1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
|
// SPDX-License-Identifier: GPL-3.0-or-later
#include "perflib.h"
// --------------------------------------------------------------------------------
// Retrieve a buffer that contains the specified performance data.
// The pwszSource parameter determines the data that GetRegistryBuffer returns.
//
// Typically, when calling RegQueryValueEx, you can specify zero for the size of the buffer
// and the RegQueryValueEx will set your size variable to the required buffer size. However,
// if the source is "Global" or one or more object index values, you will need to increment
// the buffer size in a loop until RegQueryValueEx does not return ERROR_MORE_DATA.
static LPBYTE getPerformanceData(const char *pwszSource) {
static __thread DWORD size = 0;
static __thread LPBYTE buffer = NULL;
if(pwszSource == (const char *)0x01) {
freez(buffer);
buffer = NULL;
size = 0;
return NULL;
}
if(!size) {
size = 32 * 1024;
buffer = mallocz(size);
}
LONG status = ERROR_SUCCESS;
while ((status = RegQueryValueEx(HKEY_PERFORMANCE_DATA, pwszSource,
NULL, NULL, buffer, &size)) == ERROR_MORE_DATA) {
size *= 2;
buffer = reallocz(buffer, size);
}
if (status != ERROR_SUCCESS) {
nd_log(NDLS_COLLECTORS, NDLP_ERR, "RegQueryValueEx failed with 0x%x.\n", status);
return NULL;
}
return buffer;
}
void perflibFreePerformanceData(void) {
getPerformanceData((const char *)0x01);
}
// --------------------------------------------------------------------------------------------------------------------
// Retrieve the raw counter value and any supporting data needed to calculate
// a displayable counter value. Use the counter type to determine the information
// needed to calculate the value.
static BOOL getCounterData(
PERF_DATA_BLOCK *pDataBlock,
PERF_OBJECT_TYPE* pObject,
PERF_COUNTER_DEFINITION* pCounter,
PERF_COUNTER_BLOCK* pCounterDataBlock,
PRAW_DATA pRawData)
{
PVOID pData = NULL;
UNALIGNED ULONGLONG* pullData = NULL;
PERF_COUNTER_DEFINITION* pBaseCounter = NULL;
BOOL fSuccess = TRUE;
//Point to the raw counter data.
pData = (PVOID)((LPBYTE)pCounterDataBlock + pCounter->CounterOffset);
//Now use the PERF_COUNTER_DEFINITION.CounterType value to figure out what
//other information you need to calculate a displayable value.
switch (pCounter->CounterType) {
case PERF_COUNTER_COUNTER:
case PERF_COUNTER_QUEUELEN_TYPE:
case PERF_SAMPLE_COUNTER:
pRawData->Data = (ULONGLONG)(*(DWORD*)pData);
pRawData->Time = pDataBlock->PerfTime.QuadPart;
if (PERF_COUNTER_COUNTER == pCounter->CounterType || PERF_SAMPLE_COUNTER == pCounter->CounterType)
pRawData->Frequency = pDataBlock->PerfFreq.QuadPart;
break;
case PERF_OBJ_TIME_TIMER:
pRawData->Data = (ULONGLONG)(*(DWORD*)pData);
pRawData->Time = pObject->PerfTime.QuadPart;
break;
case PERF_COUNTER_100NS_QUEUELEN_TYPE:
pRawData->Data = *(UNALIGNED ULONGLONG *)pData;
pRawData->Time = pDataBlock->PerfTime100nSec.QuadPart;
break;
case PERF_COUNTER_OBJ_TIME_QUEUELEN_TYPE:
pRawData->Data = *(UNALIGNED ULONGLONG *)pData;
pRawData->Time = pObject->PerfTime.QuadPart;
break;
case PERF_COUNTER_TIMER:
case PERF_COUNTER_TIMER_INV:
case PERF_COUNTER_BULK_COUNT:
case PERF_COUNTER_LARGE_QUEUELEN_TYPE:
pullData = (UNALIGNED ULONGLONG *)pData;
pRawData->Data = *pullData;
pRawData->Time = pDataBlock->PerfTime.QuadPart;
if (pCounter->CounterType == PERF_COUNTER_BULK_COUNT)
pRawData->Frequency = pDataBlock->PerfFreq.QuadPart;
break;
case PERF_COUNTER_MULTI_TIMER:
case PERF_COUNTER_MULTI_TIMER_INV:
pullData = (UNALIGNED ULONGLONG *)pData;
pRawData->Data = *pullData;
pRawData->Frequency = pDataBlock->PerfFreq.QuadPart;
pRawData->Time = pDataBlock->PerfTime.QuadPart;
//These counter types have a second counter value that is adjacent to
//this counter value in the counter data block. The value is needed for
//the calculation.
