FWPM_NET_EVENT_CLASSIFY_DROP1 structure (fwpmtypes.h)

The FWPM_NET_EVENT_CLASSIFY_DROP1 structure contains information that describes a layer drop failure. FWPM_NET_EVENT_CLASSIFY_DROP0 is available.

Syntax

typedef struct FWPM_NET_EVENT_CLASSIFY_DROP1_ {
  UINT64 filterId;
  UINT16 layerId;
  UINT32 reauthReason;
  UINT32 originalProfile;
  UINT32 currentProfile;
  UINT32 msFwpDirection;
  BOOL   isLoopback;
} FWPM_NET_EVENT_CLASSIFY_DROP1;

Members

filterId

A LUID identifying the filter where the failure occurred.

layerId

Indicates the identifier of the filtering layer where the failure occurred. For more information, see Filtering Layer Identifiers.

reauthReason

Indicates the reason for reauthorizing a previously authorized connection.

originalProfile

Indicates the identifier of the profile to which the packet was received (or from which the packet was sent).

currentProfile

Indicates the identifier of the profile where the packet was when the failure occurred.

msFwpDirection

Indicates the direction of the packet transmission.

Possible values:

Value Meaning
FWP_DIRECTION_IN
0x00003900L
The packet is inbound.
FWP_DIRECTION_OUT
0x00003901L
The packet is outbound.
FWP_DIRECTION_FORWARD
0x00003902L
The packet is traversing an interface which it must pass through on the way to its destination.

isLoopback

Indicates whether the packet originated from (or was heading to) the loopback adapter.

Requirements

Requirement Value
Minimum supported client Windows 7 [desktop apps only]
Minimum supported server Windows Server 2008 R2 [desktop apps only]
Header fwpmtypes.h

See also

Windows Filtering Platform API Structures