WFP and context.

Hello,

While learning about Windows Filtering Platform often I can read about context, but I can’t find exact definition of this formulation.
In https://github.com/JaredWright/WFPStarterKit/tree/master/Tutorial I have found that:

“Inspecting a network packet, along with other attributes that give context to the packet”

So we can say, that context is a packet with attributes. But what kind of attributes?

Please shed some light on this (context in WFP).

Take a look at https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/content/fwpsk/ns-fwpsk-fwps_incoming_metadata_values0_ The values are discussed on this page. Bottom line is the exact set of values depends the specific callout function you are receiving.

Don Burn
Windows Driver Consulting
Website: http://www.windrvr.com

On Nov 25, 2018, at 9:35 AM, Krzysztof wrote:
>
> While learning about Windows Filtering Platform often I can read about context, but I can’t find exact definition of this formulation.

The word has multiple meanings, including both actual and conceptual.

> In https://github.com/JaredWright/WFPStarterKit/tree/master/Tutorial I have found that:
> “Inspecting a network packet, along with other attributes that give context to the packet”
> So we can say, that context is a packet with attributes. But what kind of attributes?
> Please shed some light on this (context in WFP).

This is a generic use of the word. It just refers to the other non-packet information that you receive about the packet. Nothing specific.

Tim Roberts, timr@probo.com
Providenza & Boekelheide, Inc.