Struct EvtxChunk 

pub struct EvtxChunk<'chunk> {
    pub data: &'chunk [u8],
    pub header: &'chunk EvtxChunkHeader,
    pub string_cache: StringCache,
    pub arena: Bump,
    pub settings: Arc<ParserSettings>,
}

A struct which can hold references to chunk data (EvtxChunkData). All references are created together, and can be assume to live for the entire duration of the parsing phase. See more info about lifetimes in IterChunkRecords.

Fields

data: &'chunk [u8]

header: &'chunk EvtxChunkHeader

string_cache: StringCache

arena: Bump

settings: Arc<ParserSettings>

Implementations

impl<'chunk> EvtxChunk<'chunk>

pub fn new( data: &'chunk [u8], header: &'chunk EvtxChunkHeader, settings: Arc<ParserSettings>, ) -> Result<EvtxChunk<'chunk>, ChunkError>

Will fail if the data starts with an invalid evtx chunk header.

pub fn new_with_arena( data: &'chunk [u8], header: &'chunk EvtxChunkHeader, settings: Arc<ParserSettings>, arena: Bump, ) -> Result<EvtxChunk<'chunk>, ChunkError>

Will fail if the data starts with an invalid evtx chunk header.

The provided arena is reset before use, so any previously allocated chunk-scoped data is cleared while retaining the bump capacity.

pub fn into_arena(self) -> Bump

Consume the chunk and return its bump arena for reuse.

pub fn iter(&mut self) -> IterChunkRecords<'_>

Return an iterator of records from the chunk. See IterChunkRecords for a more detailed explanation regarding the lifetime scopes of the resulting records.

Trait Implementations

impl<'chunk> Debug for EvtxChunk<'chunk>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.