Message 1 of 1
16 Feb 17 12:49
Join Date: 05 Feb 2017
Posts To This List: 1
WFP callout driver packet order and thread safety
I am writing a WFP callout driver.
I am have registered the callout at the FWPM_LAYER_STREAM_V4 and I have 2
1. Are the packets that callout receives have been reordered (at the TCP level)
What I want to make sure is that the filter is after the TCP reassembly layer in
the incoming end and before the re-transmission layer in the outgoing end.
2. Is the callout function blocking at the stream level?
During the callout (the classifyFn function) execution, is it possible that the
callout will be called again with the same FlowContext by the OS to handle a new
data that arrives on the same TCP stream?