Edit

PageFault_V2 class

  • Article

This class is the parent class for page fault events.

The following syntax is simplified from MOF code.

Syntax

[Guid("{3d6fa8d3-fe05-11d0-9dda-00c04fd7ba7c}"), EventVersion(2)]
class PageFault_V2 : MSNT_SystemTrace
{
};

Members

The PageFault_V2 class does not define any members.

Remarks

To enable all page fault events in an NT Kernel logging session, specify the EVENT_TRACE_FLAG_MEMORY_PAGE_FAULTS flag in the EnableFlags member of an EVENT_TRACE_PROPERTIES structure when calling the StartTrace function. You can also specify the following flags:

  • EVENT_TRACE_FLAG_MEMORY_HARD_FAULTS
  • EVENT_TRACE_FLAG_VIRTUAL_ALLOC

Event trace consumers can implement special processing for all page fault events by calling the SetTraceCallback function and specifying PageFaultGuid as the pGuid parameter. Use the following event types to identify the actual memory event when consuming events.

Event type Description
EVENT_TRACE_TYPE_MM_COW(Event type value is 12)
 Copy-on-write event. The PageFault_TypeGroup1 MOF class defines the event data for this event. Prior to Windows Vista, the PageFault_TransitionFault MOF class defines the event.
EVENT_TRACE_TYPE_MM_DZF(Event type value is 11)
 Demand zero fault event. The PageFault_TypeGroup1 MOF class defines the event data for this event. Prior to Windows Vista, the PageFault_TransitionFault MOF class defines the event.
EVENT_TRACE_TYPE_MM_GPF(Event type value is 13)
 Guard page fault event. The PageFault_TypeGroup1 MOF class defines the event data for this event. Prior to Windows Vista, the PageFault_TransitionFault MOF class defines the event.
EVENT_TRACE_TYPE_MM_HPF(Event type value is 14)
 Hard page fault event. The PageFault_TypeGroup1 MOF class defines the event data for this event. Prior to Windows Vista, the PageFault_TransitionFault MOF class defines the event.
EVENT_TRACE_TYPE_MM_TF(Event type value is 10)
 Transition fault event. The PageFault_TypeGroup1 MOF class defines the event data for this event. Prior to Windows Vista, the PageFault_TransitionFault MOF class defines the event.
EVENT_TRACE_TYPE_MM_AV(Event type value is 15)
 Access violation event. The PageFault_TypeGroup1 MOF class defines the event data for this event.
Event type value, 32 Hard page fault event.The PageFault_HardFault MOF class defines the event data for this event.
Event type value, 105 Image load in page file event. The PageFault_ImageLoadBacked MOF class defines the event data for this event.
Event type value, 98 Virtual allocation event. The VirtualAlloc MOF class defines the event data for this event.
Event type value, 99 Virtual free event. The VirtualAlloc MOF class defines the event data for this event.

 

You can use the ProcessId and ThreadId members of EVENT_TRACE_HEADER to identify the faulting process or thread.

Requirements

Requirement Value
Minimum supported client
 Windows XP [desktop apps only]
Minimum supported server
 Windows Server 2003 [desktop apps only]