288 lines
13 KiB
C
288 lines
13 KiB
C
/*
|
|
* windivert_device.h
|
|
* (C) 2018, all rights reserved,
|
|
*
|
|
* This file is part of WinDivert.
|
|
*
|
|
* WinDivert is free software: you can redistribute it and/or modify it under
|
|
* the terms of the GNU Lesser General Public License as published by the
|
|
* Free Software Foundation, either version 3 of the License, or (at your
|
|
* option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public
|
|
* License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
* WinDivert is free software; you can redistribute it and/or modify it under
|
|
* the terms of the GNU General Public License as published by the Free
|
|
* Software Foundation; either version 2 of the License, or (at your option)
|
|
* any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License along
|
|
* with this program; if not, write to the Free Software Foundation, Inc., 51
|
|
* Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
*/
|
|
|
|
#ifndef __WINDIVERT_DEVICE_H
|
|
#define __WINDIVERT_DEVICE_H
|
|
|
|
/*
|
|
* NOTE: This is the low-level interface to the WinDivert device driver.
|
|
* This interface should not be used directly, instead use the high-level
|
|
* interface provided by the divert API.
|
|
*/
|
|
|
|
#define WINDIVERT_KERNEL
|
|
#include "windivert.h"
|
|
|
|
#define WINDIVERT_VERSION 2
|
|
#define WINDIVERT_VERSION_MINOR 0
|
|
|
|
#define WINDIVERT_STR2(s) #s
|
|
#define WINDIVERT_STR(s) WINDIVERT_STR2(s)
|
|
#define WINDIVERT_LSTR2(s) L ## #s
|
|
#define WINDIVERT_LSTR(s) WINDIVERT_LSTR2(s)
|
|
|
|
#define WINDIVERT_VERSION_LSTR \
|
|
WINDIVERT_LSTR(WINDIVERT_VERSION) L"." \
|
|
WINDIVERT_LSTR(WINDIVERT_VERSION_MINOR)
|
|
|
|
#define WINDIVERT_DEVICE_NAME \
|
|
L"WinDivert" WINDIVERT_VERSION_LSTR
|
|
|
|
#define WINDIVERT_FILTER_FIELD_ZERO 0
|
|
#define WINDIVERT_FILTER_FIELD_INBOUND 1
|
|
#define WINDIVERT_FILTER_FIELD_OUTBOUND 2
|
|
#define WINDIVERT_FILTER_FIELD_IFIDX 3
|
|
#define WINDIVERT_FILTER_FIELD_SUBIFIDX 4
|
|
#define WINDIVERT_FILTER_FIELD_IP 5
|
|
#define WINDIVERT_FILTER_FIELD_IPV6 6
|
|
#define WINDIVERT_FILTER_FIELD_ICMP 7
|
|
#define WINDIVERT_FILTER_FIELD_TCP 8
|
|
#define WINDIVERT_FILTER_FIELD_UDP 9
|
|
#define WINDIVERT_FILTER_FIELD_ICMPV6 10
|
|
#define WINDIVERT_FILTER_FIELD_IP_HDRLENGTH 11
|
|
#define WINDIVERT_FILTER_FIELD_IP_TOS 12
|
|
#define WINDIVERT_FILTER_FIELD_IP_LENGTH 13
|
|
#define WINDIVERT_FILTER_FIELD_IP_ID 14
|
|
#define WINDIVERT_FILTER_FIELD_IP_DF 15
|
|
#define WINDIVERT_FILTER_FIELD_IP_MF 16
|
|
#define WINDIVERT_FILTER_FIELD_IP_FRAGOFF 17
|
|
#define WINDIVERT_FILTER_FIELD_IP_TTL 18
|
|
#define WINDIVERT_FILTER_FIELD_IP_PROTOCOL 19
|
|
#define WINDIVERT_FILTER_FIELD_IP_CHECKSUM 20
|
|
#define WINDIVERT_FILTER_FIELD_IP_SRCADDR 21
|
|
#define WINDIVERT_FILTER_FIELD_IP_DSTADDR 22
|
|
#define WINDIVERT_FILTER_FIELD_IPV6_TRAFFICCLASS 23
|
|
#define WINDIVERT_FILTER_FIELD_IPV6_FLOWLABEL 24
|
|
#define WINDIVERT_FILTER_FIELD_IPV6_LENGTH 25
|
|
#define WINDIVERT_FILTER_FIELD_IPV6_NEXTHDR 26
|
|
#define WINDIVERT_FILTER_FIELD_IPV6_HOPLIMIT 27
|
|
#define WINDIVERT_FILTER_FIELD_IPV6_SRCADDR 28
