PETW_BUFFER_CALLBACK callback function (evntrace.h)

Function definition for the BufferCallback that will be invoked by ProcessTrace.

Syntax

PETW_BUFFER_CALLBACK PetwBufferCallback;

BOOL PetwBufferCallback(
  const ETW_BUFFER_HEADER *Buffer,
  ULONG BufferSize,
  const ETW_BUFFER_CALLBACK_INFORMATION *ConsumerInfo,
  void *CallbackContext
)
{...}

Parameters

Buffer

Pointer to the raw buffer data, which begins with an ETW_BUFFER_HEADER struct and is followed by event data.

By default this buffer is available only until the callback returns. To use the buffer after the callback returns, call ProcessTraceBufferIncrementReference. This will keep the buffer available until you call ProcessTraceBufferDecrementReference on it.

ProcessTrace will not return until all such Buffer references have been decremented.

BufferSize

Size of the provided Buffer.

ConsumerInfo

Contains information on the current state of the processing session.

CallbackContext

User-provided context from ETW_OPEN_TRACE_OPTIONS.BufferCallbackContext.

Return value

If TRUE, the processing will continue. If FALSE, trace processing will stop and ProcessTrace will return.

Requirements