Struct RecoveredEtwSession 

pub struct RecoveredEtwSession {
    pub logger_id: u32,
    pub name: String,
    pub is_running: bool,
    pub buffer_count: u32,
    pub buffer_size: u32,
    pub events_lost: u32,
    pub log_mode: u32,
    pub buffer_events: Vec<RecoveredEtwEvent>,
}

An ETW session recovered from kernel memory (_WMI_LOGGER_CONTEXT walk).

Fields

logger_id: u32

name: String

is_running: bool

buffer_count: u32

buffer_size: u32

events_lost: u32

log_mode: u32

buffer_events: Vec<RecoveredEtwEvent>

Trait Implementations

impl Clone for RecoveredEtwSession

fn clone(&self) -> RecoveredEtwSession

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RecoveredEtwSession

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for RecoveredEtwSession

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.