/// <summary>
/// Creates a listener to ETW real-time session for BinaryEnvelope events. These Events have EventId 0, 1 and 2.
/// and belong to specified provider.
/// </summary>
/// <param name="providerId">Identifier of ETW provider.</param>
/// <param name="sessionName">Session name.</param>
/// <returns>Sequence of events ordered by timestamp.</returns>
public static IObservable <BinaryEnvelope> FromSession(
Guid providerId,
string sessionName)
{
var parser = new BinaryEtwParser(providerId);
var etwObservable = EtwObservable.FromSession(sessionName);
return(etwObservable
.Select(parser.Parse)
.Where(item => item != null));
}
public static IObservable<EventManifest> BinaryManifestFromFiles(
Guid providerId,
bool useSequentialReader,
DateTime? startTime,
DateTime? endTime,
params string[] files)
{
var parser = new BinaryEtwParser(providerId);
var etwObservable = CreateEtwObservable(useSequentialReader, startTime, endTime, files);
return etwObservable
.Select(parser.ParseManifest)
.Where(item => item != null);
}
public static IObservable <EventManifest> BinaryManifestFromFiles(
Guid providerId,
bool useSequentialReader,
DateTime?startTime,
DateTime?endTime,
params string[] files)
{
var parser = new BinaryEtwParser(providerId);
var etwObservable = CreateEtwObservable(useSequentialReader, startTime, endTime, files);
return(etwObservable
.Select(parser.ParseManifest)
.Where(item => item != null));
}