Zabbix

/*

** Zabbix

** Copyright (C) 2001-2025 Zabbix SIA

**

** This program is free software; you can redistribute it and/or modify

** it under the terms of the GNU General Public License as published by

** the Free Software Foundation; either version 2 of the License, or

** (at your option) any later version.

**

** This program is distributed in the hope that it will be useful,

** but WITHOUT ANY WARRANTY; without even the implied warranty of

** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

** GNU General Public License for more details.

**

** You should have received a copy of the GNU General Public License

** along with this program; if not, write to the Free Software

** Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

**/

​

package proc

​

import (

    "errors"

    "strings"

    "syscall"

    "unsafe"

​

    "golang.org/x/sys/windows"

    "golang.zabbix.com/agent2/pkg/win32"

    "golang.zabbix.com/sdk/errs"

    "golang.zabbix.com/sdk/plugin"

)

​

const maxName = 256

​

// Plugin -

type Plugin struct {

    plugin.Base

}

​

var impl Plugin

​

func init() {

    err := plugin.RegisterMetrics(

        &impl, "Proc",

        "proc.num", "The number of processes.",

        "proc_info", "Various information about specific process(es).",

    )

    if err != nil {

        panic(errs.Wrap(err, "failed to register metrics"))

    }

}

​

func getProcessUsername(pid uint32) (result string, err error) {

    h, err := syscall.OpenProcess(windows.PROCESS_QUERY_LIMITED_INFORMATION, false, pid)

    if err != nil {

        return

    }

    defer syscall.CloseHandle(h)

​

    var tok syscall.Token

    if err = syscall.OpenProcessToken(h, windows.TOKEN_QUERY, &tok); err != nil {

        return

    }

    defer syscall.Close(syscall.Handle(tok))

​

    var size uint32

    err = syscall.GetTokenInformation(tok, syscall.TokenUser, nil, 0, &size)

    if err != nil && err.(syscall.Errno) != syscall.ERROR_INSUFFICIENT_BUFFER {

        return

    }

    b := make([]byte, size)

    err = syscall.GetTokenInformation(tok, syscall.TokenUser, &b[0], size, &size)

    if err != nil {

        return

    }

    sid := (*syscall.Tokenuser)(unsafe.Pointer(&b[0])).User.Sid

​

    nameLen := uint32(maxName)

    name := make([]uint16, nameLen)

    domainLen := uint32(maxName)

    domain := make([]uint16, domainLen)

    var use uint32

    if err = syscall.LookupAccountSid(nil, sid, &name[0], &nameLen, &domain[0], &domainLen, &use); err != nil {

        return

    }

    return windows.UTF16ToString(name), nil

}

​

type processEnumerator interface {

    inspect(p *syscall.ProcessEntry32)