Howto win32ole wmi sink object

ruby-talk
1

I'm trying to replicate the following VBS script, to check for process
creation:

···

-------------
Set objWMIService = GetObject("winmgmts:\\.\root\CIMV2")
Set mySink =
WScript.CreateObject("WbemScripting.SWbemSink","HOOKMETHOD_")
SQL = "SELECT * FROM __InstanceCreationEvent WITHIN 1 WHERE
TargetInstance ISA 'Win32_Process'"
objWMIservice.ExecNotificationQueryAsync mySink, SQL
Wscript.Sleep(100000)

Sub HOOKMETHOD_OnObjectReady(objObject, objAsyncContext)
    Wscript.Echo "Creation of " & objObject.TargetInstance.Name
End Sub
-------------

The VBS script defines a HOOKMETHOD_OnObjectReady procedure to be called
when mySink sends an async event.

I've translated into this ruby code, but it doesn't work. I think that
the problem is when defining the mySink HOOKMETHOD.

-------------
require 'win32ole'
$stderr.sync = $stdout.sync = true

objWMIService = WIN32OLE.connect('winmgmts:\\\\.\\root\\CIMV2')
mySink = WIN32OLE.new("WbemScripting.SWbemSink","HOOKMETHOD_")
SQL = "SELECT * FROM __InstanceCreationEvent WITHIN 1 WHERE
TargetInstance ISA 'Win32_Process'"
objWMIservice.ExecNotificationQueryAsync mySink, SQL
sleep 100

def HOOKMETHOD_OnObjectReady(objObject, objAsyncContext)
  print "Creation of #{objObject.TargetInstance.Name}"
end
-------------

The error that it gives to me is:

-------------
sink.rb:5:in `initialize': failed to create DCOM server
`WbemScripting.SWbemSink' in `HOOKMETHOD_' (WIN32OLERuntimeError)
    HRESULT error code:0x800706ba
      RPC server not available.
        from sink.rb:5:in `new'
        from sink.rb:5:in `<main>'
-------------

Does anyone knows how to make this code works?

Attachments:
http://www.ruby-forum.com/attachment/7957/sink.vbs

--
Posted via http://www.ruby-forum.com/.

2

Hello,

···

On Wed, Dec 12, 2012 at 05:45:28AM +0900, Murmansk Manny wrote:

objWMIService = WIN32OLE.connect('winmgmts:\\\\.\\root\\CIMV2')
mySink = WIN32OLE.new("WbemScripting.SWbemSink","HOOKMETHOD_")
SQL = "SELECT * FROM __InstanceCreationEvent WITHIN 1 WHERE
TargetInstance ISA 'Win32_Process'"
objWMIservice.ExecNotificationQueryAsync mySink, SQL
sleep 100

def HOOKMETHOD_OnObjectReady(objObject, objAsyncContext)
  print "Creation of #{objObject.TargetInstance.Name}"
end
-------------

The error that it gives to me is:

-------------
sink.rb:5:in `initialize': failed to create DCOM server
`WbemScripting.SWbemSink' in `HOOKMETHOD_' (WIN32OLERuntimeError)
    HRESULT error code:0x800706ba
      RPC server not available.
        from sink.rb:5:in `new'
        from sink.rb:5:in `<main>'
-------------

Does anyone knows how to make this code works?

Use WIN32OLE_EVENT.
Try following script.
-----
objWMIService = WIN32OLE.connect("winmgmts:\\\\.\\root\\CIMV2")
SQL = "SELECT * FROM __InstanceCreationEvent WITHIN 1 WHERE TargetInstance ISA 'Win32_Process'"
mySink = WIN32OLE.new('WbemScripting.SWbemSink')
ev = WIN32OLE_EVENT.new(mySink)
ev.on_event("OnObjectReady"){|objObject, objAsyncContext|
  puts "Creation of " + objObject.TargetInstance.Name
}
objWMIService.ExecNotificationQueryAsync mySink, SQL
while 1
  WIN32OLE_EVENT.message_loop
end
-----

  Best Regards,
  Masaki Suketa