public SystemNetTraceEventHandler(int pid, ITraceOutput output, bool printPacketBytes, int outputBytesLimit = 0)
{
traceOutput = output;
this.pid = pid;
this.printPacketBytes = printPacketBytes;
this.outputBytesLimit = outputBytesLimit;
}
public ProcessThreadsTraceEventHandler(int pid, ITraceOutput output,
Action <int> actionToPerformWhenNewProcessIsCreated)
{
traceOutput = output;
this.pid = pid;
this.actionToPerformWhenNewProcessIsCreated = actionToPerformWhenNewProcessIsCreated;
}
public SystemDiagnosticsTraceEventHandler(int pid, ITraceOutput output)
{
traceOutput = output;
this.pid = pid;
Providers = new [] {
new EventPipeProvider(SystemDiagnosticsTraceEventParser.ProviderName, EventLevel.LogAlways),
};
}
public SystemNetTraceEventHandler(int pid, ITraceOutput output, bool printPacketBytes, int outputBytesLimit = 0)
{
traceOutput = output;
this.pid = pid;
this.printPacketBytes = printPacketBytes;
this.outputBytesLimit = outputBytesLimit;
Providers = new[] {
new EventPipeProvider(EtwParsers.MicrosoftSystemNetHttpTraceEventParser.ProviderName, EventLevel.Verbose, 0xFFFFFFFF),
new EventPipeProvider(EtwParsers.MicrosoftSystemNetHttpListenerTraceEventParser.ProviderName, EventLevel.Verbose, 0xFFFFFFFF),
new EventPipeProvider(EtwParsers.MicrosoftSystemNetMailTraceEventParser.ProviderName, EventLevel.Verbose, 0xFFFFFFFF),
new EventPipeProvider(EtwParsers.MicrosoftSystemNetNameResolutionTraceEventParser.ProviderName, EventLevel.Verbose, 0xFFFFFFFF),
new EventPipeProvider(EtwParsers.MicrosoftSystemNetNetworkInformationTraceEventParser.ProviderName, EventLevel.Verbose, 0xFFFFFFFF),
new EventPipeProvider(EtwParsers.MicrosoftSystemNetPingTraceEventParser.ProviderName, EventLevel.Verbose, 0xFFFFFFFF),
new EventPipeProvider(EtwParsers.MicrosoftSystemNetPrimitivesTraceEventParser.ProviderName, EventLevel.Verbose, 0xFFFFFFFF),
new EventPipeProvider(EtwParsers.MicrosoftSystemNetRequestsTraceEventParser.ProviderName, EventLevel.Verbose, 0xFFFFFFFF),
new EventPipeProvider(EtwParsers.MicrosoftSystemNetSecurityTraceEventParser.ProviderName, EventLevel.Verbose, 0xFFFFFFFF),
new EventPipeProvider(EtwParsers.MicrosoftSystemNetSocketsTraceEventParser.ProviderName, EventLevel.Verbose, 0xFFFFFFFF),
new EventPipeProvider(EtwParsers.MicrosoftSystemNetWebHeaderCollectionTraceEventParser.ProviderName, EventLevel.Verbose, 0xFFFFFFFF),
new EventPipeProvider(EtwParsers.MicrosoftSystemNetWebSocketsClientTraceEventParser.ProviderName, EventLevel.Verbose, 0xFFFFFFFF)
};
}
public RegistryTraceEventHandler(int pid, ITraceOutput traceOutput)
{
this.traceOutput = traceOutput;
this.pid = pid;
}
public IsrDpcTraceEventHandler(ITraceOutput traceOutput)
{
this.traceOutput = traceOutput;
}
public RpcTraceEventHandler(int pid, ITraceOutput output)
{
traceOutput = output;
this.pid = pid;
}
public TraceHandler(ITraceOutput traceOutput)
{
this.traceOutput = traceOutput;
}
public TraceSession(ITraceOutput traceOutput)
{
this.traceOutput = traceOutput;
cts = new CancellationTokenSource();
}
public SystemDiagnosticsTraceEventHandler(int pid, ITraceOutput output)
{
traceOutput = output;
this.pid = pid;
}
public PowerShellTraceEventHandler(int pid, ITraceOutput output)
{
traceOutput = output;
this.pid = pid;
}
public TraceSession(ITraceOutput traceOutput)
{
this.traceOutput = traceOutput;
}
public TraceSession(ITraceOutput traceOutput, bool printSummary)
{
this.traceOutput = traceOutput;
this.printSummary = printSummary;
}
public SystemConfigTraceEventHandler(ITraceOutput output)
{
this.output = output;
}
