Function NewEventSource

internal/etw/source.go:96–117

NewEventSource creates the new ETW event source.

(
	psnap ps.Snapshotter,
	hsnap handle.Snapshotter,
	config *config.Config,
	compiler *config.RulesCompileResult,
)

// NewEventSource creates the new ETW event source.
func NewEventSource(
	psnap ps.Snapshotter,
	hsnap handle.Snapshotter,
	config *config.Config,
	compiler *config.RulesCompileResult,
) source.EventSource {
	evs := &EventSource{
		r:          compiler,
		traces:     make([]*Trace, 0),
		consumers:  make([]*Consumer, 0),
		processors: processors.NewChain(psnap, hsnap, config),
		errs:       make(chan error, 1000),
		evts:       make(chan *event.Event, 500),
		sequencer:  event.NewSequencer(),
		config:     config,
		stop:       make(chan struct{}),
		psnap:      psnap,
		hsnap:      hsnap,
		listeners:  make([]event.Listener, 0),
	}
	return evs
}

// Open configures and starts traces and event consumers.
func (e *EventSource) Open(config *config.Config) error {