(1) WinDivert will now reference the PROCESS that opened the handle, and will not deref until the handle is closed & all corresponding REFLECT events have been completed. This means the OPEN REFLECT event will always return a valid PID. (2) The packet queue size now also accounts for internal overheads.