| Wireshark 4.7.0 The Wireshark network protocol analyzer

Loading...
Searching...
No Matches
etw_message.h
Go to the documentation of this file.
1
12#ifndef __W_ETW_MESSAGE_H__
13#define __W_ETW_MESSAGE_H__
14
15#include <glib.h>
16
17#include <windows.h>
18#include <SDKDDKVer.h>
19#include <strsafe.h>
20#include <evntcons.h>
21#include <tdh.h>
22#include <stdlib.h>
23
24#define MAX_SMALL_BUFFER 4
25#define MAX_LOG_LINE_LENGTH 1024
26#define MAX_KEY_LENGTH 64
27
28 typedef struct Property_Key_Value
29{
30 WCHAR key[MAX_KEY_LENGTH];
31 WCHAR value[MAX_LOG_LINE_LENGTH];
32} PROPERTY_KEY_VALUE;
33
40 typedef struct in6_addr {
41 union {
42 UCHAR Byte[16];
43 USHORT Word[8];
44 } u;
45} IN6_ADDR, *PIN6_ADDR, FAR* LPIN6_ADDR;
46
47VOID format_message(WCHAR* lpszMessage, PROPERTY_KEY_VALUE* propArray, DWORD dwPropertyCount, WCHAR* lpszOutBuffer, DWORD dwOutBufferCount);
48BOOL get_event_information(PEVENT_RECORD pEvent, PTRACE_EVENT_INFO* pInfo);
49PBYTE extract_properties(PEVENT_RECORD pEvent, PTRACE_EVENT_INFO pInfo, DWORD PointerSize, USHORT i, PBYTE pUserData, PBYTE pEndOfUserData, PROPERTY_KEY_VALUE* pExtract);
50
51#endif
52
53
54/*
55 * Editor modelines - https://www.wireshark.org/tools/modelines.html
56 *
57 * Local variables:
58 * c-basic-offset: 4
59 * tab-width: 8
60 * indent-tabs-mode: nil
61 * End:
62 *
63 * vi: set shiftwidth=4 tabstop=8 expandtab:
64 * :indentSize=4:tabSize=8:noTabs=true:
65 */
IN6_ADDR
struct in6_addr IN6_ADDR
Represents an IPv6 address in binary format.
Property_Key_Value
Definition etw_message.h:29
in6_addr
Represents an IPv6 address in binary format.
Definition etw_message.h:40
in6_addr::Word
USHORT Word[8]
Definition etw_message.h:43
in6_addr::Byte
UCHAR Byte[16]
Definition etw_message.h:42