GitHubMirror/go-winio
1
0
Fork 0
mirror of https://github.com/rwinkhart/go-winio.git synced 2026-09-03 15:47:38 -04:00
Code Issues Packages Projects Releases Wiki Activity

Add a simple tool to generate provider ID's

Browse Source 
Also implements the Stringer interface for etw.Provider to output the ID

Signed-off-by: Justin Terry (VM) <juterry@microsoft.com>
This commit is contained in:
Justin Terry (VM)
2019-01-15 15:56:17 -08:00
parent 6c8aa416ae
commit 950c57133f
3 changed files with 45 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/etw/provider.go
+19
View File
@@ -4,6 +4,8 @@ import (
"bytes"
"crypto/sha1"
"encoding/binary"
"encoding/hex"
"fmt"
"strings"
"unicode/utf16"
@@ -25,6 +27,23 @@ type Provider struct {
keywordAll uint64
}
// String returns the `provider`.ID as a string
func (provider *Provider) String() string {
data1 := make([]byte, 4)
binary.BigEndian.PutUint32(data1, provider.ID.Data1)
data2 := make([]byte, 2)
binary.BigEndian.PutUint16(data2, provider.ID.Data2)
data3 := make([]byte, 2)
binary.BigEndian.PutUint16(data3, provider.ID.Data3)
return fmt.Sprintf(
"%s-%s-%s-%s-%s",
hex.EncodeToString(data1),
hex.EncodeToString(data2),
hex.EncodeToString(data3),
hex.EncodeToString(provider.ID.Data4[:2]),
hex.EncodeToString(provider.ID.Data4[2:]))
}
type providerHandle windows.Handle
// ProviderState informs the provider EnableCallback what action is being
internal/etw/sample/sample.go
+1 -19
View File
@@ -3,8 +3,6 @@ package main
import (
"bufio"
"encoding/binary"
"encoding/hex"
"fmt"
"os"
@@ -18,22 +16,6 @@ func callback(sourceID *windows.GUID, state etw.ProviderState, level etw.Level,
fmt.Printf("Callback: isEnabled=%d, level=%d, matchAnyKeyword=%d\n", state, level, matchAnyKeyword)
}
func guidToString(guid *windows.GUID) string {
data1 := make([]byte, 4)
binary.BigEndian.PutUint32(data1, guid.Data1)
data2 := make([]byte, 2)
binary.BigEndian.PutUint16(data2, guid.Data2)
data3 := make([]byte, 2)
binary.BigEndian.PutUint16(data3, guid.Data3)
return fmt.Sprintf(
"%s-%s-%s-%s-%s",
hex.EncodeToString(data1),
hex.EncodeToString(data2),
hex.EncodeToString(data3),
hex.EncodeToString(guid.Data4[:2]),
hex.EncodeToString(guid.Data4[2:]))
}
func main() {
provider, err := etw.NewProvider("TestProvider", callback)
@@ -47,7 +29,7 @@ func main() {
}
}()
fmt.Println("Provider ID:", guidToString(provider.ID))
fmt.Printf("Provider ID: %s\n", provider)
reader := bufio.NewReader(os.Stdin)