driver

Jan 20, 2026

Changes in this version

type PerFlowData — windows/amd64

+ Tls_cipher_suite uint16

Nov 3, 2025

Changes in this version

+ const ALPNProtocolHTTP11 — windows/amd64

+ const ALPNProtocolHTTP2 — windows/amd64

+ const ClassificationClassified — windows/amd64

+ const ClassificationRequestHTTP2 — windows/amd64

+ const ClassificationRequestHTTPDelete — windows/amd64

+ const ClassificationRequestHTTPGet — windows/amd64

+ const ClassificationRequestHTTPHead — windows/amd64

+ const ClassificationRequestHTTPLast — windows/amd64

+ const ClassificationRequestHTTPOptions — windows/amd64

+ const ClassificationRequestHTTPPatch — windows/amd64

+ const ClassificationRequestHTTPPost — windows/amd64

+ const ClassificationRequestHTTPPut — windows/amd64

+ const ClassificationRequestHTTPUnknown — windows/amd64

+ const ClassificationRequestTLS — windows/amd64

+ const ClassificationRequestUnclassified — windows/amd64

+ const ClassificationResponseHTTP — windows/amd64

+ const ClassificationResponseTLS — windows/amd64

+ const ClassificationResponseUnclassified — windows/amd64

+ const ClassificationSettingsTypeSize — windows/amd64

+ const ClassificationUnableInsufficientData — windows/amd64

+ const ClassificationUnclassified — windows/amd64

+ const ClassificationUnknown — windows/amd64

+ const DirectionInbound — windows/amd64

+ const DirectionOutbound — windows/amd64

+ const EnableClassifyIOCTL — windows/amd64

+ const EnableHttpIOCTL — windows/amd64

+ const FilterDefinitionSize — windows/amd64

+ const FilterPacketHeaderSize — windows/amd64

+ const FlowClosedMask — windows/amd64

+ const FlowDirectionBits — windows/amd64

+ const FlowDirectionInbound — windows/amd64

+ const FlowDirectionMask — windows/amd64

+ const FlowDirectionOutbound — windows/amd64

+ const FlushPendingHttpTxnsIOCTL — windows/amd64

+ const GetClosedFlowsIOCTL — windows/amd64

+ const GetFlowsIOCTL — windows/amd64

+ const GetOpenFlowsIOCTL — windows/amd64

+ const GetStatsIOCTL — windows/amd64

+ const HttpSettingsTypeSize — windows/amd64

+ const HttpTransactionTypeSize — windows/amd64

+ const LayerTransport — windows/amd64

+ const PerFlowDataSize — windows/amd64

+ const SetClosedFlowsLimitIOCTL — windows/amd64

+ const SetDataFilterIOCTL — windows/amd64

+ const SetFlowFilterIOCTL — windows/amd64

+ const SetMaxClosedFlowsIOCTL — windows/amd64

+ const SetMaxOpenFlowsIOCTL — windows/amd64

+ const Signature — windows/amd64

+ const StatsSize — windows/amd64

+ const TCPFlowEstablishedMask — windows/amd64

+ const TcpStatusEstablished — windows/amd64

+ var DdAPIVersionBuf = makeDDAPIVersionBuffer(Signature) — windows/amd64

+ var ErrDriverNotInitialized = errors.New("driver has not been initialized") — windows/amd64

