#pragma classflags(64)
#pragma namespace("\\\\.\\Root\\WMI")
instance of __namespace{ name="MS_804";};
#pragma namespace("\\\\.\\Root\\WMI\\MS_804")

[Description("IIS: FTP Server") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpServiceProvider : EventTrace
{
  [Description("Enable Flags") : Amended,ValueDescriptions{"Connection info", "Ftp Commands", "Ftp Processing", "Ftp Authentication", "Ftp Security", "Ftp File System Access", "Ftp Extensibility", "SSL connection, handshake and cert info", "Show cleartext data", "Monitor Schannel calls"} : Amended] uint32 Flags;
  [Description("Levels") : Amended,ValueDescriptions{"Abnormal exit or termination", "Severe errors that need logging", "Warnings such as allocation failure", "Includes non-error cases", "Detailed traces from intermediate steps"} : Amended] uint32 Level;
};

[Description("FTP connection") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpConnection : FtpServiceProvider
{
};

[Description("Started FTP control channel") : Amended,EventTypeName("StartCtrlChannel") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpConnection_StartCtrlChannel : FtpConnection
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Site Name (may not be the final one)") : Amended] string PreliminarySiteName;
  [Description("Client's IP Address") : Amended] string ClientIPAddress;
  [Description("Client's Port") : Amended] uint16 ClientPort;
  [Description("Server's IP Address") : Amended] string ServerIPAddress;
  [Description("Local Port") : Amended] uint16 ServerPort;
};

[Description("Ended FTP control channel") : Amended,EventTypeName("EndCtrlChannel") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpConnection_EndFtpChannel : FtpConnection
{
  [Description("Session ID") : Amended] object SessionId;
};

[Description("Initiated closing of the FTP control channel") : Amended,EventTypeName("CloseCtrlChannel") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpConnection_CloseCtrlChannel : FtpConnection
{
  [Description("Session ID") : Amended] object SessionId;
};

[Description("Initiated closing of the FTP control channel due to an error") : Amended,EventTypeName("CloseCtrlChannelFail") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpConnection_CloseCtrlChannelFail : FtpConnection
