HEX
Server: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/8.4.25
System: Windows NT DESKTOP-4TAV2RJ 10.0 build 19045 (Windows 10) AMD64
User: fred (0)
PHP: 8.4.25
Disabled: NONE
Upload Files
File: C:/Windows/System32/drivers/zh-TW/PktMon.sys.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$5�<�q�R�q�R�q�R�e���p�R�e�P�p�R�Richq�R�PEL�!X

�I@ �U8.rdata�@@.rsrc` V@@t��
T88t��$��8.rdata8x.rdata$zzzdbg �.rsrc$01� o.rsrc$02 R��l��
�)n��H�HF�H
�
X�X]t����(�@�X�p��������� ���!�P�pr��MUI���y�cuě~S��'�6$�O=�hЭ����E�b\�����MUIzh-TWPP�PP
�
���P���F�F��P�P��Z�Z�ld�d�x�x�����p������������������`���� ���������d�;�l��PP/���

nj
�

<!q�l	�eQ PktMon E��Rz_0/���: %10

4CQ�N %1�^��W %20
T1z %3�%4

,l\'`: CQ�N %1�%2 = %3

,l\'`: CQ�N %1�%2 = %4

�xSd��xehV: CQ�N %1�8�eQ�eT = %2�8�eQ\S %3�8�eQMOCQD} %4�8��Q�eT = %5�8��Q\S %6�8��QMOCQD} %7

�Amϑ�xehV: CQ�N %1����} %2����}X�%R�x %3�8�eQ�eT = %4�8�eQ\S-N %5�8�eQMOCQD} %6�8��Q�eT = %7�8��Q\S %8�8��QMOCQD} %9

�\S�{x�hV %1�
T1z %2�MAC-1 %3�MAC-2 %4�EtherType %5�VlanId %6�IP-1 %7�IP-2 %8��
�TS�[ %9�Port-1 %10�Port-2 %11�TCPFlags %12

dMAC �v�v0W %1�MAC �O�n %2�EtherType %3�VlanId %4�IP �v�v0W %5�IP �O�n %6��
�TS�[ %7�#��c�W�v�v0W %8�#��c�W�O�n %9�TCPFlags %10�PktGroupId %11�PktCount %12�Y�� %13��eT %14�^��W %15�CQ�N %16����} %17��{x�hV %18

�N�h: MAC �v�v0W %1�MAC �O�n %2�EtherType %3�VlanId %4�IP �v�v0W %5�IP �O�n %6��
�TS�[ %7�#��c�W�v�v0W %8�#��c�W�O�n %9�TCPFlags %10�PktGroupId %11�PktCount %12�Y�� %13��eT %14�^��W %15�CQ�N %16����} %17��{x�hV %18�DropReason %19�DropLocation %20

�PktGroupId %1�PktNumber %2�Y�� %3��eT %4�^��W %5�CQ�N %6����} %7��{x�hV %8�OriginalSize %11�LoggedSize %12

hc�h� PktGroupId %1�PktNumber %2�Y�� %3��eT %4�^��W %5�CQ�N %6��{x� %8�DropReason %9�DropLocation %10�OriginalSize %11�LoggedSize %12

|TcpIpChecksum %11�TcpLargeSend %12�Ieee8021Q %13�HashInfo %14�HashValue %15�VirtualSubnetInfo %16�TcpRecvSegCoalesceInfo %17�NrtNameResolutionId %18�TcpSendOffloadsSupplementalInfo %19�SwitchForwardingDetail %20�GftOffloadInfo %21�GftFlowEntryId %22�PktGroupId %1�PktCount %2�Y�� %3��eT %4�^��W %5�CQ�N %6����} %7��{x�hV %8

�xSd�: TcpIpChecksum %11�TcpLargeSend %12�Ieee8021Q %13�HashInfo %14�HashValue %15�VirtualSubnetInfo %16�TcpRecvSegCoalesceInfo %17�NrtNameResolutionId %18�TcpSendOffloadsSupplementalInfo %19�SwitchForwardingDetail %20�GftOffloadInfo %21�GftFlowEntryId %22�PktGroupId %1�PktCount %2�Y�� %3��eT %4�^��W %5�CQ�N %6����} %7��{x�hV %8�DropReason %9�DropLocation %10

��eT %1�^��W %2�CQ�N %3����} %4��{x�hV %5�OriginalSize %13�LoggedSize %14

�hc�h��eT %1�^��W %2�CQ�N %3��{x� %5�DropReason %6�DropLocation %7�OriginalSize %13�LoggedSize %14

