blob: adb470c0fb294f63172eaf98ead870ce5cd15025 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
|
/*++
Copyright (c) Microsoft Corporation. All rights reserved
Abstract:
Monitor Sample driver callout header
Environment:
Kernel mode
--*/
#pragma once
typedef struct _FLOW_DATA
{
UINT64 flowHandle;
UINT64 flowContext;
UINT64 calloutId;
ULONG localAddressV4;
USHORT localPort;
USHORT ipProto;
ULONG remoteAddressV4;
USHORT remotePort;
WCHAR* processPath;
LIST_ENTRY listEntry;
BOOLEAN deleting;
} FLOW_DATA;
NTSTATUS
MonitorCoInitialize(_Inout_ DEVICE_OBJECT* deviceObject);
void
MonitorCoUninitialize(void);
NTSTATUS
MonitorCoRegisterCallouts(_Inout_ void* deviceObject);
NTSTATUS
MonitorCoUnregisterCallouts(void);
NTSTATUS
MonitorCoSetApplication(
_In_reads_(size) wchar_t* fileName,
_In_ ULONG size);
NTSTATUS
MonitorCoEnableMonitoring(
_In_ MONITOR_SETTINGS* monitorSettings);
void
MonitorCoDisableMonitoring(void);
|
