Example #1
0
        internal static string FormatStringEvent(int formatVersion, EventRecord eventRecord, out string eventType, out string eventText)
        {
            ApplicationDataReader reader = new ApplicationDataReader(eventRecord.UserData, eventRecord.UserDataLength);
            string text = reader.ReadUnicodeString();
            string levelString;

            switch (eventRecord.EventHeader.EventDescriptor.Level)
            {
            case 2:
                levelString = "Error";
                break;

            case 3:
                levelString = "Warning";
                break;

            case 4:
                levelString = "Informational";
                break;

            case 5:
                levelString = "Verbose";
                break;

            default:
                levelString = "Unknown";
                break;
            }

            eventText = text;

            string taskName;

            switch (formatVersion)
            {
            case 0:
            {
                eventType = eventRecord.EventHeader.ProviderId.ToString(string.Empty);
                taskName  = StringEventTaskName;
            }
            break;

            default:
            {
                eventType = String.Empty;
                taskName  = String.Empty;
            }
            break;
            }

            return(EventFormatter.FormatEvent((EventFormatter.FormatVersion)formatVersion, CultureInfo.InvariantCulture, eventRecord, null, levelString, taskName, String.Empty, String.Empty, eventType, text));
        }
        public byte[] ReadBytes(int length)
        {
            byte[] value = new byte[length];
            if (this.verifyReads)
            {
                VerifyRead(length);
            }

            fixed(byte *pb = value)
            {
                ApplicationDataReader.MemCopy((byte *)this.data, pb, length);
            }

            this.data = (IntPtr)(((byte *)this.data) + length);
            return(value);
        }
Example #3
0
        /// <summary>
        /// Processes an EventSource event embedded in eventstream.
        /// </summary>
        /// <param name="eventRecord"></param>
        /// <returns>true if its an eventsource event</returns>
        private bool ProcessEventSourceEvent(EventRecord eventRecord)
        {
            if (WellKnownProviderList.IsDynamicProvider(eventRecord.EventHeader.ProviderId))
            {
                if (EventSourceHelper.CheckForDynamicManifest(eventRecord.EventHeader.EventDescriptor))
                {
                    ApplicationDataReader reader = new ApplicationDataReader(eventRecord.UserData,
                                                                             eventRecord.UserDataLength);
                    byte[] rawData          = reader.ReadBytes(eventRecord.UserDataLength);
                    byte[] completeManifest = partialManifest.AddChunk(rawData);

                    if (completeManifest != null)
                    {
                        this.LoadManifest(completeManifest);
                    }

                    return(true);
                }
            }

            return(false);
        }
Example #4
0
        private static bool GetRelatedActivityId(IntPtr extendedDataPtr, out Guid relatedActivityId)
        {
            relatedActivityId = Guid.Empty;

            ApplicationDataReader reader = new ApplicationDataReader(extendedDataPtr, (ushort)ExtendedDataSize);
            ushort reserved1             = reader.ReadUInt16();
            ushort extType = reader.ReadUInt16();

            if (EventHeaderExtTypeRelatedActivityId != extType)
            {
                return(false);
            }
            ushort reserved2 = reader.ReadUInt16();
            ushort dataSize  = reader.ReadUInt16();
            ulong  dataPtr   = reader.ReadUInt64();

            ApplicationDataReader relatedActivityIdReader = new ApplicationDataReader(
                new IntPtr((long)dataPtr),
                dataSize);

            relatedActivityId = relatedActivityIdReader.ReadGuid();
            return(true);
        }
Example #5
0
        public string FormatField(IFormatProvider provider, ApplicationDataReader reader, ValueMaps valueMaps)
        {
            if (provider == null)
            {
                throw new ArgumentNullException("provider");
            }

            if (reader == null)
            {
                throw new ArgumentNullException("reader");
            }

            if (valueMaps == null)
            {
                throw new ArgumentNullException("valueMaps");
            }

            if (this.skipFormatting)
            {
                return("");
            }

            try
            {
                switch (this.inType)
                {
                case FieldType.UnicodeString:
                    return(reader.ReadUnicodeString());

                case FieldType.AnsiString:
                    return(reader.ReadAnsiString());

                case FieldType.Boolean:
                    return(reader.ReadBoolean().ToString());

                case FieldType.UInt8:
                    return(reader.ReadUInt8().ToString(provider));

                case FieldType.UInt16:
                    return(reader.ReadUInt16().ToString(provider));

                case FieldType.UInt32:
                    uint key = reader.ReadUInt32();

                    if (!string.IsNullOrEmpty(this.mapName))
                    {
                        string stringValue = null;
                        if (valueMaps.TryGetValue(this.mapName, key, out stringValue))
                        {
                            return(stringValue);
                        }
                    }

                    return(key.ToString(provider));

