Struct EtwConfig

pub struct EtwConfig {
    pub kernel_flags: Vec<i32>,
}

Proto definition based on the struct _EVENT_TRACE_PROPERTIES definition See: https://learn.microsoft.com/en-us/windows/win32/api/evntrace/ ns-evntrace-event_trace_properties

Fields

kernel_flags: Vec<i32>

The kernel_flags determines the flags that will be used by the etw tracing session. These kernel flags have been built to expose the useful events captured from the kernel mode only.

Implementations

impl EtwConfig

pub fn kernel_flags( &self, ) -> FilterMap<Cloned<Iter<'_, i32>>, fn(_: i32) -> Option<KernelFlag>>

Returns an iterator which yields the valid enum values contained in kernel_flags.

pub fn push_kernel_flags(&mut self, value: KernelFlag)

Appends the provided enum value to kernel_flags.

Trait Implementations

impl Clone for EtwConfig

fn clone(&self) -> EtwConfig

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EtwConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for EtwConfig

fn default() -> Self

Returns the “default value” for a type.

impl Message for EtwConfig

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode<B>(&self, buf: &mut B) -> Result<(), EncodeError>

where B: BufMut, Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited<B>(&self, buf: &mut B) -> Result<(), EncodeError>

where B: BufMut, Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode<B>(buf: B) -> Result<Self, DecodeError>

where B: Buf, Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited<B>(buf: B) -> Result<Self, DecodeError>

where B: Buf, Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge<B>(&mut self, buf: B) -> Result<(), DecodeError>

where B: Buf, Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited<B>(&mut self, buf: B) -> Result<(), DecodeError>

where B: Buf, Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for EtwConfig

fn eq(&self, other: &EtwConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for EtwConfig