͑��vhc�h� PktGroupId %1�PktNumber %2�Y�� %3��eT %4�^��W %5�CQ�N %6��{x� %8�DropReason %9�DropLocation %10�OriginalSize %11�LoggedSize %12

NDIS

Miniport

Filter

Protocol

VmsVmNic

 VmsMiniport

(VmsExtMiniport

(VmsProtocolNic

(NetVsc Miniport

$HTTP Protocol

Slbmux

IPSec

NetCx

IfIndex

(MiniportIfIndex

$LowerIfIndex

IfGuid

 NdisMedium

 PhysAddress

EtherType

 OptDataPath

 NdisObject

$VMSwitchName

$VmsExtIfIndex

$LowestIfIndex

IP MO@W

IpIfIndex

VSID

VLAN

@S��X�%R�x

YN*Y�}�

WiFi

MBB

!q

(W

8��Q

Rx

Tx

8�eQ

8��Q

*g�w

YN*Y�}�

WiFi

IP

HTTP

IPv4

IPv6

ARP

VLAN

LLDP

LLTD

ICMP

TCP

UDP

ICMPv6

*gc�[

!qHe�vnj�e

!qHe�v\S

nj�n
N��

�Nb�aS*g1\�}

�ZԚ�]-N�e#��}

*g�c�S

݈n�_�x-N

�]�{x�

�]�{x��v VLAN

 *g�}�c
k�v VLAN

*g�}�c
k�v MAC

1YWe�v�[hQ'`�SGR

$1YWe�v pVlan -��[

QoS n>e

IPSec n>e

$
NAQ1�P���v MAC MO@W

 1YWe�v DHCP 2�w�

1YWe�v�1uhV2�w�

 VM gQ
NAQ1�Kj�chV

 [��dP[�}�X�%R�x
N�v&{

0z�o�_���v vSwitch �^8O!jD}

@
NAQ1��N��SNP vSwitch �^�z vSwitch

MTU 
N�v&{

����SuI��

 !qHe�v VLAN <h_

 !qHe�v�v�v0W MAC

!qHe�v�O�n MAC

,{NP NB *Y\

 ��N� Storm P�6R

(�O�N�chV�ceQ ICMP ��Bl

!q�l�f�e�v�v0Wn�U

 �v�v0W NIC �]\P(u

,\S��v�v0W NIC \S�{x�
N&{

(vSwitch nj�eAm�]\P(u

,#��c�W���-��[
NAQ1�*gj��vAmϑ

PD GOR!qHe

 M��chVU��e���R
N���rKa

M��chV�]�f\P

ck(W͑-�M��chV

�P��]-Nbk

(
N/e�c�v EtherType

$Microport /���

VF *g1\�}

$Microport *g1\�}

VMBus /���

�V�YN*Y�}�\S

 !qHe�v SNAP j-�

!qHe�vYN*Y�}�^��W

\Sw��^!qHe

j-�
N#��~

�v�v0W^��W!qHe

�Nb�*g1\�}

�c�O�*g1\�}

LSO nj
�!qHe

USO nj
�!qHe

!qHe�v�ZԚ^��W

ARP j-�!qHe

0�l	g�S(u�O�p��� ID �c6e\S�v�Nb�

 1YWe�v ARP 2�w�

0!qHe�v ARP Pkt Limiter

4!qHe�v DHCP Pkt Limiter

�]\���^�d

 \��^� IP Pkt

 !qHe�v ARP �{x�hV

 1YWe�v IPv4 2�w�

 1YWe�v IPv6 2�w�

 1YWe�v MAC 2�w�

$�l	g�S(u�v�^�d�v�v0W�
��W

(�l	g�S(u�v�Uޞ�P�d�v�v0W�
��W

 �Uޞ�P�d�
��W*g1\�}

�N�chV�V|T1YWe

0!qHe�v ICMPV6 limiter

