Operating system event tracker having separate storage for interrupt and non-interrupt events and flushing the third memory when timeout and memory full occur

A method for logging operating system kernel events, comprising:

• storing interrupt data associated with interrupt events in an interrupt buffer;
• storing non-interrupt data associated with non-interrupt events in a non-interrupt buffer;
• flushing the interrupt data to a secondary buffer;
• and
• flushing the non-interrupt data to the secondary buffer, wherein the non-interrupt data is flushed to the secondary buffer upon at least one of the non-interrupt buffer becoming substantially full and event handling associated with the non-interrupt event completing, the flushing not occurring during interrupt handling time.

A computer readable medium storing computer executable components of a system for triple buffering information associated with events handled by an operating system kernel, comprising:

• one or more computer executable components for storing first data associated with interrupt events in a first memory;
• one or more computer executable components for storing second data associated with non-interrupt events in a second memory;
• one or more components for moving the first data from the first memory to the third memory and the second data from the second memory to a third memory;
• and
• a flushing component for flushing data from the third memory upon at least one of the third memory becoming substantially full and a timeout condition occurring, the flushing not occurring during interrupt handling time.

A computer readable medium storing computer executable instructions operable to execute a method for logging operating system kernel events, the method comprising:

• storing interrupt data associated with interrupt events in an interrupt buffer;
• storing non-interrupt data associated with non-interrupt events in a non-interrupt buffer;
• flushing the interrupt data to a secondary buffer, the flushing not occurring during interrupt handling time;
• and
• flushing the non-interrupt data to the secondary buffer, the flushing not occurring during interrupt handling time, and transporting data in the secondary buffer to facilitate display thereof, upon at least one of the secondary buffer becoming full and/or a process timeout occuring.

A system for logging operating system kernel events, comprising:

• means for logging interrupt events to an interrupt buffer;
• means for logging non-interrupt events to a non-interrupt buffer;
• means for copying data in the interrupt buffer to a secondary buffer;
• and
• means for copying data in the non-interrupt buffer to the secondary buffer, and a means for transporting data in the first memory and the second memory to facilitate display thereof, upon at least one of the first memory and the second memory becoming full and/or a process timeout occurring.