basil00
4f7ff88664
This change allows multiple packets to be received/sent at once, reducing overheads. To exploit this feature, applications need to use the WinDivertRecvEx()/WinDivertSendEx() functions with the new addrLen parameter. The passthru example has been modified to use batching. The DEBUG flag has been retired since it conflicts with batching, and was not very useful anyway.
256 lines
11 KiB
C
256 lines
11 KiB
C
/*
|
|
* windivert_device.h
|
|
* (C) 2018, all rights reserved,
|
|
*
|
|
* This file is part of WinDivert.
|
|
*
|
|
* WinDivert is free software: you can redistribute it and/or modify it under
|
|
* the terms of the GNU Lesser General Public License as published by the
|
|
* Free Software Foundation, either version 3 of the License, or (at your
|
|
* option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public
|
|
* License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
* WinDivert is free software; you can redistribute it and/or modify it under
|
|
* the terms of the GNU General Public License as published by the Free
|
|
* Software Foundation; either version 2 of the License, or (at your option)
|
|
* any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License along
|
|
* with this program; if not, write to the Free Software Foundation, Inc., 51
|
|
* Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
*/
|
|
|
|
#ifndef __WINDIVERT_DEVICE_H
|
|
#define __WINDIVERT_DEVICE_H
|
|
|
|
/*
|
|
* NOTE: This is the low-level interface to the WinDivert device driver.
|
|
* This interface should not be used directly, instead use the high-level
|
|
* interface provided by the divert API.
|
|
*/
|
|
|
|
#define WINDIVERT_KERNEL
|
|
#include "windivert.h"
|
|
|
|
#define WINDIVERT_VERSION 2
|
|
#define WINDIVERT_VERSION_MINOR 0
|
|
|
|
#define WINDIVERT_STR2(s) #s
|
|
#define WINDIVERT_STR(s) WINDIVERT_STR2(s)
|
|
#define WINDIVERT_LSTR2(s) L ## #s
|
|
#define WINDIVERT_LSTR(s) WINDIVERT_LSTR2(s)
|
|
|
|
#define WINDIVERT_VERSION_LSTR \
|
|
WINDIVERT_LSTR(WINDIVERT_VERSION) L"." \
|
|
WINDIVERT_LSTR(WINDIVERT_VERSION_MINOR)
|
|
|
|
#define WINDIVERT_DEVICE_NAME \
|
|
L"WinDivert" WINDIVERT_VERSION_LSTR
|
|
|
|
#define WINDIVERT_FILTER_FIELD_ZERO 0
|
|
#define WINDIVERT_FILTER_FIELD_INBOUND 1
|
|
#define WINDIVERT_FILTER_FIELD_OUTBOUND 2
|
|
#define WINDIVERT_FILTER_FIELD_IFIDX 3
|
|
#define WINDIVERT_FILTER_FIELD_SUBIFIDX 4
|
|
#define WINDIVERT_FILTER_FIELD_IP 5
|
|
#define WINDIVERT_FILTER_FIELD_IPV6 6
|
|
#define WINDIVERT_FILTER_FIELD_ICMP 7
|
|
#define WINDIVERT_FILTER_FIELD_TCP 8
|
|
