Pending/completing WFP callout

Question

question

GregoryMesserman-0140 asked · Feb 25 at 09:11 AM

Pending/completing WFP callout

Hi,

I have a question regarding the subject.

It's a very common task to delay decision on a WFP callout, such as Connect.
WFP provides the FwpsPend/CompleteOperation() for that purpose, but the design is very weird, to say the least.
First, there's no provision for even a single void* context to pass to the callout being completed.
Second, which is even stranger, there's no convenient way to associate the call to FwpsCompleteOperation() with the callout!
The Inspect sample uses the address 4-tuple for that purpose, but it has obvious deficiencies.
One example is a raw socket - which addresses does one use for it?
I never understood how such obvious things could be overlooked, especially when there exists a straightforward mechanism to pend/complete an IRP in the case of the general I/O manager (and the obsolete TDI interface, for that matter).

I noticed there exist the FwpsPend/CompleteClassify() alternative, which looks much better, but it seems to be limited to very specific layers, which defeats its purpose for me.

Thanks in advance,
Greg

windows-10-network windows-7-network windows-8-network

· 3

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SunnyQi-MSFT · Mar 03 at 02:09 AM

You could accept the useful reply as answer if you want to end this thread up. If there is anything else we can do for you, please feel free to post in the forum. Appreciate your understanding. :) Have a nice day!

0 ·

GregoryMesserman-0140 SunnyQi-MSFT · Mar 09 at 12:39 PM

Sunny,

How can I ask a question in the specific forum?
When clicking on "Ask a question" it gives the general form.
This way I ended up here with this one.
Is it the tags that should specify WDK for that purpose?

Thanks,
Greg

0 ·

SunnyQi-MSFT GregoryMesserman-0140 · Mar 10 at 01:44 AM

Hi Greg,

If you want to post a new thread in the forum which I posted below, you could click Ask a question button, insert question title and question body, and then please select tag as windows-hardware-wdk and windows-hardware-wdk-general which is the most important thing to as a new question.

Best Regards,
Sunny

0 ·

image-1.jpg (43.1 KiB)

Answer 1 · 2021-02-26T06:23:59.72Z

SunnyQi-MSFT answered · Feb 26 at 06:23 AM

Hi,

Thanks for posting in Q&A platform.

Please kindly note that this forum is more focus on network connection issue and your issue is more related to WFP and Drive development, after discussed with our developer engineer, we would suggest you could post the issue in the following forum for getting more professional help:

https://docs.microsoft.com/en-us/answers/topics/windows-hardware-wdk.html

Thanks for your understanding.

Best Regards,
Sunny

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

·

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question