Skip to content

Latest commit

 

History

History
146 lines (102 loc) · 5.05 KB

ns-fwpmtypes-fwpm_net_event_header0.md

File metadata and controls

146 lines (102 loc) · 5.05 KB
UID title description helpviewer_keywords old-location tech.root ms.assetid ms.date ms.keywords req.header req.include-header req.target-type req.target-min-winverclnt req.target-min-winversvr req.kmdf-ver req.umdf-ver req.ddi-compliance req.unicode-ansi req.idl req.max-support req.namespace req.assembly req.type-library req.lib req.dll req.irql targetos req.typenames req.redist ms.custom f1_keywords dev_langs topic_type api_type api_location api_name
NS:fwpmtypes.FWPM_NET_EVENT_HEADER0_
FWPM_NET_EVENT_HEADER0 (fwpmtypes.h)
Information common to all events.
FWPM_NET_EVENT_FLAG_APP_ID_SET
FWPM_NET_EVENT_FLAG_IP_PROTOCOL_SET
FWPM_NET_EVENT_FLAG_IP_VERSION_SET
FWPM_NET_EVENT_FLAG_LOCAL_ADDR_SET
FWPM_NET_EVENT_FLAG_LOCAL_PORT_SET
FWPM_NET_EVENT_FLAG_REMOTE_ADDR_SET
FWPM_NET_EVENT_FLAG_REMOTE_PORT_SET
FWPM_NET_EVENT_FLAG_SCOPE_ID_SET
FWPM_NET_EVENT_FLAG_USER_ID_SET
FWPM_NET_EVENT_HEADER0
FWPM_NET_EVENT_HEADER0 structure [Filtering]
fwp.fwpm_net_event_header0
fwpmtypes/FWPM_NET_EVENT_HEADER0
fwp\fwpm_net_event_header0.htm
fwp
2fbb805d-d38b-4918-a291-fe1000ac2ea2
12/05/2018
FWPM_NET_EVENT_FLAG_APP_ID_SET, FWPM_NET_EVENT_FLAG_IP_PROTOCOL_SET, FWPM_NET_EVENT_FLAG_IP_VERSION_SET, FWPM_NET_EVENT_FLAG_LOCAL_ADDR_SET, FWPM_NET_EVENT_FLAG_LOCAL_PORT_SET, FWPM_NET_EVENT_FLAG_REMOTE_ADDR_SET, FWPM_NET_EVENT_FLAG_REMOTE_PORT_SET, FWPM_NET_EVENT_FLAG_SCOPE_ID_SET, FWPM_NET_EVENT_FLAG_USER_ID_SET, FWPM_NET_EVENT_HEADER0, FWPM_NET_EVENT_HEADER0 structure [Filtering], fwp.fwpm_net_event_header0, fwpmtypes/FWPM_NET_EVENT_HEADER0
fwpmtypes.h
Windows
Windows Vista [desktop apps only]
Windows Server 2008 [desktop apps only]
Fwpmtypes.idl
Windows
FWPM_NET_EVENT_HEADER0
19H1
FWPM_NET_EVENT_HEADER0_
fwpmtypes/FWPM_NET_EVENT_HEADER0_
FWPM_NET_EVENT_HEADER0
fwpmtypes/FWPM_NET_EVENT_HEADER0
c++
APIRef
kbSyntax
HeaderDef
Fwpmtypes.h
FWPM_NET_EVENT_HEADER0

FWPM_NET_EVENT_HEADER0 structure

-description

The FWPM_NET_EVENT_HEADER0 structure contains information common to all events. FWPM_NET_EVENT_HEADER2 is available.

-struct-fields

-field timeStamp

A FILETIME structure that specifies the time the event occurred

-field flags

Flags indicating which of the following members are set. Unused fields must be zero-initialized.

Net event flag Meaning
FWPM_NET_EVENT_FLAG_IP_PROTOCOL_SET The ipProtocol member is set.
FWPM_NET_EVENT_FLAG_LOCAL_ADDR_SET Either the localAddrV4 member or the localAddrV6 member is set. If this flag is present, FWPM_NET_EVENT_FLAG_IP_VERSION_SET must also be present.
FWPM_NET_EVENT_FLAG_REMOTE_ADDR_SET Either the remoteAddrV4 member of the remoteAddrV6 field is set. If this flag is present, FWPM_NET_EVENT_FLAG_IP_VERSION_SET must also be present.
FWPM_NET_EVENT_FLAG_LOCAL_PORT_SET The localPort member is set.
FWPM_NET_EVENT_FLAG_REMOTE_PORT_SET The remotePort member is set.
FWPM_NET_EVENT_FLAG_APP_ID_SET The appId member is set.
FWPM_NET_EVENT_FLAG_USER_ID_SET The userId member is set.
FWPM_NET_EVENT_FLAG_SCOPE_ID_SET The scopeId member is set.
FWPM_NET_EVENT_FLAG_IP_VERSION_SET The ipVersion member is set.

-field ipVersion

A FWP_IP_VERSION value that specifies the IP version being used.

-field ipProtocol

IP protocol specified as an IPPROTO value. See the socket reference topic for more information on possible protocol values.

-field localAddrV4

Specifies an IPv4 local address.

Available when ipVersion is FWP_IP_VERSION_V4.

-field localAddrV6

A FWP_BYTE_ARRAY16 that contains an IPv6 local address.

Available when ipVersion is FWP_IP_VERSION_V6.

-field remoteAddrV4

Specifies an IPv4 remote address.

Available when ipVersion is FWP_IP_VERSION_V4.

-field remoteAddrV6

A FWP_BYTE_ARRAY16 that contains an IPv6 remote address.

Available when ipVersion is FWP_IP_VERSION_V6.

-field localPort

Specifies a local port.

-field remotePort

Specifies a remote port.

-field scopeId

IPv6 scope ID.

-field appId

A FWP_BYTE_BLOB that contains the application ID of the local application associated with the event.

-field userId

Contains a user ID that corresponds to the traffic.

-see-also

FILETIME

FWPM_NET_EVENT0

FWP_BYTE_ARRAY16

FWP_BYTE_BLOB

FWP_IP_VERSION

Windows Filtering Platform API Structures

socket