#define WINDIVERT_FILTER_FIELD_UDP 9
|
|
#define WINDIVERT_FILTER_FIELD_ICMPV6 10
|
|
#define WINDIVERT_FILTER_FIELD_IP_HDRLENGTH 11
|
|
#define WINDIVERT_FILTER_FIELD_IP_TOS 12
|
|
#define WINDIVERT_FILTER_FIELD_IP_LENGTH 13
|
|
#define WINDIVERT_FILTER_FIELD_IP_ID 14
|
|
#define WINDIVERT_FILTER_FIELD_IP_DF 15
|
|
#define WINDIVERT_FILTER_FIELD_IP_MF 16
|
|
#define WINDIVERT_FILTER_FIELD_IP_FRAGOFF 17
|
|
#define WINDIVERT_FILTER_FIELD_IP_TTL 18
|
|
#define WINDIVERT_FILTER_FIELD_IP_PROTOCOL 19
|
|
#define WINDIVERT_FILTER_FIELD_IP_CHECKSUM 20
|
|
#define WINDIVERT_FILTER_FIELD_IP_SRCADDR 21
|
|
#define WINDIVERT_FILTER_FIELD_IP_DSTADDR 22
|
|
#define WINDIVERT_FILTER_FIELD_IPV6_TRAFFICCLASS 23
|
|
#define WINDIVERT_FILTER_FIELD_IPV6_FLOWLABEL 24
|
|
#define WINDIVERT_FILTER_FIELD_IPV6_LENGTH 25
|
|
#define WINDIVERT_FILTER_FIELD_IPV6_NEXTHDR 26
|
|
#define WINDIVERT_FILTER_FIELD_IPV6_HOPLIMIT 27
|
|
#define WINDIVERT_FILTER_FIELD_IPV6_SRCADDR 28
|
|
#define WINDIVERT_FILTER_FIELD_IPV6_DSTADDR 29
|
|
#define WINDIVERT_FILTER_FIELD_ICMP_TYPE 30
|
|
#define WINDIVERT_FILTER_FIELD_ICMP_CODE 31
|
|
#define WINDIVERT_FILTER_FIELD_ICMP_CHECKSUM 32
|
|
#define WINDIVERT_FILTER_FIELD_ICMP_BODY 33
|
|
#define WINDIVERT_FILTER_FIELD_ICMPV6_TYPE 34
|
|
#define WINDIVERT_FILTER_FIELD_ICMPV6_CODE 35
|
|
#define WINDIVERT_FILTER_FIELD_ICMPV6_CHECKSUM 36
|
|
#define WINDIVERT_FILTER_FIELD_ICMPV6_BODY 37
|
|
#define WINDIVERT_FILTER_FIELD_TCP_SRCPORT 38
|
|
#define WINDIVERT_FILTER_FIELD_TCP_DSTPORT 39
|
|
#define WINDIVERT_FILTER_FIELD_TCP_SEQNUM 40
|
|
#define WINDIVERT_FILTER_FIELD_TCP_ACKNUM 41
|
|
#define WINDIVERT_FILTER_FIELD_TCP_HDRLENGTH 42
|
|
#define WINDIVERT_FILTER_FIELD_TCP_URG 43
|
|
#define WINDIVERT_FILTER_FIELD_TCP_ACK 44
|
|
#define WINDIVERT_FILTER_FIELD_TCP_PSH 45
|
|
#define WINDIVERT_FILTER_FIELD_TCP_RST 46
|
|
#define WINDIVERT_FILTER_FIELD_TCP_SYN 47
|
|
#define WINDIVERT_FILTER_FIELD_TCP_FIN 48
|
|
#define WINDIVERT_FILTER_FIELD_TCP_WINDOW 49
|
|
#define WINDIVERT_FILTER_FIELD_TCP_CHECKSUM 50
|
|
#define WINDIVERT_FILTER_FIELD_TCP_URGPTR 51
|
|
#define WINDIVERT_FILTER_FIELD_TCP_PAYLOADLENGTH 52
|
|
#define WINDIVERT_FILTER_FIELD_UDP_SRCPORT 53
|
|
#define WINDIVERT_FILTER_FIELD_UDP_DSTPORT 54
|
|
#define WINDIVERT_FILTER_FIELD_UDP_LENGTH 55
|
|
#define WINDIVERT_FILTER_FIELD_UDP_CHECKSUM 56
|
|
#define WINDIVERT_FILTER_FIELD_UDP_PAYLOADLENGTH 57
|
|
#define WINDIVERT_FILTER_FIELD_LOOPBACK 58
|
|
#define WINDIVERT_FILTER_FIELD_IMPOSTOR 59
|
|
#define WINDIVERT_FILTER_FIELD_PROCESSID 60
|
|
