locked
Handling multiple NB in outbound classify functions RRS feed

  • Question

  • In my classifyFn for the FWPM_LAYER_OUTBOUND_IPPACKET_V4/6 layers, the NDL

    (passed in through the layerData argument) may have more than one NB chained

    together.

    Can I assume that the following FWPS_INCOMING_VALUES0
    values apply to all
    NBs in the chain?

         1.  Source and destination IP addresses.
         2. IP protocol type.

    Point #1 seems likely but #2
    seems unclear, especially since the
    FWPS_FIELDS_OUTBOUND_IPPACKET_V4/6
    enumeration doesn't support an IP
    protocol enum value.

    Thanks!
    Wednesday, January 30, 2013 6:36 PM

Answers

  • Yes all NB's at these layers pertain to that flow (5 tuple matching).

    Hope this helps,


    Dusty Harper [MSFT]
    Microsoft Corporation
    ------------------------------------------------------------
    This posting is provided "AS IS", with NO warranties and confers NO rights
    ------------------------------------------------------------

    Thursday, January 31, 2013 6:43 PM
    Moderator