| Wireshark 4.7.0 The Wireshark network protocol analyzer

Loading...
Searching...
No Matches
etw_message.h
Go to the documentation of this file.
1
12#ifndef __W_ETW_MESSAGE_H__
13#define __W_ETW_MESSAGE_H__
14
15#include <glib.h>
16
17#include <windows.h>
18#include <SDKDDKVer.h>
19#include <strsafe.h>
20#include <evntcons.h>
21#include <tdh.h>
22#include <stdlib.h>
23
24#define MAX_SMALL_BUFFER 4
25#define MAX_LOG_LINE_LENGTH 1024
26#define MAX_KEY_LENGTH 64
27
28 typedef struct Property_Key_Value
29{
30 WCHAR key[MAX_KEY_LENGTH];
31 WCHAR value[MAX_LOG_LINE_LENGTH];
32} PROPERTY_KEY_VALUE;
33
40 typedef struct in6_addr {
41 union {
42 UCHAR Byte[16];
43 USHORT Word[8];
44 } u;
45} IN6_ADDR, *PIN6_ADDR, FAR* LPIN6_ADDR;
46
56VOID format_message(WCHAR* lpszMessage, PROPERTY_KEY_VALUE* propArray, DWORD dwPropertyCount, WCHAR* lpszOutBuffer, DWORD dwOutBufferCount);
57
68BOOL get_event_information(PEVENT_RECORD pEvent, PTRACE_EVENT_INFO* pInfo);
69
82PBYTE extract_properties(PEVENT_RECORD pEvent, PTRACE_EVENT_INFO pInfo, DWORD PointerSize, USHORT i, PBYTE pUserData, PBYTE pEndOfUserData, PROPERTY_KEY_VALUE* pExtract);
83
84#endif
85
86
87/*
88 * Editor modelines - https://www.wireshark.org/tools/modelines.html
89 *
90 * Local variables:
91 * c-basic-offset: 4
92 * tab-width: 8
93 * indent-tabs-mode: nil
94 * End:
95 *
96 * vi: set shiftwidth=4 tabstop=8 expandtab:
97 * :indentSize=4:tabSize=8:noTabs=true:
98 */
IN6_ADDR
struct in6_addr IN6_ADDR
Represents an IPv6 address in binary format.
get_event_information
BOOL get_event_information(PEVENT_RECORD pEvent, PTRACE_EVENT_INFO *pInfo)
Retrieves information about an event.
Definition etw_message.c:378
extract_properties
PBYTE extract_properties(PEVENT_RECORD pEvent, PTRACE_EVENT_INFO pInfo, DWORD PointerSize, USHORT i, PBYTE pUserData, PBYTE pEndOfUserData, PROPERTY_KEY_VALUE *pExtract)
Extracts properties from an event record.
Definition etw_message.c:205
format_message
VOID format_message(WCHAR *lpszMessage, PROPERTY_KEY_VALUE *propArray, DWORD dwPropertyCount, WCHAR *lpszOutBuffer, DWORD dwOutBufferCount)
Formats a message using property key-value pairs.
Definition etw_message.c:18
Property_Key_Value
Definition etw_message.h:29
in6_addr
Represents an IPv6 address in binary format.
Definition etw_message.h:40
in6_addr::Word
USHORT Word[8]
Definition etw_message.h:43
in6_addr::Byte
UCHAR Byte[16]
Definition etw_message.h:42