e*b Pkt hc�h

�]\��e*b

 1YWe�v NDP 2�w�

�]\���
��W

NIC �]�f\P

�O�nMO@W/���

�l	g,g_j�v�v0W

�
�TS�[!q�l#��}

#��c�W!q�l#��}

w��^/���

j-�<h_
Nck�x

�l	g�S(u�v�1u

��N��{
W

�j�ghc�h

*YY�b݈

�|q}�{t�ybk

=~�T�j�g�x/���

 g'Y�c6e_hc�h�S�V

��N���ޞP�6R

MO@W!q�l#��}

RSC \S

 g'YI��_hc�h�S�V

*gU�t�N��

�j�g8T6e

�]��N�Gr�k MTU

�]��N��}]�@Sw��^

MO@W㉐g>�Bf

MO@W㉐g1YWe

IPsec 1YWe

�^8Oj-�1YWe

$IPSNPI (u6b�zhc�h


N/e�c�vxS	�

�1u1YWe

D�l\nj�e1YWe

*g�}U�tnj�e1YWe

�]\O���k�rKa1YWe

(IPSNPI��]�O9eFO*gI��

(IPSNPI�*gc�[NNP��ޞ

$IPSNPI: ~b
N0R@S��

$IPSNPI�~b
N0R�Nb�

$IPSNPI�~b
N0RP[�Nb�

$IPSNPI: \P(u�v�Nb�

 IPSNPI�RrR1YWe

(IPSNPI��l	gYN*Y�}�j-�

$IPSNPI�*g�g�vGr�k

(IPSNPI�
N/e�c�v�Nb�^��W

(IPSNPI�LSO nj
�!qHe

(IPSNPI�USO nj
�!qHe

*g�g�vgQ�/���

�|q}�{tM�n�v-��[

x��/���

,�P^��W�v\S!q�l�N��V��O�c�S

MO@W�{
W�SP�*YY

�[teGOR

\P(u�v�Nb�

ICMP�N,�1YWe

 ICMP��]*b�e�vj-�

$ICMP�=~�T�j�g�x!qHe

ICMP��j�ghc�h

(ICMP�ck(W�bU}�V���0��c"}

(ICMP: *g�w�v^��W/�N�x

,ICMP: �]*b�e�v IP j-�

(ICMP�N�'Y�v IP j-�

 ICMP: !qU�t8^_

(ICMP�*gݑ
\/����N/����V�a

ICMP��O�n!qHe

 ICMP��Nb���sP�6R

 ICMP�_��sP�6R

ICMP: !q�1u

$ICMP��l	g&{T�v��Bl

 ICMP��}]�@S*Y\

$ICMP�!q�l�S�_D�l\nj�e

$ICMP���ޞP�6R
Nck�x

 ICMP�*g�w�vz_�x

0ICMP��O�n^� linklocal

(ICMP��]*b�e�v ND j-�

DICMP�ND x�� SourceLinkAddr !qHe

,ICMP�ND x�� MTU !qHe

HICMP�ND x�� PrefixInformation !qHe

HICMP�ND x�� RouteInformation !qHe

0ICMP�ND x�� RDNSS !qHe

0ICMP�ND x�� DNSSL !qHe

 ICMP�\SVR�g1YWe

$ICMP��vMR�v-��[
NAQ1�

$ICMP��1uhV�JT!qHe

4ICMP: �O�nMO@W�dk�Nb�
N(WTNP#�P}
N8ICMP: ͑�e\T���N�v�vjb�vjMO@W!qHe

$ICMP���0��c"}�vj!qHe

TICMP: ��0��JT!qHe - �Y�g�v�v0WMO@W�pYޞ�P��GR!q�l-��[ˊBl�v�ej,ICMP: #�P}d\MO@Wl\�e�P�Nb�

$ICMP�͑��v�V�a��Bl

<ICMP: �1uhV�JT�O�
Nl\�e[o(W�1uhVn�U�v�1uhV<ICMP: �1uhV�JT�O�
Nl\�e[o(W�1uhVn�U�v�1uhV<ICMP: �1uhV�JT�O�
Nl\�e[o(W�1uhVn�U�v�1uhV<ICMP: �1uhV�JT�O�
Nl\�e[o(W�1uhVn�U�v�1uhV$ICMP��l	g,g_j�v�v0W

