WFP: Handling multiple NB in outbound classify functions

NTDEV
1

Hi!

In my classifyFn for the FWPM_LAYER_OUTBOUND_IPPACKET_V4/6 layers, the NDL
(passed in through the layerData argument) may have more than one NB chained
together.

Can I assume that the following FWPS_INCOMING_VALUES0 values apply to all
NBs in the chain?

  1. Source and destination IP addresses.
  2. IP protocol type.

Point #1 seems likely but #2 seems unclear, especially since the
FWPS_FIELDS_OUTBOUND_IPPACKET_V4/6 enumeration doesn’t support an IP
protocol enum value.

Thanks!