ProcessTraceAddBufferToBufferStream function (evntrace.h)
Provides an ETW trace buffer to a processing session created by OpenTraceFromBufferStream.
Syntax
ETW_APP_DECLSPEC_DEPRECATED ULONG WMIAPI ProcessTraceAddBufferToBufferStream(
PROCESSTRACE_HANDLE TraceHandle,
const ETW_BUFFER_HEADER *Buffer,
ULONG BufferSize
);
Parameters
TraceHandle
The TRACEHANDLE for the processing session to add to.
Buffer
A valid ETW buffer to process.
BufferSize
The ETW buffer size.
Return value
ERROR_SUCCESS or a Win32 error code to indicate that the buffer is invalid, out of time order, or that the TraceHandle is invalid.
Remarks
Buffers passed by ProcessTraceAddBufferToBufferStream must be in the same order as they were produced by ProcessTrace. Incorrect ordering of buffers may cause the function to return an error.
When the buffer is done processing, the BufferCompletionCallback specified in OpenTraceFromBufferStream will be called to release it.
Requirements
Requirement | Value |
---|---|
Minimum supported client | Windows 11 2022 Update |
Minimum supported server | Windows Server 2022 |
Target Platform | Windows |
Header | evntrace.h |
Library | Advapi32.dll |
DLL | Sechost.dll on Windows 8.1 and Windows Server 2012 R2; Advapi32.dll on Windows 8, Windows Server 2012, Windows 7, Windows Server 2008 R2, Windows Server 2008, Windows Vista and Windows XP |