FwpmNetEventEnum1 function

The FwpmNetEventEnum1 function returns the next page of results from the network event enumerator.

Note  FwpmNetEventEnum1 is the specific implementation of FwpmNetEventEnum used in Windows 7 and later. See WFP Version-Independent Names and Targeting Specific Versions of Windows for more information. For Windows 8, FwpmNetEventEnum2 is available. For Windows Vista, FwpmNetEventEnum0 is available.

Syntax


DWORD WINAPI FwpmNetEventEnum1(
  _In_   HANDLE engineHandle,
  _In_   HANDLE enumHandle,
  _In_   UINT32 numEntriesRequested,
  _Out_  FWPM_NET_EVENT1 ***entries,
  _Out_  UINT32 *numEntriesReturned
);

Parameters

engineHandle [in]

Type: HANDLE

Handle for an open session to the filter engine. Call FwpmEngineOpen0 to open a session to the filter engine.

enumHandle [in]

Type: HANDLE

Handle for a network event enumeration created by a call to FwpmNetEventCreateEnumHandle0.

numEntriesRequested [in]

Type: UINT32

The nmber of enumeration entries requested.

entries [out]

Type: FWPM_NET_EVENT1***

Addresses of enumeration entries.

numEntriesReturned [out]

Type: UINT32*

The number of enumeration entries returned.

Return value

Type: DWORD

Return code/valueDescription
ERROR_SUCCESS
0

The network events were enumerated successfully.

FWP_E_NET_EVENTS_DISABLED
0x80320013

The collection of network diagnostic events is disabled. Call FwpmEngineSetOption0 to enable it.

FWP_E_* error code
0x80320001—0x80320039

A Windows Filtering Platform (WFP) specific error. See WFP Error Codes for details.

RPC_* error code
0x80010001—0x80010122

Failure to communicate with the remote or local firewall engine.

 

Remarks

If the numEntriesReturned is less than the numEntriesRequested, the enumeration is exhausted.

The returned array of entries (but not the individual entries themselves) must be freed by a call to FwpmFreeMemory0.

A subsequent call that uses the same enumHandle parameter will return the next set of events following those in the current entries buffer.

FwpmNetEventEnum1 returns only events that were logged prior to the creation of the enumHandle parameter. See Logging for more information.

Requirements

Minimum supported client

Windows 7 [desktop apps only]

Minimum supported server

Windows Server 2008 R2 [desktop apps only]

Header

Fwpmu.h

Library

Fwpuclnt.lib

DLL

Fwpuclnt.dll

See also

WFP Logging
FWPM_NET_EVENT1
FwpmNetEventCreateEnumHandle0

 

 

Community Additions

ADD
Show:
© 2014 Microsoft