source3/include/rpc_eventlog.h

   1 /*
   2  *  Unix SMB/CIFS implementation.
   3  *  RPC Pipe client / server routines
   4  *  Copyright (C) Marcin Krzysztof Porwit    2005.
   5  *
   6  *  This program is free software; you can redistribute it and/or modify
   7  *  it under the terms of the GNU General Public License as published by
   8  *  the Free Software Foundation; either version 3 of the License, or
   9  *  (at your option) any later version.
  10  *
  11  *  This program is distributed in the hope that it will be useful,
  12  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14  *  GNU General Public License for more details.
  15  *
  16  *  You should have received a copy of the GNU General Public License
  17  *  along with this program; if not, see <http://www.gnu.org/licenses/>.
  18  */
  19
  20 #ifndef _RPC_EVENTLOG_H         /* _RPC_EVENTLOG_H */
  21 #define _RPC_EVENTLOG_H
  22
  23 /* opcodes */
  24
  25 #define EVENTLOG_CLEAREVENTLOG          0x00
  26 #define EVENTLOG_CLOSEEVENTLOG          0x02
  27 #define EVENTLOG_GETNUMRECORDS          0x04
  28 #define EVENTLOG_GETOLDESTENTRY         0x05
  29 #define EVENTLOG_OPENEVENTLOG           0x07
  30 #define EVENTLOG_READEVENTLOG           0x0a
  31
  32 /* Eventlog read flags */
  33 /* defined in librpc/gen_ndr/eventlog.h */
  34
  35 /* Event types */
  36 /* defined in librpc/gen_ndr/eventlog.h */
  37
  38 /***********************************/
  39
  40 typedef struct
  41 {
  42         POLICY_HND handle;
  43         uint32 flags;
  44         uint32 offset;
  45         uint32 max_read_size;
  46 } EVENTLOG_Q_READ_EVENTLOG;
  47
  48 typedef struct {
  49         uint32 length;
  50         uint32 reserved1;
  51         uint32 record_number;
  52         uint32 time_generated;
  53         uint32 time_written;
  54         uint32 event_id;
  55         uint16 event_type;
  56         uint16 num_strings;
  57         uint16 event_category;
  58         uint16 reserved2;
  59         uint32 closing_record_number;
  60         uint32 string_offset;
  61         uint32 user_sid_length;
  62         uint32 user_sid_offset;
  63         uint32 data_length;
  64         uint32 data_offset;
  65 } Eventlog_record;
  66
  67 typedef struct {
  68         uint32 source_name_len;
  69         smb_ucs2_t *source_name;
  70         uint32 computer_name_len;
  71         smb_ucs2_t *computer_name;
  72         uint32 sid_padding;
  73         smb_ucs2_t *sid;
  74         uint32 strings_len;
  75         smb_ucs2_t *strings;
  76         uint32 user_data_len;
  77         char *user_data;
  78         uint32 data_padding;
  79 } Eventlog_data_record;
  80
  81 typedef struct eventlog_entry {
  82         Eventlog_record record;
  83         Eventlog_data_record data_record;
  84         uint8 *data;
  85         uint8 *end_of_data_padding;
  86         struct eventlog_entry *next;
  87 } Eventlog_entry;
  88
  89 typedef struct {
  90         uint32 num_bytes_in_resp;
  91         uint32 bytes_in_next_record;
  92         uint32 num_records;
  93         Eventlog_entry *entry;
  94         uint8 *end_of_entries_padding;
  95         uint32 sent_size;
  96         uint32 real_size;
  97         NTSTATUS status;
  98 } EVENTLOG_R_READ_EVENTLOG;
  99
 100 #endif /* _RPC_EVENTLOG_H */