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Error that trigerred closing the control channel") : Amended] uint32 ErrorCode;
  [Description("Substatus with more specific reason for closing the control channel") : Amended,ValueDescriptions{"SUBSTATUS_OK", "SUBSTATUS_DENIED_BY_AUTHORIZATION", "SUBSTATUS_DENIED_BY_FILE_SYSTEM", "SUBSTATUS_ERROR_FROM_FILE_SYSTEM", "SUBSTATUS_DENIED_BY_IP_RULES", "SUBSTATUS_DENIED_WRITE_TO_VDIR_ROOT", "SUBSTATUS_FAILED_TO_CHECK_SHORT_NAME", "SUBSTATUS_DENIED_FOR_SHORT_NAME", "SUBSTATUS_DENIED_HIDDEN_SEGMENT", "SUBSTATUS_DENIED_URL_SEQUENCE", "SUBSTATUS_DENIED_HIGH_BIT_CHARACTERS", "SUBSTATUS_DENIED_FILE_EXTENSION", "SUBSTATUS_DENIED_LONG_URL", "SUBSTATUS_DENIED_NOT_A_DISK_FILE", "SUBSTATUS_CTRL_IDLE_TIMEOUT", "SUBSTATUS_DATA_IDLE_TIMEOUT", "SUBSTATUS_CTRL_NEW_CONN_TIMEOUT", "SUBSTATUS_INVALID_SITE_CONFIGURATION", "SUBSTATUS_INVALID_CONFIGURATION", "SUBSTATUS_CTRL_REFUSED_CONN_LIMIT", "SUBSTATUS_DATA_ABORTED_BY_ABOR_CMD", "SUBSTATUS_SITE_STOPPING", "SUBSTATUS_DATA_ABORTED_SERVER_ERROR", "SUBSTATUS_DATA_ABORTED_BY_CLIENT", "SUBSTATUS_SSL_REQ_FOR_DATA", "SUBSTATUS_SSL_REQ_FOR_CTRL", "SUBSTATUS_SSL_REQ_FOR_CREDS", "SUBSTATUS_SSL_DENIED_FOR_DATA", "SUBSTATUS_SSL_DENIED_FOR_CTRL", "SUBSTATUS_SSL_DENIED_FOR_CREDS", "SUBSTATUS_SSL_DENIED_FOR_CMDS", "SUBSTATUS_NO_SSL_CERT", "SUBSTATUS_SSL_INIT_FAILED", "SUBSTATUS_HOME_DIR_LOOKUP_FAILED", "SUBSTATUS_CUSTOM_AUTH_CALL_FAILED", "SUBSTATUS_FAILED_TO_AUTHENTICATE", "SUBSTATUS_NO_AUTH_METHOD_ALLOWED", "SUBSTATUS_UNKNOWN_HOSTNAME", "SUBSTATUS_CLIENT_IP_MISMATCH_ON_DATA", "SUBSTATUS_MAXIMUM_FILE_SIZE_EXCEEDED", "SUBSTATUS_AD_ISOLATION_NEEDS_BASIC_AUTH", "SUBSTATUS_ERROR_DURING_AUTHENTICATION", "SUBSTATUS_ANONYMOUS_AUTH_NOT_ALLOWED", "SUBSTATUS_PROTECTION_NEGOTIATION_FAILED", "SUBSTATUS_SSL_CERT_NOT_FOUND", "SUBSTATUS_SSL_CERT_PRIVATE_KEY_NOT_FOUND", "SUBSTATUS_SSL_CERT_INVALID_HASH_LENGTH", "SUBSTATUS_SSL_CLIENT_CERT_REQUIRED", "SUBSTATUS_SSL_CLIENT_CERT_INVALID", "SUBSTATUS_SSL_CLIENT_CERT_MISMATCH", "SUBSTATUS_DATA_MIN_BANDWIDTH_TIMEOUT", "SUBSTATUS_DENIED_BY_COMMAND_FILTERING_RULES", "SUBSTATUS_DISCONNECTED_BY_ADMINISTRATOR", "SUBSTATUS_CONNECTION_ERROR", "SUBSTATUS_CTRL_CLOSED_ON_CONFIG_CHANGE", "SUBSTATUS_SSL_128_BIT_REQUIRED"} : Amended] uint32 SubStatus;
};

