WFP Filtering Layers

NTFSD
1

Hi

I’m new to WFP and have trying to understand the framework through Microsoft
documentation and samples (Stream edit and Inspect).

One thing that has left me confused is the ordering of layers as per the
architecture
http://msdn.microsoft.com/en-us/library/windows/desktop/aa366509(v=vs.85).asp
x

For instance if I wish to perform content inspection of outgoing data should one
use a callout at Stream or Transport Layer. Which layer is on top and what’s the
difference between them.

In addition I would expected the ALE to be on top as it deals with connections,
but it’s shown below the Stream Layer.

2

In WFP world, layer is not equal stack. You may get some answer and suggestion if you post you question to Windows Filter Platform (WFP) forum:
http://social.msdn.microsoft.com/forums/en-US/wfp/threads

You can also find some examples about how to set filter layer and where is the best place?to perform content inspection.

From: “xxxxx@hotmail.com”
To: Windows File Systems Devs Interest List
Sent: Sunday, March 16, 2014 9:59 AM
Subject: [ntfsd] WFP Filtering Layers

Hi

I’m new to WFP and have trying to understand the framework through Microsoft
documentation and samples (Stream edit and Inspect).

One thing that has left me confused is the ordering of layers as per the
architecture
http://msdn.microsoft.com/en-us/library/windows/desktop/aa366509(v=vs.85).asp
x

For instance if I wish to perform content inspection of outgoing data should one
use a callout at Stream or Transport Layer. Which layer is on top and what’s the
difference between them.

In addition I would expected the ALE to be on top as it deals with connections,
but it’s shown below the Stream Layer.

—
NTFSD is sponsored by OSR

OSR is hiring!! Info at http://www.osr.com/careers

For our schedule of debugging and file system seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer