The Samba-Bugzilla – Bug 6643
net eventlog dump does not work
Last modified: 2009-08-20 08:09:45 UTC
net eventlog dump does not work with EVT files created by (at least) Windows XP.
As far as I examined "net eventlog dump" works with EVT files from Samba, create by " net eventlog export" command.
The file attached is the commandline output:
net -s /dev/null -d10 eventlog dump /tmp/en-system.evt 2>&1 | tee net-eventlog-dump.txt
en-system.evt is an exported EVT file from Windows XP (english version).
Created attachment 4567 [details]
Level 10 log
Created attachment 4568 [details]
My eventlog file
Ok, we (still) fail to parse the Pad field inside the EVENTLOGRECORD correctly. Fix will be probably not too hard.