UPDATE_EVENT structure

The UPDATE_EVENT structure updates events. This structure is passed back to the calling application via the event status callback procedure by the NPP.

Syntax

typedef struct _UPDATE_EVENT {
  USHORT       Event;
  DWORD        Action;
  DWORD        Status;
  DWORD        Value;
  __int64      TimeStamp;
  DWORD_PTR    lpUserContext;
  DWORD_PTR    lpReserved;
  UINT         FramesDropped;
  union {
    DWORD                        Reserved;
    LPFRAMETABLE                 lpFrameTable;
    DWORD_PTR                    lpPacketQueue;
    SECURITY_PERMISSION_RESPONSE SecurityResponse;
  };
  LPSTATISTICS lpFinalStats;
} UPDATE_EVENT, *PUPDATE_EVENT;

Members

Event

Actual event being recorded.

Action

The action taken.

Status

Network status indication.

Value

Auxiliary counter variable.

TimeStamp

The marked events, in microseconds.

lpUserContext

User context given by the application.

lpReserved

Driver or NAL use.

FramesDropped

RTF frames dropped in the specified buffer.

Reserved

No data comes back with this switch option.

lpFrameTable

RTF only.

lpPacketQueue

For transmits.

SecurityResponse

Remote security monitor response.

lpFinalStats

This is only filled in on non-security related stops (for example, triggers).

Remarks

C++ users should note that the declaration for this callback should be in the public part of the header file:

static WINAPI DWORD NetworkCallback( UPDATE_EVENT events);

The implementation should be in the protected section of the .cpp file:

DWORD WINAPI ClassName::NetworkCallback( UPDATE_EVENT events) {};

Requirements

Requirement	Value
Minimum supported client	Windows 2000 Professional [desktop apps only]
Minimum supported server	Windows 2000 Server [desktop apps only]
Header	Netmon.h