Event structure for connections. More...

#include <intro_types.h>

Data Fields
INTRO_NET_AF	Family
	Address family. More...

INTRO_NET_STATE	State
	The state of the connection. More...

union {
BYTE Ipv6 [16]
	Valid only if Family is introNetAfIpv6. More...

DWORD Ipv4
	Valid only if Family is introNetAfIpv4. More...

}	LocalAddress
	Local address. More...

union {
BYTE Ipv6 [16]
	Valid only if Family is introNetAfIpv6. More...

DWORD Ipv4
	Valid only if Family is introNetAfIpv4. More...

}	RemoteAddress
	Remote address. More...

WORD	LocalPort
	Local port. More...

WORD	RemotePort
	Remote port. More...

INTRO_PROCESS	Owner
	The process that owns the connection. More...

Detailed Description

Event structure for connections.

Available only if Introcore received the INTRO_OPT_EVENT_CONNECTIONS activation flag. If process is protected with the PROC_OPT_PROT_EXPLOIT flag and an exploit attempt is detected, when the exploit alert is sent, one event of this type will be sent for every connection that the process has open.

Definition at line 2006 of file intro_types.h.

Field Documentation

◆ Family

INTRO_NET_AF _EVENT_CONNECTION_EVENT::Family

Address family.

Definition at line 2008 of file intro_types.h.

◆ Ipv4

DWORD _EVENT_CONNECTION_EVENT::Ipv4

Valid only if Family is introNetAfIpv4.

Definition at line 2015 of file intro_types.h.

◆ Ipv6

BYTE _EVENT_CONNECTION_EVENT::Ipv6[16]

Valid only if Family is introNetAfIpv6.

Definition at line 2014 of file intro_types.h.

◆ LocalAddress

union { ... } _EVENT_CONNECTION_EVENT::LocalAddress

Local address.

◆ LocalPort

WORD _EVENT_CONNECTION_EVENT::LocalPort

Local port.

Definition at line 2025 of file intro_types.h.

◆ Owner

INTRO_PROCESS _EVENT_CONNECTION_EVENT::Owner

The process that owns the connection.

Definition at line 2028 of file intro_types.h.

◆ RemoteAddress

union { ... } _EVENT_CONNECTION_EVENT::RemoteAddress

Remote address.

◆ RemotePort

WORD _EVENT_CONNECTION_EVENT::RemotePort

Remote port.

Definition at line 2026 of file intro_types.h.

◆ State

INTRO_NET_STATE _EVENT_CONNECTION_EVENT::State

The state of the connection.

Definition at line 2009 of file intro_types.h.

The documentation for this struct was generated from the following file:

include/public/intro_types.h

Data Fields