Win32 API 日本語リファレンス
ホームNetworkManagement.NetManagement › NetAuditWrite

NetAuditWrite

関数
サーバーの監査ログにエントリを書き込む。
DLLNETAPI32.dll呼出規約winapi

シグネチャ

// NETAPI32.dll
#include <windows.h>

DWORD NetAuditWrite(
    DWORD type,
    BYTE* buf,
    DWORD numbytes,
    LPCWSTR service,
    BYTE* reserved
);

パラメーター

名前方向説明
typeDWORDin書き込む監査エントリの種類を示す値を指定する。
bufBYTE*inout監査エントリのデータへのポインター。
numbytesDWORDinbufのデータバイト数を指定する。
serviceLPCWSTRin監査を発行したサービス名を示す文字列。NULL可。
reservedBYTE*inout予約済み。NULLを指定する必要がある。

戻り値の型: DWORD

各言語での呼び出し定義

// NETAPI32.dll
#include <windows.h>

DWORD NetAuditWrite(
    DWORD type,
    BYTE* buf,
    DWORD numbytes,
    LPCWSTR service,
    BYTE* reserved
);
[DllImport("NETAPI32.dll", ExactSpelling = true)]
static extern uint NetAuditWrite(
    uint type,   // DWORD
    IntPtr buf,   // BYTE* in/out
    uint numbytes,   // DWORD
    [MarshalAs(UnmanagedType.LPWStr)] string service,   // LPCWSTR
    IntPtr reserved   // BYTE* in/out
);
<DllImport("NETAPI32.dll", ExactSpelling:=True)>
Public Shared Function NetAuditWrite(
    type As UInteger,   ' DWORD
    buf As IntPtr,   ' BYTE* in/out
    numbytes As UInteger,   ' DWORD
    <MarshalAs(UnmanagedType.LPWStr)> service As String,   ' LPCWSTR
    reserved As IntPtr   ' BYTE* in/out
) As UInteger
End Function
' type : DWORD
' buf : BYTE* in/out
' numbytes : DWORD
' service : LPCWSTR
' reserved : BYTE* in/out
Declare PtrSafe Function NetAuditWrite Lib "netapi32" ( _
    ByVal type As Long, _
    ByVal buf As LongPtr, _
    ByVal numbytes As Long, _
    ByVal service As LongPtr, _
    ByVal reserved As LongPtr) As Long
' VBA7前提(PtrSafe)。32bit Office では LongPtr→Long。Integer=16bit / Long=32bit / LongLong=64bit。
import ctypes
from ctypes import wintypes

NetAuditWrite = ctypes.windll.netapi32.NetAuditWrite
NetAuditWrite.restype = wintypes.DWORD
NetAuditWrite.argtypes = [
    wintypes.DWORD,  # type : DWORD
    ctypes.POINTER(ctypes.c_ubyte),  # buf : BYTE* in/out
    wintypes.DWORD,  # numbytes : DWORD
    wintypes.LPCWSTR,  # service : LPCWSTR
    ctypes.POINTER(ctypes.c_ubyte),  # reserved : BYTE* in/out
]
require 'fiddle'
require 'fiddle/import'