[Description("Started FTP data channel") : Amended,EventTypeName("StartDataChannel") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpConnection_StartDataChannel : FtpConnection
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Client's IP Address") : Amended] string ClientIPAddress;
  [Description("Client's Port") : Amended] uint16 ClientPort;
  [Description("Server's IP Address") : Amended] string ServerIPAddress;
  [Description("Local Port") : Amended] uint16 ServerPort;
};

[Description("Ended FTP data channel") : Amended,EventTypeName("EndDataChannel") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpConnection_EndDataChannel : FtpConnection
{
  [Description("Session ID") : Amended] object SessionId;
};

[Description("Start FTP data channel listener for passive connection") : Amended,EventTypeName("StartDataChannelListener") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpConnection_StartListenerDataChannel : FtpConnection
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Server's IP Address") : Amended] string ServerIPAddress;
  [Description("Local Port") : Amended] uint16 ServerPort;
};

[Description("Ended FTP data channel listener for passive connection") : Amended,EventTypeName("CloseDataChannelListener") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpConnection_CloseDataChannelListener : FtpConnection
{
  [Description("Session ID") : Amended] object SessionId;
};

[Description("Ended FTP data channel listener for passive connection due to an error") : Amended,EventTypeName("CloseDataChannelListenerFail") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpConnection_CloseDataChannelListenerFail : FtpConnection
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Error that trigerred closing the data channel") : Amended] uint32 ErrorCode;
  [Description("Substatus with more specific reason for closing the listener") : Amended,ValueDescriptions{"SUBSTATUS_OK", "SUBSTATUS_DENIED_BY_AUTHORIZATION", "SUBSTATUS_DENIED_BY_FILE_SYSTEM", "SUBSTATUS_ERROR_FROM_FILE_SYSTEM", "SUBSTATUS_DENIED_BY_IP_RULES", "SUBSTATUS_DENIED_WRITE_TO_VDIR_ROOT", "SUBSTATUS_FAILED_TO_CHECK_SHORT_NAME", "SUBSTATUS_DENIED_FOR_SHORT_NAME", "SUBSTATUS_DENIED_HIDDEN_SEGMENT", "SUBSTATUS_DENIED_URL_SEQUENCE", "SUBSTATUS_DENIED_HIGH_BIT_CHARACTERS", "SUBSTATUS_DENIED_FILE_EXTENSION", "SUBSTATUS_DENIED_LONG_URL", "SUBSTATUS_DENIED_NOT_A_DISK_FILE", "SUBSTATUS_CTRL_IDLE_TIMEOUT", "SUBSTATUS_DATA_IDLE_TIMEOUT", "SUBSTATUS_CTRL_NEW_CONN_TIMEOUT", "SUBSTATUS_INVALID_SITE_CONFIGURATION", "SUBSTATUS_INVALID_CONFIGURATION", "SUBSTATUS_CTRL_REFUSED_CONN_LIMIT", "SUBSTATUS_DATA_ABORTED_BY_ABOR_CMD", "SUBSTATUS_SITE_STOPPING", "SUBSTATUS_DATA_ABORTED_SERVER_ERROR", "SUBSTATUS_DATA_ABORTED_BY_CLIENT", "SUBSTATUS_SSL_REQ_FOR_DATA", "SUBSTATUS_SSL_REQ_FOR_CTRL", "SUBSTATUS_SSL_REQ_FOR_CREDS", "SUBSTATUS_SSL_DENIED_FOR_DATA", "SUBSTATUS_SSL_DENIED_FOR_CTRL", "SUBSTATUS_SSL_DENIED_FOR_CREDS", "SUBSTATUS_SSL_DENIED_FOR_CMDS", "SUBSTATUS_NO_SSL_CERT", "SUBSTATUS_SSL_INIT_FAILED", "SUBSTATUS_HOME_DIR_LOOKUP_FAILED", "SUBSTATUS_CUSTOM_AUTH_CALL_FAILED", "SUBSTATUS_FAILED_TO_AUTHENTICATE", "SUBSTATUS_NO_AUTH_METHOD_ALLOWED", "SUBSTATUS_UNKNOWN_HOSTNAME", "SUBSTATUS_CLIENT_IP_MISMATCH_ON_DATA", "SUBSTATUS_MAXIMUM_FILE_SIZE_EXCEEDED", "SUBSTATUS_AD_ISOLATION_NEEDS_BASIC_AUTH", "SUBSTATUS_ERROR_DURING_AUTHENTICATION", "SUBSTATUS_ANONYMOUS_AUTH_NOT_ALLOWED", "SUBSTATUS_PROTECTION_NEGOTIATION_FAILED", "SUBSTATUS_SSL_CERT_NOT_FOUND", "SUBSTATUS_SSL_CERT_PRIVATE_KEY_NOT_FOUND", "SUBSTATUS_SSL_CERT_INVALID_HASH_LENGTH", "SUBSTATUS_SSL_CLIENT_CERT_REQUIRED", "SUBSTATUS_SSL_CLIENT_CERT_INVALID", "SUBSTATUS_SSL_CLIENT_CERT_MISMATCH", "SUBSTATUS_DATA_MIN_BANDWIDTH_TIMEOUT", "SUBSTATUS_DENIED_BY_COMMAND_FILTERING_RULES", "SUBSTATUS_DISCONNECTED_BY_ADMINISTRATOR", "SUBSTATUS_CONNECTION_ERROR", "SUBSTATUS_CTRL_CLOSED_ON_CONFIG_CHANGE", "SUBSTATUS_SSL_128_BIT_REQUIRED"} : Amended] uint32 SubStatus;
};

[Description("Initiated closing of the FTP data channel") : Amended,EventTypeName("CloseDataChannel") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpConnection_CloseDataChannel : FtpConnection
{
  [Description("Session ID") : Amended] object SessionId;
};