if ((pCounter->CounterType & PERF_MULTI_COUNTER) == PERF_MULTI_COUNTER) {
++pullData;
pRawData->MultiCounterData = *(DWORD*)pullData;
}
break;
//These counters do not use any time reference.
case PERF_COUNTER_RAWCOUNT:
case PERF_COUNTER_RAWCOUNT_HEX:
case PERF_COUNTER_DELTA:
// some counters in these categories, have CounterSize = sizeof(ULONGLONG)
// but the official documentation always uses them as sizeof(DWORD)
pRawData->Data = (ULONGLONG)(*(DWORD*)pData);
pRawData->Time = 0;
break;
case PERF_COUNTER_LARGE_RAWCOUNT:
case PERF_COUNTER_LARGE_RAWCOUNT_HEX:
case PERF_COUNTER_LARGE_DELTA:
pRawData->Data = *(UNALIGNED ULONGLONG*)pData;
pRawData->Time = 0;
break;
//These counters use the 100ns time base in their calculation.
case PERF_100NSEC_TIMER:
case PERF_100NSEC_TIMER_INV:
case PERF_100NSEC_MULTI_TIMER:
case PERF_100NSEC_MULTI_TIMER_INV:
pullData = (UNALIGNED ULONGLONG*)pData;
pRawData->Data = *pullData;
pRawData->Time = pDataBlock->PerfTime100nSec.QuadPart;
//These counter types have a second counter value that is adjacent to
//this counter value in the counter data block. The value is needed for
//the calculation.
if ((pCounter->CounterType & PERF_MULTI_COUNTER) == PERF_MULTI_COUNTER) {
++pullData;
pRawData->MultiCounterData = *(DWORD*)pullData;
}
break;
//These counters use two data points, this value and one from this counter's
//base counter. The base counter should be the next counter in the object's
//list of counters.
case PERF_SAMPLE_FRACTION:
case PERF_RAW_FRACTION:
pRawData->Data = (ULONGLONG)(*(DWORD*)pData);
pBaseCounter = pCounter + 1; //Get base counter
if ((pBaseCounter->CounterType & PERF_COUNTER_BASE) == PERF_COUNTER_BASE) {
pData = (PVOID)((LPBYTE)pCounterDataBlock + pBaseCounter->CounterOffset);
pRawData->Time = (LONGLONG)(*(DWORD*)pData);
}
else
fSuccess = FALSE;
break;
case PERF_LARGE_RAW_FRACTION:
case PERF_PRECISION_SYSTEM_TIMER:
case PERF_PRECISION_100NS_TIMER:
case PERF_PRECISION_OBJECT_TIMER:
pRawData->Data = *(UNALIGNED ULONGLONG*)pData;
pBaseCounter = pCounter + 1;
if ((pBaseCounter->CounterType & PERF_COUNTER_BASE) == PERF_COUNTER_BASE) {
pData = (PVOID)((LPBYTE)pCounterDataBlock + pBaseCounter->CounterOffset);
pRawData->Time = *(LONGLONG*)pData;
}
else
fSuccess = FALSE;
break;
case PERF_AVERAGE_TIMER:
case PERF_AVERAGE_BULK:
pRawData->Data = *(UNALIGNED ULONGLONG*)pData;
pBaseCounter = pCounter+1;
if ((pBaseCounter->CounterType & PERF_COUNTER_BASE) == PERF_COUNTER_BASE) {
pData = (PVOID)((LPBYTE)pCounterDataBlock + pBaseCounter->CounterOffset);
pRawData->Time = *(DWORD*)pData;
}
else
fSuccess = FALSE;
if (pCounter->CounterType == PERF_AVERAGE_TIMER)
pRawData->Frequency = pDataBlock->PerfFreq.QuadPart;
break;
//These are base counters and are used in calculations for other counters.
