none
SIO_RCVALL RRS feed

  • Question

  • I have a callout at FWPS_LAYER_ALE_RESOURCE_ASSIGNMENT_V4

    For raw socket with SIO_RCV_ALL optionos I see callout is calld twice:
    On bind raw socket: with flag FWP_CONDITION_FLAG_IS_RAW_ENDPOINT
    On set SIO_RCV_ALL:  I suspect, the flags should be FWP_CONDITION_FLAG_IS_PROMISCUOUS but this field i s not set.

    It's reproduced very well with dhcp

    NETIO!ProcessNonBufferedCallout
    NETIO!ProcessCallout
    NETIO!ProcessFastCalloutClassify
    NETIO!KfdClassify
    tcpip!WfpAleClassify

    ..............

    mswsock!WSPIoctl
    WS2_32!WSAIoctl   <--- InBuffer conatins 3 ( RCVALL_IPLEVEL ? )
    dhcpcore!DhcpSetRcvAllMode
    dhcpcore!RenewLease
    dhcpcore!DhcpInitRebootState
    dhcpcore!ReRenewParameters
    dhcpcore!DhcpRenewThread
     

    Friday, March 2, 2012 8:26 AM

All replies


  • And this operation ( authorization of SIO_RCVALL ) can not be pend  - FwpsPendOperation0 retuns 0xc0220103 (3223453955) - The classify cannot be pended
    Friday, March 2, 2012 8:30 AM