FWPS_FIELDS_ALE_FLOW_ESTABLISHED_V4_ - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers 
// fwpsk.h

typedef enum FWPS_FIELDS_ALE_FLOW_ESTABLISHED_V4_ {
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_APP_ID,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_USER_ID,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_LOCAL_ADDRESS,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_LOCAL_ADDRESS_TYPE,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_LOCAL_PORT,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_PROTOCOL,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_REMOTE_ADDRESS,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_REMOTE_PORT,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_REMOTE_USER_ID,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_REMOTE_MACHINE_ID,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_DESTINATION_ADDRESS_TYPE,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_LOCAL_INTERFACE,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_DIRECTION,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_INTERFACE_TYPE,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_TUNNEL_TYPE,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_FLAGS,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_ORIGINAL_APP_ID,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_PACKAGE_ID,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_COMPARTMENT_ID,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_RESERVED_0,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_RESERVED_1,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_RESERVED_2,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_RESERVED_3,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_PACKAGE_FAMILY_NAME,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_MAX
} FWPS_FIELDS_ALE_FLOW_ESTABLISHED_V4;
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (ne-fwpsk-fwps_fields_ale_flow_established_v4_)

FWPS_FIELDS_ALE_FLOW_ESTABLISHED_V4_ enumeration

Description

The FWPS_FIELDS_ALE_FLOW_ESTABLISHED_V4 enumeration type specifies the data field identifiers for the FWPS_LAYER_ALE_FLOW_ESTABLISHED_V4 and FWPS_LAYER_ALE_FLOW_ESTABLISHED_V4_DISCARD run-time filtering layers.

Constants

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_APP_ID

The full path of the application.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_USER_ID

The identifier of the local user.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_LOCAL_ADDRESS

The local IP address.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_LOCAL_ADDRESS_TYPE

The local IP address type. The possible values are defined by the NL_ADDRESS_TYPE enumeration.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_LOCAL_PORT

The local transport protocol port number.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_PROTOCOL

The IP protocol number, as specified in RFC 1700.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_REMOTE_ADDRESS

The remote IP address.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_REMOTE_PORT

The remote transport protocol port number.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_REMOTE_USER_ID

The identification of the remote user.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_REMOTE_MACHINE_ID

The identification of the remote machine.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_DESTINATION_ADDRESS_TYPE

The destination IP address type. The possible values are defined by the NL_ADDRESS_TYPE enumeration.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_LOCAL_INTERFACE

The locally unique identifier (LUID) for the network interface associated with the local IP address.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_DIRECTION

The possible values are:

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_INTERFACE_TYPE

The type of the local network interface, as defined by the Internet Assigned Numbers Authority (IANA). For more information, see IANAifType-MIB Definitions.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_TUNNEL_TYPE

The encapsulation method used by a tunnel if the IfType member of the IP_ADAPTER_ADDRESSES structure is IF_TYPE_TUNNEL. The tunnel type is defined by IANA. For more information, see IANAifType-MIB Definitions and the Windows SDK.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_FLAGS

A bitwise OR of a combination of filtering condition flags. For information about the possible flags, see Filtering Condition Flags.

Note Supported in Windows Server 2008, Windows Vista SP1, and later versions of Windows.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_ORIGINAL_APP_ID

The full path of the original application for proxy connections. If the application has not been proxied, this path is identical to the xxx_ALE_APP_ID.

Note Supported starting with Windows 8.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_PACKAGE_ID

The package identifier is a security identifier (SID) that identifies the associated AppContainer process. For more information about the SID structure, see the description for the SID structure in the Microsoft Windows SDK documentation.

Note Supported starting with Windows 8.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE

The fully qualified binary name (FQBN) value of the application.

Note Supported starting with Windows 10.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_COMPARTMENT_ID

The compartment that the network interface belongs to.

Note Supported starting with Windows 10, version 1703.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_PACKAGE_FAMILY_NAME

The Package Family Name of the application.

Note Supported starting with Windows Server 2022 23H2.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_MAX

The maximum value for this enumeration. This value might change in future versions of the NDIS header files and binaries.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_RESERVED_0

Reserved.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_RESERVED_1

Reserved.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_RESERVED_2

Reserved.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_RESERVED_3

Reserved.

Remarks

The following macros in Fwpsk.h are defined with FWPS_FIELDS_ALE_FLOW_ESTABLISHED_V4 enumeration values:


#define FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ICMP_TYPE \
        FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_LOCAL_PORT

#define FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ICMP_CODE \
        FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_REMOTE_PORT

These macros are used to access the following IPV4 data fields:

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ICMP_TYPE The ICMP type field, as specified in RFC 792.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ICMP_CODE The ICMP code field, as specified in RFC 792.

See also

LUID

NL_ADDRESS_TYPE

View the official Windows Driver Kit DDI reference

Edit description on GitHub