overby.me
this repo has no description
1/*
2 * Copyright (c) 2018 Apple Inc. All rights reserved.
3 *
4 * @APPLE_LICENSE_HEADER_START@
5 *
6 * This file contains Original Code and/or Modifications of Original Code
7 * as defined in and that are subject to the Apple Public Source License
8 * Version 2.0 (the 'License'). You may not use this file except in
9 * compliance with the License. Please obtain a copy of the License at
10 * http://www.opensource.apple.com/apsl/ and read it before using this
11 * file.
12 *
13 * The Original Code and all software distributed under the License are
14 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
15 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
16 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
17 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
18 * Please see the License for the specific language governing rights and
19 * limitations under the License.
20 *
21 * @APPLE_LICENSE_HEADER_END@
22 */
23
24#import <Foundation/Foundation.h>
25#import <EventFactory/EventFactory.h>
26
27#import "KernelEventMonitorParser.h"
28
29#define TokenStatus "status"
30#define TokenLinkStatus "linkStatus"
31#define TokenLinkQuality "linkQuality"
32
33@implementation KernelEventMonitorParser
34
35- (instancetype)init
36{
37 NSArray<EFLogEventMatch *> *matches = @[
38 [[EFLogEventMatch alloc] initWithPattern:@"Process interface (?<"TokenStatus">attach|detach): (?<"TokenInterfaceName">\\w+)"
39 newEventHandler:
40 ^EFEvent *(NSTextCheckingResult *matchResult, EFLogEvent *logEvent, BOOL *isComplete) {
41 *isComplete = YES;
42 EFNetworkControlPathEvent *newEvent = nil;
43 NSString *statusString = [logEvent substringForCaptureGroup:@TokenStatus inMatchResult:matchResult];
44 if (statusString != nil) {
45 newEvent = [self createInterfaceEventWithLogEvent:logEvent matchResult:matchResult];
46 if (newEvent != nil) {
47 newEvent.interfaceStatus = statusString;
48 }
49 }
50 return newEvent;
51 }],
52 [[EFLogEventMatch alloc] initWithPattern:@"Process interface link (?<"TokenLinkStatus">down|up): (?<"TokenInterfaceName">\\w+)"
53 newEventHandler:
54 ^EFEvent *(NSTextCheckingResult *matchResult, EFLogEvent *logEvent, BOOL *isComplete) {
55 *isComplete = YES;
56 EFNetworkControlPathEvent *newEvent = nil;
57 NSString *linkStatusString = [logEvent substringForCaptureGroup:@TokenLinkStatus inMatchResult:matchResult];
58 if (linkStatusString != nil) {
59 newEvent = [self createInterfaceEventWithLogEvent:logEvent matchResult:matchResult];
60 if (newEvent != nil) {
61 if ([linkStatusString isEqualToString:@"up"]) {
62 newEvent.link = @"link up";
63 } else if ([linkStatusString isEqualToString:@"down"]) {
64 newEvent.link = @"link down";
65 } else {
66 newEvent.link = linkStatusString;
67 }
68 }
69 }
70 return newEvent;
71 }],
72 [[EFLogEventMatch alloc] initWithPattern:@"Process interface quality: (?<"TokenInterfaceName">\\w+) \\(q=(?<"TokenLinkQuality">[-\\d]+)\\)"
73 newEventHandler:
74 ^EFEvent * _Nullable(NSTextCheckingResult * _Nonnull matchResult, EFLogEvent * _Nonnull logEvent, BOOL * _Nonnull isComplete) {
75 *isComplete = YES;
76 EFNetworkControlPathEvent *newEvent = nil;
77 NSString *qualityString = [logEvent substringForCaptureGroup:@TokenLinkQuality inMatchResult:matchResult];
78 if (qualityString != nil) {
79 newEvent = [self createInterfaceEventWithLogEvent:logEvent matchResult:matchResult];
80 if (newEvent != nil) {
81 newEvent.linkQuality = qualityString.integerValue;
82 }
83 }
84 return newEvent;
85 }],
86 ];
87 EFLogEventParser *parser = [[EFLogEventParser alloc] initWithMatches:matches];
88 return [super initWithCategory:@"KernelEventMonitor" eventParser:parser];
89}
90
91@end