nshwfp.dll.mui Windows 篩選平台 Netsh 協助程式 95440bb5aa806015a59f7292e81227e3

  1. File Info
  2. MUI

File info

File name: nshwfp.dll.mui
Size: 42496 byte
MD5: 95440bb5aa806015a59f7292e81227e3
SHA1: 664b5011eca844987fe1912a68a6f57ef10c1809
SHA256: 7c98de4de46eb9976c1843496b6538d8282c8e0f38d8c722ac575b9e9d1530a3
Operating systems: Windows 10
Extension: MUI

Translations messages and strings

If an error occurred or the following message in Chinese (Traditional) language and you cannot find a solution, than check answer in English. Table below helps to know how correctly this phrase sounds in English.

id Chinese (Traditional) English
999擷取即時診斷資訊。
 Captures real-time diagnostic information.
1000顯示 WFP 設定與狀態。
 Shows WFP configuration and state.
1001設定 WFP 診斷選項。
 Sets WFP diagnostic options.
1002控制 WFP-IPsec 事件追蹤工作階段。
 Controlling the WFP-IPsec event trace session.
1990開始互動式擷取工作階段。
Starts an interactive capture session.
1991


使用方式: capture start
[ [ cab = ] (ON | OFF) ]
[ [ traceonly = ] (ON | OFF) ]
[ [ keywords = ] (NONE | BCAST | MCAST | BCAST+MCAST) ]
[ [ file = ] ]

參數:

標記 值
cab - 可以是 ON 或 OFF。預設值是 ON。
ON 會以單一 .cab 檔案編譯檔案。
OFF 保留輸出檔案的解壓縮狀態
這適用於您自己進行疑難排解時，而不是收集資料供其他人
使用。

traceonly - 可以是 ON 或 OFF。預設值是 OFF。
ON 只會收集事件追蹤資料，進而減少輸出檔案大小。

keywords - 可以是 NONE、BCAST、MCAST 或 BCAST+MCAST。
預設值是 BCAST+MCAST。
設定工作階段使用的網路事件關鍵字。
BCAST 包含廣播事件，而 MCAST 包含多點傳送事件。若要
減少長期擷取的檔案大小，請設為 NONE。

file - 輸出檔案名稱; 預設值是 'wfpdiag.cab'。
如果 cab 選項是 ON，檔案名稱不應該包括副檔名，因為
會自動在輸出檔案中加入 .cab。

備註: 開始互動式擷取工作階段。若要停止擷取，請執行 'capture stop'。



Usage: capture start
[ [ cab = ] (ON | OFF) ]
[ [ traceonly = ] (ON | OFF) ]
[ [ keywords = ] (NONE | BCAST | MCAST | BCAST+MCAST) ]
[ [ file = ] ]

Parameters:

Tag Value
cab - Can be ON or OFF. The default is ON.
ON compiles the files in a single .cab file.
OFF leaves the output files uncompressed.
This is useful if doing your own troubleshooting,
rather than collecting data for others.

traceonly - Can be ON or OFF. The default is OFF.
ON collects only event tracing data,
which reduces the output file size.

keywords - Can be NONE, BCAST, MCAST, or BCAST+MCAST.
The default is BCAST+MCAST.
Sets the net event keywords used for the session.
BCAST includes broadcast events and MCAST includes
multicast events. To reduce the file size for long-
running captures, set to NONE.

file - Output file name. The default is 'wfpdiag.cab'.
If the cab option is ON, the file name should not
include the extension since the .cab is
automatically added to the output file.

Remarks: Starts an interactive capture session.
To stop capture, run 'capture stop'.
1992停止互動式擷取工作階段。
 Stops an interactive capture session.
1993


使用方式: capture stop


備註: 停止互動式擷取工作階段。
如果之前執行的命令是 'capture start'，則會生效。



Usage: capture stop


Remarks: Stops an interactive capture session.
Takes effect if previous command executed was 'capture start'.
2000顯示 WFP 和 IPsec 的目前狀態。
 Displays the current state of WFP and IPsec.
2001


使用方式: show state [ [ file = ] | - ]

參數:

標記 值
file - 輸出檔案名稱; 預設值是 'wfpstate.xml'。
如果這個參數設為連字符號字元 ('file = -')，則輸出只會
寫入到主控台。

備註: 顯示 WFP 和 IPsec 的目前狀態。



Usage: show state [ [ file = ] | - ]

Parameters:

Tag Value
file - Output file name. The default is 'wfpstate.xml'.
If this parameter is set to the dash character,
'file = -', the output is written only to the console.