[Description("Initiated closing of the FTP data channel due to an error") : Amended,EventTypeName("CloseDataChannelFail") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpConnection_CloseDataChannelFail : FtpConnection
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Error that trigerred closing the data channel") : Amended] uint32 ErrorCode;
  [Description("FTP Substatus") : Amended,ValueDescriptions{"SUBSTATUS_OK", "SUBSTATUS_DENIED_BY_AUTHORIZATION", "SUBSTATUS_DENIED_BY_FILE_SYSTEM", "SUBSTATUS_ERROR_FROM_FILE_SYSTEM", "SUBSTATUS_DENIED_BY_IP_RULES", "SUBSTATUS_DENIED_WRITE_TO_VDIR_ROOT", "SUBSTATUS_FAILED_TO_CHECK_SHORT_NAME", "SUBSTATUS_DENIED_FOR_SHORT_NAME", "SUBSTATUS_DENIED_HIDDEN_SEGMENT", "SUBSTATUS_DENIED_URL_SEQUENCE", "SUBSTATUS_DENIED_HIGH_BIT_CHARACTERS", "SUBSTATUS_DENIED_FILE_EXTENSION", "SUBSTATUS_DENIED_LONG_URL", "SUBSTATUS_DENIED_NOT_A_DISK_FILE", "SUBSTATUS_CTRL_IDLE_TIMEOUT", "SUBSTATUS_DATA_IDLE_TIMEOUT", "SUBSTATUS_CTRL_NEW_CONN_TIMEOUT", "SUBSTATUS_INVALID_SITE_CONFIGURATION", "SUBSTATUS_INVALID_CONFIGURATION", "SUBSTATUS_CTRL_REFUSED_CONN_LIMIT", "SUBSTATUS_DATA_ABORTED_BY_ABOR_CMD", "SUBSTATUS_SITE_STOPPING", "SUBSTATUS_DATA_ABORTED_SERVER_ERROR", "SUBSTATUS_DATA_ABORTED_BY_CLIENT", "SUBSTATUS_SSL_REQ_FOR_DATA", "SUBSTATUS_SSL_REQ_FOR_CTRL", "SUBSTATUS_SSL_REQ_FOR_CREDS", "SUBSTATUS_SSL_DENIED_FOR_DATA", "SUBSTATUS_SSL_DENIED_FOR_CTRL", "SUBSTATUS_SSL_DENIED_FOR_CREDS", "SUBSTATUS_SSL_DENIED_FOR_CMDS", "SUBSTATUS_NO_SSL_CERT", "SUBSTATUS_SSL_INIT_FAILED", "SUBSTATUS_HOME_DIR_LOOKUP_FAILED", "SUBSTATUS_CUSTOM_AUTH_CALL_FAILED", "SUBSTATUS_FAILED_TO_AUTHENTICATE", "SUBSTATUS_NO_AUTH_METHOD_ALLOWED", "SUBSTATUS_UNKNOWN_HOSTNAME", "SUBSTATUS_CLIENT_IP_MISMATCH_ON_DATA", "SUBSTATUS_MAXIMUM_FILE_SIZE_EXCEEDED", "SUBSTATUS_AD_ISOLATION_NEEDS_BASIC_AUTH", "SUBSTATUS_ERROR_DURING_AUTHENTICATION", "SUBSTATUS_ANONYMOUS_AUTH_NOT_ALLOWED", "SUBSTATUS_PROTECTION_NEGOTIATION_FAILED", "SUBSTATUS_SSL_CERT_NOT_FOUND", "SUBSTATUS_SSL_CERT_PRIVATE_KEY_NOT_FOUND", "SUBSTATUS_SSL_CERT_INVALID_HASH_LENGTH", "SUBSTATUS_SSL_CLIENT_CERT_REQUIRED", "SUBSTATUS_SSL_CLIENT_CERT_INVALID", "SUBSTATUS_SSL_CLIENT_CERT_MISMATCH", "SUBSTATUS_DATA_MIN_BANDWIDTH_TIMEOUT", "SUBSTATUS_DENIED_BY_COMMAND_FILTERING_RULES", "SUBSTATUS_DISCONNECTED_BY_ADMINISTRATOR", "SUBSTATUS_CONNECTION_ERROR", "SUBSTATUS_CTRL_CLOSED_ON_CONFIG_CHANGE", "SUBSTATUS_SSL_128_BIT_REQUIRED"} : Amended] uint32 SubStatus;
};

[Description("FTP SSL Info") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpSslInfo : FtpServiceProvider
{
};

[Description("Start SSL HandShake") : Amended,EventTypeName("SslStartHandshake") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpSslInfo_SslStartHandshake : FtpSslInfo
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("NegotiateClientCerts") : Amended] boolean NegotiateClientCerts;
};

[Description("End SSL Handshake") : Amended,EventTypeName("SslEndHandshake") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpSslInfo_SslEndHandshake : FtpSslInfo
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Cipher Strength") : Amended] uint16 CipherStrength;
};

[Description("Client Certificate Info") : Amended,EventTypeName("SslClientCertInfo") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpSslInfo_ClientCertInfo : FtpSslInfo
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Subject") : Amended] string Subject;
  [Description("Issuer") : Amended] string Issuer;
  [Description("Verification Status") : Amended] uint32 VerificationStatus;
  [Description("Token Mapped") : Amended] boolean MappedToken;
};

[Description("SSL Handshake Info") : Amended,EventTypeName("SslHandshakeInfo") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpSslInfo_HandshakeInfo : FtpSslInfo
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Subject") : Amended] string Subject;
  [Description("Issuer") : Amended] string Issuer;
  [Description("Public key size") : Amended] uint32 PublicKeySize;
  [Description("Hardware accelerator present") : Amended] boolean HardwareAcceleratorPresent;
};

