Share via

UPDATE_EVENT

  • Article

The UPDATE_EVENT structure updates events. This structure is passed back to the calling application via the event status callback procedure by the NPP.

typedef struct _UPDATE_EVENT {
  USHORT Event;
  DWORD Action;
  DWORD Status;
  DWORD Value;
  __int64 TimeStamp;
  DWORD_PTR lpUserContext;
  DWORD_PTR lpReserved;
  UINT FramesDropped;
  union {
    DWORD Reserved;
    LPFRAMETABLE lpFrameTable;
    DWORD_PTR lpPacketQueue;
    SECURITY_PERMISSION_RESPONSE SecurityResponse;
  };
  LPSTATISTICS lpFinalStats;
} UPDATE_EVENT, 
 *PUPDATE_EVENT;

Members

  • Event
    Actual event being recorded.
  • Action
    The action taken.
  • Status
    Network status indication.
  • Value
    Auxiliary counter variable.
  • TimeStamp
    The marked events, in microseconds.
  • lpUserContext
    User context given by the application.
  • lpReserved
    Driver or NAL use.
  • FramesDropped
    RTF frames dropped in the specified buffer.
  • Reserved
    No data comes back with this switch option.
  • lpFrameTable
    RTF only.
  • lpPacketQueue
    For transmits.
  • SecurityResponse
    Remote security monitor response.
  • lpFinalStats
    This is only filled in on non-security related stops (for example, triggers).

Remarks

C++ users should note that the declaration for this callback should be in the public part of the header file:

static WINAPI DWORD NetworkCallback( UPDATE_EVENT events);

The implementation should be in the protected section of the .cpp file:

DWORD WINAPI ClassName::NetworkCallback( UPDATE_EVENT events) {};

Requirements

Client Requires Windows XP, Windows 2000 Professional, or Windows NT Workstation 4.0.
Server Requires Windows Server 2003, Windows 2000 Server, or Windows NT Server 4.0.
Header

Declared in Netmon.h.