Remarks: Displays the current state of WFP and IPsec.
2002顯示符合指定流量參數的篩選器。
 Displays filters matching the specified traffic parameters.
2003


使用方式: show filters
[ [ file = ] | - ]
[ [ protocol = ] ]
[ [ localaddr = ] ]
[ [ remoteaddr = ] ]
[ [ localport = ] ]
[ [ remoteport = ] ]
[ [ appid = ] ]
[ [ userid = ] ]
[ [ dir = ] IN | OUT ]
[ [ verbose = ] ON | OFF ]

參數:

標記 值
file - 輸出檔案名稱。預設值是 'filters.xml'。
如果這個參數設為連字符號字元 ('file = -')，則輸出只會
寫入到主控台。

protocol - IP 通訊協定。這必須是整數。

localaddr - IP 位址。'localaddr' 是本機 IP 位址，而 'remoteaddr'
remoteaddr 是遠端 IP 位址。位址可以是 IPv4 或 IPv6。如果同時
指定本機和遠端位址，則它們必須屬於相同的位址系列。

localport - 連接埠。'localport' 是本機連接埠，而 'remoteport'
remoteport 是遠端連接埠。它們必須是整數。

appid - 在本機主機上傳送或接收流量的應用程式。
這是 NT 路徑，例如
'\device\harddiskvolume1\windows\system32\ftp.exe'
或是 DOS 路徑，例如
'c:\Windows\System32\ftp.exe'
提供的路徑必須存在。

userid - 在本機主機上傳送或接收流量的使用者。userid 可以是
SID (如 'S-1-5-18') 或使用者名稱 (如
'nt authority\system')。

dir - 連線的方向。預設會同時顯示輸入和輸出流量的篩選器。

使用 IN，只會顯示輸入流量的篩選器，而 OUT 則只會顯示
輸出流量的篩選器。

verbose - 決定是否顯示所有篩選器。
可以是 ON 或 OFF。預設值是 OFF，會嘗試抑制不太可能
影響連線的相符篩選器。ON 則不會抑制任何篩選器。


備註: 顯示符合指定流量參數的篩選器。



Usage: show filters
[ [ file = ] | - ]
[ [ protocol = ] ]
[ [ localaddr = ] ]
[ [ remoteaddr = ] ]
[ [ localport = ] ]
[ [ remoteport = ] ]
[ [ appid = ] ]
[ [ userid = ] ]
[ [ dir = ] IN | OUT ]
[ [ verbose = ] ON | OFF ]

Parameters:

Tag Value
file - Output file name. The default is 'filters.xml'.
If this parameter is set to the dash character,
'file = -', the output is written only to the console.

protocol - The IP protocol. This must be an integer.

localaddr - The IP addresses. 'localaddr' is the local IP address,
remoteaddr and the 'remoteaddr' is the remote IP address.
The addresses are either IPv4 or IPv6.
If both local and remote addressses are specified,
they both must belong to the same address family.

localport - The ports. 'localport' is the local port
remoteport and 'remoteport' is the remote port.
They must be integers.

appid - The application sending or receiving the traffic
on the local host.
This either an NT path such as
'\device\harddiskvolume1\windows\system32\ftp.exe'
or a DOS path such as
'c:\Windows\System32\ftp.exe'
The supplied path must exist.

userid - The user sending or receiving the traffic
on the local host. The userid may be a SID
(such as 'S-1-5-18') or a user name (such as
'nt authority\system').

dir - The direction of the connection. By default, filters
for both inbound and outbound traffic are displayed.

Use IN to display only filters for inbound traffic
or OUT to display only filters for outbound traffic.

verbose - Determines whether to display all filters.
Can be ON or OFF. The default is OFF, which attempts
to suppress matching filters that are unlikely to
affect connectivity.
ON does not suppress any filters.