                case FieldType.UInt64:
                    UInt64 value = reader.ReadUInt64();

                    if (this.omitIfZero && value == 0)
                    {
                        return(System.String.Empty);
                    }

                    return(value.ToString(provider));

                case FieldType.Int8:
                    return(reader.ReadInt8().ToString(provider));

                case FieldType.Int16:
                    return(reader.ReadInt16().ToString(provider));

                case FieldType.Int32:
                    return(reader.ReadInt32().ToString(provider));

                case FieldType.Int64:
                    return(reader.ReadInt64().ToString(provider));

                case FieldType.HexInt32:
                    return(reader.ReadUInt32().ToString("x", provider));

                case FieldType.HexInt64:
                    value = reader.ReadUInt64();

                    if (this.omitIfZero && value == 0)
                    {
                        return(System.String.Empty);
                    }

                    return(value.ToString("x", provider));

                case FieldType.Float:
                    return(reader.ReadFloat().ToString(provider));

                case FieldType.Double:
                    return(reader.ReadDouble().ToString(provider));

                case FieldType.DateTime:
                    return(reader.ReadFileTime().ToString("yyyy-M-d HH:mm:ss.fff", provider));

                case FieldType.Guid:
                    return(reader.ReadGuid().ToString("D"));

                case FieldType.LargeInteger:
                    UInt64 highValue = reader.ReadUInt64();
                    UInt64 lowValue  = reader.ReadUInt64();

                    if (highValue == 0)
                    {
                        return(lowValue.ToString("x", provider));
                    }

                    return(highValue.ToString("x", provider) + lowValue.ToString("x16", provider));

                default:
                    return("<unknown type " + this.inType + ">");
                }
            }
            catch (OverflowException)
            {
                return("<unknown " + this.inType + " value>");
            }
            catch (ArgumentException e)
            {
                if (!string.IsNullOrEmpty(Environment.GetEnvironmentVariable("WeakETLReader")))
                {
                    return(string.Format("(!!! Invalid value for field {0}: {1} !!!)", this.Name, e.Message));
                }
                throw;
            }
        }
Example #6
0
 public string FormatField(ApplicationDataReader reader, ValueMaps valueMaps)
 {
     return(this.FormatField(CultureInfo.InvariantCulture, reader, valueMaps));
 }
        internal string FormatEvent(EventStack stack, EventRecord eventRecord, ValueMaps valueMaps, out string eventType, out string eventText, int formatVersion)
        {
            try
            {
                // This inefficient code is only a placeholder
                // once we make it work on all primitive types this will be
                // pre-compiled Linq Expression EventRecord->String
                ApplicationDataReader reader = new ApplicationDataReader(eventRecord.UserData, eventRecord.UserDataLength);

                eventType = this.eventName;
                string type = this.originalEventName;
                string id   = string.Empty;

                string[] values = new string[fields.Count];
                for (int i = 0; i < this.fields.Count; i++)
                {
                    FieldDefinition fieldDef = this.fields[i];
                    values[i] = fieldDef.FormatField(CultureInfo.InvariantCulture, reader, valueMaps);
                }

                if (this.isParentEvent)
                {
                    for (int i = this.fields.Count - 1; i >= 0; i--)
                    {
                        if (this.fields[i].IsContextField)
                        {
                            values[i] = stack.Pop(eventRecord.EventHeader.ProcessId, eventRecord.EventHeader.ThreadId, values[i], this.firstContextFieldIndex == i);
                            if (values[i] == null)
                            {
                                values[i] = " !!!Context Data Not Found!!! ";
                            }
                        }
                    }
                }

                if (this.typeFieldIndex != -1)
                {
                    type = eventType = values[typeFieldIndex];
                }

                eventText = FormatWithFieldValues(values, out id);

                if (id.Length > 0)
                {
                    type += "@" + id;
                }

                if (this.isChildEvent)
                {
                    stack.Push(eventRecord.EventHeader.ProcessId, eventRecord.EventHeader.ThreadId, values[0], eventText);
                    return(null);
                }

                return(EventFormatter.FormatEvent(
                           string.IsNullOrEmpty(this.eventSourceName) ? (EventFormatter.FormatVersion)formatVersion : EventFormatter.FormatVersion.EventSourceBasedFormatting,
                           CultureInfo.InvariantCulture,
                           eventRecord,
                           this.eventSourceName,
                           this.level,
                           this.taskName,
                           this.opcodeName,
                           this.keywordsName,
                           type,
                           eventText));
            }
            catch (Exception e)
            {
                throw new InvalidDataException(
                          string.Format(CultureInfo.InvariantCulture, "Unable to parse event {0}.{1} id {2} eventsource {3}", this.TaskName, this.EventName, this.id, this.eventSourceName),
                          e);
            }
        }