Questions tagged [.net-traceprocessing]
The .net-traceprocessing tag has no usage guidance.
21
questions
0
votes
0
answers
24
views
How to use .NET TraceProcessing APIs in WASM
I'm currently exploring converting my C# code to WASM. I'm using UNO.Bootstrap.WASM for this but willing to explore other alternatives like Blazor.
My C# code uses the Microsoft TRACEPROCESSING ...
0
votes
0
answers
62
views
recommended way to consume ETW events from an active trace using .NET
The only way I found to process events of an active trace is the EventLogReader, but according to https://devblogs.microsoft.com/oldnewthing/20201210-00/?p=104536, it can't handle Trace Logging events....
0
votes
1
answer
56
views
Where is the list of device driver images stored in ETW?
I am trying to programatically get the list of device drives from an ETW with the great TraceProcessing Library which is used by WPA.
using ITraceProcessor processor = TraceProcessor.Create(...
1
vote
0
answers
23
views
TraceProcessing Library Support for VAMAP Data?
I am missing Map/Unmap information in TraceProcessing. Are these exposed? TraceEvent has these exposed:
public event Action<MapFileTraceData> FileIOMapFile
source.RegisterEventTemplate(...
0
votes
1
answer
52
views
How To Get Retransmission Events with TraceProcessing Library?
I am after getting the same data which is visible in WPA
where I can nicely see how lonog specific TCP packets did need to ack, how much data was transferred and if any TCP retransmission or Dup ACKs ...
0
votes
2
answers
154
views
Missing Stack Frames from ClrStackWalk Event
I try to use TraceProcessing Library to get from managed exceptions which have an associated Clr Stackwalk event the stack trace. In principle it should be pretty easy by parsing the event and getting ...
1
vote
1
answer
299
views
Thread Wait Times
I did try to reproduce the Thread Wait times from Context Switch events with TraceProcessing.
The most simplicistic approach would be to sum up from all threads from all processes the wait times.
...
0
votes
1
answer
78
views
Expose BootTime in TraceProcessor
I see that Microsoft.Windows.EventTracing.Interop.Metadata.NativeTraceLogfileHeader contains a value for BootTime. That could be useful in some cases. Any chance that will be exposed via the ...
1
vote
1
answer
74
views
Is TraceProcessor Thread Safe?
When I try to parse several ETL files in parallel via
using (ITraceProcessor processor = TraceProcessor.Create(myEtlFile, new TraceProcessorSettings
{
AllowLostEvents = true,
}))
I get this ...
1
vote
1
answer
52
views
Is it possible to stream IGenericEvents rather than buffering?
Using the Trace Processing library, is it possible to use streaming as described here to parse IGenericEvents from a .etl file?
1
vote
1
answer
153
views
How does the TraceProcessing library compare to the TraceEvent lIbrary used by PerfView?
There seems to be quite a few different ways to tackle parsing ETW events (TraceProcessing, TraceEvent, ETW2JSON, etc.). I'm interested specifically in the trade offs between the TraceProcessing ...
0
votes
1
answer
211
views
Parse CLR Event with TraceProcessor
I have followed the guidance at https://learn.microsoft.com/en-us/windows/apps/trace-processing/extensibility to get my hands on the .NET Runtime events. When I get a EventContext instance with the ...
1
vote
1
answer
136
views
Does .net trace processing have equivalent or better event parsing support as ETW2JSON?
I've looked through much of the documentation on trace processing and ETW in general but still feel as though I'm lacking some specifics. Does the Trace Processing library contain support to process ...
0
votes
1
answer
113
views
Is it possible to use the dotnet tracing libraries on macOS?
I've gone through the example event-tracing projects located at https://github.com/microsoft/eventtracing-processing-samples and successfully built the projects. I'm running into missing dll's. For ...
1
vote
2
answers
284
views
How To Read VirtualAllocations With TraceProcessor?
When I have enabled VirtualAlloc Tracing how can I get the VirtualAlloc Events back with TraceProcessor?
In Microsoft.Windows.EventTracing.Memory I find only
IHeapAllocation
IHeapSnapshot
...
1
vote
1
answer
119
views
How to read FileVersionTraceData with TraceProcessor?
I wanted to try out the new ETW processing TraceProcessor library. So far I have problems mapping ETW events from Tracevent to the new library. I want e.g. to dump data from FileVersionTraceData ...
1
vote
1
answer
80
views
I'm getting OutOfMemoryExceptions, but my trace file is much smaller than my available memory
As the title says, I've got tons of free memory, but I keep getting OutOfMemoryExceptions when processing traces and calling properties on Data Sources. Why is this happening?
2
votes
1
answer
761
views
How do I allow lost events and time inversion when processing ETW traces with TraceProcessor
When trying to recreate UIforETW's IdentifyChromeProcesses.py script using TraceProcessor I hit this error:
System.InvalidOperationException
HResult=0x80131509
Message=The specified ...
1
vote
1
answer
132
views
How to process Heap traces?
Heap traces are some of the heaviest traces ETW can capture, and would be interesting to handle that through .net-trace processing.
Is it possible currently to get this data, or is it not supported? ...
2
votes
2
answers
132
views
.net-traceprocessing How Can WaitAnalysis Be Used?
In the library .net-traceprocessing is a namespace Microsoft.Windows.EventTracing.WaitAnalysis which contains many types related to Wait Analysis. How can that be used? Based on the name it sounds ...
2
votes
1
answer
204
views
Standalone Microsoft.Windows.EventTracing.Processing
Can Microsoft.Windows.EventTracing.Processing be used without the Microsoft.Windows.EventTracing.Processing.All package? The description recommends the All package, but is it possible to use Microsoft....