3 ms·

ETW is not similar at all to DTrace, a fact explained in the README of the linked repository. I am not privy to Microsoft's decision to port (and ship!) DTrace

• anaisbetts 4y ago
  It is similar in the types of problems you would try to solve with both tools, and the data that you can collect - not in their design. Both allow you to gather extremely detailed performance and trace information about a running system, without having to explicitly stop/restart running processes.
  • 4ad 4y ago
    > without having to explicitly stop/restart running processes. With DTrace you not only don't have to restart processes, but you don't have to recompile them. ETW is glorified logging. Logging is useful, but dynamic tracing is transformatively different. I can't recompile the Windows kernel to add missing ETW probes, but I can use DTrace to probe it just fine.