EtwLogFile

final class ntoseye.EtwLogFile

Subclass of BaseRecord.

The buffers of a session as an .etl file: a header buffer, then each buffer that holds events.

property buffers: int

The buffers with events written after the header buffer.

property issues: list[EtwBufferIssue]

The buffers left out (unreadable) and the buffers cut short before a record that does not decode.

property list_stop: str | None

Why the walk of the GlobalList, or of a minidump’s ETW data, ended early. None if the walk completed.

property logger: EtwLogger | EtwDumpLogger

property size: int

Bytes in the file.