Function TestStackwalkDecoratorFlush

pkg/event/stackwalk_test.go:171–202

(t *testing.T)

}

func TestStackwalkDecoratorFlush(t *testing.T) {
	q := NewQueue(50, false, true)
	q.RegisterListener(&DummyListener{})
	cd := NewStackwalkDecorator(q)
	defer cd.Stop()

	e := &Event{
		Type:      CreateFile,
		Tid:       2484,
		PID:       859,
		CPU:       1,
		Seq:       2,
		Name:      "CreateFile",
		Timestamp: time.Now(),
		Category:  File,
		Params: Params{
			params.FileObject:    {Name: params.FileObject, Type: params.Uint64, Value: uint64(12456738026482168384)},
			params.FilePath:      {Name: params.FilePath, Type: params.UnicodeString, Value: "C:\\Windows\\system32\\user32.dll"},
			params.FileType:      {Name: params.FileType, Type: params.AnsiString, Value: "file"},
			params.FileOperation: {Name: params.FileOperation, Type: params.Enum, Value: uint32(1), Enum: fs.FileCreateDispositions},
		},
	}

	cd.Push(e)
	assert.Len(t, cd.buckets[e.StackID()], 1)
	time.Sleep(time.Millisecond * 3100)

	evt := <-q.Events()
	assert.Len(t, cd.buckets[e.StackID()], 0)
	assert.Equal(t, CreateFile, evt.Type)
	assert.False(t, evt.Params.Contains(params.Callstack))
}