-
Notifications
You must be signed in to change notification settings - Fork 241
/
ebpfforwindows.wprp
53 lines (49 loc) · 1.86 KB
/
ebpfforwindows.wprp
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
<?xml version="1.0" encoding="utf-8"?>
<!--
Copyright (c) eBPF for Windows contributors
SPDX-License-Identifier: MIT
-->
<WindowsPerformanceRecorder Version="1.0" Author="Microsoft Corporation" Copyright="Microsoft Corporation" Company="Microsoft Corporation">
<Profiles>
<EventCollector Id="EventCollector_EbpfCoreProvider" Name="EbpfCoreProvider">
<BufferSize Value="256" />
<Buffers Value="1024" />
</EventCollector>
<EventProvider Id="ExecutionContext" Name="394f321c-5cf4-404c-aa34-4df1428a7f9c" NonPagedMemory="true"/>
<EventProvider Id="NetEbpfExt" Name="f2f2ca01-ad02-4a07-9e90-95a2334f3692" NonPagedMemory="true"/>
<Profile
Id="EbpfForWindowsProvider-File.Verbose.File"
Name="EbpfForWindowsProvider-File"
Description="Traces for all eBPF for Windows providers"
LoggingMode="File"
DetailLevel="Verbose">
<Collectors>
<EventCollectorId Value="EventCollector_EbpfCoreProvider">
<EventProviders>
<EventProviderId Value="ExecutionContext"/>
</EventProviders>
<EventProviders>
<EventProviderId Value="NetEbpfExt"/>
</EventProviders>
</EventCollectorId>
</Collectors>
</Profile>
<Profile
Id="EbpfForWindowsProvider-Memory.Verbose.Memory"
Name="EbpfForWindowsProvider-Memory"
Description="Traces for all eBPF for Windows providers"
LoggingMode="Memory"
DetailLevel="Verbose">
<Collectors>
<EventCollectorId Value="EventCollector_EbpfCoreProvider">
<EventProviders>
<EventProviderId Value="ExecutionContext"/>
</EventProviders>
<EventProviders>
<EventProviderId Value="NetEbpfExt"/>
</EventProviders>
</EventCollectorId>
</Collectors>
</Profile>
</Profiles>
</WindowsPerformanceRecorder>