lib = Fiddle.dlopen('NETAPI32.dll')
NetAuditWrite = Fiddle::Function.new(
  lib['NetAuditWrite'],
  [
    -Fiddle::TYPE_INT,  # type : DWORD
    Fiddle::TYPE_VOIDP,  # buf : BYTE* in/out
    -Fiddle::TYPE_INT,  # numbytes : DWORD
    Fiddle::TYPE_VOIDP,  # service : LPCWSTR
    Fiddle::TYPE_VOIDP,  # reserved : BYTE* in/out
  ],
  -Fiddle::TYPE_INT)
#[link(name = "netapi32")]
extern "system" {
    fn NetAuditWrite(
        type: u32,  // DWORD
        buf: *mut u8,  // BYTE* in/out
        numbytes: u32,  // DWORD
        service: *const u16,  // LPCWSTR
        reserved: *mut u8  // BYTE* in/out
    ) -> u32;
}
// crates: windows-sys provides ready-made bindings for this API.
$sig = @"
[DllImport("NETAPI32.dll")]
public static extern uint NetAuditWrite(uint type, IntPtr buf, uint numbytes, [MarshalAs(UnmanagedType.LPWStr)] string service, IntPtr reserved);
"@
$api = Add-Type -MemberDefinition $sig -Name 'NETAPI32_NetAuditWrite' -Namespace Win32 -PassThru
# $api::NetAuditWrite(type, buf, numbytes, service, reserved)
#uselib "NETAPI32.dll"
#func global NetAuditWrite "NetAuditWrite" sptr, sptr, sptr, sptr, sptr
; NetAuditWrite type, varptr(buf), numbytes, service, varptr(reserved)   ; 戻り値は stat
; type : DWORD -> "sptr"
; buf : BYTE* in/out -> "sptr"
; numbytes : DWORD -> "sptr"
; service : LPCWSTR -> "sptr"
; reserved : BYTE* in/out -> "sptr"
; ※HSP3.7は #func のため戻り値はシステム変数 stat に格納されます。
出力引数:
#uselib "NETAPI32.dll"
#cfunc global NetAuditWrite "NetAuditWrite" int, var, int, wstr, var
; res = NetAuditWrite(type, buf, numbytes, service, reserved)
; type : DWORD -> "int"
; buf : BYTE* in/out -> "var"
; numbytes : DWORD -> "int"
; service : LPCWSTR -> "wstr"
; reserved : BYTE* in/out -> "var"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。
出力引数:
; DWORD NetAuditWrite(DWORD type, BYTE* buf, DWORD numbytes, LPCWSTR service, BYTE* reserved)
#uselib "NETAPI32.dll"
#cfunc global NetAuditWrite "NetAuditWrite" int, var, int, wstr, var
; res = NetAuditWrite(type, buf, numbytes, service, reserved)
; type : DWORD -> "int"
; buf : BYTE* in/out -> "var"
; numbytes : DWORD -> "int"
; service : LPCWSTR -> "wstr"
; reserved : BYTE* in/out -> "var"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。
import (
	"golang.org/x/sys/windows"
	"unsafe"
)

var (
	netapi32 = windows.NewLazySystemDLL("NETAPI32.dll")
	procNetAuditWrite = netapi32.NewProc("NetAuditWrite")
)

// type (DWORD), buf (BYTE* in/out), numbytes (DWORD), service (LPCWSTR), reserved (BYTE* in/out)
r1, _, err := procNetAuditWrite.Call(
	uintptr(type),
	uintptr(buf),
	uintptr(numbytes),
	uintptr(unsafe.Pointer(windows.StringToUTF16Ptr(service))),
	uintptr(reserved),
)
_ = err  // syscall.Errno (valid when the call sets last-error)
_ = r1   // DWORD
function NetAuditWrite(
  type: DWORD;   // DWORD
  buf: Pointer;   // BYTE* in/out
  numbytes: DWORD;   // DWORD
  service: PWideChar;   // LPCWSTR
  reserved: Pointer   // BYTE* in/out
): DWORD; stdcall;
  external 'NETAPI32.dll' name 'NetAuditWrite';
result := DllCall("NETAPI32\NetAuditWrite"
    , "UInt", type   ; DWORD
    , "Ptr", buf   ; BYTE* in/out
    , "UInt", numbytes   ; DWORD
    , "WStr", service   ; LPCWSTR
    , "Ptr", reserved   ; BYTE* in/out
    , "UInt")   ; return: DWORD
●NetAuditWrite(type, buf, numbytes, service, reserved) = DLL("NETAPI32.dll", "dword NetAuditWrite(dword, void*, dword, char*, void*)")
# 呼び出し: NetAuditWrite(type, buf, numbytes, service, reserved)
# type : DWORD -> "dword"
# buf : BYTE* in/out -> "void*"
# numbytes : DWORD -> "dword"
# service : LPCWSTR -> "char*"
# reserved : BYTE* in/out -> "void*"
# なでしこ1は32bit・ANSI(Shift_JIS)。文字列=char*(ANSI)、ポインタ/ハンドル=void*(4byte)。
const std = @import("std");

