From 76424950e373d3b04ac3dd13019151bfba3e8423 Mon Sep 17 00:00:00 2001
From: sumuel <samuel@yakubos.org>
Date: Mon, 17 Aug 2026 20:44:55 +0000
Subject: Add the files

---
 src/detection/netio/netio_windows.c | 71 +++++++++++++++++++++++++++++++++++++
 1 file changed, 71 insertions(+)
 create mode 100644 src/detection/netio/netio_windows.c

(limited to 'src/detection/netio/netio_windows.c')

diff --git a/src/detection/netio/netio_windows.c b/src/detection/netio/netio_windows.c
new file mode 100644
index 0000000..3c64334
--- /dev/null
+++ b/src/detection/netio/netio_windows.c
@@ -0,0 +1,71 @@
+#include "netio.h"
+
+#include "common/netif.h"
+#include "common/mallocHelper.h"
+#include "common/windows/unicode.h"
+
+#include <ws2tcpip.h>
+#include <iphlpapi.h>
+
+const char* ffNetIOGetIoCounters(FFlist* result, FFNetIOOptions* options) {
+    IP_ADAPTER_ADDRESSES* FF_AUTO_FREE adapter_addresses = NULL;
+
+    // Multiple attempts in case interfaces change while
+    // we are in the middle of querying them.
+    DWORD adapter_addresses_buffer_size = 0;
+    for (int attempts = 0;; ++attempts) {
+        if (adapter_addresses_buffer_size) {
+            adapter_addresses = (IP_ADAPTER_ADDRESSES*) realloc(adapter_addresses, adapter_addresses_buffer_size);
+            assert(adapter_addresses);
+        }
+
+        DWORD error = GetAdaptersAddresses(
+            AF_UNSPEC,
+            GAA_FLAG_SKIP_ANYCAST | GAA_FLAG_SKIP_MULTICAST | GAA_FLAG_SKIP_DNS_SERVER,
+            NULL,
+            adapter_addresses,
+            &adapter_addresses_buffer_size);
+
+        if (error == ERROR_SUCCESS) {
+            break;
+        } else if (ERROR_BUFFER_OVERFLOW == error && attempts < 4) {
+            continue;
+        } else {
+            return "GetAdaptersAddresses() failed";
+        }
+    }
+
+    uint32_t defaultRouteIfIndex = ffNetifGetDefaultRouteV4()->ifIndex;
+
+    // Iterate through all of the adapters
+    for (IP_ADAPTER_ADDRESSES* adapter = adapter_addresses; adapter; adapter = adapter->Next) {
+        bool isDefaultRoute = adapter->IfIndex == defaultRouteIfIndex;
+        if (options->defaultRouteOnly && !isDefaultRoute) {
+            continue;
+        }
+
+        FF_STRBUF_AUTO_DESTROY name = ffStrbufCreateWS(adapter->FriendlyName);
+        if (options->namePrefix.length && !ffStrbufStartsWith(&name, &options->namePrefix)) {
+            continue;
+        }
+
+        MIB_IF_ROW2 ifRow = { .InterfaceIndex = adapter->IfIndex };
+        if (GetIfEntry2(&ifRow) == NO_ERROR) {
+            FFNetIOResult* counters = FF_LIST_ADD(FFNetIOResult, *result);
+            *counters = (FFNetIOResult) {
+                .name = ffStrbufCreateMove(&name),
+                .txBytes = ifRow.OutOctets,
+                .rxBytes = ifRow.InOctets,
+                .txPackets = (ifRow.OutUcastPkts + ifRow.OutNUcastPkts),
+                .rxPackets = (ifRow.InUcastPkts + ifRow.InNUcastPkts),
+                .rxErrors = ifRow.InErrors,
+                .txErrors = ifRow.OutErrors,
+                .rxDrops = ifRow.InDiscards,
+                .txDrops = ifRow.OutDiscards,
+                .defaultRoute = isDefaultRoute,
+            };
+        }
+    }
+
+    return NULL;
+}
-- 
cgit v1.2.3