2 * Unix SMB/CIFS implementation.
3 * RPC Pipe client / server routines
4 * Copyright (C) Marcin Krzysztof Porwit 2005.
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, write to the Free Software
18 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
21 #ifndef _RPC_EVENTLOG_H /* _RPC_EVENTLOG_H */
22 #define _RPC_EVENTLOG_H
26 #define EVENTLOG_CLEAREVENTLOG 0x00
27 #define EVENTLOG_CLOSEEVENTLOG 0x02
28 #define EVENTLOG_GETNUMRECORDS 0x04
29 #define EVENTLOG_GETOLDESTENTRY 0x05
30 #define EVENTLOG_OPENEVENTLOG 0x07
31 #define EVENTLOG_READEVENTLOG 0x0a
33 /* Eventlog read flags */
35 #define EVENTLOG_SEQUENTIAL_READ 0x0001
36 #define EVENTLOG_SEEK_READ 0x0002
37 #define EVENTLOG_FORWARDS_READ 0x0004
38 #define EVENTLOG_BACKWARDS_READ 0x0008
42 #define EVENTLOG_SUCCESS 0x0000
43 #define EVENTLOG_ERROR_TYPE 0x0001
44 #define EVENTLOG_WARNING_TYPE 0x0002
45 #define EVENTLOG_INFORMATION_TYPE 0x0004
46 #define EVENTLOG_AUDIT_SUCCESS 0x0008
47 #define EVENTLOG_AUDIT_FAILURE 0x0010
49 /* Defines for TDB keys */
50 #define EVT_OLDEST_ENTRY "INFO/oldest_entry"
51 #define EVT_NEXT_RECORD "INFO/next_record"
52 #define EVT_VERSION "INFO/version"
53 #define EVT_MAXSIZE "INFO/maxsize"
54 #define EVT_RETENTION "INFO/retention"
56 #define ELOG_APPL "Application"
57 #define ELOG_SYS "System"
58 #define ELOG_SEC "Security"
60 #define EVENTLOG_DATABASE_VERSION_V1 1
62 /***********************************/
67 } EVENTLOG_OPEN_UNKNOWN0
;
70 EVENTLOG_OPEN_UNKNOWN0
*unknown0
;
75 } EVENTLOG_Q_OPEN_EVENTLOG
;
80 } EVENTLOG_R_OPEN_EVENTLOG
;
83 /***********************************/
87 } EVENTLOG_Q_CLOSE_EVENTLOG
;
92 } EVENTLOG_R_CLOSE_EVENTLOG
;
95 /***********************************/
99 } EVENTLOG_Q_GET_NUM_RECORDS
;
104 } EVENTLOG_R_GET_NUM_RECORDS
;
107 /***********************************/
111 } EVENTLOG_Q_GET_OLDEST_ENTRY
;
116 } EVENTLOG_R_GET_OLDEST_ENTRY
;
119 /***********************************/
126 uint32 max_read_size
;
127 } EVENTLOG_Q_READ_EVENTLOG
;
132 uint32 record_number
;
133 uint32 time_generated
;
138 uint16 event_category
;
140 uint32 closing_record_number
;
141 uint32 string_offset
;
142 uint32 user_sid_length
;
143 uint32 user_sid_offset
;
149 uint32 source_name_len
;
150 wpstring source_name
;
151 uint32 computer_name_len
;
152 wpstring computer_name
;
157 uint32 user_data_len
;
160 } Eventlog_data_record
;
162 typedef struct eventlog_entry
{
163 Eventlog_record record
;
164 Eventlog_data_record data_record
;
166 uint8
*end_of_data_padding
;
167 struct eventlog_entry
*next
;
171 uint32 num_bytes_in_resp
;
172 uint32 bytes_in_next_record
;
174 Eventlog_entry
*entry
;
175 uint8
*end_of_entries_padding
;
179 } EVENTLOG_R_READ_EVENTLOG
;
182 /***********************************/
187 } EVENTLOG_Q_CLEAR_EVENTLOG
;
191 } EVENTLOG_R_CLEAR_EVENTLOG
;
193 #endif /* _RPC_EVENTLOG_H */