locked
FlowContext problems! RRS feed

  • Question

  • i register callout in FWPM_LAYER_OUTBOUND_IPPACKET_V4 layer with FWP_CALLOUT_FLAG_CONDITIONAL_ON_FLOW flag!

    register is right!

    But never entry the classifyFn0 function! If the flag is not set      the classifyFn0  is entry ok!

    what's wrong?
    Tuesday, August 2, 2011 12:56 PM

All replies

  • http://msdn.microsoft.com/en-us/library/ff551224%28v=vs.85%29.aspx says:

    "If this flag is specified, the filter engine calls the callout driver's classifyFn callout function only if there is a context associated with the data flow."

     

    It will be called once you associate a context with a flow in a "previous" layer.


    QmQ
    Tuesday, August 2, 2011 1:30 PM
  • i want  to use FwpsFlowAssociateContext0  in FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4 layer 

    and  FWPM_LAYER_OUTBOUND_IPPACKET_V4 layer to get flow data!

    is this feasible?

     

     

    say what i want to do!

    i want to filter all packet!

    i originally do this in XXX_IPPACKET_V4 layer !

    but sometimes  get  the transport head is NULL!  sometimes get right!

    so i want get the data( like the port) in ESTABLISHED_V4 layer  and  then use FwpsFlowAssociateContext0!

    At last   in IPPACKET_V4 layer i get the flow data to do my work!




    Tuesday, August 2, 2011 2:48 PM