3.1.1.7.3 Format of the Referent of pmsgOut.V1.pLog

The DRS_MSG_NT4_CHGLOG_REPLY_V1 ([MS-DRSR] section 4.1.11.1.4) response message to an IDL_DRSGetNT4ChangeLog request ([MS-DRSR] section 4.1.11) contains a BYTE *pLog field. The format of the referent of this field is not specified in [MS-DRSR] section 4.1.11; it is specified here.

The referent of this field is a CHANGE_LOG_ENTRIES structure:


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

Size

Version

SequenceNumber

Flags

ChangeLogEntries (variable)

...

Size (4 bytes): The size, in bytes, of the part of the buffer preceding the ChangeLogEntries field. Equals 0x00000010.

Version (4 bytes): The version of the message. Equals 0x00000001.

SequenceNumber (4 bytes): The sequence number for the buffer. Is set to 0x00000001 in a response to an IDL_DRSGetNT4ChangeLog request with pmsgIn.V1.pRestart = NULL. The value of pmsgOut.V1.pRestart in any IDL_DRSGetNT4ChangeLog response encapsulates SequenceNumber. In a response to an IDL_DRSGetNT4ChangeLog request with pmsgIn.V1.pRestart ≠ NULL, SequenceNumber is the value encapsulated in pmsgIn.V1.pRestart, plus one.

Flags (4 bytes): Equals 0x00000000. Ignored upon receipt.

ChangeLogEntries (variable): A sequence of CHANGELOG_ENTRY structures. Each CHANGELOG_ENTRY is followed by padding bytes with value zero such that the number of bytes in the CHANGELOG_ENTRY plus the padding is congruent to zero mod 8.

The server stores the total number of bytes in the fixed-length and variable-length portions of the CHANGE_LOG_ENTRIES structure in the DWORD cbLog field of the DRS_MSG_NT4_CHGLOG_REPLY_V1 response message. This field allows the client to determine the number of CHANGELOG_ENTRY structures contained in the CHANGE_LOG_ENTRIES structure.

Show: