Struct ferrisetw::trace::KernelTrace
source · pub struct KernelTrace { /* private fields */ }
Expand description
A kernel trace session
To stop the session, you can drop this instance
Implementations§
source§impl KernelTrace
impl KernelTrace
sourcepub fn new() -> TraceBuilder<KernelTrace>
pub fn new() -> TraceBuilder<KernelTrace>
Create a KernelTrace builder
sourcepub fn stop(self) -> Result<(), TraceError>
pub fn stop(self) -> Result<(), TraceError>
Stops the trace
This consumes the trace, that can no longer be used afterwards.
The same result is achieved by dropping Self
Trait Implementations§
source§impl Debug for KernelTrace
impl Debug for KernelTrace
source§impl Drop for KernelTrace
impl Drop for KernelTrace
source§impl TraceTrait for KernelTrace
impl TraceTrait for KernelTrace
fn trace_handle(&self) -> TraceHandle
fn trace_name(&self) -> OsString
fn events_handled(&self) -> usize
fn trace_guid() -> GUID
source§fn process(&mut self) -> Result<(), TraceError>
fn process(&mut self) -> Result<(), TraceError>
This is blocking and starts triggerring the callbacks. Read more
source§fn process_from_handle(handle: TraceHandle) -> Result<(), TraceError>
fn process_from_handle(handle: TraceHandle) -> Result<(), TraceError>
Process a trace given its handle. Read more