extern "netapi32" fn NetAuditWrite(
    type: u32, // DWORD
    buf: [*c]u8, // BYTE* in/out
    numbytes: u32, // DWORD
    service: [*c]const u16, // LPCWSTR
    reserved: [*c]u8 // BYTE* in/out
) callconv(std.os.windows.WINAPI) u32;
proc NetAuditWrite(
    `type`: uint32,  # DWORD
    buf: ptr uint8,  # BYTE* in/out
    numbytes: uint32,  # DWORD
    service: WideCString,  # LPCWSTR
    reserved: ptr uint8  # BYTE* in/out
): uint32 {.importc: "NetAuditWrite", stdcall, dynlib: "NETAPI32.dll".}
pragma(lib, "netapi32");
extern(Windows)
uint NetAuditWrite(
    uint type,   // DWORD
    ubyte* buf,   // BYTE* in/out
    uint numbytes,   // DWORD
    const(wchar)* service,   // LPCWSTR
    ubyte* reserved   // BYTE* in/out
);
ccall((:NetAuditWrite, "NETAPI32.dll"), stdcall, UInt32,
      (UInt32, Ptr{UInt8}, UInt32, Cwstring, Ptr{UInt8}),
      type, buf, numbytes, service, reserved)
# type : DWORD -> UInt32
# buf : BYTE* in/out -> Ptr{UInt8}
# numbytes : DWORD -> UInt32
# service : LPCWSTR -> Cwstring
# reserved : BYTE* in/out -> Ptr{UInt8}
# stdcall は 32bit のみ意味を持つ(x64 では無視)。
local ffi = require("ffi")
ffi.cdef[[
uint32_t NetAuditWrite(
    uint32_t type,
    uint8_t* buf,
    uint32_t numbytes,
    const uint16_t* service,
    uint8_t* reserved);
]]
local netapi32 = ffi.load("netapi32")
-- netapi32.NetAuditWrite(type, buf, numbytes, service, reserved)
-- type : DWORD
-- buf : BYTE* in/out
-- numbytes : DWORD
-- service : LPCWSTR
-- reserved : BYTE* in/out
-- 構造体/GUIDへのポインタは cdef が通るよう void* で表記(実型は各引数コメント参照)。値渡し構造体・enum は対応する typedef を cdef に追加すること。
const koffi = require('koffi');
const lib = koffi.load('NETAPI32.dll');
const NetAuditWrite = lib.func('__stdcall', 'NetAuditWrite', 'uint32_t', ['uint32_t', 'uint8_t *', 'uint32_t', 'str16', 'uint8_t *']);
// NetAuditWrite(type, buf, numbytes, service, reserved)
// type : DWORD -> 'uint32_t'
// buf : BYTE* in/out -> 'uint8_t *'
// numbytes : DWORD -> 'uint32_t'
// service : LPCWSTR -> 'str16'
// reserved : BYTE* in/out -> 'uint8_t *'
// 出力ポインタは koffi.out(...) で包む。構造体は koffi.struct で定義。
const lib = Deno.dlopen("NETAPI32.dll", {
  NetAuditWrite: { parameters: ["u32", "pointer", "u32", "buffer", "pointer"], result: "u32" },
});
// lib.symbols.NetAuditWrite(type, buf, numbytes, service, reserved)
// type : DWORD -> "u32"
// buf : BYTE* in/out -> "pointer"
// numbytes : DWORD -> "u32"
// service : LPCWSTR -> "buffer"
// reserved : BYTE* in/out -> "pointer"
// 文字列引数は "buffer"(NUL 終端のバイト列を Uint8Array で渡す)。
// 値渡し構造体は { struct: [ ...field types... ] } を使用。
<?php
$ffi = FFI::cdef(<<<C
uint32_t NetAuditWrite(
    uint32_t type,
    uint8_t* buf,
    uint32_t numbytes,
    const uint16_t* service,
    uint8_t* reserved);
C, "NETAPI32.dll");
// $ffi->NetAuditWrite(type, buf, numbytes, service, reserved);
// type : DWORD
// buf : BYTE* in/out
// numbytes : DWORD
// service : LPCWSTR
// reserved : BYTE* in/out
// 構造体/GUIDへのポインタは cdef が通るよう void* で表記(実型は各引数コメント参照)。値渡し構造体・enum は対応する typedef を cdef に追加すること。
// WINAPI(stdcall): x64 では呼出規約が統一されるため問題なし。x86 では __stdcall 対応のラッパが必要な場合あり。
import com.sun.jna.*;
import com.sun.jna.ptr.*;
import com.sun.jna.win32.StdCallLibrary;
import com.sun.jna.win32.W32APIOptions;

