Revision history  [back]

Microsoft example for etwdump external capture interface:
Analyzing Mobile Broadband Logs in Wireshark

A list of providers - logman query providers (e.g. --p=Microsoft-Windows-Kernel-EventTracing) - to make a capture.