|
|
#define WINDIVERT_FILTER_FIELD_IPV6_DSTADDR 29
|
|
#define WINDIVERT_FILTER_FIELD_ICMP_TYPE 30
|
|
#define WINDIVERT_FILTER_FIELD_ICMP_CODE 31
|
|
#define WINDIVERT_FILTER_FIELD_ICMP_CHECKSUM 32
|
|
#define WINDIVERT_FILTER_FIELD_ICMP_BODY 33
|
|
#define WINDIVERT_FILTER_FIELD_ICMPV6_TYPE 34
|
|
#define WINDIVERT_FILTER_FIELD_ICMPV6_CODE 35
|
|
#define WINDIVERT_FILTER_FIELD_ICMPV6_CHECKSUM 36
|
|
#define WINDIVERT_FILTER_FIELD_ICMPV6_BODY 37
|
|
#define WINDIVERT_FILTER_FIELD_TCP_SRCPORT 38
|
|
#define WINDIVERT_FILTER_FIELD_TCP_DSTPORT 39
|
|
#define WINDIVERT_FILTER_FIELD_TCP_SEQNUM 40
|
|
#define WINDIVERT_FILTER_FIELD_TCP_ACKNUM 41
|
|
#define WINDIVERT_FILTER_FIELD_TCP_HDRLENGTH 42
|
|
#define WINDIVERT_FILTER_FIELD_TCP_URG 43
|
|
#define WINDIVERT_FILTER_FIELD_TCP_ACK 44
|
|
#define WINDIVERT_FILTER_FIELD_TCP_PSH 45
|
|
#define WINDIVERT_FILTER_FIELD_TCP_RST 46
|
|
#define WINDIVERT_FILTER_FIELD_TCP_SYN 47
|
|
#define WINDIVERT_FILTER_FIELD_TCP_FIN 48
|
|
#define WINDIVERT_FILTER_FIELD_TCP_WINDOW 49
|
|
#define WINDIVERT_FILTER_FIELD_TCP_CHECKSUM 50
|
|
#define WINDIVERT_FILTER_FIELD_TCP_URGPTR 51
|
|
#define WINDIVERT_FILTER_FIELD_TCP_PAYLOADLENGTH 52
|
|
#define WINDIVERT_FILTER_FIELD_UDP_SRCPORT 53
|
|
#define WINDIVERT_FILTER_FIELD_UDP_DSTPORT 54
|
|
#define WINDIVERT_FILTER_FIELD_UDP_LENGTH 55
|
|
#define WINDIVERT_FILTER_FIELD_UDP_CHECKSUM 56
|
|
#define WINDIVERT_FILTER_FIELD_UDP_PAYLOADLENGTH 57
|
|
#define WINDIVERT_FILTER_FIELD_LOOPBACK 58
|
|
#define WINDIVERT_FILTER_FIELD_IMPOSTOR 59
|
|
#define WINDIVERT_FILTER_FIELD_PROCESSID 60
|
|
#define WINDIVERT_FILTER_FIELD_LOCALADDR 61
|
|
#define WINDIVERT_FILTER_FIELD_REMOTEADDR 62
|
|
#define WINDIVERT_FILTER_FIELD_LOCALPORT 63
|
|
#define WINDIVERT_FILTER_FIELD_REMOTEPORT 64
|
|
#define WINDIVERT_FILTER_FIELD_PROTOCOL 65
|
|
#define WINDIVERT_FILTER_FIELD_LAYER 66
|
|
#define WINDIVERT_FILTER_FIELD_EVENT 67
|
|
#define WINDIVERT_FILTER_FIELD_PACKET 68
|
|
#define WINDIVERT_FILTER_FIELD_PACKET16 69
|
|
#define WINDIVERT_FILTER_FIELD_PACKET32 70
|
|
#define WINDIVERT_FILTER_FIELD_TCP_PAYLOAD 71
|
|
#define WINDIVERT_FILTER_FIELD_TCP_PAYLOAD16 72
|
|
#define WINDIVERT_FILTER_FIELD_TCP_PAYLOAD32 73
|
|
#define WINDIVERT_FILTER_FIELD_UDP_PAYLOAD 74
|
|
#define WINDIVERT_FILTER_FIELD_UDP_PAYLOAD16 75
|
|
#define WINDIVERT_FILTER_FIELD_UDP_PAYLOAD32 76
|
|
#define WINDIVERT_FILTER_FIELD_RANDOM8 77
|
|
#define WINDIVERT_FILTER_FIELD_RANDOM16 78
|
|
#define WINDIVERT_FILTER_FIELD_RANDOM32 79
|
|
#define WINDIVERT_FILTER_FIELD_MAX \
|
|
WINDIVERT_FILTER_FIELD_RANDOM32
|
|
|
|
#define WINDIVERT_FILTER_TEST_EQ 0
|
|
#define WINDIVERT_FILTER_TEST_NEQ 1
|
|
#define WINDIVERT_FILTER_TEST_LT 2
|
|
#define WINDIVERT_FILTER_TEST_LEQ 3
|
|
#define WINDIVERT_FILTER_TEST_GT 4
|
|
#define WINDIVERT_FILTER_TEST_GEQ 5
|
|
#define WINDIVERT_FILTER_TEST_MAX WINDIVERT_FILTER_TEST_GEQ
|
|
|
|
#define WINDIVERT_FILTER_MAXLEN (0xFF-2)
|
|
|
|
#define WINDIVERT_FILTER_RESULT_ACCEPT (WINDIVERT_FILTER_MAXLEN+1)
|
|
#define WINDIVERT_FILTER_RESULT_REJECT (WINDIVERT_FILTER_MAXLEN+2)
|
|
|
|
/*
|
|
* WinDivert layers.