+ var HandleTelemetry = struct{ ... } — windows/amd64

+ func ForceStop() error — windows/amd64

+ func Init() error — windows/amd64

+ func IsNeeded() bool — windows/amd64

+ func Start() error — windows/amd64

+ func Stop() error — windows/amd64

+ type ClassificationSettings struct — windows/amd64

+ Enabled uint64

+ type ConnTupleType struct — windows/amd64

+ Family uint16

+ LocalAddr [16]byte

+ LocalPort uint16

+ Pad uint16

+ RemoteAddr [16]byte

+ RemotePort uint16

+ type ConnectionStatus uint32 — windows/amd64

+ const ConnectionStatusACKRST

+ const ConnectionStatusAttempted

+ const ConnectionStatusEstablished

+ const ConnectionStatusRecvRst

+ const ConnectionStatusSentRst

+ const ConnectionStatusTimeout

+ const ConnectionStatusUnknown

+ type FilterAddress struct — windows/amd64

+ Af uint64

+ Mask uint64

+ V4_address [4]uint8

+ V4_padding [4]uint8

+ V6_address [16]uint8

+ type FilterDefinition struct — windows/amd64

+ Af uint64

+ Direction uint64

+ Discard uint64

+ FilterLayer uint64

+ FilterVersion uint64

+ InterfaceIndex uint64

+ LocalAddress FilterAddress

+ LocalPort uint64

+ Protocol uint64

+ RemoteAddress FilterAddress

+ RemotePort uint64

+ Size uint64

+ type FilterPacketHeader struct — windows/amd64

+ Af uint64

+ Direction uint64

+ FilterId uint64

+ FilterVersion uint64

+ OwnerPid uint64

+ PktSize uint64

+ SkippedSinceLast uint64

+ Sz uint64

+ Timestamp uint64

+ type FlowStats struct — windows/amd64

+ Classify_multiple_request int64

+ Classify_multiple_response int64

+ Classify_response_no_request int64

+ Classify_with_no_direction int64

+ Closed_table_adds int64

+ Closed_table_removes int64

+ No_state_at_ale_auth_connect int64

+ No_state_at_ale_auth_recv int64

+ No_state_at_ale_endpoint_closure int64

+ No_state_at_ale_flow_established int64

+ No_state_at_inbound_transport int64

+ No_state_at_outbound_transport int64

+ Num_flow_alloc_skipped_max_open_exceeded int64

+ Num_flow_closed_dropped_max_exceeded int64

+ Num_flow_closed_structures int64

+ Num_flow_collisions int64

+ Num_flow_structures int64

+ Num_flows_missed_max_no_handle_exceeded int64

+ Num_flows_no_handle int64

+ Num_packets_after_flow_closed int64

+ Open_table_adds int64

+ Open_table_removes int64

+ Peak_num_flow_closed_structures int64

+ Peak_num_flow_structures int64

+ Peak_num_flows_no_handle int64

+ type Handle interface — windows/amd64

+ CancelIoEx func(ol *windows.Overlapped) error

+ Close func() error

+ DeviceIoControl func(ioControlCode uint32, inBuffer *byte, inBufferSize uint32, outBuffer *byte, ...) (err error)

+ GetWindowsHandle func() windows.Handle

+ ReadFile func(p []byte, bytesRead *uint32, ol *windows.Overlapped) error

+ RefreshStats func()

+ func NewHandle(flags uint32, handleType HandleType, _ telemetryComp.Component) (Handle, error)

+ type HandleType string — windows/amd64

+ const DataHandle

+ const FlowHandle

+ const StatsHandle

+ type HttpConfigurationSettings struct — windows/amd64

+ EnableAutoETWExclusion uint16

+ MaxRequestFragment uint16

+ MaxTransactions uint64

+ NotificationThreshold uint64

+ type HttpMethodType uint32 — windows/amd64

+ type HttpStats struct — windows/amd64

+ Flows_ignored_as_etw int64

+ Ndis_buffer_non_contiguous int64

+ Txn_batched_on_read int64

+ Txn_zero_latency int64

+ Txns_captured int64

+ Txns_skipped_max_exceeded int64

+ type HttpTransactionType struct — windows/amd64

+ MaxRequestFragment uint16

+ Pad [6]uint8

+ RequestFragment *uint8

+ RequestMethod uint32

+ RequestStarted uint64

+ ResponseLastSeen uint64

+ ResponseStatusCode uint16

+ SzRequestFragment uint16

+ Tup ConnTupleType

+ type PerFlowData struct — windows/amd64

+ AddressFamily uint16

+ ClassificationStatus uint16

+ ClassifyRequest uint16

+ ClassifyResponse uint16

+ Flags uint32

+ FlowCookie uint64

+ FlowHandle uint64

+ HttpUpgradeToH2Accepted uint8

+ HttpUpgradeToH2Requested uint8

+ LocalAddress [16]byte

+ LocalPort uint16

+ MonotonicRecvBytes uint64

+ MonotonicSentBytes uint64

+ PacketsIn uint64

+ PacketsOut uint64

+ ProcessId uint64

+ Protocol uint16

+ Protocol_u [36]byte

+ RemoteAddress [16]byte

+ RemotePort uint16

+ Timestamp uint64

+ Tls_alpn_chosen uint64

+ Tls_alpn_requested uint64

+ Tls_version_chosen uint16

+ Tls_versions_offered uint16

+ TransportBytesIn uint64

+ TransportBytesOut uint64

+ func (f PerFlowData) TCPFlow() *TCPFlowData

+ func (f PerFlowData) UDPFlow() *UDPFlowData

+ type RealDriverHandle struct — windows/amd64

+ Handle windows.Handle

+ func (dh *RealDriverHandle) CancelIoEx(ol *windows.Overlapped) error

+ func (dh *RealDriverHandle) Close() error

+ func (dh *RealDriverHandle) DeviceIoControl(ioControlCode uint32, inBuffer *byte, inBufferSize uint32, outBuffer *byte, ...) (err error)

+ func (dh *RealDriverHandle) GetWindowsHandle() windows.Handle

+ func (dh *RealDriverHandle) ReadFile(p []byte, bytesRead *uint32, ol *windows.Overlapped) error

+ func (dh *RealDriverHandle) RefreshStats()

+ type Stats struct — windows/amd64

+ Flow_stats FlowStats

+ Http_stats HttpStats

+ Transport_stats TransportStats

+ type TCPFlowData struct — windows/amd64

+ ConnectionStatus uint32

+ IRTT uint64

+ RetransmitCount uint64

+ RttVariance uint64

+ SRTT uint64

+ type TcpConnectionStatus uint32 — windows/amd64

+ type TransportStats struct — windows/amd64

+ Calls_cancelled int64

+ Calls_completed int64

+ Calls_requested int64

+ Packets_skipped int64

+ type UDPFlowData struct — windows/amd64

+ Reserved uint64