Remarks: Displays filters matching the specified traffic parameters.
2004顯示開機時間原則和篩選器。
Displays the boot-time policy and filters.
2005


使用方式: show boottimepolicy [ [ file = ] | - ]

參數:

標記 值
file - 輸出檔案名稱。預設值是 'btpol.xml'。
如果這個參數設為連字符號字元 ('file = -')，則輸出只會
寫入到主控台。

備註: 顯示開機時間原則與篩選器。



Usage: show boottimepolicy [ [ file = ] | - ]

Parameters:

Tag Value
file - Output file name. The default is 'btpol.xml'.
If this parameter is set to the dash character,
'file = -', the output is written only to the console.

Remarks: Displays the boot-time policy and filters.
2008顯示全域 WFP 選項。
 Displays the global WFP options.
2009


使用方式: show options [optionsfor = ] NETEVENTS | KEYWORDS | TXNWATCHDOG

參數:

標記 值
optionsfor - 可以是 NETEVENTS、KEYWORDS 或 TXNWATCHDOG。
NETEVENTS 顯示是否緩衝處理網路事件以進行診斷。
KEYWORDS 顯示要緩衝處理哪些網路事件以進行診斷。
TXNWATCHDOG 顯示交易看門狗事件的逾時 (以毫秒表示)。

備註: 顯示針對指定選項所設定的目前值。


Usage: show options [optionsfor = ] NETEVENTS | KEYWORDS | TXNWATCHDOG

Parameters:

Tag Value
optionsfor - Can be either NETEVENTS, KEYWORDS, or TXNWATCHDOG.
NETEVENTS shows whether network events are
buffered for diagnostics.
KEYWORDS shows which network events are
buffered for diagnostics.
TXNWATCHDOG shows the timeout in milliseconds for the
transaction watchdog event.

Remarks: Displays the current value set for the specified option.
2010顯示指定檔案的應用程式識別碼。
Displays the application ID for the specified file.
2011


使用方式: show appid [ file = ]

參數:

標記 值
file - 指定應用程式的 DOS 路徑。

備註: 顯示指定檔案的應用程式 NT 路徑。提供的路徑必須存在。



Usage: show appid [ file = ]

Parameters:

Tag Value
file - Specifies the DOS path for the application.

Remarks: Displays the application NT path for the specified file.
The supplied path must exist.
2014設定全域 WFP 選項。
 Sets the global WFP options.
2015


使用方式: set options
[ netevents = ON | OFF ]
[ [ keywords = ] NONE | BCAST | MCAST| BCAST+MCAST ]
[ [ txnwatchdog = ] ]

參數:

標記 值
netevents - 可以是 ON 或 OFF。
設定 netevents 選項。

keywords - 可以是 NONE、BCAST、MCAST 或 BCAST+MCAST。
設定 keywords 選項。預設值是 NONE。


txnwatchdog - 設定交易看門狗事件的逾時 (以毫秒表示)。這必須是整數。
若未指定值，逾時會設定為零，且會為每個交易觸發事件。

備註: 設定全域 WFP 選項。
每次執行時只能設定一個選項參數。


Usage: set options
[ netevents = ON | OFF ]
[ [ keywords = ] NONE | BCAST | MCAST| BCAST+MCAST ]
[ [ txnwatchdog = ] ]

Parameters:

Tag Value
netevents - Can be either ON or OFF.
Sets the netevents option.

keywords - Can be NONE, BCAST, MCAST, or BCAST+MCAST.
Sets the keywords option. The default is NONE.


txnwatchdog - Sets the timeout in milliseconds for the transaction
watchdog event. This must be an integer. If no value
is specified, the timeout is set to zero, and an
event will be triggered for every transaction.

