Share via

HTTP_FILTER_LOG structure

  • Article

Applies to: desktop apps only

The Forefront TMG Web proxy includes a pointer to the HTTP_FILTER_LOG structure in the notification that it sends to Web filters when it is ready to write information to a log file. If your filter should be notified for this event, it must register to receive SF_NOTIFY_LOG notifications. For more information about the types of event notifications that are sent to Web filters, see Event Notifications.

Syntax

typedef struct _HTTP_FILTER_LOG {
  const CHAR *pszClientHostName;
  const CHAR *pszClientUserName;
  const CHAR *pszServerName;
  const CHAR *pszOperation;
  const CHAR *pszTarget;
  const CHAR *pszParameters;
  DWORD      dwHttpStatus;
  DWORD      dwWin32Status;
  DWORD      dwBytesSent;
  DWORD      dwBytesRecvd;
  DWORD      msTimeForProcessing;
} HTTP_FILTER_LOG, *PHTTP_FILTER_LOG;

Members

  • pszClientHostName
    The client's host name or IP address.

  • pszClientUserName
    Null-terminated string that specifies the client's user name if authenticated, or "anonymous" otherwise.

  • pszServerName
    Null-terminated string that specifies the name of the server to which the client is connected.

  • pszOperation
    Null-terminated string that specifies the HTTP method.

  • pszTarget
    Null-terminated string that specifies the target of the HTTP command.

  • pszParameters
    Null-terminated string that specifies the parameters passed to the HTTP command. This member is used to store the information that is to written in the Filter Information field of a Web proxy log entry.

  • dwHttpStatus
    The HTTP return status.

  • dwWin32Status
    The Windows error code.

  • dwBytesSent
    The number of bytes sent from the server to the client.

  • dwBytesRecvd
    The number of bytes received by the server from the client.

  • msTimeForProcessing
    The time, in milliseconds, required to process the client request.

Remarks

When the Web proxy is about to log information to the Web proxy log, it sends a notification by calling the HttpFilterProc entry-point function of each Web filter that is registered to receive SF_NOTIFY_LOG event notifications. The pvNotification parameter contains a pointer to an HTTP_FILTER_LOG structure, and the notificationType parameter is set to SF_NOTIFY_LOG.

The strings cannot be changed, but the string pointers can be replaced. If string pointers are changed, the memory they point to must remain valid until the next filter notification. The AllocMem callback function in the HTTP_FILTER_CONTEXT structure can be used to ensure this.

The strings specified in the pszClientHostName, pszClientUserName, pszServerName, pszOperation, pszTarget, and pszParameters members are formatted with UCS Transformation Format 8 (UTF-8) encoding.

For more information about how a Web filter can write information to the Web proxy log, see Adding Information to the Web Proxy Log.

Requirements

Minimum supported client

 None supported

Minimum supported server

 Windows Server 2008 R2, Windows Server 2008 with SP2 (64-bit only)

Version

 Forefront Threat Management Gateway (TMG) 2010

Header

 Httpfilt.h

See also

Notification Structures

 

 

Build date: 7/12/2010