[Description("SSL Error Event") : Amended,EventTypeName{"SslError_General", "SslError_Handshake", "SslError_Encrypt", "SslError_Decrypt", "SslError_Credentials", "SslError_InvalidContext", "SslError_UserDataDuringRenegotiation", "SslError_InternalInconsistency", "SslError_Renegotiation"} : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpSslInfo_SslErrorEvents : FtpSslInfo
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Error") : Amended] uint32 ErrorCode;
  [Description("Optional additional error description") : Amended] string Param1;
  [Description("Optional additional error description") : Amended] string Param2;
};

[Description("FTP SSL Show Cleartext Data") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpSslShowCleartextData : FtpServiceProvider
{
};

[Description("Decrypt SSL Data") : Amended,EventTypeName("SslDecryptedData") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpSslShowCleartextData_DecryptedData : FtpSslShowCleartextData
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Fragment of data that was decrypted. Characters that cannot be displayed are replaced with period.") : Amended] string DataFragmentVisibleChars;
  [Description("Fragment of data that was decrypted in hex format.") : Amended] string DataFragmentInHex;
  [Description("Total number of bytes decrypted.") : Amended] uint32 ToBeEncryptedCount;
};

[Description("Encrypt SSL Data") : Amended,EventTypeName("SslToBeEncryptedData") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpSslShowCleartextData_ToBeEncryptedData : FtpSslShowCleartextData
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Fragment of data to be encrypted. Characters that cannot be displayed are replaced with period.") : Amended] string DataFragmentVisibleChars;
  [Description("Fragment of data to be encrypted in hex format.") : Amended] string DataFragmentInHex;
  [Description("Total number of bytes to be encrypted.") : Amended] uint32 ToBeEncryptedCount;
};

[Description("SSL Schannel Calls") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpSslSchannelCalls : FtpServiceProvider
{
};

[Description("SSL Schannel Call") : Amended,EventTypeName("SslSchannelCall") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpSslSchannelCalls_SchannelCall : FtpSslSchannelCalls
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("FunctionName") : Amended] string FunctionName;
  [Description("Return Value") : Amended] uint32 ReturnValue;
};

[Description("FTP authentication events") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication : FtpServiceProvider
{
};

[Description("Started FTP authentication") : Amended,EventTypeName("StartAuthentication") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication_StartAuthentication : FtpAuthentication
{
  [Description("Session ID") : Amended] object SessionId;
};

[Description("FTP authentication succeeded") : Amended,EventTypeName("EndAuthentication") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication_EndAuthentication : FtpAuthentication
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Authentication type") : Amended] string AuthType;
  [Description("Remote user name") : Amended] string RemoteUserName;
  [Description("Authenticated user name") : Amended] string AuthUserName;
  [Description("The token impersonation level") : Amended,ValueDescriptions{"Anonymous impersonation level", "Identify impersonation level", "Impersonate impersonation level", "Delegate impersonation level", "Unable to determine impersonation level", "No impersonation"} : Amended,Values{"ImpersonationAnonymous", "ImpersonationIdentify", "ImpersonationImpersonate", "ImpersonationDelegate", "ImpersonationUnknown", "ImpersonationNone"} : Amended] uint32 TokenImpersonationLevel;
};

[Description("Start anonymous logon") : Amended,EventTypeName("StartAnonymousLogon") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication_StartAnonymousLogon : FtpAuthentication
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Remote user name") : Amended] string UserName;
};

[Description("End anonymous logon") : Amended,EventTypeName("EndAnonymousLogon") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication_EndAnonymousLogon : FtpAuthentication
{
  [Description("Session ID") : Amended] object SessionId;
};

[Description("Failed anonymous logon") : Amended,EventTypeName("FailAnonymousLogon") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication_FailAnonymousLogon : FtpAuthentication
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Logon error code") : Amended] uint32 ErrorCode;
};

[Description("Start custom logon") : Amended,EventTypeName("StartCustomLogon") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication_StartCustomLogon : FtpAuthentication
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Custom logon provider") : Amended] string LogonProvider;
};

[Description("End custom logon") : Amended,EventTypeName("EndCustomLogon") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication_EndCustomLogon : FtpAuthentication
{
  [Description("Session ID") : Amended] object SessionId;
};

[Description("Failed custom logon") : Amended,EventTypeName("FailCustomLogon") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication_FailCustomLogon : FtpAuthentication
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Logon error code") : Amended] uint32 ErrorCode;
};

