ETW. Tracing done right

Event tracing for Windows. Demo - https://github.com/shchahrykovich/Presentation.ETW

Transcript

1. ETW Tracing done right Siarhei Shchahrykovich
2. Advantages Siarhei Shchahrykovich, .Net User Group - Minsk • Primary tracing mechanism in Windows • All Windows components support ETW • 10k events per second < 5% CPU • Semantic Logging (strongly-typed logging)
3. ETW in the wild Siarhei Shchahrykovich, .Net User Group - Minsk • MS SQL server • Visual Studio • PerfView (Download Center) • Logging Application Block (Enterprise library) / Nlog • IIS • IE11 • SysInternalstools (Sysinternals Suite) • Windows Performance T oolkit (ADK, WDK, SDK) • Microsoft Message Analyzer
4. Architecture Siarhei Shchahrykovich, .Net User Group - Minsk
5. ETW and .Net Siarhei Shchahrykovich, .Net User Group - Minsk
6. ETW Providers Siarhei Shchahrykovich, .Net User Group - Minsk • 976 Windows providers (logman query providers) • 98 Chrome providers (logman query providers –pid 1000) • .NetCommon Language Runtime (GC, Thread Pool, Interop, JIT , Loader and etc) • node-etw and Windows ETW and Perf Counters to Node.js • Microsoft-Windows-HttpService (Http.sys) • Microsoft-Windows-IIS-W3SVC
7. Samples Siarhei Shchahrykovich, .Net User Group - Minsk • WPT • PerfView • Custom diagnostic tool
8. • High performance • Full support in .Net • Windows 8+/ Windows Phone / Windows RT • Good tool support • Requires admin rights shchegrikovich@gmail.com 8 Summary Siarhei Shchahrykovich, .Net User Group - Minsk