Remarks: Sets the global WFP options.
Only one option parameter can be set per execution.
2018說明互動式擷取工作階段是否正在進行。
 Tells whether an interactive capture session is in progress.
2019


使用方式: capture status


備註: 說明互動式擷取工作階段是否正在進行。



Usage: capture status


Remarks: Tells whether an interactive capture session is in progress.
2055顯示符合流量參數的最近網路事件。
Displays recent network events matching the traffic parameters.
2064


使用方式: show netevents
[ [ file = ] | - ]
[ [ protocol = ] ]
[ [ localaddr = ] ]
[ [ remoteaddr = ] ]
[ [ localport = ] ]
[ [ remoteport = ] ]
[ [ appid = ] ]
[ [ userid = ] ]
[ [ timewindow = ] ]

參數:

標籤 值
file - 輸出檔案名稱。預設值是 'netevents.xml'。
如果這個參數設為連字符號字元 ('file = -')，則輸出只會
寫入到主控台。

protocol - IP 通訊協定。這必須是整數。

localaddr - IP 位址。'localaddr' 是本機 IP 位址，而 'remoteaddr'
remoteaddr 是遠端 IP 位址。位址可以是 IPv4 或 IPv6。如果同時
指定本機和遠端位址，則它們必須屬於相同的位址系列。

localport - 連接埠。'localport' 是本機連接埠，而 'remoteport'
remoteport 是遠端連接埠。它們必須是整數。

appid - 在本機主機上傳送或接收流量的應用程式。
這是 NT 路徑，例如
'\device\harddiskvolume1\windows\system32\ftp.exe'
或是 DOS 路徑，例如
'c:\Windows\System32\ftp.exe'
提供的路徑必須存在。

userid - 在本機主機上傳送或接收流量的使用者。userid 可以是
SID (如 'S-1-5-18') 或使用者名稱 (如
'nt authority\system')。

timewindow - 將輸出限制為在指定的秒數內發生的網路事件。
這必須是整數。

備註: 顯示符合指定流量參數的最近網路事件。



Usage: show netevents
[ [ file = ] | - ]
[ [ protocol = ] ]
[ [ localaddr = ] ]
[ [ remoteaddr = ] ]
[ [ localport = ] ]
[ [ remoteport = ] ]
[ [ appid = ] ]
[ [ userid = ] ]
[ [ timewindow = ] ]

Parameters:

Tag Value
file - Output file name. The default is 'netevents.xml'.
If this parameter is set to the dash character,
'file = -', the output is written only to the console.

protocol - The IP protocol. This must be an integer.

localaddr - The IP addresses. 'localaddr' is the local IP address,
remoteaddr and 'remoteaddr' is the remote IP address.
The addresses are either IPv4 or IPv6.
If both local and remote addresses are specified,
they both must belong to the same address family.

localport - The ports. 'localport' is the local port,
and 'remoteport' is the remote port.
remoteport They must be integers.

appid - The application sending or receiving the traffic
on the local host.
This either an NT path such as
'\device\harddiskvolume1\windows\system32\ftp.exe'
or a DOS path such as
'c:\Windows\System32\ftp.exe'
The supplied path must exist.

userid - The user sending or receiving the traffic
on the local host. The userid may be a SID
(such as 'S-1-5-18') or
a user name (such as 'nt authority\system').

timewindow - Limits the output to network events that occurred
within a specified number of seconds.
This must be an integer.

Remarks: Displays recent network events matching the specified traffic parameters.
2065顯示指定的安全性描述元。
Displays the specified security descriptor.
2066


使用方式: show security
[ type = ] CALLOUT|ENGINE|FILTER|IKESADB|IPSECSADB|LAYER|NETEVENTS
|PROVIDER|PROVIDERCONTEXT|SUBLAYER
[ [ guid = ]

參數:

標記 值
type - 指定要抓取的物件類型。
可以是 CALLOUT、ENGINE、FILTER、IKESADB、IPSECSADB、
LAYER、NETEVENTS、PROVIDER、PROVIDERCONTEXT 或
or SUBLAYER。

guid - 對於支援每個物件安全性描述元的物件類型，這是物件的
GUID。如果未指定，則預設為 IID_NULL，這會抓取類型
容器的安全性描述元。下列類型支援每個物件的安全性描
述元:
callout
filter
layer
provider
providercontext
sublayer

備註: 顯示指定的安全性描述元。



Usage: show security
[ type = ] CALLOUT|ENGINE|FILTER|IKESADB|IPSECSADB|LAYER|NETEVENTS
|PROVIDER|PROVIDERCONTEXT|SUBLAYER
[ [ guid = ]

Parameters:

