etwdump will read events from a live session with the params as the filter, also the params can be used as filter when reading from a etl file.
New link type DLT_ETW is added for write and read Event Trace on Windows. This change updates MBIM dissector to decode a MBIM message from a DLT_ETW packet.