CN1295613C - Method for general windows program to operate journal information record - Google Patents

Abstract

The present invention discloses a method for recording the running log information of a general windows program, which comprises the steps that a log information interface function is invoked according to the type of log information, the initial data of the log information is placed in a log information queue by the corresponding log information interface function, and a log information data processing notice is sent to a log processing module and then directly returned; after the log information data processing module receives the log information data processing notice, the log information in the log information queue is stored, displayed and formatted. The separate execution of the log information interface function and the log information data processing ensures that the processing of the log information can not block the normal running of a program, and the execution of normal process can not be influenced because of abnormities in the log information processing. Various types of log information interface functions provide a universal agile log information recording method. A memory managing function efficiently manages a memory, and thereby, a large quantity of memory fragments caused by frequent distribution of the memory can be avoided.

Description

Method for recording general Windows program running log information

technical field

The invention relates to the technical field of program operation log information recording, in particular to a method for recording program operation log information in a general Windows environment.

Background technique

Running log information recording is a common method for program debugging and problem location. The general log information recording method is realized by directly writing the string information to be recorded by the program to a file. If this method is directly applied to commercial software products, there will be many disadvantages.

First of all, this way of recording log information does not classify the log information. During the debug version and the release version, if the code is not modified, the log information records during the debug program cannot be cleared, so a lot of memory space will be occupied, resulting in a waste of resources.

Secondly, when there are a large amount of log information to record the operation, the running performance of the program will be seriously affected, and even cause the normal operation of the program to be blocked. Users always hope that the call log information recording can be completed as soon as possible, but usually the processing of log information is always very time-consuming.

Thirdly, recording log information requires frequent application and release of memory, which will generate a large amount of memory fragmentation, resulting in a decrease in system memory usage, or even a situation where there is no available memory.

Contents of the invention

In view of this, the object of the present invention is to provide a general Windows program operation log information recording method to realize general, efficient and flexible operation log information recording.

In order to achieve the above object, the invention provides a kind of general Windows program running log information recording method, it is characterized in that comprising the following steps:

A. Call the log information interface function according to the type of log information. The called log information interface function puts the original data of the log information into the log information queue, sends the log information data processing notification to the log information processing module and returns directly;

B. After receiving the log information data processing notification, the log information data processing module performs processing including saving, displaying and formatting the log information in the log information queue.

Step A further includes:

a. Call the memory management function, and the called memory management function manages to apply for an available memory space from the system, and divide this memory space into more than one small memory block; number these small memory blocks, and set the use flag "free " or "Used" indicates the usage status of the small memory block;

b. Record the number of the newly allocated small memory block, store the original data of the log information in it, and set its use flag from "free" to "used";

c. When allocating memory, search in the direction in which the number of the newly allocated small memory block increases, find a small memory block whose usage flag is "free" to store the original data of the log information, and set its usage flag from "free" to "used" ";

Said step B further comprises: when releasing the log information raw data stored in the memory block, calling the memory management function, the small memory block that needs to release the log information original data is found by the called memory management function according to the allocated small memory block number, and releasing After the original data of the log information, set its use flag from "used" to "idle".

The log information queue is formed by arranging the small memory blocks storing the original log information data according to the context of the original log information data.

Step A further includes: setting the log information processing level interface function to determine the log information level that needs to be processed, including fatal, error, warning, and prompt; the log information processing level interface function judges whether the log information is at the level that needs to be processed. , put the original log information data into the log information queue, and when no processing is required, the log information processing level interface function call ends.

Preferably, the log information interface function includes: a log information interface function carrying a variable parameter string, a memory block log information interface function, a custom frame log information interface function, a custom format log information interface function, and a log information processing level interface function .

The system constructs the log information format by calling back the custom format log information interface function.

The present invention separates the calling of the log information interface function from the log information data processing, and performs data exchange between the log information interface function and the log information data processing module through the log information queue, thereby ensuring that the processing of the log information will not block the normal operation of the program. At the same time, it is guaranteed that abnormalities in the process of log information processing will not affect the execution of normal processes. Various types of log information interface functions provide users with a general, efficient, and flexible log information recording method. Users can construct log information with special requirements for display formats through custom format log information interface functions. In the process of putting the original data of the log information into the log information queue and processing the log information data, the memory allocation method of the system is not used, but the memory management function is used to manage the memory simply and efficiently. By calling the memory management function, the number of memory allocations is reduced, the probability of free memory being selected is increased, and a large amount of memory fragmentation caused by frequent allocation of memory is avoided.

