FWPM_NET_EVENT_ENUM_TEMPLATE0 structure (fwpmtypes.h)
The FWPM_NET_EVENT_ENUM_TEMPLATE0 structure is used for enumerating net events.
Syntax
typedef struct FWPM_NET_EVENT_ENUM_TEMPLATE0_ {
FILETIME startTime;
FILETIME endTime;
UINT32 numFilterConditions;
FWPM_FILTER_CONDITION0 *filterCondition;
} FWPM_NET_EVENT_ENUM_TEMPLATE0;
Members
startTime
A FILETIME structure that specifies the start time of the period to be checked for net events.
endTime
A FILETIME structure that specifies the end time of the period to be checked for net events. It must be greater than or equal to startTime.
numFilterConditions
Indicates the number of filter conditions in the filterCondition member. If this field is 0, all events will be returned.
filterCondition
An array of FWPM_FILTER_CONDITION0 structures that contain distinct filter conditions (duplicated filter conditions will generate an error). All conditions must be true for the action to be performed. In other words, the conditions are AND'ed together. If no conditions are specified, the action is always performed.
Supported filtering conditions.
Value | Meaning |
---|---|
|
The IP protocol number, as specified in RFC 1700. |
|
The local IP address. |
|
The remote IP address. |
|
The local transport protocol port number. For ICMP, the message type. |
|
The remote transport protocol port number. For ICMP, the message code. |
|
The interface IPv6 scope identifier. Reserved for internal use. |
|
The full path of the application. |
|
The identification of the local user. |
|
The 32-bit event type to be notified of, as defined in the FWPM_NET_EVENT_TYPE enumeration. |
Remarks
FWPM_NET_EVENT_ENUM_TEMPLATE0 is a specific implementation of FWPM_NET_EVENT_ENUM_TEMPLATE. See WFP Version-Independent Names and Targeting Specific Versions of Windows for more information.
Requirements
Requirement | Value |
---|---|
Minimum supported client | Windows Vista [desktop apps only] |
Minimum supported server | Windows Server 2008 [desktop apps only] |
Header | fwpmtypes.h |