Tag Value
type - Specifies the object type to be retrieved.
Can be CALLOUT, ENGINE, FILTER, IKESADB, IPSECSADB,
LAYER, NETEVENTS, PROVIDER, PROVIDERCONTEXT,
or SUBLAYER.

guid - For object types that support per-object security
descriptors, this is the GUID of the object. If not
specified, it defaults to IID_NULL, which retrieves
the security descriptor of the type container.
The following types support per-object security descriptors:
callout
filter
layer
provider
providercontext
sublayer

Remarks: Displays the specified security descriptor.
2075顯示 TCP/IP 堆疊和 RPC 子系統所使用的系統連接埠。
Displays system ports used by the TCP/IP Stack and the RPC sub-system.
2084


使用方式: show sysports [ [ file = ] | - ]
參數:

標記 值
file - 輸出檔案名稱。預設值是 'sysports.xml'。
如果這個參數設為連字符號字元 ('file = -')，則輸出只會
寫入到主控台。

備註: 顯示 TCP/IP 堆疊和 RPC 子系統所使用的系統連接埠。



Usage: show sysports [ [ file = ] | - ]
Parameters:

Tag Value
file - Output file name. The default is 'sysports.xml'.
If this parameter is set to the dash character,
'file = -', the output is written only to the console.

Remarks: Displays system ports used by the TCP/IP stack and the
RPC sub-system.
3000正在初始化資料收集 -- 請稍候。
Initializing data collection -- please wait.
3001只會收集事件追蹤。
Only event tracing will be collected.
3002初始化完成。請重現案例，然後執行 'capture stop'。
Initialization complete. Reproduce the scenario, then run 'capture stop'.
3003資料收集成功; 輸出 = %1!s!
 Data collection successful; output = %1!s!
3004資料收集成功; 輸出 =
%t%1
%t%2		 Data collection successful; output =
%t%1
%t%2
3005正在完成資料收集 -- 請稍候。
 Finalizing data collection -- please wait.
3006成功。
 Success.
3007至少一個 netevent 未在 ETW 工作階段期間擷取。
At least one netevent was not captured during the ETW session.
4001無法連線至 BFE; 錯誤 = %1!s!
 Unable to connect to BFE; error = %1!s!
4002無法開始 ETW 追蹤工作階段; 錯誤=%1!s!
 Unable to start an ETW trace session; error=%1!s!
4003無法使用寫入權限來開啟 XML 檔案; 錯誤=%1!s!
 Unable to open the XML file with Write access; error=%1!s!
4004無法訂閱變更通知; 錯誤=%1!s!
 Unable to subscribe to change notifications; error = %1!s!
4005無法將輸出寫入 XML 檔案; 錯誤 = %1!s!
 Unable to write output to the XML file; error = %1!s!
4006無法收集執行階段事件; 錯誤 = %1!s!
 Unable to collect run-time events; error = %1!s!
4007無法格式化追蹤檔案; 錯誤 = %1!s!
 Unable to format the trace file; error = %1!s!
4008無法建立封包檔。
 Unable to create the cabinet file.
4009無法載入 XML 文件; 錯誤 = %1!s!
 Unable to load the XML document; error = %1!s!
4010匯入檔案剖析終止於行 %1!u!，欄 %2!u!
 Import file parsing terminated at line %1!u!, column %2!u!
4011行 %2!u!，欄 %3!u! 有意外的元素 '%1'
 Unexpected element '%1' at line %2!u!, column %3!u!
4012行 %2!u!，欄 %3!u! 的元素 '%1' 中有未預期的文字。
 Unexpected text in element '%1' at line %2!u!, column %3!u!.
4013行 %2!u!，欄 %3!u! 的元素 '%1' 中有無效的文字。
 Invalid text in element '%1' at line %2!u!, column %3!u!.
4014無法讀取開機時間原則; 錯誤 = %1!s!
 Unable to read the boot-time policy; error = %1!s!
4015無法列舉網路事件; 錯誤 = %1!s!
 Unable to enumerate the network events; error = %1!s!
4016無法開啟資料收集器集合工具; 錯誤 = %1!s!
 Unable to open the data collector set; error = %1!s!
4017無法新增物件; 錯誤 = %1!s!
 Unable to add an object; error = %1!s!
4018無法刪除物件; 錯誤 = %1!s!
 Unable to delete an object; error = %1!s!
4019物件定義於行 %1!u!，欄 %2!u!
 The object is defined at line %1!u!, column %2!u!
4020擷取已在進行中。
 Capture is already in progress.
4021沒有擷取正在進行。
 No capture is in progress.
4022IKEEXT 記錄檔不存在。請確定已啟用 IKEEXT 追蹤。
 The IKEEXT log file does not exist. Ensure that IKEEXT tracing is enabled.
4028無法從 ETW 查詢遺失的 netevent。
 Unable to query lost netevents from ETW.
5000刪除所有的 IPsec DoS Protection 設定。
 Deletes all IPsec DoS Protection configuration.
5001
reset