Description of drawings

Fig. 1 shows the flowchart of calling log information interface function according to the present invention;

Fig. 2 shows the flow chart of log information data processing process according to the present invention;

FIG. 3 shows a schematic diagram of a method for managing memory according to the memory management function of the present invention.

Detailed ways

In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings.

Log information is very important for security. It records various events that occur in the system every day. Users can use it to check the cause of errors or the traces left by attackers when they are attacked. And every large application needs a logging utility during the development, testing, and production cycles. The main function of log information is auditing and monitoring. The log information can monitor the system status in real time, detect the intruder's intrusion and track the intruder, etc.

The content of log information mainly includes: the time, level, file name, code line number, log information body and other parts of recording log information. Log information is generally divided into four levels: fatal, error, warning and prompt.

The invention provides users with multiple ways to record, display and process log information. Users can separately define which levels of log information need to be stored and displayed. During use, the log information is encapsulated into several log information interface functions according to the type, and each log information interface function processes a type of log information, for example: the log information interface function carrying variable parameter strings, and the memory block log information interface function (to store the contents of a certain continuous address space in the memory), custom frame log information interface functions, etc. Therefore, when you need to record different types of log information or want to record log information in different forms, you only need to simply call the corresponding type of log information interface function. For certain levels of log information that the user needs to store, the interface function of setting the log information processing level can be called to determine the log information that needs to be stored. When users have special requirements for the display format of log information, they can freely customize it using the custom format log information interface function.

The present invention separates the calling of the log information interface function from the processing of the log information data to ensure that the processing of the log information will not block the normal operation of the program, and at the same time ensure that the abnormality in the log information processing process will not affect the execution of the normal process .

The log information interface function and the log information data processing module perform data exchange through a log information queue. After the user calls the log information interface function, the log information interface function just puts the original data of the log information into the log information queue, and sends the log information processing notification to the log information data processing module, and then the log information interface function stops running. In this way, it can be ensured that the processing of the log information will not occupy the time of the original process, and the abnormality will not affect the execution of the normal process.

After the log information data processing module receives the log information processing notification, it takes out the original log information data from the log information queue for processing, and constructs highly readable log information. The log information data processing module processes the original data of the log information, including formatting, storing, displaying and so on. Call the interface function of setting the log information processing level to determine the log information to be stored, store the log information in the log information file according to the user's settings, or display it in the specified window, or process it according to the user-defined method. Formatting refers to constructing data into the required format, such as converting hexadecimal data to decimal data.

Fig. 1 shows the flowchart of calling log information interface function according to the present invention, as shown in Fig. 1:

Step 101-Step 102: The user calls the log information interface function of the corresponding type according to the log information type, and the log information interface function receives the original data of the log information. This type of log information interface function judges whether the original data of the log information needs to be processed according to the level of the log information and the set log information processing level interface function. If processing is required, perform step 103; if not, perform step 106.

Steps 103 to 105: the log information interface function calls the memory management function, and the memory management function allocates memory storage space for the original data of the log information. The log information interface function puts the original log information data into the log information queue, and sends the log information processing notification to the log information data processing module.

Step 106: The log information interface function call ends.

Fig. 2 shows the flow chart of log information data processing process according to the present invention, as shown in Fig. 2:

Steps 201 to 203: After receiving the log information processing notification sent by the log information interface function, the log information data processing module processes the original log information data, constructs readable log information, and then stores and displays the log information.

Steps 204 to 205: After processing the original log information data, the log information data processing module calls the memory management function, and the memory management function releases the memory block storing the original log information data. The log information data processing module has finished running.

Steps 101 to 106 are the process of calling the log information interface function, and steps 201 to 205 are the process of processing the log information data. The two processes are performed separately, so that the processing of the log information will not occupy the original process. During the time, the exception will not affect the execution of the normal process.

In the description of calling the log information interface function and the process of log information data processing, the memory management function is mentioned. In the present invention, the method of allocating memory by the system is not adopted, but the memory management function is used to manage its own memory.

The memory management function applies for an available memory from the system, divides it into several small memory blocks, numbers each small memory block, and sets the usage flags of "free" and "used". When the memory needs to be used, find a small memory block marked as "free" from these small memory blocks to store the original data of the log information, and set its use flag from "free" to "used".

During the entire memory management process, record the number of the newly allocated small memory block. When allocating memory, search backward from the position number to find a small memory block whose usage flag is "free", store the original data of the log information in it, and set its usage flag to "used". And when releasing the memory, then according to the numbering of the small memory block, find the numbering of the small memory block to be released, release the content stored in it, and then set its use flag to "idle".

