Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Do we need function filter support? #33

Closed
b1tg opened this issue Jul 28, 2023 · 7 comments
Closed

Do we need function filter support? #33

b1tg opened this issue Jul 28, 2023 · 7 comments

Comments

@b1tg
Copy link

b1tg commented Jul 28, 2023

Currently Tiny Tracer don't allow to filter what function to log, how do you think about this function?

We may need a seperated config file or put them in params.txt , something like:

Kernel32;LoadLibraryW;1
kernel32;LoadLibraryA;1
# KERNEL32;GetProcAddress <- do not log GetProcAddress 
# CreateEvent* <- pattern match
@hasherezade
Copy link
Owner

@b1tg - it's a good idea to have such filtering. I will add it soon. (Although I don't think params.txt is a good place to put this list - I will rather do it as a separate file).

hasherezade added a commit that referenced this issue Aug 8, 2023
@hasherezade
Copy link
Owner

@b1tg - I added filtering, check it out.
Now you can define a list of your excluded functions in excluded.txt
No pattern matching for now, only explicit names.
Please let me know what do you think.

@b1tg
Copy link
Author

b1tg commented Aug 11, 2023

Cool, I would test it after I fix my dev enviroment, currently I failed to build the latest master(18807e6) , seems win_hdrs_init.bat failed because my windows kit is under D:/

@b1tg
Copy link
Author

b1tg commented Aug 11, 2023

Windows Kit folder can be located use:

C:\>reg query "HKLM\SOFTWARE\WOW6432Node\Microsoft\Microsoft SDKs\Windows\v10.0" /v InstallationFolder

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Microsoft SDKs\Windows\v10.0
    InstallationFolder    REG_SZ    D:\Windows Kits\10\

@hasherezade
Copy link
Owner

@b1tg - my last commit should help: 137d131 - now I am supplying the path to Windows SDK from Visual Studio.
Please let me know if it works for you now.

@b1tg
Copy link
Author

b1tg commented Aug 12, 2023

This commit fixes my problem, and the filtering feature is working fine for me, very helpful, thanks.

@hasherezade
Copy link
Owner

Cool, thanks for checking it!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants