private static Dictionary <Guid, EventTraceProvider> GetProvidersInternal()
{
int retry_count = 10;
int buffer_length = 1024;
Dictionary <Guid, EventTraceProvider> providers = new Dictionary <Guid, EventTraceProvider>();
while (retry_count-- > 0)
{
using (var buffer = new SafeStructureInOutBuffer <PROVIDER_ENUMERATION_INFO>(buffer_length, false))
{
Win32Error error = Win32NativeMethods.TdhEnumerateProviders(buffer, ref buffer_length);
if (error == Win32Error.ERROR_INSUFFICIENT_BUFFER)
{
continue;
}
if (error != Win32Error.SUCCESS)
{
error.ToNtException();
}
var result = buffer.Result;
var data = buffer.Data;
TRACE_PROVIDER_INFO[] infos = new TRACE_PROVIDER_INFO[result.NumberOfProviders];
buffer.Data.ReadArray(0, infos, 0, infos.Length);
foreach (var info in infos)
{
if (!providers.ContainsKey(info.ProviderGuid))
{
providers.Add(info.ProviderGuid,
new EventTraceProvider(info.ProviderGuid,
buffer.ReadNulTerminatedUnicodeString(info.ProviderNameOffset),
info.SchemaSource == 0));
}
}
break;
}
}
foreach (var guid in GetTraceGuids())
{
if (!providers.ContainsKey(guid))
{
providers.Add(guid, new EventTraceProvider(guid));
}
}
using (var key = NtKey.Open(@"\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Security",
null, KeyAccessRights.QueryValue, KeyCreateOptions.NonVolatile, false))
{
if (key.IsSuccess)
{
foreach (var value in key.Result.QueryValues())
{
if (Guid.TryParse(value.Name, out Guid id) && !providers.ContainsKey(id))
{
providers.Add(id, new EventTraceProvider(id,
SecurityDescriptor.Parse(value.Data, false).GetResultOrDefault()));
}
}
}
}
return(providers);
}
/// <summary>
/// Get the list of registered trace providers.
/// </summary>
/// <returns>The list of trace providers.</returns>
public static IEnumerable <EventTraceProvider> GetProviders()
{
int retry_count = 10;
int buffer_length = 1024;
Dictionary <Guid, EventTraceProvider> providers = new Dictionary <Guid, EventTraceProvider>();
while (retry_count-- > 0)
{
using (var buffer = new SafeStructureInOutBuffer <PROVIDER_ENUMERATION_INFO>(buffer_length, false))
{
Win32Error error = Win32NativeMethods.TdhEnumerateProviders(buffer, ref buffer_length);
if (error == Win32Error.ERROR_INSUFFICIENT_BUFFER)
{
continue;
}
if (error != Win32Error.SUCCESS)
{
error.ToNtException();
}
var result = buffer.Result;
var data = buffer.Data;
TRACE_PROVIDER_INFO[] infos = new TRACE_PROVIDER_INFO[result.NumberOfProviders];
buffer.Data.ReadArray(0, infos, 0, infos.Length);
foreach (var info in infos)
{
if (!providers.ContainsKey(info.ProviderGuid))
{
providers.Add(info.ProviderGuid,
new EventTraceProvider(info.ProviderGuid,
buffer.ReadNulTerminatedUnicodeString(info.ProviderNameOffset),
info.SchemaSource == 0));
}
}
break;
}
}
foreach (var guid in GetTraceGuids())
{
if (!providers.ContainsKey(guid))
{
providers.Add(guid, new EventTraceProvider(guid));
}
}
return(providers.Values);
}
