Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.

Inspection flags set by another filter

klimandrklimandr Member Posts: 8

I have a program that perform changes with udp traffic. That program uses WFP for it. Also I know GUID of filter and callout, that perform changes.
1. How can I inspect changes on specified packets?
2. Is there any method to detect packets, that was marked by some filter with flag FWPS_CLASSIFY_OUT_FLAG_ABSORB before it was re-injected.

Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Upcoming OSR Seminars
Developing Minifilters 29 July 2019 OSR Seminar Space
Writing WDF Drivers 23 Sept 2019 OSR Seminar Space
Kernel Debugging 21 Oct 2019 OSR Seminar Space
Internals & Software Drivers 18 Nov 2019 Dulles, VA