FwpsNetBufferListAssociateContext0 - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers 
// fwpsk.h

NTSTATUS FwpsNetBufferListAssociateContext0(
  [in, out] NET_BUFFER_LIST                 *netBufferList,
  [in]      UINT16                          layerId,
  [in]      UINT64                          context,
  [in]      UINT64                          contextTag,
            GUID                            *providerGuid,
  [in, out] void                            *deviceObject,
  [in]      FWPS_NET_BUFFER_LIST_NOTIFY_FN0 notifyFn,
  [in]      UINT32                          flags
);
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (nf-fwpsk-fwpsnetbufferlistassociatecontext0)

FwpsNetBufferListAssociateContext0 function

Description

The FwpsNetBufferListAssociateContext0 function associates the callout driver's context with a network buffer list and configures notification for network buffer list events.

Note FwpsNetBufferListAssociateContext0 is the specific version of FwpsNetBufferListAssociateContext used in Windows 7 and later. See WFP Version-Independent Names and Targeting Specific Versions of Windows for more information. For Windows 8, FwpsNetBufferListAssociateContext1 is available.

Parameters

netBufferList [in, out]

A network buffer list that indicates one or more packets of interest to the callout driver.

layerId [in]

The identifier of the layer in which the context is being associated. When calling this function from the NDIS receive path, set this parameter to FWPS_LAYER_NON_WFP.

context [in]

Arbitrary context information set by the callout driver. The filter engine will pass this context to the callout driver's FWPS_NET_BUFFER_LIST_NOTIFY_FN0.

contextTag [in]

A locally unique identifier obtained by calling the FwpsNetBufferListGetTagForContext0 function.

providerGuid

The provider GUID.

deviceObject [in, out]

A pointer to the callout driver's device object.

notifyFn [in]

A pointer to the callout driver's FWPS_NET_BUFFER_LIST_NOTIFY_FN0 function. The filter engine will send status notifications to this function.

flags [in]

This parameter is reserved for future use and is set to zero.

Return value

The FwpsNetBufferListAssociateContext0 function returns one of the following NTSTATUS codes.

Return code Description
STATUS_SUCCESS The association was successful.
Other status codes An error occurred.

Remarks

The FwpsNetBufferListAssociateContext0 function associates groups of packets with the callout driver. Packets of interest can be tracked for inspection through multiple layers in the stack.

Before calling this function, the FwpsNetBufferListGetTagForContext0 function must be called to obtain a context tag.

See also

FwpsNetBufferListAssociateContext1

FwpsNetBufferListGetTagForContext0

FwpsNetBufferListRemoveContext0

FwpsNetBufferListRetrieveContext0

NET_BUFFER_LIST

Using Packet Tagging

View the official Windows Driver Kit DDI reference

Edit description on GitHub