SMB_TYPE_EVENTLOG
case SMB_TYPE_EVENTLOG:
const smb_struct_t *stp = smb_lookup_type(shp, SMB_TYPE_EVENTLOG);