etw

Documentation

Index

• Constants
• func BytesFormat(b uint64) string
• func FormatGUID(guid DDGUID) string
• func FormatUInt(num uint64) string
• func FormatUnixTime(t uint64) string
• func GoBytes(data unsafe.Pointer, len int) []byte
• func HTTPMethodToStr(httpMethod uint32) string
• func HTTPVerbToStr(httVerb uint32) string
• func ParseUnicodeString(data []byte, offset int) (val string, nextOffset int, valFound bool, foundTermZeroIdx int)
• func VerbToMethod(verb uint32) uint32
• type DDEtwEvent
• type DDEtwEventInfo
• type DDGUID

Constants

const (
	EVENT_ID_HttpService_HTTPConnectionTraceTaskConnConn       = 0x15
	EVENT_ID_HttpService_HTTPConnectionTraceTaskConnClose      = 0x17
	EVENT_ID_HttpService_HTTPRequestTraceTaskRecvReq           = 0x1
	EVENT_ID_HttpService_HTTPRequestTraceTaskParse             = 0x2
	EVENT_ID_HttpService_HTTPRequestTraceTaskDeliver           = 0x3
	EVENT_ID_HttpService_HTTPRequestTraceTaskRecvResp          = 0x4
	EVENT_ID_HttpService_HTTPRequestTraceTaskFastResp          = 0x8
	EVENT_ID_HttpService_HTTPRequestTraceTaskSrvdFrmCache      = 0x10
	EVENT_ID_HttpService_HTTPRequestTraceTaskCachedNotModified = 0x11
	EVENT_ID_HttpService_HTTPCacheTraceTaskAddedCacheEntry     = 0x19
	EVENT_ID_HttpService_HTTPCacheTraceTaskFlushedCache        = 0x1b
	EVENT_ID_HttpService_HTTPSSLTraceTaskSslConnEvent          = 0x22
	EVENT_ID_HttpService_HTTPRequestTraceTaskSendComplete      = 0xa
	EVENT_ID_HttpService_HTTPRequestTraceTaskCachedAndSend     = 0xb
	EVENT_ID_HttpService_HTTPRequestTraceTaskFastSend          = 0xc
	EVENT_ID_HttpService_HTTPRequestTraceTaskZeroSend          = 0xd
	EVENT_ID_HttpService_HTTPRequestTraceTaskLastSndError      = 0xe
)

const (
	DD_ETW_TRACE_PROVIDER_HttpService int64 = 0x1
	DD_ETW_TRACE_PROVIDER_TCPIP             = 0x2
	DD_ETW_TRACE_PROVIDER_UDP               = 0x4
	DD_ETW_TRACE_PROVIDER_DNS               = 0x8
)

Functions

func BytesFormat

func BytesFormat(b uint64) string

BytesFormat converts a uint64 into a nice string

func FormatGUID

func FormatGUID(guid DDGUID) string

FormatGUID converts a guid structure to a go string

func FormatUInt

func FormatUInt(num uint64) string

FormatUInt converts a uint64 to a string with commas in every 3 orders of magnitude.

func FormatUnixTime

func FormatUnixTime(t uint64) string

FormatUnixTime takes a unix timestamp and returns a human readable string

func GoBytes

func GoBytes(data unsafe.Pointer, len int) []byte

GoBytes is similar to C.GoBytes but reuses the original buffer instead of making a copy

func HTTPMethodToStr

func HTTPMethodToStr(httpMethod uint32) string

HTTPMethodToStr converts the integer representation of the method to string

func HTTPVerbToStr

func HTTPVerbToStr(httVerb uint32) string

HTTPVerbToStr converts the integer verb type to a human readable string

func ParseUnicodeString

func ParseUnicodeString(data []byte, offset int) (val string, nextOffset int, valFound bool, foundTermZeroIdx int)

ParseUnicodeString takes a slice of bytes and converts it to a string

func VerbToMethod

func VerbToMethod(verb uint32) uint32

VerbToMethod converts an http verb to a method

Types

type DDEtwEvent

type DDEtwEvent struct {
	Pad1           [12]int8
	Pid            uint32
	TimeStamp      uint64
	ProviderId     DDGUID
	Id             uint16
	Version        uint8
	Channel        uint8
	Level          uint8
	Opcode         uint8
	Task           uint16
	Keyword        uint64
	Pad2           [8]uint8
	ActivityId     DDGUID
	Pad3           [6]uint8
	UserDataLength uint16
	Pad4           [8]uint8
	UserData       *uint8
}

type DDEtwEventInfo

type DDEtwEventInfo struct {
	Event             *DDEtwEvent
	Provider          uint64
	RelatedActivityId *DDGUID
}

type DDGUID

type DDGUID struct {
	Data1 uint32
	Data2 uint16
	Data3 uint16
	Data4 [8]uint8
}