ws_process_info Struct Reference

What the operating system knows about a process. More...

#include <process_lookup.h>

Public Attributes
uint32_t	pid
bool	has_ppid
uint32_t	ppid
bool	has_uid
uint32_t	uid
char *	name
char *	path
char *	user
uint8_t *	cmdline
size_t	cmdline_len
uint64_t	start_time_ns

Detailed Description

What the operating system knows about a process.

Whatever the operating system does not provide, or does not let the calling user see, or was not asked for (see ws_process_detail_t), is NULL (strings), 0 (the start time) or flagged as absent. Strings are UTF-8.

Member Data Documentation

cmdline

uint8_t* ws_process_info::cmdline

The command line, its arguments separated by NULs (none after the last), or NULL.

cmdline_len

size_t ws_process_info::cmdline_len

The length of cmdline, in bytes.

has_ppid

bool ws_process_info::has_ppid

Whether ppid is known.

has_uid

bool ws_process_info::has_uid

Whether uid is known (systems with numeric user IDs).

name

char* ws_process_info::name

The short name of the process, typically its executable's file name, or NULL.

path

char* ws_process_info::path

The full path of the executable image, or NULL.

pid

uint32_t ws_process_info::pid

The process ID.

ppid

uint32_t ws_process_info::ppid

The ID of the parent process.

start_time_ns

uint64_t ws_process_info::start_time_ns

When the process started, in nanoseconds since the Epoch, or 0 if unknown.

uid

uint32_t ws_process_info::uid

The numeric ID of the user the process runs as.

user

char* ws_process_info::user

The name of the user the process runs as, e.g. "alice" or "DOMAIN\\alice", or NULL.

---

The documentation for this struct was generated from the following file:

• /builds/wireshark/wireshark/wsutil/process_lookup.h