#define WINDIVERT_FILTER_FIELD_LOCALADDR 61
|
|
#define WINDIVERT_FILTER_FIELD_REMOTEADDR 62
|
|
#define WINDIVERT_FILTER_FIELD_LOCALPORT 63
|
|
#define WINDIVERT_FILTER_FIELD_REMOTEPORT 64
|
|
#define WINDIVERT_FILTER_FIELD_PROTOCOL 65
|
|
#define WINDIVERT_FILTER_FIELD_LAYER 66
|
|
#define WINDIVERT_FILTER_FIELD_EVENT 67
|
|
#define WINDIVERT_FILTER_FIELD_MAX \
|
|
WINDIVERT_FILTER_FIELD_EVENT
|
|
|
|
#define WINDIVERT_FILTER_TEST_EQ 0
|
|
#define WINDIVERT_FILTER_TEST_NEQ 1
|
|
#define WINDIVERT_FILTER_TEST_LT 2
|
|
#define WINDIVERT_FILTER_TEST_LEQ 3
|
|
#define WINDIVERT_FILTER_TEST_GT 4
|
|
#define WINDIVERT_FILTER_TEST_GEQ 5
|
|
#define WINDIVERT_FILTER_TEST_MAX WINDIVERT_FILTER_TEST_GEQ
|
|
|
|
#define WINDIVERT_FILTER_MAXLEN (0xFF-2)
|
|
|
|
#define WINDIVERT_FILTER_RESULT_ACCEPT (WINDIVERT_FILTER_MAXLEN+1)
|
|
#define WINDIVERT_FILTER_RESULT_REJECT (WINDIVERT_FILTER_MAXLEN+2)
|
|
|
|
/*
|
|
* WinDivert layers.
|
|
*/
|
|
#define WINDIVERT_LAYER_DEFAULT WINDIVERT_LAYER_NETWORK
|
|
#define WINDIVERT_LAYER_MAX WINDIVERT_LAYER_REFLECT
|
|
|
|
/*
|
|
* WinDivert events.
|
|
*/
|
|
#define WINDIVERT_EVENT_MAX 0x8000
|
|
|
|
/*
|
|
* WinDivert flags.
|
|
*/
|
|
#define WINDIVERT_FLAGS_ALL \
|
|
(WINDIVERT_FLAG_SNIFF | WINDIVERT_FLAG_DROP | WINDIVERT_FLAG_RECV_ONLY |\
|
|
WINDIVERT_FLAG_SEND_ONLY | WINDIVERT_FLAG_RECV_PARTIAL | \
|
|
WINDIVERT_FLAG_NO_INSTALL)
|
|
#define WINDIVERT_FLAGS_EXCLUDE(flags, flag1, flag2) \
|
|
(((flags) & ((flag1) | (flag2))) != ((flag1) | (flag2)))
|
|
#define WINDIVERT_FLAGS_VALID(flags) \
|
|
((((flags) & ~WINDIVERT_FLAGS_ALL) == 0) && \
|
|
WINDIVERT_FLAGS_EXCLUDE(flags, WINDIVERT_FLAG_SNIFF, \
|
|
WINDIVERT_FLAG_DROP) && \
|
|
WINDIVERT_FLAGS_EXCLUDE(flags, WINDIVERT_FLAG_RECV_ONLY, \
|
|
WINDIVERT_FLAG_SEND_ONLY) && \
|
|
WINDIVERT_FLAGS_EXCLUDE(flags, WINDIVERT_FLAG_RECV_PARTIAL, \
|
|
WINDIVERT_FLAG_SEND_ONLY))
|
|
|
|
/*
|
|
* WinDivert filter flags.
|
|
*/
|
|
#define WINDIVERT_FILTER_FLAG_INBOUND 0x0000000000000001ull
|
|
#define WINDIVERT_FILTER_FLAG_OUTBOUND 0x0000000000000002ull
|
|
#define WINDIVERT_FILTER_FLAG_IP 0x0000000000000004ull
|
|
#define WINDIVERT_FILTER_FLAG_IPV6 0x0000000000000008ull
|
|
|
|
#define WINDIVERT_FILTER_FLAGS_ALL \
|
|
(WINDIVERT_FILTER_FLAG_INBOUND | WINDIVERT_FILTER_FLAG_OUTBOUND | \
|
|
WINDIVERT_FILTER_FLAG_IP | WINDIVERT_FILTER_FLAG_IPV6)
|
|
|
|
/*
|
|
* WinDivert priorities.
|
|
*/
|
|
#define WINDIVERT_PRIORITY_DEFAULT 0
|
|
#define WINDIVERT_PRIORITY_MAX 30000
|
|
#define WINDIVERT_PRIORITY_MIN -WINDIVERT_PRIORITY_MAX
|
|
|
|
/*
|
|
* WinDivert parameters.
|
|
*/
|
|
#define WINDIVERT_PARAM_QUEUE_LEN_DEFAULT 2048
|
|
#define WINDIVERT_PARAM_QUEUE_LEN_MIN 16
|
|
#define WINDIVERT_PARAM_QUEUE_LEN_MAX 16384
|
|
#define WINDIVERT_PARAM_QUEUE_TIME_DEFAULT 1000 // 1s
|
|
#define WINDIVERT_PARAM_QUEUE_TIME_MIN 20 // 20ms
|
|
#define WINDIVERT_PARAM_QUEUE_TIME_MAX 8000 // 8s
|
|
#define WINDIVERT_PARAM_QUEUE_SIZE_MIN 65535 // 64KB
|
|
#define WINDIVERT_PARAM_QUEUE_SIZE_MAX 33554432 // 32MB
|
|
#define WINDIVERT_PARAM_QUEUE_SIZE_DEFAULT 4194304 // 4MB
|
|
|
|
/*
|
|
* WinDivert batch limits.
|
|
*/
|
|
#define WINDIVERT_BATCH_MAX 0xFF
|
|
|
|
/*
|
|
* WinDivert message definitions.
|
|
*/
|
|
#pragma pack(push, 1)
|
|
typedef struct
|
|
{
|
|
UINT64 arg1; // argument #1
|
|
UINT64 arg2; // argument #2
|
|
} WINDIVERT_IOCTL, *PWINDIVERT_IOCTL;
|
|
|
|
/*
|
|
* WinDivert IOCTL structures.
|
|
*/
|
|
typedef struct
|
|
{
|
|
UINT8 field; // WINDIVERT_FILTER_FIELD_*
|
|
UINT8 test; // WINDIVERT_FILTER_TEST_*
|
|
UINT8 success; // Success continuation.
|
|
UINT8 failure; // Fail continuation.
|
|
UINT32 arg[4]; // Argument.
|
|
} WINDIVERT_FILTER, *PWINDIVERT_FILTER;
|
|
#pragma pack(pop)
|
|
|
|
/*
|
|
* IOCTL codes.
|
|
*/
|
|
#define IOCTL_WINDIVERT_RECV \
|
|
CTL_CODE(FILE_DEVICE_NETWORK, 0x918, METHOD_OUT_DIRECT, FILE_ANY_ACCESS)
|
|
#define IOCTL_WINDIVERT_SEND \
|
|
CTL_CODE(FILE_DEVICE_NETWORK, 0x919, METHOD_IN_DIRECT, FILE_ANY_ACCESS)
|
|
#define IOCTL_WINDIVERT_START_FILTER \
|
|
CTL_CODE(FILE_DEVICE_NETWORK, 0x91A, METHOD_IN_DIRECT, FILE_ANY_ACCESS)
|
|
#define IOCTL_WINDIVERT_SET_LAYER \
|
|
CTL_CODE(FILE_DEVICE_NETWORK, 0x91B, METHOD_IN_DIRECT, FILE_ANY_ACCESS)
|
|
#define IOCTL_WINDIVERT_SET_PRIORITY \
|
|
CTL_CODE(FILE_DEVICE_NETWORK, 0x91C, METHOD_IN_DIRECT, FILE_ANY_ACCESS)
|
|
#define IOCTL_WINDIVERT_SET_FLAGS \
|
|
CTL_CODE(FILE_DEVICE_NETWORK, 0x91D, METHOD_IN_DIRECT, FILE_ANY_ACCESS)
|
|
#define IOCTL_WINDIVERT_SET_PARAM \
|
|
CTL_CODE(FILE_DEVICE_NETWORK, 0x91E, METHOD_IN_DIRECT, FILE_ANY_ACCESS)
|
|
#define IOCTL_WINDIVERT_GET_PARAM \
|
|
CTL_CODE(FILE_DEVICE_NETWORK, 0x91F, METHOD_OUT_DIRECT, FILE_ANY_ACCESS)
|
|
|
|
#endif /* __WINDIVERT_DEVICE_H */
|