Struct ferrisetw::provider::Provider

pub struct Provider { /* private fields */ }

Describes an ETW Provider to use, along with its options

Implementations

impl Provider

pub fn by_guid<G: Into<GUID>>(guid: G) -> ProviderBuilder

Create a Provider defined by its GUID

Many types implement Into<GUID> and are acceptable as argument: GUID themselves, but also &str, etc.

pub fn kernel(kernel_provider: &KernelProvider) -> ProviderBuilder

Create a Kernel Provider

You can pass either a KernelProvider you have created yourself, or one of the standard providers from crate::provider::kernel_providers.

pub fn by_name(name: &str) -> Result<ProviderBuilder, PlaError>

Create a Provider defined by its name.

This function will look for the Provider GUID by means of the ITraceDataProviderCollection interface.

Remark

This function is considerably slow, prefer using the by_guid function when possible

Example

let my_provider = Provider::by_name("Microsoft-Windows-WinINet").unwrap().build();

impl Provider

pub fn guid(&self) -> GUID

pub fn any(&self) -> u64

pub fn all(&self) -> u64

pub fn level(&self) -> u8

pub fn trace_flags(&self) -> TraceFlags

pub fn kernel_flags(&self) -> u32

pub fn filters(&self) -> &[EventFilter]

Trait Implementations

impl Debug for Provider

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.