// +build windows package process import ( "errors" "fmt" "strings" "syscall" "time" "unsafe" "github.com/StackExchange/wmi" "github.com/shirou/w32" cpu "github.com/shirou/gopsutil/cpu" "github.com/shirou/gopsutil/internal/common" net "github.com/shirou/gopsutil/net" ) const ( NoMoreFiles = 0x12 MaxPathLength = 260 ) var ( modpsapi = syscall.NewLazyDLL("psapi.dll") procGetProcessMemoryInfo = modpsapi.NewProc("GetProcessMemoryInfo") ) type SystemProcessInformation struct { NextEntryOffset uint64 NumberOfThreads uint64 Reserved1 [48]byte Reserved2 [3]byte UniqueProcessID uintptr Reserved3 uintptr HandleCount uint64 Reserved4 [4]byte Reserved5 [11]byte PeakPagefileUsage uint64 PrivatePageCount uint64 Reserved6 [6]uint64 } // Memory_info_ex is different between OSes type MemoryInfoExStat struct { } type MemoryMapsStat struct { } type Win32_Process struct { Name string ExecutablePath *string CommandLine *string Priority uint32 CreationDate *time.Time ProcessID uint32 ThreadCount uint32 Status *string ReadOperationCount uint64 ReadTransferCount uint64 WriteOperationCount uint64 WriteTransferCount uint64 /* CSCreationClassName string CSName string Caption *string CreationClassName string Description *string ExecutionState *uint16 HandleCount uint32 KernelModeTime uint64 MaximumWorkingSetSize *uint32 MinimumWorkingSetSize *uint32 OSCreationClassName string OSName string OtherOperationCount uint64 OtherTransferCount uint64 PageFaults uint32 PageFileUsage uint32 ParentProcessID uint32 PeakPageFileUsage uint32 PeakVirtualSize uint64 PeakWorkingSetSize uint32 PrivatePageCount uint64 TerminationDate *time.Time UserModeTime uint64 WorkingSetSize uint64 */ } func Pids() ([]int32, error) { var ret []int32 procs, err := processes() if err != nil { return ret, nil } for _, proc := range procs { ret = append(ret, proc.Pid) } return ret, nil } func (p *Process) Ppid() (int32, error) { ret, _, _, err := p.getFromSnapProcess(p.Pid) if err != nil { return 0, err } return ret, nil } func GetWin32Proc(pid int32) ([]Win32_Process, error) { var dst []Win32_Process query := fmt.Sprintf("WHERE ProcessId = %d", pid) q := wmi.CreateQuery(&dst, query) err := wmi.Query(q, &dst) if err != nil { return []Win32_Process{}, fmt.Errorf("could not get win32Proc: %s", err) } if len(dst) != 1 { return []Win32_Process{}, fmt.Errorf("could not get win32Proc: empty") } return dst, nil } func (p *Process) Name() (string, error) { dst, err := GetWin32Proc(p.Pid) if err != nil { return "", fmt.Errorf("could not get Name: %s", err) } return dst[0].Name, nil } func (p *Process) Exe() (string, error) { dst, err := GetWin32Proc(p.Pid) if err != nil { return "", fmt.Errorf("could not get ExecutablePath: %s", err) } return *dst[0].ExecutablePath, nil } func (p *Process) Cmdline() (string, error) { dst, err := GetWin32Proc(p.Pid) if err != nil { return "", fmt.Errorf("could not get CommandLine: %s", err) } return *dst[0].CommandLine, nil } // CmdlineSlice returns the command line arguments of the process as a slice with each // element being an argument. This merely returns the CommandLine informations passed // to the process split on the 0x20 ASCII character. func (p *Process) CmdlineSlice() ([]string, error) { cmdline, err := p.Cmdline() if err != nil { return nil, err } return strings.Split(cmdline, " "), nil } func (p *Process) CreateTime() (int64, error) { ru, err := getRusage(p.Pid) if