Why not include the data ooh with the first packet in the flow and use an inverted call to prune the flows?
Presumably, you will be able to identify which of these flow contexts you need from the ordinary packet data (ie IP address and port pair)
Sent from Surface Pro
From: xxxxx@baesystemsdetica.com
Sent: Wednesday, August 05, 2015 5:47 PM
To: Windows System Software Devs Interest List
To add to my previous post: Yes, the metadata in question is associated with the ‘flow’ and will not change from datagram to datagram.
NTDEV is sponsored by OSR
Visit the list at: http://www.osronline.com/showlists.cfm?list=ntdev
OSR is HIRING!! See http://www.osr.com/careers
For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars
To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer