Make Windows Event Tracing (ETW) work for Disk Monitoring

• Status: Closed
• Prize: $25
• Entries Received: 4
• Winner: IntelFTW

Winner

Contest Brief

There's a tool named DiskMon which will display information about disk i/o on a Windows machine. It uses Windows Event Tracing to get logs from a specific provider.

We need you to provide the syntax of the commands for collecting the data and for displaying a human readable report (txt format) with timestamp, disk number and sectors (or byte offset) of the write operation. Solutions with a filter for timestamp and disk number will be preferred.

You'll probably use logman and logparser for that. If you use Python (e.g.: https://github.com/froydnj/sawbuck-firefox/blob/master/sawbuck/py/etw/test/test_consumer.py) I'd be glad to pay you a bonus.

Recommended Skills

• C Programming
• Windows API