err != nil { return 0, fmt.Errorf("could not get CreationDate: %s", err) } return ru.CreationTime.Nanoseconds() / 1000000, nil } func (p *Process) Cwd() (string, error) { return "", common.ErrNotImplementedError } func (p *Process) Parent() (*Process, error) { return p, common.ErrNotImplementedError } func (p *Process) Status() (string, error) { return "", common.ErrNotImplementedError } func (p *Process) Username() (string, error) { return "", common.ErrNotImplementedError } func (p *Process) Uids() ([]int32, error) { var uids []int32 return uids, common.ErrNotImplementedError } func (p *Process) Gids() ([]int32, error) { var gids []int32 return gids, common.ErrNotImplementedError } func (p *Process) Terminal() (string, error) { return "", common.ErrNotImplementedError } // Nice returnes priority in Windows func (p *Process) Nice() (int32, error) { dst, err := GetWin32Proc(p.Pid) if err != nil { return 0, fmt.Errorf("could not get Priority: %s", err) } return int32(dst[0].Priority), nil } func (p *Process) IOnice() (int32, error) { return 0, common.ErrNotImplementedError } func (p *Process) Rlimit() ([]RlimitStat, error) { var rlimit []RlimitStat return rlimit, common.ErrNotImplementedError } func (p *Process) IOCounters() (*IOCountersStat, error) { dst, err := GetWin32Proc(p.Pid) if err != nil || len(dst) == 0 { return nil, fmt.Errorf("could not get Win32Proc: %s", err) } ret := &IOCountersStat{ ReadCount: uint64(dst[0].ReadOperationCount), ReadBytes: uint64(dst[0].ReadTransferCount), WriteCount: uint64(dst[0].WriteOperationCount), WriteBytes: uint64(dst[0].WriteTransferCount), } return ret, nil } func (p *Process) NumCtxSwitches() (*NumCtxSwitchesStat, error) { return nil, common.ErrNotImplementedError } func (p *Process) NumFDs() (int32, error) { return 0, common.ErrNotImplementedError } func (p *Process) NumThreads() (int32, error) { dst, err := GetWin32Proc(p.Pid) if err != nil { return 0, fmt.Errorf("could not get ThreadCount: %s", err) } return int32(dst[0].ThreadCount), nil } func (p *Process) Threads() (map[string]string, error) { ret := make(map[string]string, 0) return ret, common.ErrNotImplementedError } func (p *Process) Times() (*cpu.TimesStat, error) { return nil, common.ErrNotImplementedError } func (p *Process) CPUAffinity() ([]int32, error) { return nil, common.ErrNotImplementedError } func (p *Process) MemoryInfo() (*MemoryInfoStat, error) { mem, err := getMemoryInfo(p.Pid) if err != nil { return nil, err } ret := &MemoryInfoStat{ RSS: uint64(mem.WorkingSetSize), VMS: uint64(mem.PagefileUsage), } return ret, nil } func (p *Process) MemoryInfoEx() (*MemoryInfoExStat, error) { return nil, common.ErrNotImplementedError } func (p *Process) Children() ([]*Process, error) { return nil, common.ErrNotImplementedError } func (p *Process) OpenFiles() ([]OpenFilesStat, error) { return nil, common.ErrNotImplementedError } func (p *Process) Connections() ([]net.ConnectionStat, error) { return nil, common.ErrNotImplementedError } func (p *Process) NetIOCounters(pernic bool) ([]net.IOCountersStat, error) { return nil, common.ErrNotImplementedError } func (p *Process) IsRunning() (bool, error) { return true, common.ErrNotImplementedError } func (p *Process) MemoryMaps(grouped bool) (*[]MemoryMapsStat, error) { var ret []MemoryMapsStat return &ret, common.ErrNotImplementedError } func NewProcess(pid int32) (*Process, error) { p := &Process{Pid: pid} return p, nil } func (p *Process) SendSignal(sig syscall.Signal) error { return common.ErrNotImplementedError } func (p *Process) Suspend() error { return common.ErrNotImplementedError } func (p *Process) Resume() error { return common.ErrNotImplementedError } func (p *Process) Terminate() error { // PROCESS_TERMINATE = 0x0001 proc := w32.OpenProcess(0x0001, false, uint32(p.Pid)) ret := w32.TerminateProcess(proc, 0) w32.CloseHandle(proc) if ret == false { return syscall.GetLastError() } else { return nil } } func (p *Process) Kill() error { return common.ErrNotImplementedError } func (p *Process) getFromSnapProcess(pid int32) (int32, int32, string, error) { snap := w32.CreateToolhelp32Snapshot(w32.TH32CS_SNAPPROCESS, uint32(pid)) if snap == 0 { return 0, 0, "", syscall.GetLastError() } defer w32.CloseHandle(snap) var pe32 w32.PROCESSENTRY32 pe32.DwSize = uint32(unsafe.Sizeof(pe32)) if w32.Process32First(snap, &pe32) == false { return 0, 0, "", syscall.GetLastError() } if pe32.Th32ProcessID == uint32(pid) { szexe := syscall.UTF16ToString(pe32.SzExeFile[:]) return int32(pe32.Th32ParentProcessID), int32(pe32.CntThreads), szexe, nil } for w32.Process32Next(snap, &pe32) { if pe32.Th32ProcessID == uint32(pid) { szexe := syscall.UTF16ToString(pe32.SzExeFile[:]) return int32(pe32.Th32ParentProcessID), int32(pe32.CntThreads), szexe, nil } } return 0, 0, "", errors.New("Couldn't find pid:" + string(pid)) } // Get processes func processes() ([]*Process, error) { var dst []Win32_Process q := wmi.CreateQuery(&dst, "") err := wmi.Query(q, &dst) if err != nil { return []*Process{}, err } if len(dst) == 0 { return []*Process{}, fmt.Errorf("could not get Process") } results := make([]*Process, 0, len(dst)) for _, proc := range dst { p, err := NewProcess(int32(proc.ProcessID)) if err != nil { continue } results = append(results, p) } return results, nil } func getProcInfo(pid int32) (*SystemProcessInformation, error) { initialBufferSize := uint64(0x4000) bufferSize := initialBufferSize buffer := make([]byte, bufferSize) var sysProcInfo SystemProcessInformation ret, _, _ := common.ProcNtQuerySystemInformation.Call( uintptr(unsafe.Pointer(&sysProcInfo)), uintptr(unsafe.Pointer(&buffer[0])), uintptr(unsafe.Pointer(&bufferSize)), uintptr(unsafe.Pointer(&bufferSize))) if ret != 0 { return nil, syscall.GetLastError() } return &sysProcInfo, nil } func getRusage(pid int32) (*syscall.Rusage, error) { var CPU syscall.Rusage c, err := syscall.OpenProcess(syscall.PROCESS_QUERY_INFORMATION, false, uint32(pid)) if err != nil { return nil, err } defer syscall.CloseHandle(c) if err := syscall.GetProcessTimes(c, &CPU.CreationTime, &CPU.ExitTime, &CPU.KernelTime, &CPU.UserTime); err != nil { return nil, err } return &CPU, nil } func getMemoryInfo(pid int32) (PROCESS_MEMORY_COUNTERS, error) { var mem PROCESS_MEMORY_COUNTERS c, err := syscall.OpenProcess(syscall.PROCESS_QUERY_INFORMATION, false, uint32(pid)) if err != nil { return mem, err } defer syscall.CloseHandle(c) if err := getProcessMemoryInfo(c, &mem); err != nil { return mem, err } return mem, err } func getProcessMemoryInfo(h syscall.Handle, mem *PROCESS_MEMORY_COUNTERS) (err error) { r1, _, e1 := syscall.Syscall(procGetProcessMemoryInfo.Addr(), 3, uintptr(h), uintptr(unsafe.Pointer(mem)), uintptr(unsafe.Sizeof(*mem))) if r1 == 0 { if e1 != 0 { err = error(e1) } else { err = syscall.EINVAL } } return }