Hi, I've registered a callout at FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4 to get the process-path of the application being the sink or source of the flow. Now I would like to know if the flow uses tcp or udp as a
transport protocol, too. I know that I can register two callouts, one for tcp and the other for udp connections, with the filtercondition. For udp: fwpcConditions[0].fieldKey = FWPM_...