2 * Unix SMB/CIFS implementation.
3 * RPC Pipe client / server routines
4 * Copyright (C) Marcin Krzysztof Porwit 2005.
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, write to the Free Software
18 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
21 #ifndef _RPC_EVENTLOG_H /* _RPC_EVENTLOG_H */
22 #define _RPC_EVENTLOG_H
26 #define EVENTLOG_CLEAREVENTLOG 0x00
27 #define EVENTLOG_CLOSEEVENTLOG 0x02
28 #define EVENTLOG_GETNUMRECORDS 0x04
29 #define EVENTLOG_GETOLDESTENTRY 0x05
30 #define EVENTLOG_OPENEVENTLOG 0x07
31 #define EVENTLOG_READEVENTLOG 0x0a
33 /* Eventlog read flags */
35 #define EVENTLOG_SEQUENTIAL_READ 0x0001
36 #define EVENTLOG_SEEK_READ 0x0002
37 #define EVENTLOG_FORWARDS_READ 0x0004
38 #define EVENTLOG_BACKWARDS_READ 0x0008
42 #define EVENTLOG_SUCCESS 0x0000
43 #define EVENTLOG_ERROR_TYPE 0x0001
44 #define EVENTLOG_WARNING_TYPE 0x0002
45 #define EVENTLOG_INFORMATION_TYPE 0x0004
46 #define EVENTLOG_AUDIT_SUCCESS 0x0008
47 #define EVENTLOG_AUDIT_FAILURE 0x0010
49 /* Defines for TDB keys */
50 #define EVT_OLDEST_ENTRY "INFO/oldest_entry"
51 #define EVT_NEXT_RECORD "INFO/next_record"
52 #define EVT_VERSION "INFO/version"
53 #define EVT_MAXSIZE "INFO/maxsize"
54 #define EVT_RETENTION "INFO/retention"
56 #define ELOG_APPL "Application"
57 #define ELOG_SYS "System"
58 #define ELOG_SEC "Security"
60 typedef struct elog_tdb {
61 struct elog_tdb *prev, *next;
67 #define ELOG_TDB_CTX(x) ((x)->tdb)
70 #define EVENTLOG_DATABASE_VERSION_V1 1
72 /***********************************/
77 } EVENTLOG_OPEN_UNKNOWN0;
80 EVENTLOG_OPEN_UNKNOWN0 *unknown0;
85 } EVENTLOG_Q_OPEN_EVENTLOG;
90 } EVENTLOG_R_OPEN_EVENTLOG;
93 /***********************************/
97 } EVENTLOG_Q_CLOSE_EVENTLOG;
102 } EVENTLOG_R_CLOSE_EVENTLOG;
105 /***********************************/
109 } EVENTLOG_Q_GET_NUM_RECORDS;
114 } EVENTLOG_R_GET_NUM_RECORDS;
117 /***********************************/
121 } EVENTLOG_Q_GET_OLDEST_ENTRY;
126 } EVENTLOG_R_GET_OLDEST_ENTRY;
129 /***********************************/
136 uint32 max_read_size;
137 } EVENTLOG_Q_READ_EVENTLOG;
142 uint32 record_number;
143 uint32 time_generated;
148 uint16 event_category;
150 uint32 closing_record_number;
151 uint32 string_offset;
152 uint32 user_sid_length;
153 uint32 user_sid_offset;
159 uint32 source_name_len;
160 wpstring source_name;
161 uint32 computer_name_len;
162 wpstring computer_name;
167 uint32 user_data_len;
170 } Eventlog_data_record;
172 typedef struct eventlog_entry {
173 Eventlog_record record;
174 Eventlog_data_record data_record;
176 uint8 *end_of_data_padding;
177 struct eventlog_entry *next;
181 uint32 num_bytes_in_resp;
182 uint32 bytes_in_next_record;
184 Eventlog_entry *entry;
185 uint8 *end_of_entries_padding;
189 } EVENTLOG_R_READ_EVENTLOG;
192 /***********************************/
197 } EVENTLOG_Q_CLEAR_EVENTLOG;
201 } EVENTLOG_R_CLEAR_EVENTLOG;
203 #endif /* _RPC_EVENTLOG_H */