Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/maojianwei/windows_wfp_ipv6_inbound_outbound_traffic_process

Windows WFP baseline: IPv6 Inbound and Outbound Traffic Process, same as Linux Netfilter hooks.
https://github.com/maojianwei/windows_wfp_ipv6_inbound_outbound_traffic_process

netfilter wfp windows windows10

Last synced: 6 days ago
JSON representation

Windows WFP baseline: IPv6 Inbound and Outbound Traffic Process, same as Linux Netfilter hooks.

Host: GitHub
URL: https://github.com/maojianwei/windows_wfp_ipv6_inbound_outbound_traffic_process
Owner: MaoJianwei
License: apache-2.0
Created: 2022-07-17T12:24:02.000Z (over 2 years ago)
Default Branch: master
Last Pushed: 2022-07-18T17:24:38.000Z (over 2 years ago)
Last Synced: 2024-10-12T17:27:26.945Z (about 1 month ago)
Topics: netfilter, wfp, windows, windows10
Language: C
Homepage:
Size: 24.8 MB
Stars: 0
Watchers: 3
Forks: 0
Open Issues: 0
Metadata Files:
- Readme: README.md
- License: LICENSE

Awesome Lists containing this project

README

# Windows_WFP_IPv6_Inbound_Outbound_Traffic_Process
Windows WFP baseline: IPv6 Inbound and Outbound Traffic Process, same as Linux Netfilter hooks.

## Demo 1: Init, Register callout & filter, Capture IPv6 inbound packets

![https://raw.githubusercontent.com/MaoJianwei/Windows_WFP_IPv6_Inbound_Outbound_Traffic_Process/master/screenshots/init-register-callout-filter---capture-packets.png](https://raw.githubusercontent.com/MaoJianwei/Windows_WFP_IPv6_Inbound_Outbound_Traffic_Process/master/screenshots/init-register-callout-filter---capture-packets.png)

## Demo 2: Unregister callout & filter

![https://raw.githubusercontent.com/MaoJianwei/Windows_WFP_IPv6_Inbound_Outbound_Traffic_Process/master/screenshots/unregister.png](https://raw.githubusercontent.com/MaoJianwei/Windows_WFP_IPv6_Inbound_Outbound_Traffic_Process/master/screenshots/unregister.png)

## Demo 3: Capture packets at the Inbound and Outbound paths

![https://raw.githubusercontent.com/MaoJianwei/Windows_WFP_IPv6_Inbound_Outbound_Traffic_Process/master/screenshots/inbound-outbound-all-ready.png](https://raw.githubusercontent.com/MaoJianwei/Windows_WFP_IPv6_Inbound_Outbound_Traffic_Process/master/screenshots/inbound-outbound-all-ready.png)

## Debug via Network:

create a soft symlink:

"C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\windbg.exe" -k net:port=50520,key=HBCHM3CO4ACY.VHLDUEMESHXF.9PRHGXXO9DF.I9MYY1CRQHBB