STACK_TRACING_EVENT_ID structure

The STACK_TRACING_EVENT_ID structure tells the kernel logger to include the call stack for the named events.

Syntax

typedef struct {
  GUID  EventGuid;
  UCHAR Type;
  UCHAR Reserved[7];
} STACK_TRACING_EVENT_ID, *PSTACK_TRACING_EVENT_ID;

Members

EventGuid

The GUID that identifies a specific kernel event that is configured to generate call stacks.

For more information on GUID values for the EventGuid member, see the NT Kernel Logger Constants discussion of NT Kernel Logger Constants. Additionally, EventGuid GUID values are listed in Evntrace.h.

Type

The Kernel Trace Control Type member introduces three new event types.

• EVENT_TRACE_TYPE_READYTHREAD

• EVENT_TRACE_TYPE_VIRTUAL_ALLOC

• EVENT_TRACE_TYPE_VIRTUAL_FREE

For more information on these new event types, see New Trace Event Types.

Reserved

This member is used to pad the structure and is reserved for future use only; it should not be used.

Remarks

The STACK_TRACING_EVENT_ID structure members are identical to the CLASSIC_EVENT_ID structure that is available in the following versions of the SDK:

• Microsoft Windows SDK for Windows 7 and .NET Framework 3.5 Service Pack 1

• Microsoft Windows SDK for Windows Server 2008 and .NET Framework 3.5

typedef struct _CLASSIC_EVENT_ID {
 GUID  EventGuid; 
    UCHAR Type; 
    UCHAR Reserved[7]; 
} CLASSIC_EVENT_ID, *PCLASSIC_EVENT_ID; 

Requirements

See also

StartKernelTrace