ARP��O�n!qHe

ARP��vj!qHe

4ARP: DL j-�-N�v�O�nMO@Wl\�e,g_j�Nb� ARP��l	g,g_j�v�v0W

<IPSNPI�URO @S�k'Y\��N�I���Nb� MTU

@ICMP: packet was fragmented

<INET: source unspecified

HINET: destination is multicast

8INET: header is invalid

<INET: checksum is invalid

XINET: transport endpoint was not found

@INET: connected path error

<INET: session state error

<INET: receive inspection

PINET: invalid ACK in SYN_SENT state

0INET: expected SYN

0INET: received RST

`INET: received SYN while in SYN_RCVD state

@INET: simultaneous connect

,INET: PAWS failed

,INET: land attack

,INET: missed RST

DINET: outside receive window

8INET: duplicate segment

0INET: closed window

,INET: TCB removed

(INET: FIN-WAIT2

<INET: reassembly conflict

0INET: FIN received

pINET: listener received segment with invalid flags

XINET: TCB was not inserted in TCB table

xINET: TIME-WAIT TCB received RST outside receive window

�INET: TIME-WAIT TCB received segment with SYN and other flags set

TINET: packet dropped by TIME_WAIT TCB

`INET: SYN+ACK with fastopen cookie request

�INET: listener dropped SYN because SO_PAUSE_ACCEPT was set

tINET: listener dropped SYN to reduce memory pressure

8INET: accept inspection

<INET: accept redirection

8SlbMux: Parsing failure

�SluMux: First packet for the fragmented datagram is not at offset 0

�SlbMux: Failed to parse or validate the IP packet contained in the ICMP error message payload

�SlbMux: IP packet contained in the ICMP error message payload does not match any existing session

|SlbMux: Failed to find a nexthop for external hairpinning

�SlbMux: No matching static mapping exists to let the packet in

�SlbMux: Failed to acquire a reference on the nexthop object

PSlbMux: Failed to clone the packet

XSlbMux: Failed to translate the packet

@SlbMux: Hop limit exceeded

�SlbMux: Packet is larger than nexthop MTU and cannot be fragmented

XSlbMux: Unexpected route lookup failure

lSlbMux: No route to packet destination was found

\SlbMux: Failed to create a session object

�SlbMux: The interface over which the packet is to be routed is not a SLBMUX external interface

�SlbMux: The interface over which the packet is to be routed does not have a matching SLBMUX instancee

�SlbMux: SLBMUX device itself is not allowed to be an internal host at the same time

|SlbMux: Packet is routable in its own arrival compartment

�SlbMux: Packet transport protocol is not supported by SLBMUX

`SlbMux: Packet is destined to SLBMUX itself

�SlbMux: Packet destination address and port do not fall within any SLBMUX external address port range

PSlbMux: SLBMUX rejected the packet

xSlbMux: SLBMUX failed to find the Vip/Dip configuration

tSlbMux: SLBMUX failed to send the encapsulated packet

�SlbMux: SLBMUX found invalid reachability encap type for diagnostic packet

�SlbMux: SLBMUX received redirect packet as the diagnostic packet

hSlbMux: SLBMUX unable to handle redirect packet

�IPSEC: The SPI in the packet does not match a valid IPsec SA

�IPSEC: Packet was received on an IPsec SA whose lifetime has expired

�IPSEC: Packet was received on an IPsec SA that does not match the packet characteristics

lIPSEC: Packet sequence number replay check failed

�IPSEC: IPsec header and/or trailer in the packet is invalid

PIPSEC: IPsec integrity check failed

\IPSEC: IPsec dropped a clear text packet

�IPSEC: IPsec dropped an incoming ESP packet in authenticated firewall mode

pIPSEC: IPsec dropped a packet due to DoS throttling

�IPSEC: IPsec DoS Protection matched an explicit block rule

�IPSEC: IPsec DoS Protection received an IPsec specific multicast packet which is not allowed

�IPSEC: IPsec DoS Protection received an incorrectly formatted packet

pIPSEC: IPsec DoS Protection failed to look up state

IPSEC: IPsec DoS Protection failed to create state because the maximum number of entries allowed by policy has been reached

�IPSEC: IPsec DoS Protection received an IPsec negotiation packet for a keying module which is not allowed by policy

8IPSEC: IPsec DoS Protection failed to create a per internal IP rate limit queue because the maximum number of queues allowed by policy has been reached

LIPSEC: Failed to allocate memory

LIPSEC: Operation was unsuccessful

lNETCX: Failed to parse NetPacket Layout correctly

xNETCX: Failed to calculate NetBuffer software checksum

`NETCX: Queue is being stopped or destroyed

DNETCX: Invalid NetBuffer size

XNETCX: Large Send Offload (LSO) failure

dNETCX: UDP Segmentation Offload (USO) failure

\NETCX: NetBuffer bounce operation failed

FIN

SYN

RST

PSH

ACK

URG

ECE

CWR

�4VS_VERSION_INFO��
4aJ
4aJ?�StringFileInfo�040404B0LCompanyNameMicrosoft Corporation<
FileDescription\S�v��hVE��Rz_n'FileVersion10.0.19041.3636 (WinBuild.160101.0800)6InternalNamePktMon.sys�.LegalCopyright� Microsoft Corporation. All rights reserved.FOriginalFilenamePktMon.sys.muij%ProductNameMicrosoft� Windows� Operating SystemDProductVersion10.0.19041.3636DVarFileInfo$Translation�PADDINGXXPAD