DbgDump

The DbgDump sample filter registers for notifications on all possible events and installs data filters on all connections. The filter outputs information about the events to the debugger.

To view the output, attach a debugger to the fwsrv.exe process. You can also view the output by using the DBWIN or DBMON utilities.

Note that because the filter dumps each buffer to the debugger, the Firewall service will experience a considerable slow down and may experience time-outs, even under a moderate load.

Methods Used in DbgDump Sample

The DbgDump sample uses the following methods:

IFWXConnection::AttachDataFilter

IFWXIOBuffer::GetBufferAndSize

IFWXIOCompletion::CompleteAsyncIO

IFWXSession::GetClientAddress

IFWXSession::GetClientMachineName

IFWXSessionFilter::Detach

IFWXSessionFilter::FirewallEventHandler

IFWXSocket::Recv

IFWXSocket::Send

IFWXSocket::SendTo

IFWXSocket::Shutdown

IFWXDataFilter::Detach

IFWXDataFilter::SetSockets

IFWXFilter::AttachToSession

IFWXFilter::FilterInit

IFWXFilter::FilterShutdown

IFWXFilterAdmin::InstallFilter

IFWXFilterAdmin::UninstallFilter

IFWXFirewall::DuplicateFilterHookEvents