2.5.12

-Dump Process

• Process tree output support added with -SortBy Tree
  Parent filtering is also supported with -Parent. To e.g. find all child processes of cmd.exe use:
  ETWAnalyzer -dump Process -SortBy Tree -Parent cmd
• Added -Sortby StopTime to sort processes by stop time.
• Add session Id to extracted process data.
  SessionId is shown when -Details is added.

-Dump CPU

• Fix regression issue where column headers were not printed.

-LoadSymbol Fix for #67

• We no longer abort processing when encountering just one invalid pdb format.

-Dump Tcp

• Added -MinMaxConnectionDurationS filter

Changes From 2.5.11

• default.stacktags
  • Added Edge/WebView2 tags
  • Added more Chrome tags
  • Moved network related tags into a new Network Node which contains tags for TLS/Socket/TCPIP drivers
• Trim CPU Name and Vendor. AMD seems to fill up the name with spaces.
• By default ETWAnalyzer should not calculate CPU totals because it makes no sense for method inclusive times.

-Dump Memory

• Added WorkingsetPrivateMemMiB in -Details mode
• Added -MinMaxWorkingsetPrivateMiB filter

-Dump Tcp

• Fix: Too many retransmission events were shown because for all sent packets with the same sequence number all retransmission events were printed. The fix needs also changes in the extraction logic. Old TCP data should be extracted again to get correct metrics.
  This is also the reason why sometimes we have more transmission events than sent packets leading to retransmission counts > 100%.