//This case should never be entered.
case PERF_SAMPLE_BASE:
case PERF_AVERAGE_BASE:
case PERF_COUNTER_MULTI_BASE:
case PERF_RAW_BASE:
case PERF_LARGE_RAW_BASE:
pRawData->Data = 0;
pRawData->Time = 0;
fSuccess = FALSE;
break;
case PERF_ELAPSED_TIME:
pRawData->Data = *(UNALIGNED ULONGLONG*)pData;
pRawData->Time = pObject->PerfTime.QuadPart;
pRawData->Frequency = pObject->PerfFreq.QuadPart;
break;
//These counters are currently not supported.
case PERF_COUNTER_TEXT:
case PERF_COUNTER_NODATA:
case PERF_COUNTER_HISTOGRAM_TYPE:
default: // unknown counter types
pRawData->Data = 0;
pRawData->Time = 0;
fSuccess = FALSE;
break;
}
return fSuccess;
}
// --------------------------------------------------------------------------------------------------------------------
static inline BOOL isValidPointer(PERF_DATA_BLOCK *pDataBlock __maybe_unused, void *ptr __maybe_unused) {
#ifdef NETDATA_INTERNAL_CHECKS
return (PBYTE)ptr >= (PBYTE)pDataBlock + pDataBlock->TotalByteLength ? FALSE : TRUE;
#else
return TRUE;
#endif
}
static inline BOOL isValidStructure(PERF_DATA_BLOCK *pDataBlock __maybe_unused, void *ptr __maybe_unused, size_t length __maybe_unused) {
#ifdef NETDATA_INTERNAL_CHECKS
return (PBYTE)ptr + length > (PBYTE)pDataBlock + pDataBlock->TotalByteLength ? FALSE : TRUE;
#else
return TRUE;
#endif
}
static inline PERF_DATA_BLOCK *getDataBlock(BYTE *pBuffer) {
PERF_DATA_BLOCK *pDataBlock = (PERF_DATA_BLOCK *)pBuffer;
static WCHAR signature[] = { 'P', 'E', 'R', 'F' };
if(memcmp(pDataBlock->Signature, signature, sizeof(signature)) != 0) {
nd_log(NDLS_COLLECTORS, NDLP_ERR,
"WINDOWS: PERFLIB: Invalid data block signature.");
return NULL;
}
if(!isValidPointer(pDataBlock, (PBYTE)pDataBlock + pDataBlock->SystemNameOffset) ||
!isValidStructure(pDataBlock, (PBYTE)pDataBlock + pDataBlock->SystemNameOffset, pDataBlock->SystemNameLength)) {
nd_log(NDLS_COLLECTORS, NDLP_ERR,
"WINDOWS: PERFLIB: Invalid system name array.");
return NULL;
}
return pDataBlock;
}
static inline PERF_OBJECT_TYPE *getObjectType(PERF_DATA_BLOCK* pDataBlock, PERF_OBJECT_TYPE *lastObjectType) {
PERF_OBJECT_TYPE* pObjectType = NULL;
if(!lastObjectType)
pObjectType = (PERF_OBJECT_TYPE *)((PBYTE)pDataBlock + pDataBlock->HeaderLength);
else if (lastObjectType->TotalByteLength != 0)
pObjectType = (PERF_OBJECT_TYPE *)((PBYTE)lastObjectType + lastObjectType->TotalByteLength);
if(pObjectType && (!isValidPointer(pDataBlock, pObjectType) || !isValidStructure(pDataBlock, pObjectType, pObjectType->TotalByteLength))) {
nd_log(NDLS_COLLECTORS, NDLP_ERR,
"WINDOWS: PERFLIB: Invalid ObjectType!");
pObjectType = NULL;
}
return pObjectType;
}
inline PERF_OBJECT_TYPE *getObjectTypeByIndex(PERF_DATA_BLOCK *pDataBlock, DWORD ObjectNameTitleIndex) {
PERF_OBJECT_TYPE *po = NULL;
for(DWORD o = 0; o < pDataBlock->NumObjectTypes ; o++) {
po = getObjectType(pDataBlock, po);
if(po->ObjectNameTitleIndex == ObjectNameTitleIndex)
return po;
