Windows Filtering Platform (WFP) announcement
-
Link
Now that you have your WFP callout developed, how can you make sure it adheres to Microsoft's recommendations? Starting with Windows 7, you can run the Windows Hardware Certification Kit (HCK) (formerly known as the Windows Logo Kit (WLK)). This kit will run tests against your callout driver to help find issues with your driver due to interoperability, non-conformant practices, and general bugs. To get started please visit:
http://msdn.microsoft.com/en-us/library/windows/hardware/hh748200.aspx
Thanks,
-
Link
MSN Messenger Monitor
http://code.msdn.microsoft.com/Windows-Filtering-Platform-ae42c8d7Packet Modification
http://code.msdn.microsoft.com/Windows-Filtering-Platform-16e9937eStream Edit
http://code.msdn.microsoft.com/Windows-Filtering-Platform-7b0a3d91Traffic Inspection
http://code.msdn.microsoft.com/Windows-Filtering-Platform-fbce2ebfWFPSampler
http://code.msdn.microsoft.com/Windows-Filtering-Platform-27553baa
-
Sticky0VotesWelcome to the forum!
Welcome everyone! This is the place to post all questions relating to the use of the Windows Filtering Platform (WFP) ...
-
Unanswered0VotesDdproxy don't work
Test is failure always. Problem is FwpsInjectTransportSendAsync0 by windbg debug find. Packet don't Send. RunEnvironment is ... -
Unanswered0VotesWFP verifier issue
According to documentation for FWPM_LAYER_ALE_AUTH_CONNECT_REDIRECT, "Starting with Windows 8, memory allocated for localRedirectContext will have its ownership ... -
Unanswered0VotesWFP: FwpsStreamInjectAsync fails with STATUS_NOT_FOUND.
I am dropping the TCP send and reinjecting it later. All works fine but some times randomly FwpsStreamInjectAsync fails with STATUS_NOT_FOUND. I am not getting any ... -
Discussion0VotesWFP Traffic Inspection Sample Error " System error 87 has occurred. The parameter is incorrect."
Hi All, I am trying run the WFP Traffic inspection sample given in MSDN ... -
Unanswered0VotesAbout wdk's Ddproxy Problem
Test is failure always. Problem is FwpsInjectTransportSendAsync0 by windbg debug find. Packet don't Send. Thanks -
Unanswered0VotesRemoving filters by key outside the creating transaction
My general process for setting up a callout driver is, assuming a static session: 1) open engine 2) begin transaction 3) create ... -
Unanswered0VotesSublayer weight
What happens if you attempt to create a sublayer with a weight that is already in use by an existing sublayer? Does WFP automatically select the next-lowest weight? Do both sublayers use ... -
Unanswered0VotesWFP sample driver install Win 7 64 bit ,but net start System error 6 has occurred
net start inspect >Cmd message display system error 6??? How is the inf to be adjusted for 64-bit win 7??If not, what needs to ... -
Unanswered0VotesAppContainers_test fails with error during pre-test configuration checks
Hello, AppContainers_test fails with error during pre-test configuration checks: "[FAIL] The machine is not properly ... -
Unanswered0VotesI am thinking to realize asynchronous operation.
actionType = FWP_ACTION_BLOCK & classifyOut->flags |= FWPS_CLASSIFY_OUT_FLAG_ABSORB; Then Program of R3 will Take Info of Packet in ChainTable And decide Packet ... -
Unanswered0VotesI think monitor all IpAddr of packet in StreamClassify
LocalIPADDRv4 = inFixedValues->incomingValue[index].value.uint32;; flowContextLocal->remoteIPADDRv4 ... -
Unanswered0VotesFail to add filter at FWPM_LAYER_OUTBOUND_MAC_FRAME_ETHERNET with FWPM_CONDITION_ETHER_TYPE
Hi, I'm trying to add a filter at the new Windows 8 layer FWPM_LAYER_OUTBOUND_MAC_FRAME_ETHERNET, but this fails when I add a single FWPM_CONDITION_ETHER_TYPE condition returning ... -
Unanswered0VotesIRQL Restrictions Accessing SID in FWPS_LAYER_ALE_AUTH_CONNECT_V4
SidHash)->Sid field under control. However, APIs such as RtlValidSid, RtlLengthSid and RtlCopySid require IRQL -
Unanswered0Votesinline injection of FwpsStreamInjectAsync0 complete routine has never been called.
I ran WDK 7600 stmedit example code and then caused stop hang with the following steps. https://dl.dropboxusercontent.com/u/19235405/stmedit_inline_bug.7z the ... -
Answered0Votesnetsh trace - why does trace show "no data"?
Would like to use netsh trace start to trace tcp/ip traffic between my windows 7 PC and a remote system. Specifically port 23 on that remote system. I run the following to start the ... -
Unanswered0VotesWfpSampler stream inject synchronization
I am reviewing the WfpSampler for BasicStreamInjection on FWPM_LAYER_STREAM. Outlined in the code is some kind of synchronization of the list ... -
Unanswered3VotesAfter pausing streams, ACKs are sent for segments that weren't received
http [ACK] Seq=102 Ack=1277501 Win=65700 Len=0 [TCP Dup ACK 5861#1] 49619 > http [ACK] Seq=102 Ack=1277501 Win=65700 Len=0 [TCP Dup ACK 5861#2] 49619 > ... -
Answered0VotesFiltering TCP out-of-band
I have implemented a driver that filters TCP streams according to MSDN design guides. It blocks all packets, puts them to queue with a call to FwpsCloneStreamData, then calls ... -
Unanswered0VotesPopulate WrapPanel WPF
Is there any way to populate wrapPanel in wpf application around MVVM architecture without using listview or itemscontrol ? -
Unanswered0VotesUsername of process obtained from FWPS_INCOMING_METADATA_VALUES0?
I'm using the processPath and processId members of FWPS_INCOMING_METADATA_VALUES0 to ignore the filter traffic from a few specific applications. I'd also like to ignore any processes run from the ... - Items 1 to 20 of 1149 Next ›



