Skip to content

Instantly share code, notes, and snippets.

@igorzi
Created January 18, 2012 22:51

Revisions

  1. Igor Zinkovsky created this gist Jan 18, 2012.
    68 changes: 68 additions & 0 deletions gistfile1.txt
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,68 @@
    Kernel Flags:
    PROC_THREAD : Process and Thread create/delete
    LOADER : Kernel and user mode Image Load/Unload events
    PROFILE : CPU Sample profile
    CSWITCH : Context Switch
    COMPACT_CSWITCH: Compact Context Switch
    DISPATCHER : CPU Scheduler
    DPC : DPC Events
    INTERRUPT : Interrupt events
    SYSCALL : System calls
    PRIORITY : Priority change events
    SPINLOCK : Spinlock Collisions
    SYNCOBJECTS : Synchronization Objects
    KQUEUE : Kernel Queue Enqueue/Dequeue
    ALPC : Advanced Local Procedure Call
    PERF_COUNTER : Process Perf Counters
    DISK_IO : Disk I/O
    DISK_IO_INIT : Disk I/O Initiation
    FILE_IO : File system operation end times and results
    FILE_IO_INIT : File system operation (create/open/close/read/write)
    HARD_FAULTS : Hard Page Faults
    FILENAME : FileName (e.g., FileName create/delete/rundown)
    SPLIT_IO : Split I/O
    REGISTRY : Registry tracing
    DRIVERS : Driver events
    POWER : Power management events
    CC : Cache manager events
    NETWORKTRACE : Network events (e.g., tcp/udp send/receive)
    VIRT_ALLOC : Virtual allocation reserve and release
    MEMINFO : Memory List Info
    ALL_FAULTS : All page faults including hard, Copy on write, demand zero faults, etc.
    MEMINFO_WS : Working set Info
    VAMAP : MapFile info
    FOOTPRINT : Support footprint analysis (i.e., flush workingset on FlushMark)
    MEMORY : Memory tracing
    REFSET : Support footprint analysis (i.e., flush workingset on FlushMark and trace start)
    CONTMEMGEN : Contiguous Memory Generation
    POOL : Pool tracing
    CLUSTER_OFF : Turn off Hard page fault clustering
    CPU_CONFIG : NUMA topology, Processor Group and Processor Index to Number mapping. By default it is always enabled.
    SESSION : Session rundown/create/delete events.
    ANTI_STARVATION: Events tracking boosts for Ready threads for several seconds
    LOAD_BALANCER : Thread load balancer
    IDLE_STATES : CPU Idle States
    TIMER : Timer settings and its expiration
    CLOCKINT : Clock Interrupt Events
    IPI : Inter-processor Interrupt Events
    OPTICAL_IO : Optical I/O
    OPTICAL_IO_INIT: Optical I/O Initiation
    FLT_IO_INIT : Minifilter callback initiation
    FLT_IO : Minifilter callback completion
    FLT_FASTIO : Minifilter fastio callback completion
    FLT_IO_FAILURE : Minifilter callback completion with failure

    Kernel Groups:
    Base : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+PROFILE+MEMINFO+MEMINFO_WS
    Diag : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+DPC+INTERRUPT+CSWITCH+PERF_COUNTER+COMPACT_CSWITCH
    DiagEasy : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+DPC+INTERRUPT+CSWITCH+PERF_COUNTER
    Latency : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+DPC+INTERRUPT+CSWITCH+PROFILE
    FileIO : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+FILE_IO+FILE_IO_INIT
    IOTrace : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+CSWITCH
    ResumeTrace : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+PROFILE+POWER
    SysProf : PROC_THREAD+LOADER+PROFILE
    MemoryAnalysis : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+MEMORY+MEMINFO+ALL_FAULTS+VIRT_ALLOC+PROFILE+FOOTPRINT+VAMAP+SESSION
    ResidentSet : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+MEMORY+MEMINFO+VAMAP+SESSION+VIRT_ALLOC
    ReferenceSet : PROC_THREAD+LOADER+HARD_FAULTS+MEMORY+FOOTPRINT+VIRT_ALLOC+MEMINFO+VAMAP+SESSION+REFSET+MEMINFO_WS
    Network : PROC_THREAD+LOADER+NETWORKTRACE
    TraceOn4 : PROC_THREAD+LOADER+DISK_IO+HARD_FAULTS+CSWITCH+MEMORY+REGISTRY+PROFILE