public interface Netapi32 extends StdCallLibrary {
    Netapi32 INSTANCE = Native.load("netapi32", Netapi32.class);
    int NetAuditWrite(
        int type,   // DWORD
        byte[] buf,   // BYTE* in/out
        int numbytes,   // DWORD
        WString service,   // LPCWSTR
        byte[] reserved   // BYTE* in/out
    );
}
@[Link("netapi32")]
lib LibNETAPI32
  fun NetAuditWrite = NetAuditWrite(
    type_ : UInt32,   # DWORD
    buf : UInt8*,   # BYTE* in/out
    numbytes : UInt32,   # DWORD
    service : UInt16*,   # LPCWSTR
    reserved : UInt8*   # BYTE* in/out
  ) : UInt32
end
# 構造体/GUID/enum は lib 内に対応する型定義が必要。
# 呼出規約: x64 は規約統一のため OK。x86(32bit)は WINAPI=stdcall だが Crystal の fun に stdcall 付与構文がなく非対応。
import 'dart:ffi';
import 'package:ffi/ffi.dart';

typedef NetAuditWriteNative = Uint32 Function(Uint32, Pointer<Uint8>, Uint32, Pointer<Utf16>, Pointer<Uint8>);
typedef NetAuditWriteDart = int Function(int, Pointer<Uint8>, int, Pointer<Utf16>, Pointer<Uint8>);
final NetAuditWrite = DynamicLibrary.open('NETAPI32.dll')
    .lookupFunction<NetAuditWriteNative, NetAuditWriteDart>('NetAuditWrite');
// type : DWORD -> Uint32
// buf : BYTE* in/out -> Pointer<Uint8>
// numbytes : DWORD -> Uint32
// service : LPCWSTR -> Pointer<Utf16>
// reserved : BYTE* in/out -> Pointer<Uint8>
// 文字列は package:ffi の "...".toNativeUtf16()/toNativeUtf8() で変換。
{$mode objfpc}{$H+}
function NetAuditWrite(
  type: DWORD;   // DWORD
  buf: Pointer;   // BYTE* in/out
  numbytes: DWORD;   // DWORD
  service: PWideChar;   // LPCWSTR
  reserved: Pointer   // BYTE* in/out
): DWORD; stdcall;
  external 'NETAPI32.dll' name 'NetAuditWrite';
import Foreign
import Foreign.C.Types
import Foreign.C.String

foreign import stdcall safe "NetAuditWrite"
  c_NetAuditWrite :: Word32 -> Ptr Word8 -> Word32 -> CWString -> Ptr Word8 -> IO Word32
-- type : DWORD -> Word32
-- buf : BYTE* in/out -> Ptr Word8
-- numbytes : DWORD -> Word32
-- service : LPCWSTR -> CWString
-- reserved : BYTE* in/out -> Ptr Word8
-- 要 GHC(Windows)。stdcall は x64 では ccall として扱われる。ブロックする API は safe 呼び出し推奨。
open Ctypes
open Foreign

let netauditwrite =
  foreign "NetAuditWrite"
    (uint32_t @-> (ptr uint8_t) @-> uint32_t @-> (ptr uint16_t) @-> (ptr uint8_t) @-> returning uint32_t)
(* type : DWORD -> uint32_t *)
(* buf : BYTE* in/out -> (ptr uint8_t) *)
(* numbytes : DWORD -> uint32_t *)
(* service : LPCWSTR -> (ptr uint16_t) *)
(* reserved : BYTE* in/out -> (ptr uint8_t) *)
(* foreign は cdecl 前提。x64 Windows では WINAPI と一致。構造体は ctypes structure を定義のこと。 *)
(cffi:define-foreign-library netapi32 (t "NETAPI32.dll"))
(cffi:use-foreign-library netapi32)

(cffi:defcfun ("NetAuditWrite" net-audit-write :convention :stdcall) :uint32
  (type :uint32)   ; DWORD
  (buf :pointer)   ; BYTE* in/out
  (numbytes :uint32)   ; DWORD
  (service (:string :encoding :utf-16le))   ; LPCWSTR
  (reserved :pointer))   ; BYTE* in/out
; isize/usize(INT_PTR/SIZE_T)は x64 前提で :int64/:uint64。x86 では :int32/:uint32。
use Win32::API;
my $NetAuditWrite = Win32::API::More->new('NETAPI32',
    'DWORD NetAuditWrite(DWORD type, LPVOID buf, DWORD numbytes, LPCWSTR service, LPVOID reserved)');
# my $ret = $NetAuditWrite->Call($type, $buf, $numbytes, $service, $reserved);
# type : DWORD -> DWORD
# buf : BYTE* in/out -> LPVOID
# numbytes : DWORD -> DWORD
# service : LPCWSTR -> LPCWSTR
# reserved : BYTE* in/out -> LPVOID
# 値渡し構造体は pack() した文字列、または Win32::API::Struct を使用。