,
		IN PTRACE_GUID_REGISTRATION TraceGuidReg	OPTIONAL,
		IN LPCWSTR MofImagePath	OPTIONAL,
		IN LPCWSTR MofResourceName	OPTIONAL,
		OUT PTRACEHANDLE	RegistrationHandle
	)

◆ RemoveTraceCallback()

EXTERN_C ULONG WMIAPI RemoveTraceCallback ( IN LPCGUID pGuid )

◆ SetTraceCallback()

EXTERN_C ULONG WMIAPI SetTraceCallback	(	IN LPCGUID	pGuid,
		IN PEVENT_CALLBACK	EventCallback
	)

◆ StartTraceA()

EXTERN_C ULONG WMIAPI StartTraceA	(	OUT PTRACEHANDLE	TraceHandle,
		IN LPCSTR	InstanceName,
		IN OUT PEVENT_TRACE_PROPERTIES	Properties
	)