}
return NULL;
}
static inline PERF_INSTANCE_DEFINITION *getInstance(
PERF_DATA_BLOCK *pDataBlock,
PERF_OBJECT_TYPE *pObjectType,
PERF_COUNTER_BLOCK *lastCounterBlock
) {
PERF_INSTANCE_DEFINITION *pInstance;
if(!lastCounterBlock)
pInstance = (PERF_INSTANCE_DEFINITION *)((PBYTE)pObjectType + pObjectType->DefinitionLength);
else
pInstance = (PERF_INSTANCE_DEFINITION *)((PBYTE)lastCounterBlock + lastCounterBlock->ByteLength);
if(pInstance && (!isValidPointer(pDataBlock, pInstance) || !isValidStructure(pDataBlock, pInstance, pInstance->ByteLength))) {
nd_log(NDLS_COLLECTORS, NDLP_ERR,
"WINDOWS: PERFLIB: Invalid Instance Definition!");
pInstance = NULL;
}
return pInstance;
}
static inline PERF_COUNTER_BLOCK *getObjectTypeCounterBlock(
PERF_DATA_BLOCK *pDataBlock,
PERF_OBJECT_TYPE *pObjectType
) {
PERF_COUNTER_BLOCK *pCounterBlock = (PERF_COUNTER_BLOCK *)((PBYTE)pObjectType + pObjectType->DefinitionLength);
if(pCounterBlock && (!isValidPointer(pDataBlock, pCounterBlock) || !isValidStructure(pDataBlock, pCounterBlock, pCounterBlock->ByteLength))) {
nd_log(NDLS_COLLECTORS, NDLP_ERR,
"WINDOWS: PERFLIB: Invalid ObjectType CounterBlock!");
pCounterBlock = NULL;
}
return pCounterBlock;
}
static inline PERF_COUNTER_BLOCK *getInstanceCounterBlock(
PERF_DATA_BLOCK *pDataBlock,
PERF_OBJECT_TYPE *pObjectType,
PERF_INSTANCE_DEFINITION *pInstance
) {
(void)pObjectType;
PERF_COUNTER_BLOCK *pCounterBlock = (PERF_COUNTER_BLOCK *)((PBYTE)pInstance + pInstance->ByteLength);
if(pCounterBlock && (!isValidPointer(pDataBlock, pCounterBlock) || !isValidStructure(pDataBlock, pCounterBlock, pCounterBlock->ByteLength))) {
nd_log(NDLS_COLLECTORS, NDLP_ERR,
"WINDOWS: PERFLIB: Invalid Instance CounterBlock!");
pCounterBlock = NULL;
}
return pCounterBlock;
}
inline PERF_INSTANCE_DEFINITION *getInstanceByPosition(PERF_DATA_BLOCK *pDataBlock, PERF_OBJECT_TYPE *pObjectType, DWORD instancePosition) {
PERF_INSTANCE_DEFINITION *pi = NULL;
PERF_COUNTER_BLOCK *pc = NULL;
for(DWORD i = 0; i <= instancePosition ;i++) {
pi = getInstance(pDataBlock, pObjectType, pc);
pc = getInstanceCounterBlock(pDataBlock, pObjectType, pi);
}
return pi;
}
static inline PERF_COUNTER_DEFINITION *getCounterDefinition(PERF_DATA_BLOCK *pDataBlock, PERF_OBJECT_TYPE *pObjectType, PERF_COUNTER_DEFINITION *lastCounterDefinition) {
PERF_COUNTER_DEFINITION *pCounterDefinition = NULL;
if(!lastCounterDefinition)
pCounterDefinition = (PERF_COUNTER_DEFINITION *)((PBYTE)pObjectType + pObjectType->HeaderLength);
else
pCounterDefinition = (PERF_COUNTER_DEFINITION *)((PBYTE)lastCounterDefinition + lastCounterDefinition->ByteLength);
if(pCounterDefinition && (!isValidPointer(pDataBlock, pCounterDefinition) || !isValidStructure(pDataBlock, pCounterDefinition, pCounterDefinition->ByteLength))) {
nd_log(NDLS_COLLECTORS, NDLP_ERR,
"WINDOWS: PERFLIB: Invalid Counter Definition!");
pCounterDefinition = NULL;
}
return pCounterDefinition;
