Skip to content

Instantly share code, notes, and snippets.

@igorzi igorzi/gist:1636324
Created Jan 18, 2012

Embed
What would you like to do?
Kernel Flags:
PROC_THREAD : Process and Thread create/delete
LOADER : Kernel and user mode Image Load/Unload events
PROFILE : CPU Sample profile
CSWITCH : Context Switch
COMPACT_CSWITCH: Compact Context Switch
DISPATCHER : CPU Scheduler
DPC : DPC Events
INTERRUPT : Interrupt events
SYSCALL : System calls
PRIORITY : Priority change events
SPINLOCK : Spinlock Collisions
SYNCOBJECTS : Synchronization Objects
KQUEUE : Kernel Queue Enqueue/Dequeue
ALPC : Advanced Local Procedure Call
PERF_COUNTER : Process Perf Counters
DISK_IO : Disk I/O
DISK_IO_INIT : Disk I/O Initiation
FILE_IO : File system operation end times and results
FILE_IO_INIT : File system operation (create/open/close/read/write)
HARD_FAULTS : Hard Page Faults
FILENAME : FileName (e.g., FileName create/delete/rundown)
SPLIT_IO : Split I/O
REGISTRY : Registry tracing
DRIVERS : Driver events
POWER : Power management events
CC : Cache manager events
NETWORKTRACE : Network events (e.g., tcp/udp send/receive)
VIRT_ALLOC : Virtual allocation reserve and release
MEMINFO : Memory List Info
ALL_FAULTS : All page faults including hard, Copy on write, demand zero faults, etc.
MEMINFO_WS : Working set Info
VAMAP : MapFile info
FOOTPRINT : Support footprint analysis (i.e., flush workingset on FlushMark)
MEMORY : Memory tracing
REFSET : Support footprint analysis (i.e., flush workingset on FlushMark and trace start)
CONTMEMGEN : Contiguous Memory Generation
POOL : Pool tracing
CLUSTER_OFF : Turn off Hard page fault clustering
CPU_CONFIG : NUMA topology, Processor Group and Processor Index to Number mapping. By default it is always enabled.
SESSION : Session rundown/create/delete events.
ANTI_STARVATION: Events tracking boosts for Ready threads for several seconds
LOAD_BALANCER : Thread load balancer
IDLE_STATES : CPU Idle States
TIMER : Timer settings and its expiration
CLOCKINT : Clock Interrupt Events
IPI : Inter-processor Interrupt Events
OPTICAL_IO : Optical I/O
OPTICAL_IO_INIT: Optical I/O Initiation
FLT_IO_INIT : Minifilter callback initiation
FLT_IO : Minifilter callback completion
FLT_FASTIO : Minifilter fastio callback completion
FLT_IO_FAILURE : Minifilter callback completion with failure
Kernel Groups:
Base : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+PROFILE+MEMINFO+MEMINFO_WS
Diag : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+DPC+INTERRUPT+CSWITCH+PERF_COUNTER+COMPACT_CSWITCH
DiagEasy : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+DPC+INTERRUPT+CSWITCH+PERF_COUNTER
Latency : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+DPC+INTERRUPT+CSWITCH+PROFILE
FileIO : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+FILE_IO+FILE_IO_INIT
IOTrace : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+CSWITCH
ResumeTrace : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+PROFILE+POWER
SysProf : PROC_THREAD+LOADER+PROFILE
MemoryAnalysis : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+MEMORY+MEMINFO+ALL_FAULTS+VIRT_ALLOC+PROFILE+FOOTPRINT+VAMAP+SESSION
ResidentSet : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+MEMORY+MEMINFO+VAMAP+SESSION+VIRT_ALLOC
ReferenceSet : PROC_THREAD+LOADER+HARD_FAULTS+MEMORY+FOOTPRINT+VIRT_ALLOC+MEMINFO+VAMAP+SESSION+REFSET+MEMINFO_WS
Network : PROC_THREAD+LOADER+NETWORKTRACE
TraceOn4 : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+CSWITCH+MEMORY+REGISTRY+PROFILE
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.