windivert produce two close event for every udp socket close operation on windows 11 ,but work as intended on windows 10 .

basil00 / WinDivert

WinDivert: Windows Packet Divert

https://reqrypt.org/windivert.html

Other

2.56k stars 512 forks source link

windivert produce two close event for every udp socket close operation on windows 11 ,but work as intended on windows 10 . #350

Closed iouvxz closed 7 months ago

iouvxz commented 12 months ago

I was using windows 11 22H2, and socketdump.exe "event == CLOSE and udp"

basil00 commented 7 months ago

The SOCKET_CLOSE event could be indicated twice: once for ipv4 and once more for ipv6. It may depend if an ipv4/ipv6 packet was observed during testing. I think this is probably what happened.