Example #1
0
        public async Task TestForwardManifest()
        {
            ProviderGuid guid = null;

            Assert.IsTrue(ProviderGuid.TryParse("Microsoft-Windows-WMI-Activity", out guid));
            var forwarder = Forwarder.Build(guid);

            var writer = new TestWriter();

            writer.OnWrite += async(Dictionary <string, object> eventData) =>
            {
                // Test if correctly parsed
                Assert.AreEqual(eventData["Commandline"], "cmd.exe");
            };

            await forwarder.Forward(new TestEventRecord
            {
                Id           = 23,
                ProviderName = "Microsoft-Windows-WMI-Activity",
                ProviderId   = Guid.Parse("1418ef04-b0b4-4623-bf7e-d74ab47bbdaa"),
                Fields       = new Dictionary <string, object>
                {
                    { "Commandline", "cmd.exe" }
                }
            }, writer);
        }
Example #2
0
        public async Task TestForwardTracelogging()
        {
            ProviderGuid guid = null;

            Assert.IsTrue(ProviderGuid.TryParse("TL{8e805eb3-6a8f-4a1e-90fa-a831d94e54a1}", out guid));
            var forwarder = Forwarder.Build(guid);

            var writer = new TestWriter();

            writer.OnWrite += async(Dictionary <string, object> eventData) =>
            {
                // Test if correctly parsed
                Assert.AreEqual(eventData["Test"], "Test");
            };

            await forwarder.Forward(new TestEventRecord
            {
                Id           = 23,
                ProviderName = "TraceLogging",
                ProviderId   = Guid.Parse("8e805eb3-6a8f-4a1e-90fa-a831d94e54a1"),
                Fields       = new Dictionary <string, object>
                {
                    { "Test", "Test" }
                },
                // Add a property of type 1 => Unicode String
                Properties = new List <Property> {
                    new Property("Test", 1)
                }
            }, writer);
        }
Example #3
0
        public async Task TestForwardManifestWithFilterKo()
        {
            ProviderGuid guid = null;

            Assert.IsTrue(ProviderGuid.TryParse("Microsoft-Windows-WMI-Activity", out guid));
            var forwarder = Forwarder.Build(guid);

            var writer = new TestWriter();

            writer.OnWrite += async(Dictionary <string, object> eventData) =>
            {
                // this code does not be reached
                throw new AssertFailedException();
            };

            forwarder.AddFilter("Commandline", "toto.exe");

            await forwarder.Forward(new TestEventRecord
            {
                Id           = 23,
                ProviderName = "Microsoft-Windows-WMI-Activity",
                ProviderId   = Guid.Parse("1418ef04-b0b4-4623-bf7e-d74ab47bbdaa"),
                Fields       = new Dictionary <string, object>
                {
                    { "Commandline", "cmd.exe" }
                }
            }, writer);
        }
Example #4
0
        public void TestParseWPPOk()
        {
            ProviderGuid guid = null;

            Assert.IsTrue(ProviderGuid.TryParse("WPP{8e805eb3-6a8f-4a1e-90fa-a831d94e54a1}", out guid));
            Assert.AreEqual(guid.Type, ProviderGuid.ProviderType.WPP);
            Assert.AreEqual(guid.Guid, Guid.Parse("8e805eb3-6a8f-4a1e-90fa-a831d94e54a1"));
        }
Example #5
0
        public void TestParseKnownNamed()
        {
            ProviderGuid guid = null;

            Assert.IsTrue(ProviderGuid.TryParse("Microsoft-Windows-WMI-Activity", out guid));
            Assert.AreEqual(guid.Type, ProviderGuid.ProviderType.Manifest);
            Assert.AreEqual(guid.Guid, Guid.Parse("1418ef04-b0b4-4623-bf7e-d74ab47bbdaa"));
        }
Example #6
0
        public void TestBuildTWPPForwarder()
        {
            ProviderGuid guid = null;

            Assert.IsTrue(ProviderGuid.TryParse("WPP{8e805eb3-6a8f-4a1e-90fa-a831d94e54a1}", out guid));
            var forwarder = Forwarder.Build(guid);

            Assert.IsInstanceOfType(forwarder.Parser, typeof(NullParser));
        }
Example #7
0
        public void TestBuildManifestForwarder()
        {
            ProviderGuid guid = null;

            Assert.IsTrue(ProviderGuid.TryParse("Microsoft-Windows-WMI-Activity", out guid));
            var forwarder = Forwarder.Build(guid);

            Assert.IsInstanceOfType(forwarder.Parser, typeof(ManifestParser));
        }
Example #8
0
        public bool Equals(EtwProvider other)
        {
            if (other == null)
            {
                return(false);
            }

            return(ProviderGuid.Equals(other.ProviderGuid));
        }
Example #9
0
 /// <summary>
 ///     Called to register this attribute with the given context.  The context
 ///     contains the location where the registration inforomation should be placed.
 ///     It also contains other information such as the type being registered and path information.
 /// </summary>
 public override void Register(RegistrationContext context)
 {
     if (null == context)
     {
         throw new ArgumentNullException("context");
     }
     using (Key childKey = context.CreateKey(ProviderRegKey)) {
         childKey.SetValue("GUID", ProviderGuid.ToString("B"));
         childKey.SetValue("AddItemLanguageName", AddItemLanguageName);
         childKey.SetValue("DefaultExtension", DefaultExtension);
         childKey.SetValue("ShortLanguageName", ShortLanguageName);
         childKey.SetValue("TemplateFolderName", TemplateFolderName);
         if (!string.IsNullOrEmpty(AdditionalExtensions))
         {
             childKey.SetValue("AdditionalExtensions", AdditionalExtensions);
         }
     }
 }
Example #10
0
        public void TestParseUnknownType()
        {
            ProviderGuid guid = null;

            Assert.IsFalse(ProviderGuid.TryParse("FOO{8e805eb3-6a8f-4a1e-90fa-a831d94e54a1}", out guid));
        }
Example #11
0
        public void TestParseTLBadGuid()
        {
            ProviderGuid guid = null;

            Assert.IsFalse(ProviderGuid.TryParse("TL{123}", out guid));
        }
Example #12
0
        public void TestParseUnknownNamed()
        {
            ProviderGuid guid = null;

            Assert.IsFalse(ProviderGuid.TryParse("foo", out guid));
        }
Example #13
0
 public override int GetHashCode()
 {
     return(ProviderGuid.GetHashCode());
 }