[Description("Start basic logon") : Amended,EventTypeName("StartBasicLogon") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication_StartBasicLogon : FtpAuthentication
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Remote user name") : Amended] string UserName;
};

[Description("End basic logon") : Amended,EventTypeName("EndBasicLogon") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication_EndBasicLogon : FtpAuthentication
{
  [Description("Session ID") : Amended] object SessionId;
};

[Description("Failed basic logon") : Amended,EventTypeName("FailBasicLogon") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication_FailBasicLogon : FtpAuthentication
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Logon error code") : Amended] uint32 ErrorCode;
};

[Description("Anonymous authentication not configured") : Amended,EventTypeName("FailAnonymousNotAllowed") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication_FailAnonymousNotAllowed : FtpAuthentication
{
  [Description("Session ID") : Amended] object SessionId;
};

[Description("Invalid anonymous account") : Amended,EventTypeName("InvalidAnonymousAccount") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication_InvalidAnonymousAccount : FtpAuthentication
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Logon error code") : Amended] uint32 ErrorCode;
};

[Description("User password needs to be changed") : Amended,EventTypeName("PasswordChangeNeeded") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication_PasswordChangeNeeded : FtpAuthentication
{
  [Description("Session ID") : Amended] object SessionId;
};

[Description("No authentication method allowed") : Amended,EventTypeName("AuthenticationNotConfigured") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication_AuthenticationNotConfigured : FtpAuthentication
{
  [Description("Session ID") : Amended] object SessionId;
};

[Description("Start client certificate logon") : Amended,EventTypeName("StartClientCertLogon") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication_StartClientCertLogon : FtpAuthentication
{
  [Description("Session ID") : Amended] object SessionId;
};

[Description("End client certificate logon") : Amended,EventTypeName("EndClientCertLogon") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication_EndClientCertLogon : FtpAuthentication
{
  [Description("Session ID") : Amended] object SessionId;
};

[Description("Failed client certificate logon") : Amended,EventTypeName("FailClientCertLogon") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpAuthentication_FailClientCertLogon : FtpAuthentication
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Logon error code") : Amended] uint32 ErrorCode;
};

[Description("FTP Security") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpSecurity : FtpServiceProvider
{
};

[Description("Connection refused due to IP mismatch") : Amended,EventTypeName("DataConnectionIpAddressMismatch") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpSecurity_DataConnectionIpAddressMismatch : FtpSecurity
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Control Channel IP Address") : Amended] string ControlChannelIPAddress;
  [Description("Data Channel IP Address") : Amended] string DataChannelIPAddress;
};

[Description("Impersonate User") : Amended,EventTypeName("ImpersonateUser") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpSecurity_ImpersonateUser : FtpSecurity
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("User name") : Amended] string UserName;
};

[Description("Revert Impersonation") : Amended,EventTypeName("RevertImpersonation") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpSecurity_RevertImpersonation : FtpSecurity
{
  [Description("Session ID") : Amended] object SessionId;
};

[Description("IP Restriction") : Amended,EventTypeName("IPRestriction") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpSecurity_IPRestriction : FtpSecurity
{
  [Description("Client's IP Address") : Amended] string ClientIPAddress;
  [Description("Client's Port") : Amended] uint16 ClientPort;
  [Description("Server's IP Address") : Amended] string ServerIPAddress;
  [Description("Local Port") : Amended] uint16 ServerPort;
};

[Description("FTP File System Access") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpFileSystemAccess : FtpServiceProvider
{
};

[Description("Start the creation/rename/deletion of a file system object") : Amended,EventTypeName{"StartCreateFile", "StartCreateDirectory", "StartDeleteDirectory", "StartDeleteFile", "StartRename"} : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpFileSystemAccess_StartCreateOrDelete : FtpFileSystemAccess
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("File name") : Amended] string FileName;
};

[Description("End the creation/rename/deletion of a file system object") : Amended,EventTypeName{"EndCreateFile", "EndCreateDirectory", "EndDeleteDirectory", "EndDeleteFile", "EndRename"} : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpFileSystemAccess_EndCreateOrDelete : FtpFileSystemAccess
{
  [Description("Session ID") : Amended] object SessionId;
};

[Description("Failed the creation/rename/deletion of a file system object") : Amended,EventTypeName{"FailedCreateFile", "FailedCreateDirectory", "FailedDeleteFile", "FailedDeleteDirectory", "FailedRename"} : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpFileSystemAccess_FailedCreateOrDelete : FtpFileSystemAccess
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("File name") : Amended] string FileName;
  [Description("Return Value") : Amended] uint32 ReturnValue;
};

