source3/include/rpc_eventlog.h

   1 /*
   2  *  Unix SMB/CIFS implementation.
   3  *  RPC Pipe client / server routines
   4  *  Copyright (C) Marcin Krzysztof Porwit    2005.
   5  *
   6  *  This program is free software; you can redistribute it and/or modify
   7  *  it under the terms of the GNU General Public License as published by
   8  *  the Free Software Foundation; either version 2 of the License, or
   9  *  (at your option) any later version.
  10  *
  11  *  This program is distributed in the hope that it will be useful,
  12  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14  *  GNU General Public License for more details.
  15  *
  16  *  You should have received a copy of the GNU General Public License
  17  *  along with this program; if not, write to the Free Software
  18  *  Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  19  */
  20
  21 #ifndef _RPC_EVENTLOG_H         /* _RPC_EVENTLOG_H */
  22 #define _RPC_EVENTLOG_H
  23
  24 /* opcodes */
  25
  26 #define EVENTLOG_CLEAREVENTLOG          0x00
  27 #define EVENTLOG_CLOSEEVENTLOG          0x02
  28 #define EVENTLOG_GETNUMRECORDS          0x04
  29 #define EVENTLOG_GETOLDESTENTRY         0x05
  30 #define EVENTLOG_OPENEVENTLOG           0x07
  31 #define EVENTLOG_READEVENTLOG           0x0a
  32
  33 /* Eventlog read flags */
  34
  35 #define EVENTLOG_SEQUENTIAL_READ      0x0001
  36 #define EVENTLOG_SEEK_READ            0x0002
  37 #define EVENTLOG_FORWARDS_READ        0x0004
  38 #define EVENTLOG_BACKWARDS_READ       0x0008
  39
  40 /* Event types */
  41
  42 #define EVENTLOG_SUCCESS              0x0000
  43 #define EVENTLOG_ERROR_TYPE           0x0001
  44 #define EVENTLOG_WARNING_TYPE         0x0002
  45 #define EVENTLOG_INFORMATION_TYPE     0x0004
  46 #define EVENTLOG_AUDIT_SUCCESS        0x0008
  47 #define EVENTLOG_AUDIT_FAILURE        0x0010
  48
  49
  50 /***********************************/
  51
  52 typedef struct {
  53         uint16 unknown1;
  54         uint16 unknown2;
  55 } EVENTLOG_OPEN_UNKNOWN0;
  56
  57 typedef struct {
  58         EVENTLOG_OPEN_UNKNOWN0 *unknown0;
  59         UNISTR4 logname;
  60         UNISTR4 servername;
  61         uint32 unknown1;
  62         uint32 unknown2;
  63 } EVENTLOG_Q_OPEN_EVENTLOG;
  64
  65 typedef struct {
  66         POLICY_HND handle;
  67         WERROR status;
  68 } EVENTLOG_R_OPEN_EVENTLOG;
  69
  70
  71 /***********************************/
  72
  73 typedef struct {
  74         POLICY_HND handle;
  75 } EVENTLOG_Q_CLOSE_EVENTLOG;
  76
  77 typedef struct {
  78         POLICY_HND handle;
  79         WERROR status;
  80 } EVENTLOG_R_CLOSE_EVENTLOG;
  81
  82
  83 /***********************************/
  84
  85 typedef struct {
  86         POLICY_HND handle;
  87 } EVENTLOG_Q_GET_NUM_RECORDS;
  88
  89 typedef struct {
  90         uint32 num_records;
  91         WERROR status;
  92 } EVENTLOG_R_GET_NUM_RECORDS;
  93
  94
  95 /***********************************/
  96
  97 typedef struct {
  98         POLICY_HND handle;
  99 } EVENTLOG_Q_GET_OLDEST_ENTRY;
 100
 101 typedef struct {
 102         uint32 oldest_entry;
 103         WERROR status;
 104 } EVENTLOG_R_GET_OLDEST_ENTRY;
 105
 106
 107 /***********************************/
 108
 109 typedef struct
 110 {
 111         POLICY_HND handle;
 112         uint32 flags;
 113         uint32 offset;
 114         uint32 max_read_size;
 115 } EVENTLOG_Q_READ_EVENTLOG;
 116
 117 typedef struct {
 118         uint32 length;
 119         uint32 reserved1;
 120         uint32 record_number;
 121         uint32 time_generated;
 122         uint32 time_written;
 123         uint32 event_id;
 124         uint16 event_type;
 125         uint16 num_strings;
 126         uint16 event_category;
 127         uint16 reserved2;
 128         uint32 closing_record_number;
 129         uint32 string_offset;
 130         uint32 user_sid_length;
 131         uint32 user_sid_offset;
 132         uint32 data_length;
 133         uint32 data_offset;
 134 } Eventlog_record;
 135
 136 typedef struct {
 137         uint32 source_name_len;
 138         wpstring source_name;
 139         uint32 computer_name_len;
 140         wpstring computer_name;
 141         uint32 sid_padding;
 142         wpstring sid;
 143         uint32 strings_len;
 144         wpstring strings;
 145         uint32 user_data_len;
 146         pstring user_data;
 147         uint32 data_padding;
 148 } Eventlog_data_record;
 149
 150 typedef struct eventlog_entry {
 151         Eventlog_record record;
 152         Eventlog_data_record data_record;
 153         uint8 *data;
 154         uint8 *end_of_data_padding;
 155         struct eventlog_entry *next;
 156 } Eventlog_entry;
 157
 158 typedef struct {
 159         uint32 num_bytes_in_resp;
 160         uint32 bytes_in_next_record;
 161         uint32 num_records;
 162         Eventlog_entry *entry;
 163         uint8 *end_of_entries_padding;
 164         uint32 sent_size;
 165         uint32 real_size;
 166         WERROR status;
 167 } EVENTLOG_R_READ_EVENTLOG;
 168
 169
 170 /***********************************/
 171
 172 typedef struct {
 173         POLICY_HND handle;
 174         UNISTR4 backupfile;
 175 } EVENTLOG_Q_CLEAR_EVENTLOG;
 176
 177 typedef struct {
 178         WERROR status;
 179 } EVENTLOG_R_CLEAR_EVENTLOG;
 180
 181 #endif /* _RPC_EVENTLOG_H */