Fig. 3 shows a schematic diagram of a method for managing memory according to the memory management function of the present invention, as shown in Fig. 3:

The memory management function applies for an available memory 301 from the system, divides the memory 301 into N small memory blocks, and numbers the N small memory blocks, from the number 0 of the first small memory block 302 to the number of the Nth small memory block 304 N-1. Initially set the use flag of each small memory block to "free". When the memory needs to be used, find a small memory block with a use flag of "free" to store content from the small memory blocks of the internal memory 301, and set its use flag from "free" to "used".

If the small memory block 303 is the newly allocated small memory block, the memory management function records the number of the small memory block 303, and sets the use flag of the small memory block 303 from "free" to "used". When allocating memory, search in the direction in which the number of the newly allocated small memory block increases, that is, search along the direction of arrow 306, find a small memory block marked as "free", store the original data of the log information in it, and save it The use flag is set to "used". When the memory is released, find the small memory block that needs to release the original data of the log information according to the number of the allocated small memory block, and after the release is complete, set its use flag from "used" to "free".

This memory management method manages the memory simply and efficiently, which can ensure that the free memory block can be hit quickly when the memory needs to be allocated; and when the memory is released, the location of the small memory block that needs to be released can also be quickly found. This greatly reduces the number of memory allocations, while ensuring the probability of free memory being selected. In this way, a large amount of memory fragmentation caused by frequent allocation of memory is avoided.

For users who want to customize the log information format, the present invention also provides a flexible custom format log information interface function, and constructs special information that meets user requirements by calling back the form of the custom format log information interface function. The so-called callback function is that the user writes a function that meets the requirements. After the system calls this function, it constructs a format that meets the user's needs. like:

W2L(BYTE byLevel, PVOID pData, MAKESTRPROC MakeStrProc)

Where pData is the original data structure of the log information to be processed;

MakeStrProc is a pointer to a function that constructs a custom format for log information.

If the user calls the above custom-format log information interface function to record log information, when actually processing the original log information data, the log information data processing module will hand over the original log information pData to MakeStrProc for processing, and finally store and display the processing result .

Users construct log information that meets their own needs through the custom format log information interface function. The custom format log information interface function provides users with flexible operations and ensures that the log information interface function has a high degree of scalability.

In a word, the above descriptions are only preferred embodiments of the present invention, and are not intended to limit the protection scope of the present invention.

Claims (6)

1. A general Windows program operation log information recording method, characterized in that it comprises the following steps: A. Call the log information interface function according to the type of log information. The called log information interface function puts the original data of the log information into the log information queue, sends the log information data processing notification to the log information processing module and returns directly; B. After receiving the log information data processing notification, the log information data processing module performs processing including saving, displaying and formatting the log information in the log information queue. 2. The general-purpose Windows program operation log information recording method as claimed in claim 1, wherein said step A further comprises: a. Call the memory management function, and the called memory management function will apply for an available memory space from the system, and divide this memory space into more than one small memory block; number these small memory blocks, and set the use flag "free" or "used" indicates the usage status of the small memory block; b. Record the number of the newly allocated small memory block, store the original data of the log information in it, and set its use flag from "free" to "used"; c. When allocating memory, search in the direction in which the number of the newly allocated small memory block increases, find a small memory block whose usage flag is "free" to store the original data of the log information, and set its usage flag from "free" to "used" "; Said step B further comprises: when releasing the log information raw data stored in the memory block, calling the memory management function, the small memory block that needs to release the log information original data is found by the called memory management function according to the allocated small memory block number, and releasing After the original data of the log information, set its use flag from "used" to "idle". 3. The method for recording general Windows program running log information as claimed in claim 2, characterized in that: according to the context of the original log information data, the small memory blocks storing the original log information data are arranged to form the log information queue. 4. The general Windows program operation log information recording method according to claim 1, wherein said step A further comprises: setting the log information processing level interface function to determine the log information level to be processed, including fatal, error , warning, prompt; the log information processing level interface function judges whether the log information is at the level that needs to be processed. When processing is required, the original data of the log information is put into the log information queue. The call ends. 5. The general Windows program operation log information recording method as claimed in claim 1, wherein said log information interface function comprises: a log information interface function carrying a variable parameter string, a memory block log information interface function, a custom Interface function of frame log information, interface function of custom format log information, interface function of setting log information processing level. 6. The method for recording general Windows program running log information as claimed in claim 1, characterized in that: the system constructs the log information format by calling back the custom format log information interface function.

Images