[Description("FTP Commands") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpCommands : FtpServiceProvider
{
};

[Description("Start Ftp Command") : Amended,EventTypeName("StartFtpCommand") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpCommands_StartFtpCommand : FtpCommands
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Command") : Amended] string Command;
  [Description("Command parameter") : Amended] string Parameter;
};

[Description("End Ftp Command") : Amended,EventTypeName("EndFtpCommand") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpCommands_EndFtpCommand : FtpCommands
{
  [Description("Session ID") : Amended] object SessionId;
};

[Description("Fail Ftp Command") : Amended,EventTypeName("FailFtpCommand") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpCommands_FailFtpCommand : FtpCommands
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Return Value") : Amended] uint32 ReturnValue;
  [Description("FTP Substatus") : Amended,ValueDescriptions{"SUBSTATUS_OK", "SUBSTATUS_DENIED_BY_AUTHORIZATION", "SUBSTATUS_DENIED_BY_FILE_SYSTEM", "SUBSTATUS_ERROR_FROM_FILE_SYSTEM", "SUBSTATUS_DENIED_BY_IP_RULES", "SUBSTATUS_DENIED_WRITE_TO_VDIR_ROOT", "SUBSTATUS_FAILED_TO_CHECK_SHORT_NAME", "SUBSTATUS_DENIED_FOR_SHORT_NAME", "SUBSTATUS_DENIED_HIDDEN_SEGMENT", "SUBSTATUS_DENIED_URL_SEQUENCE", "SUBSTATUS_DENIED_HIGH_BIT_CHARACTERS", "SUBSTATUS_DENIED_FILE_EXTENSION", "SUBSTATUS_DENIED_LONG_URL", "SUBSTATUS_DENIED_NOT_A_DISK_FILE", "SUBSTATUS_CTRL_IDLE_TIMEOUT", "SUBSTATUS_DATA_IDLE_TIMEOUT", "SUBSTATUS_CTRL_NEW_CONN_TIMEOUT", "SUBSTATUS_INVALID_SITE_CONFIGURATION", "SUBSTATUS_INVALID_CONFIGURATION", "SUBSTATUS_CTRL_REFUSED_CONN_LIMIT", "SUBSTATUS_DATA_ABORTED_BY_ABOR_CMD", "SUBSTATUS_SITE_STOPPING", "SUBSTATUS_DATA_ABORTED_SERVER_ERROR", "SUBSTATUS_DATA_ABORTED_BY_CLIENT", "SUBSTATUS_SSL_REQ_FOR_DATA", "SUBSTATUS_SSL_REQ_FOR_CTRL", "SUBSTATUS_SSL_REQ_FOR_CREDS", "SUBSTATUS_SSL_DENIED_FOR_DATA", "SUBSTATUS_SSL_DENIED_FOR_CTRL", "SUBSTATUS_SSL_DENIED_FOR_CREDS", "SUBSTATUS_SSL_DENIED_FOR_CMDS", "SUBSTATUS_NO_SSL_CERT", "SUBSTATUS_SSL_INIT_FAILED", "SUBSTATUS_HOME_DIR_LOOKUP_FAILED", "SUBSTATUS_CUSTOM_AUTH_CALL_FAILED", "SUBSTATUS_FAILED_TO_AUTHENTICATE", "SUBSTATUS_NO_AUTH_METHOD_ALLOWED", "SUBSTATUS_UNKNOWN_HOSTNAME", "SUBSTATUS_CLIENT_IP_MISMATCH_ON_DATA", "SUBSTATUS_MAXIMUM_FILE_SIZE_EXCEEDED", "SUBSTATUS_AD_ISOLATION_NEEDS_BASIC_AUTH", "SUBSTATUS_ERROR_DURING_AUTHENTICATION", "SUBSTATUS_ANONYMOUS_AUTH_NOT_ALLOWED", "SUBSTATUS_PROTECTION_NEGOTIATION_FAILED", "SUBSTATUS_SSL_CERT_NOT_FOUND", "SUBSTATUS_SSL_CERT_PRIVATE_KEY_NOT_FOUND", "SUBSTATUS_SSL_CERT_INVALID_HASH_LENGTH", "SUBSTATUS_SSL_CLIENT_CERT_REQUIRED", "SUBSTATUS_SSL_CLIENT_CERT_INVALID", "SUBSTATUS_SSL_CLIENT_CERT_MISMATCH", "SUBSTATUS_DATA_MIN_BANDWIDTH_TIMEOUT", "SUBSTATUS_DENIED_BY_COMMAND_FILTERING_RULES", "SUBSTATUS_DISCONNECTED_BY_ADMINISTRATOR", "SUBSTATUS_CONNECTION_ERROR", "SUBSTATUS_CTRL_CLOSED_ON_CONFIG_CHANGE", "SUBSTATUS_SSL_128_BIT_REQUIRED"} : Amended] uint32 SubStatus;
};