|
|
*/
|
|
#define WINDIVERT_LAYER_DEFAULT WINDIVERT_LAYER_NETWORK
|
|
#define WINDIVERT_LAYER_MAX WINDIVERT_LAYER_REFLECT
|
|
|
|
/*
|
|
* WinDivert events.
|
|
*/
|
|
#define WINDIVERT_EVENT_MAX \
|
|
WINDIVERT_EVENT_REFLECT_CLOSE
|
|
|
|
/*
|
|
* WinDivert flags.
|
|
*/
|
|
#define WINDIVERT_FLAGS_ALL \
|
|
(WINDIVERT_FLAG_SNIFF | WINDIVERT_FLAG_DROP | WINDIVERT_FLAG_RECV_ONLY |\
|
|
WINDIVERT_FLAG_SEND_ONLY | WINDIVERT_FLAG_RECV_PARTIAL | \
|
|
WINDIVERT_FLAG_NO_INSTALL)
|
|
#define WINDIVERT_FLAGS_EXCLUDE(flags, flag1, flag2) \
|
|
(((flags) & ((flag1) | (flag2))) != ((flag1) | (flag2)))
|
|
#define WINDIVERT_FLAGS_VALID(flags) \
|
|
((((flags) & ~WINDIVERT_FLAGS_ALL) == 0) && \
|
|
WINDIVERT_FLAGS_EXCLUDE(flags, WINDIVERT_FLAG_SNIFF, \
|
|
WINDIVERT_FLAG_DROP) && \
|
|
WINDIVERT_FLAGS_EXCLUDE(flags, WINDIVERT_FLAG_RECV_ONLY, \
|
|
WINDIVERT_FLAG_SEND_ONLY) && \
|
|
WINDIVERT_FLAGS_EXCLUDE(flags, WINDIVERT_FLAG_RECV_PARTIAL, \
|
|
WINDIVERT_FLAG_SEND_ONLY))
|
|
|
|
/*
|
|
* WinDivert filter flags.
|
|
*/
|
|
#define WINDIVERT_FILTER_FLAG_INBOUND 0x0000000000000001ull
|
|
#define WINDIVERT_FILTER_FLAG_OUTBOUND 0x0000000000000002ull
|
|
#define WINDIVERT_FILTER_FLAG_IP 0x0000000000000004ull
|
|
#define WINDIVERT_FILTER_FLAG_IPV6 0x0000000000000008ull
|
|
#define WINDIVERT_FILTER_FLAG_EVENT_FLOW_DELETED 0x0000000000000010ull
|
|
#define WINDIVERT_FILTER_FLAG_EVENT_SOCKET_BIND 0x0000000000000020ull
|
|
#define WINDIVERT_FILTER_FLAG_EVENT_SOCKET_CONNECT 0x0000000000000040ull
|
|
#define WINDIVERT_FILTER_FLAG_EVENT_SOCKET_LISTEN 0x0000000000000080ull
|
|
#define WINDIVERT_FILTER_FLAG_EVENT_SOCKET_ACCEPT 0x0000000000000100ull
|
|
|
|
#define WINDIVERT_FILTER_FLAGS_ALL \
|
|
(WINDIVERT_FILTER_FLAG_INBOUND | WINDIVERT_FILTER_FLAG_OUTBOUND | \
|
|
WINDIVERT_FILTER_FLAG_IP | WINDIVERT_FILTER_FLAG_IPV6 | \
|
|
WINDIVERT_FILTER_FLAG_EVENT_FLOW_DELETED | \
|
|
WINDIVERT_FILTER_FLAG_EVENT_SOCKET_BIND | \
|
|
WINDIVERT_FILTER_FLAG_EVENT_SOCKET_CONNECT | \
|
|
WINDIVERT_FILTER_FLAG_EVENT_SOCKET_LISTEN | \
|
|
WINDIVERT_FILTER_FLAG_EVENT_SOCKET_ACCEPT)
|
|
|
|
/*
|
|
* WinDivert priorities.
