Edit

FWPM_NET_EVENT_CLASSIFY_ALLOW0 structure (fwpmtypes.h)

  • Article

The FWPM_NET_EVENT_CLASSIFY_ALLOW0 structure contains information that describes allowed traffic as enforced by the WFP classify engine.

Syntax

typedef struct FWPM_NET_EVENT_CLASSIFY_ALLOW0 {
  UINT64 filterId;
  UINT16 layerId;
  UINT32 reauthReason;
  UINT32 originalProfile;
  UINT32 currentProfile;
  UINT32 msFwpDirection;
  BOOL   isLoopback;
} FWPM_NET_EVENT_CLASSIFY_ALLOW0;

Members

filterId

Type: UINT64

A LUID identifying the WFP filter allowing this traffic.

layerId

Type: UINT16

The identifier of the WFP filtering layer where the filter specified in filterId is stored. For more information, see Filtering Layer Identifiers.

reauthReason

Type: UINT32

The reason for reauthorizing a previously authorized connection.

originalProfile

Type: UINT32

The identifier of the profile to which the packet was received (or from which the packet was sent).

currentProfile

Type: UINT32

The identifier of the profile where the packet was when the failure occurred.

msFwpDirection

Type: UINT32

Indicates the direction of the packet transmission. Possible values are FWP_DIRECTION_INBOUND or FWP_DIRECTION_OUTBOUND.

isLoopback

Type: BOOL

If true, indicates that the packet originated from (or was heading to) the loopback adapter; otherwise, false.

Requirements

Requirement Value
Minimum supported client Windows 8 [desktop apps only]
Minimum supported server Windows Server 2012 [desktop apps only]
Header fwpmtypes.h

See also

FWPM_NET_EVENT2