locked
Is it possible to access the user ID at the WFP IPPACKET layer. RRS feed

  • Question

  • Hi,

    I would like to classify traffic based on the user on the IP packet level because I would like to support all protocols.

    I thought I could do that using a callout driver at the network level.

    http://msdn.microsoft.com/en-us/library/windows/hardware/ff544890%28v=vs.85%29.aspx

    However, according to this table http://msdn.microsoft.com/en-us/library/gg155494.aspx it seems like this information (process id and token) is only available at ALE layers.

    Is there anyway to get to process or user information while classifying IP packets?

    Is it possible to tag the connection at the ALE layer with user data and access it from the network layer?

    Thanks


    Thursday, September 5, 2013 8:47 AM

Answers