FWPS_NET_BUFFER_LIST_NOTIFY_FN0 callback function

The filter engine calls the FWPS_NET_BUFFER_LIST_NOTIFY_FN0 callout function to notify the callout driver about events that are associated with packets tagged by the callout.

Note  FWPS_NET_BUFFER_LIST_NOTIFY_FN0 is the specific version of FWPS_NET_BUFFER_LIST_NOTIFY_FN used in Windows 7 and later. See WFP Version-Independent Names and Targeting Specific Versions of Windows for more information. For Windows 8, FWPS_NET_BUFFER_LIST_NOTIFY_FN1 is available.
 

Syntax


FWPS_NET_BUFFER_LIST_NOTIFY_FN0 FwpsNetBufferListNotifyFN0;

void NTAPI FwpsNetBufferListNotifyFN0(
  _In_        FWPS_NET_BUFFER_LIST_EVENT_TYPE0 eventType,
  _Inout_opt_ NET_BUFFER_LIST                  *netBufferList,
  _Inout_opt_ NET_BUFFER_LIST                  *newNetBufferList,
  _In_        UINT16                           layerId,
  _In_        UINT64                           context,
  _In_        UINT64                           contextTag
)
{ ... }

Parameters

eventType [in]

A value that indicates the type of notification that the filter engine is sending to the callout. This parameter will be set to one of the values of the FWPS_NET_BUFFER_LIST_EVENT_TYPE0 enumeration.

netBufferList [in, out, optional]

A pointer to the buffer list that contains packets that were previously tagged as interesting by the callout driver.

newNetBufferList [in, out, optional]

A pointer to an updated buffer list that contains packets that are interesting to the callout driver. The use of this parameter differs depending on the type of event. For events where a change is made to the indicated packet, the changed version is passed as this parameter.

layerId [in]

The layer from which the notification function was called.

context [in]

The context used to tag the packets of interest. This value is the value assigned to the packet by the callout driver and is used to identify the packet.

contextTag [in]

The context tag used to associate the packets of interest with the context of the callout driver.

Return value

None.

Remarks

This function is associated with a callout driver by a call to FwpsNetBufferListAssociateContext0. A callout driver can use a single notification function to handle messages for multiple associated buffer lists by using the context and context tag to differentiate between instances.

Requirements

Version

Available starting with Windows 7.

Header

Fwpsk.h (include Fwpsk.h)

IRQL

<= DISPATCH_LEVEL

See also

classifyFn
FWPS_CALLOUT0
FWPS_FILTER1
FWPS_NET_BUFFER_LIST_NOTIFY_FN1
FwpsCalloutRegister1
Callout Driver Callout Functions
Using Packet Tagging

 

 

Send comments about this topic to Microsoft

Show: