Method StartMonitoring

WinArk/EtwView.cpp:41–60

}

void CEtwView::StartMonitoring(TraceManager& tm, bool start) {
	if (start) {
		std::vector<KernelEventTypes> types;
		std::vector<std::wstring> categories;
		for (auto& cat : m_EventsConfig.GetCategories()) {
			auto c = KernelEventCategory::GetCategory(cat.Name.c_str());
			ATLASSERT(c);
			types.push_back(c->EnableFlag);
			categories.push_back(c->Name);
		}
		std::initializer_list<KernelEventTypes> events(types.data(), types.data() + types.size());
		tm.SetKernelEventTypes(events);
		tm.SetKernelEventStacks(std::initializer_list<std::wstring>(categories.data(), categories.data() + categories.size()));
		ApplyFilters(m_FilterConfig);
	}
	else {
		m_IsDraining = true;
	}
	m_IsMonitoring = start;
}

CString CEtwView::GetColumnText(HWND, int row, int col) const {
	auto item = m_Events[row].get();