Windows 10: Etw TcpConnectionSummary

This event returns similar information to one of the getPerTcpConnectionEstats calls but I cannot find any documentation on when event tracing triggers this event. Please help.

:)

 

ETW

I, too, am having difficulty capturing ETW events within a container. The listening process is running inside the container where the ETW events should be getting generated.

 

ETW Event Tracing

Is it possible to consume ETW events in device drivers (kernel mode)?

 

ETW

Is it possible to monitor processes running inside a docker windows container with ETW? I've tried to run it using logman, and using providers that log events perfectly outside of a container result in an empty log when run inside a container (even when
run with --isolation=hyperv).

Any help would be much appreciated.