|
|
*/
|
|
#define WINDIVERT_PRIORITY_DEFAULT 0
|
|
#define WINDIVERT_PRIORITY_MAX 30000
|
|
#define WINDIVERT_PRIORITY_MIN -WINDIVERT_PRIORITY_MAX
|
|
|
|
/*
|
|
* WinDivert parameters.
|
|
*/
|
|
#define WINDIVERT_PARAM_QUEUE_LEN_DEFAULT 2048
|
|
#define WINDIVERT_PARAM_QUEUE_LEN_MIN 16
|
|
#define WINDIVERT_PARAM_QUEUE_LEN_MAX 16384
|
|
#define WINDIVERT_PARAM_QUEUE_TIME_DEFAULT 1000 // 1s
|
|
#define WINDIVERT_PARAM_QUEUE_TIME_MIN 20 // 20ms
|
|
#define WINDIVERT_PARAM_QUEUE_TIME_MAX 8000 // 8s
|
|
#define WINDIVERT_PARAM_QUEUE_SIZE_MIN 65535 // 64KB
|
|
#define WINDIVERT_PARAM_QUEUE_SIZE_MAX 33554432 // 32MB
|
|
#define WINDIVERT_PARAM_QUEUE_SIZE_DEFAULT 4194304 // 4MB
|
|
|
|
/*
|
|
* WinDivert batch limits.
|
|
*/
|
|
#define WINDIVERT_BATCH_MAX 0xFF
|
|
|
|
/*
|
|
* WinDivert message definitions.
|
|
*/
|
|
#pragma pack(push, 1)
|
|
typedef struct
|
|
{
|
|
UINT64 arg1; // argument #1
|
|
UINT64 arg2; // argument #2
|
|
} WINDIVERT_IOCTL, *PWINDIVERT_IOCTL;
|
|
|
|
/*
|
|
* WinDivert IOCTL structures.
|
|
*/
|
|
typedef struct
|
|
{
|
|
UINT8 field; // WINDIVERT_FILTER_FIELD_*
|
|
UINT8 test; // WINDIVERT_FILTER_TEST_*
|
|
UINT8 success; // Success continuation.
|
|
UINT8 failure; // Fail continuation.
|
|
UINT32 arg[4]; // Argument.
|
|
} WINDIVERT_FILTER, *PWINDIVERT_FILTER;
|
|
#pragma pack(pop)
|
|
|
|
/*
|
|
* IOCTL codes.
|
|
*/
|
|
#define IOCTL_WINDIVERT_SHUTDOWN \
|
|
CTL_CODE(FILE_DEVICE_NETWORK, 0x917, METHOD_IN_DIRECT, FILE_READ_DATA | \
|
|
FILE_WRITE_DATA)
|
|
#define IOCTL_WINDIVERT_RECV \
|
|
CTL_CODE(FILE_DEVICE_NETWORK, 0x918, METHOD_OUT_DIRECT, FILE_READ_DATA)
|
|
#define IOCTL_WINDIVERT_SEND \
|
|
CTL_CODE(FILE_DEVICE_NETWORK, 0x919, METHOD_IN_DIRECT, FILE_READ_DATA | \
|
|
FILE_WRITE_DATA)
|
|
#define IOCTL_WINDIVERT_START_FILTER \
|
|
CTL_CODE(FILE_DEVICE_NETWORK, 0x91A, METHOD_IN_DIRECT, FILE_READ_DATA | \
|
|
FILE_WRITE_DATA)
|
|
#define IOCTL_WINDIVERT_SET_LAYER \
|
|
CTL_CODE(FILE_DEVICE_NETWORK, 0x91B, METHOD_IN_DIRECT, FILE_READ_DATA | \
|
|
FILE_WRITE_DATA)
|
|
#define IOCTL_WINDIVERT_SET_PRIORITY \
|
|
CTL_CODE(FILE_DEVICE_NETWORK, 0x91C, METHOD_IN_DIRECT, FILE_READ_DATA | \
|
|
FILE_WRITE_DATA)
|
|
#define IOCTL_WINDIVERT_SET_FLAGS \
|
|
CTL_CODE(FILE_DEVICE_NETWORK, 0x91D, METHOD_IN_DIRECT, FILE_READ_DATA | \
|
|
FILE_WRITE_DATA)
|
|
#define IOCTL_WINDIVERT_SET_PARAM \
|
|
CTL_CODE(FILE_DEVICE_NETWORK, 0x91E, METHOD_IN_DIRECT, FILE_READ_DATA | \
|
|
FILE_WRITE_DATA)
|
|
#define IOCTL_WINDIVERT_GET_PARAM \
|
|
CTL_CODE(FILE_DEVICE_NETWORK, 0x91F, METHOD_OUT_DIRECT, FILE_READ_DATA)
|
|
|
|
#endif /* __WINDIVERT_DEVICE_H */
|