}
// --------------------------------------------------------------------------------------------------------------------
static inline BOOL getEncodedStringToUTF8(char *dst, size_t dst_len, DWORD CodePage, char *start, DWORD length) {
WCHAR *tempBuffer; // Temporary buffer for Unicode data
DWORD charsCopied = 0;
BOOL free_tempBuffer;
if (CodePage == 0) {
// Input is already Unicode (UTF-16)
tempBuffer = (WCHAR *)start;
charsCopied = length / sizeof(WCHAR); // Convert byte length to number of WCHARs
free_tempBuffer = FALSE;
}
else {
// Convert the multi-byte instance name to Unicode (UTF-16)
// Calculate maximum possible characters in UTF-16
int charCount = MultiByteToWideChar(CodePage, 0, start, (int)length, NULL, 0);
tempBuffer = (WCHAR *)malloc(charCount * sizeof(WCHAR));
if (!tempBuffer) return FALSE;
charsCopied = MultiByteToWideChar(CodePage, 0, start, (int)length, tempBuffer, charCount);
if (charsCopied == 0) {
free(tempBuffer);
dst[0] = '\0';
return FALSE;
}
free_tempBuffer = TRUE;
}
// Now convert from Unicode (UTF-16) to UTF-8
int bytesCopied = WideCharToMultiByte(CP_UTF8, 0, tempBuffer, (int)charsCopied, dst, (int)dst_len, NULL, NULL);
if (bytesCopied == 0) {
if (free_tempBuffer) free(tempBuffer);
dst[0] = '\0'; // Ensure the buffer is null-terminated even on failure
return FALSE;
}
dst[bytesCopied] = '\0'; // Ensure buffer is null-terminated
if (free_tempBuffer) free(tempBuffer); // Free temporary buffer if used
return TRUE;
}
inline BOOL getInstanceName(PERF_DATA_BLOCK *pDataBlock, PERF_OBJECT_TYPE *pObjectType, PERF_INSTANCE_DEFINITION *pInstance,
char *buffer, size_t bufferLen) {
(void)pDataBlock;
if (!pInstance || !buffer || !bufferLen) return FALSE;
return getEncodedStringToUTF8(buffer, bufferLen, pObjectType->CodePage,
((char *)pInstance + pInstance->NameOffset), pInstance->NameLength);
}
inline BOOL getSystemName(PERF_DATA_BLOCK *pDataBlock, char *buffer, size_t bufferLen) {
return getEncodedStringToUTF8(buffer, bufferLen, 0,
((char *)pDataBlock + pDataBlock->SystemNameOffset), pDataBlock->SystemNameLength);
}
inline bool ObjectTypeHasInstances(PERF_DATA_BLOCK *pDataBlock, PERF_OBJECT_TYPE *pObjectType) {
(void)pDataBlock;
return pObjectType->NumInstances != PERF_NO_INSTANCES && pObjectType->NumInstances > 0;
}
PERF_OBJECT_TYPE *perflibFindObjectTypeByName(PERF_DATA_BLOCK *pDataBlock, const char *name) {
PERF_OBJECT_TYPE* pObjectType = NULL;
for(DWORD o = 0; o < pDataBlock->NumObjectTypes; o++) {
pObjectType = getObjectType(pDataBlock, pObjectType);
if(strcmp(name, RegistryFindNameByID(pObjectType->ObjectNameTitleIndex)) == 0)
return pObjectType;
}
return NULL;
}
PERF_INSTANCE_DEFINITION *perflibForEachInstance(PERF_DATA_BLOCK *pDataBlock, PERF_OBJECT_TYPE *pObjectType, PERF_INSTANCE_DEFINITION *lastInstance) {
if(!ObjectTypeHasInstances(pDataBlock, pObjectType))
return NULL;
return getInstance(pDataBlock, pObjectType,
lastInstance ?
