WFP 用户模式管理功能

The semantics of the Windows Filtering Platform user-mode management functions are exactly the same when called from a callout driver as when called from a user-mode application, except that the return type is an NTSTATUS code instead of a Win32 error code.

These functions are documented in the Management Functions section of the user-mode WFP Functions documentation.

Note

每个函数的内核模式版本在 fwpmk.h 中定义。 每个函数的用户模式版本在 fwpmu.h 中定义。

Callers of all of these functions except FwpmFreeMemory0 must be running at IRQL = PASSIVE_LEVEL. Callers of FwpmFreeMemory0 must be running at IRQL <= DISPATCH_LEVEL.

Callout Management

连接对象管理

Event Management

Filter Management

Layer Management

提供程序上下文管理

Provider Management

Session Management

Sublayer Management

Transaction Management

vSwitch Management