[Description("Queue Ftp Command") : Amended,EventTypeName("QueueFtpCommand") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpCommands_QueueFtpCommand : FtpCommands
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Command") : Amended] string Command;
  [Description("Command parameter") : Amended] string Parameter;
};

[Description("FTP Processing") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpProcessing : FtpServiceProvider
{
};

[Description("Start Map Path") : Amended,EventTypeName("StartMapPath") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpProcessing_StartMapPath : FtpProcessing
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("URL") : Amended] string Url;
};

[Description("End Map Path") : Amended,EventTypeName("EndMapPath") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpProcessing_EndMapPath : FtpProcessing
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Mapped Physical Path") : Amended] string PhysicalPath;
};

[Description("Fail Map Path") : Amended,EventTypeName("FailMapPath") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpProcessing_FailMapPath : FtpProcessing
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Return Value") : Amended] uint32 ReturnValue;
};

[Description("Start reading the config for URL") : Amended,EventTypeName("StartReadUrlConfig") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpProcessing_StartReadUrlConfig : FtpProcessing
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("URL") : Amended] string Url;
};

[Description("End reading the config for URL") : Amended,EventTypeName("EndReadUrlConfig") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpProcessing_EndReadUrlConfig : FtpProcessing
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("UniqueConfigPath") : Amended] string UniqueConfigPath;
  [Description("Use cached configuration") : Amended] boolean UseCachedConfig;
};

[Description("Fail reading the config for URL") : Amended,EventTypeName("FailReadUrlConfig") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpProcessing_FailReadUrlConfig : FtpProcessing
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Return Value") : Amended] uint32 ReturnValue;
};

[Description("FTP Extensibility") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpExtensibility : FtpServiceProvider
{
};

[Description("Start create extensibility provider") : Amended,EventTypeName("StartCreateProvider") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpExtensibility_StartCreateProvider : FtpExtensibility
{
  [Description("Provider name") : Amended] string Provider;
};

[Description("End create extensibility provider") : Amended,EventTypeName("EndCreateProvider") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpExtensibility_EndCreateProvider : FtpExtensibility
{
};

[Description("Fail create extensibility provider") : Amended,EventTypeName("FailCreateProvider") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpExtensibility_FailCreateProvider : FtpExtensibility
{
  [Description("Return Value") : Amended] uint32 ReturnValue;
  [Description("Error details") : Amended] string ErrorDetails;
};

[Description("Start extensibility call") : Amended,EventTypeName("StartCallProvider") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpExtensibility_StartCallProvider : FtpExtensibility
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Provider name") : Amended] string Provider;
};

[Description("End extensibility call") : Amended,EventTypeName("EndCallProvider") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpExtensibility_EndCallProvider : FtpExtensibility
{
  [Description("Session ID") : Amended] object SessionId;
};

[Description("Fail extensibility call") : Amended,EventTypeName("FailCallProvider") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpExtensibility_FailCallProvider : FtpExtensibility
{
  [Description("Session ID") : Amended] object SessionId;
  [Description("Return Value") : Amended] uint32 ReturnValue;
  [Description("Error details") : Amended] string ErrorDetails;
};

[Description("Start create ftp extensibility host") : Amended,EventTypeName("StartCreateFtpHost") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpExtensibility_StartCreateFtpHost : FtpExtensibility
{
};

[Description("End create extensibility host") : Amended,EventTypeName("EndCreateFtpHost") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpExtensibility_EndCreateFtpHost : FtpExtensibility
{
};

[Description("Fail create extensibility host") : Amended,EventTypeName("FailCreateFtpHost") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpExtensibility_FailCreateFtpHost : FtpExtensibility
{
  [Description("Return Value") : Amended] uint32 ReturnValue;
};

[Description("Terminate extensibility host") : Amended,EventTypeName("TerminateExtensibilityProcess") : Amended,AMENDMENT, LOCALE(0x0804)] 
class FtpExtensibility_TerminateExtensibilityProcess : FtpExtensibility
{
  [Description("Process ID") : Amended] uint32 ProcessID;
};