getInstanceCounterBlock(pDataBlock, pObjectType, lastInstance) :
NULL );
}
bool perflibGetInstanceCounter(PERF_DATA_BLOCK *pDataBlock, PERF_OBJECT_TYPE *pObjectType, PERF_INSTANCE_DEFINITION *pInstance, COUNTER_DATA *cd) {
PERF_COUNTER_DEFINITION *pCounterDefinition = NULL;
for(DWORD c = 0; c < pObjectType->NumCounters ;c++) {
pCounterDefinition = getCounterDefinition(pDataBlock, pObjectType, pCounterDefinition);
if(!pCounterDefinition) {
nd_log(NDLS_COLLECTORS, NDLP_ERR,
"WINDOWS: PERFLIB: Cannot read counter definition No %u (out of %u)",
c, pObjectType->NumCounters);
break;
}
if(cd->id) {
if(cd->id != pCounterDefinition->CounterNameTitleIndex)
continue;
}
else {
if(strcmp(RegistryFindNameByID(pCounterDefinition->CounterNameTitleIndex), cd->key) != 0)
continue;
cd->id = pCounterDefinition->CounterNameTitleIndex;
}
cd->current.CounterType = cd->OverwriteCounterType ? cd->OverwriteCounterType : pCounterDefinition->CounterType;
PERF_COUNTER_BLOCK *pCounterBlock = getInstanceCounterBlock(pDataBlock, pObjectType, pInstance);
cd->previous = cd->current;
cd->updated = getCounterData(pDataBlock, pObjectType, pCounterDefinition, pCounterBlock, &cd->current);
return cd->updated;
}
cd->previous = cd->current;
cd->current = RAW_DATA_EMPTY;
cd->updated = false;
return false;
}
bool perflibGetObjectCounter(PERF_DATA_BLOCK *pDataBlock, PERF_OBJECT_TYPE *pObjectType, COUNTER_DATA *cd) {
PERF_COUNTER_DEFINITION *pCounterDefinition = NULL;
for(DWORD c = 0; c < pObjectType->NumCounters ;c++) {
pCounterDefinition = getCounterDefinition(pDataBlock, pObjectType, pCounterDefinition);
if(!pCounterDefinition) {
nd_log(NDLS_COLLECTORS, NDLP_ERR,
"WINDOWS: PERFLIB: Cannot read counter definition No %u (out of %u)",
c, pObjectType->NumCounters);
break;
}
if(cd->id) {
if(cd->id != pCounterDefinition->CounterNameTitleIndex)
continue;
}
else {
if(strcmp(RegistryFindNameByID(pCounterDefinition->CounterNameTitleIndex), cd->key) != 0)
continue;
cd->id = pCounterDefinition->CounterNameTitleIndex;
}
cd->current.CounterType = cd->OverwriteCounterType ? cd->OverwriteCounterType : pCounterDefinition->CounterType;
PERF_COUNTER_BLOCK *pCounterBlock = getObjectTypeCounterBlock(pDataBlock, pObjectType);
cd->previous = cd->current;
cd->updated = getCounterData(pDataBlock, pObjectType, pCounterDefinition, pCounterBlock, &cd->current);
return cd->updated;
}
cd->previous = cd->current;
cd->current = RAW_DATA_EMPTY;
cd->updated = false;
return false;
}
PERF_DATA_BLOCK *perflibGetPerformanceData(DWORD id) {
char source[24];
snprintfz(source, sizeof(source), "%u", id);
LPBYTE pData = (LPBYTE)getPerformanceData((id > 0) ? source : NULL);
if (!pData) return NULL;
PERF_DATA_BLOCK *pDataBlock = getDataBlock(pData);
if(!pDataBlock) return NULL;
return pDataBlock;
}
int perflibQueryAndTraverse(DWORD id,
perflib_data_cb dataCb,
perflib_object_cb objectCb,
perflib_instance_cb instanceCb,
perflib_instance_counter_cb instanceCounterCb,
perflib_counter_cb counterCb,
void *data) {
int counters = -1;
PERF_DATA_BLOCK *pDataBlock = perflibGetPerformanceData(id);
if(!pDataBlock) goto cleanup;
bool do_data = true;
if(dataCb)
do_data = dataCb(pDataBlock, data);
PERF_OBJECT_TYPE* pObjectType = NULL;
for(DWORD o = 0; do_data && o < pDataBlock->NumObjectTypes; o++) {
pObjectType = getObjectType(pDataBlock, pObjectType);
if(!pObjectType) {
nd_log(NDLS_COLLECTORS, NDLP_ERR,
"WINDOWS: PERFLIB: Cannot read object type No %d (out of %d)",
o, pDataBlock->NumObjectTypes);
break;
}
bool do_object = true;
if(objectCb)
do_object = objectCb(pDataBlock, pObjectType, data);
if(!do_object)
continue;
if(ObjectTypeHasInstances(pDataBlock, pObjectType)) {
PERF_INSTANCE_DEFINITION *pInstance = NULL;
PERF_COUNTER_BLOCK *pCounterBlock = NULL;
for(LONG i = 0; i < pObjectType->NumInstances ;i++) {
pInstance = getInstance(pDataBlock, pObjectType, pCounterBlock);
if(!pInstance) {
nd_log(NDLS_COLLECTORS, NDLP_ERR,
"WINDOWS: PERFLIB: Cannot read Instance No %d (out of %d)",
i, pObjectType->NumInstances);
break;
}
pCounterBlock = getInstanceCounterBlock(pDataBlock, pObjectType, pInstance);
if(!pCounterBlock) {
nd_log(NDLS_COLLECTORS, NDLP_ERR,
"WINDOWS: PERFLIB: Cannot read CounterBlock of instance No %d (out of %d)",
i, pObjectType->NumInstances);
break;
}
bool do_instance = true;
if(instanceCb)
do_instance = instanceCb(pDataBlock, pObjectType, pInstance, data);
if(!do_instance)
continue;
PERF_COUNTER_DEFINITION *pCounterDefinition = NULL;
for(DWORD c = 0; c < pObjectType->NumCounters ;c++) {
pCounterDefinition = getCounterDefinition(pDataBlock, pObjectType, pCounterDefinition);
if(!pCounterDefinition) {
nd_log(NDLS_COLLECTORS, NDLP_ERR,
"WINDOWS: PERFLIB: Cannot read counter definition No %u (out of %u)",
c, pObjectType->NumCounters);
break;
}
RAW_DATA sample = {
.CounterType = pCounterDefinition->CounterType,
};
if(getCounterData(pDataBlock, pObjectType, pCounterDefinition, pCounterBlock, &sample)) {
// DisplayCalculatedValue(&sample, &sample);
if(instanceCounterCb) {
instanceCounterCb(pDataBlock, pObjectType, pInstance, pCounterDefinition, &sample, data);
counters++;
}
}
}
if(instanceCb)
instanceCb(pDataBlock, pObjectType, NULL, data);
}
}
else {
PERF_COUNTER_BLOCK *pCounterBlock = getObjectTypeCounterBlock(pDataBlock, pObjectType);
PERF_COUNTER_DEFINITION *pCounterDefinition = NULL;
for(DWORD c = 0; c < pObjectType->NumCounters ;c++) {
pCounterDefinition = getCounterDefinition(pDataBlock, pObjectType, pCounterDefinition);
if(!pCounterDefinition) {
nd_log(NDLS_COLLECTORS, NDLP_ERR,
"WINDOWS: PERFLIB: Cannot read counter definition No %u (out of %u)",
c, pObjectType->NumCounters);
break;
}
RAW_DATA sample = {
.CounterType = pCounterDefinition->CounterType,
};
if(getCounterData(pDataBlock, pObjectType, pCounterDefinition, pCounterBlock, &sample)) {
// DisplayCalculatedValue(&sample, &sample);
if(counterCb) {
counterCb(pDataBlock, pObjectType, pCounterDefinition, &sample, data);
counters++;
}
}
}
}
if(objectCb)
objectCb(pDataBlock, NULL, data);
}
cleanup:
return counters;
}
|