FWPS_FIELDS_ALE_FLOW_ESTABLISHED_V4 enumeration (fwpsu.h)

  • Article

Specifies the data field identifiers for the FWPS_LAYER_ALE_FLOW_ESTABLISHED_V4 and FWPS_LAYER_ALE_FLOW_ESTABLISHED_V4_DISCARD run-time filtering layers.

Syntax

typedef enum FWPS_FIELDS_ALE_FLOW_ESTABLISHED_V4_ {
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_APP_ID,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_USER_ID,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_LOCAL_ADDRESS,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_LOCAL_ADDRESS_TYPE,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_LOCAL_PORT,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_PROTOCOL,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_REMOTE_ADDRESS,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_REMOTE_PORT,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_REMOTE_USER_ID,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_REMOTE_MACHINE_ID,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_DESTINATION_ADDRESS_TYPE,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_LOCAL_INTERFACE,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_DIRECTION,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_INTERFACE_TYPE,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_TUNNEL_TYPE,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_FLAGS,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_ORIGINAL_APP_ID,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_PACKAGE_ID,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_COMPARTMENT_ID,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_RESERVED_0,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_RESERVED_1,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_RESERVED_2,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_RESERVED_3,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_PACKAGE_FAMILY_NAME,
  FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_MAX
} FWPS_FIELDS_ALE_FLOW_ESTABLISHED_V4;

Constants

 
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_APP_ID
The full path of the application.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_USER_ID
The identifier of the local user.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_LOCAL_ADDRESS
The local IP address.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_LOCAL_ADDRESS_TYPE
The local IP address type. The possible values are defined by the NL_ADDRESS_TYPE enumeration.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_LOCAL_PORT
The local transport protocol port number.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_PROTOCOL
The IP protocol number, as specified in RFC 1700.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_REMOTE_ADDRESS
The remote IP address.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_REMOTE_PORT
The remote transport protocol port number.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_REMOTE_USER_ID
The identification of the remote user.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_REMOTE_MACHINE_ID
The identification of the remote machine.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_DESTINATION_ADDRESS_TYPE
The destination IP address type. The possible values are defined by the NL_ADDRESS_TYPE enumeration.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_LOCAL_INTERFACE
The locally unique identifier (LUID) for the network interface associated with the local IP address.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_DIRECTION
The possible values are FWP_DIRECTION_INBOUND and FWP_DIRECTION_OUTBOUND.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_INTERFACE_TYPE
The type of the local network interface, as defined by the Internet Assigned Numbers Authority
(IANA). For more information, see
IANAifType-MIB Definitions.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_TUNNEL_TYPE
The encapsulation method used by a tunnel if the
IfType member of the IP_ADAPTER_ADDRESSES structure is IF_TYPE_TUNNEL. The tunnel type is defined
by IANA. For more information, see
IANAifType-MIB Definitions and the
Windows SDK.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_FLAGS
A bitwise OR of a combination of filtering condition flags. For information about the possible
flags, see Filtering condition flags.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_ORIGINAL_APP_ID
The full path of the original application for proxy connections. If the application has not been proxied, then this path is identical to the xxx_ALE_APP_ID.

Supported starting with Windows 8.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_PACKAGE_ID
The package identifier is a security identifier (SID) that identifies the associated AppContainer process. For more information about the SID structure, see the description for the SID structure in the Microsoft Windows SDK documentation.

Supported starting with Windows 8.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
The fully qualified binary name (FQBN) value of the application.

Supported starting with Windows 10.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_COMPARTMENT_ID
The compartment that the network interface belongs to.

Supported starting with Windows 10, version 1703.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_RESERVED_0
Reserved.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_RESERVED_1
Reserved.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_RESERVED_2
Reserved.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_RESERVED_3
Reserved.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_PACKAGE_FAMILY_NAME
Indicates that the resource is a Package Family Name string.

Supported starting with Windows Server 2022 23H2.
FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_MAX
The maximum value for this enumeration. This value might change in future versions of the NDIS
header files and binaries.

Remarks

The following macros in fwpsu.h are defined with FWPS_FIELDS_ALE_FLOW_ESTABLISHED_V4 enumeration values:

#define FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ICMP_TYPE \
        FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_LOCAL_PORT

#define FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ICMP_CODE \
        FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_IP_REMOTE_PORT

Those macros are used to access the following IPV4 data fields:

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ICMP_TYPE

The ICMP type field, as specified in RFC 792.

FWPS_FIELD_ALE_FLOW_ESTABLISHED_V4_ICMP_CODE

The ICMP code field, as specified in RFC 792.

Requirements

Requirement Value
Header fwpsu.h