Edit

MOF_FIELD structure (evntrace.h)

  • Article

You may use the MOF_FIELD structures to append event data to the EVENT_TRACE_HEADER or EVENT_INSTANCE_HEADER structures.

Syntax

typedef struct _MOF_FIELD {
  ULONG64 DataPtr;
  ULONG   Length;
  ULONG   DataType;
} MOF_FIELD, *PMOF_FIELD;

Members

DataPtr

Pointer to a event data item.

Length

Length of the item pointed to by DataPtr, in bytes.

DataType

Reserved.

Remarks

Be sure to initialize the memory for this structure to zero before setting any members.

If you use MOF_FIELD structures, you must set the WNODE_FLAG_USE_MOF_PTR flag in the Flags member of the EVENT_TRACE_HEADER or EVENT_INSTANCE_HEADER structures.

The event tracing session automatically dereferences MOF_FIELD data pointers before passing the data to event trace consumers using EVENT_TRACE structures.

Requirements

Requirement Value
Minimum supported client Windows 2000 Professional [desktop apps only]
Minimum supported server Windows 2000 Server [desktop apps only]
Header evntrace.h

See also

EVENT_INSTANCE_HEADER

EVENT_TRACE

EVENT_TRACE_HEADER