locked
WFP Allow packet log RRS feed

  • Question

  • I followed the example that follows.

    https://social.msdn.microsoft.com/Forums/sqlserver/en-US/74e3bf1d-3a0b-43ce-a528-2a88bc1fb882/log-packets?forum=wfp

    (FwpmNetEvent.cpp)

    It works fine dropped packets.(FWPM_NET_EVENT_TYPE_CLASSIFY_DROP)

    but It doen't work allow packets.(FWPM_NET_EVENT_TYPE_CLASSIFY_ALLOW...)

    os : Windows Server 2016

    How to receive event of allow packet?

    Tuesday, August 8, 2017 5:16 AM