ETW provider enumeration

NTDEV
1

Hi,
Hopefully a simple question. It looks like EnumerateTraceGuidsEx is what I should be using to enumerate ETW providers, but once I’ve got the list of GUIDs how do I get a descriptive name for each provider? Logman can do it, but I’m not seeing anything obvious that shows me how.

thx,
Paul

2

TdhEnumerateProviders ?

3

Thanks, I’ll give that a go instead. Any idea what the Tdh prefix stands for? I skipped all of them since it wasn’t immediately obvious what they were for.

4

Trace Data Helper.

The file abstract (from the SDK) is:

“ETW Event payload parsing API && ETW trace providers browsing API.”

Peter
OSR
@OSRDrivers

5

Thank you both very much, TdhEnumerateProviders works fine.