刪除所有的 IPsec DoS Protection 設定。

參數: 無
reset

Deletes all IPsec DoS Protection configuration.

Parameters: none

5100新增 IPsec DoS Protection 設定。
 Adds IPsec DoS Protection configuration.
5101新增 IPsec DoS Protection 介面設定。
 Adds IPsec DoS Protection interface configuration.
5102
add interface
[name=]
[type=]public|internal

新增 IPsec DoS Protection 介面設定。

參數:

標記 值
name - 介面好記的名稱。

type - 介面類型。
public: 介面面向公用網路。
internal: 介面面向內部網路。

範例:

add interface "Local Area Connection" public
add interface name="Local Area Connection" type=public
add interface
[name=]
[type=]public|internal

Adds IPsec DoS Protection interface configuration.

Parameters:

Tag Value
name - Friendly name of the interface.

type - Interface type.
public: Interface faces public network.
internal: Interface faces internal network.

Examples:

add interface "Local Area Connection" public
add interface name="Local Area Connection" type=public

5110新增 IPsec DoS Protection 金鑰處理模組設定。
 Adds IPsec DoS Protection keying module configuration.
5111
add allowedkeyingmodule
[name=]ikev1|ikev2|authip
[[internalprefix=][/]]

新增 IPsec DoS Protection 允許的金鑰處理模組設定。

參數:

標記 值
name - 允許的 IPsec 金鑰處理模組名稱。
ikev1: IKEv1 金鑰處理模組。
ikev2: IKEv2 金鑰處理模組。
authip: AuthIP 金鑰處理模組。

internalprefix - 需要允許金鑰處理模組的內部主機 IPv6 位址或是子網
路 (可省略)。如果未指定，所有的內部 IPv6 位址都將允許它。

備註: AuthIP 預設會顯示在允許的金鑰處理模組清單中。

範例:

add allowedkeyingmodule ikev1
add allowedkeyingmodule name=ikev1
add allowedkeyingmodule ikev1 3ffe:401d:1f00:baa::1
add allowedkeyingmodule
[name=]ikev1|ikev2|authip
[[internalprefix=][/]]

Adds IPsec DoS Protection allowed keying module configuration.

Parameters:

Tag Value
name - Name of an IPsec keying module to allow.
ikev1: The IKEv1 keying module.
ikev2: The IKEv2 keying module.
authip: The AuthIP keying module.

internalprefix - Internal host IPv6 address or subnet for which the keying
module needs to be allowed (optional). If not specified, it
will be allowed for all internal IPv6 addresses.

Remarks: AuthIP is present in the list of allowed keying modules by default.

Examples:

add allowedkeyingmodule ikev1
add allowedkeyingmodule name=ikev1
add allowedkeyingmodule ikev1 3ffe:401d:1f00:baa::1

5120新增 IPsec DoS Protection IPv6 篩選器設定。
 Adds IPsec DoS Protection IPv6 filter configuration.
5121
add filter
[[publicprefix=][/]]
[[internalprefix=][/]]
[action=]exempt|block

新增 IPsec DoS Protection IPv6 篩選器設定。

參數:

標記 值
publicprefix - 公用主機 IPv6 位址或是子網路 (可省略)。如果未指定，
篩選器將符合所有的公用 IPv6 位址。

internalprefix - 內部主機 IPv6 位址或子網路 (可省略)。如果未指定，篩選器
將符合所有內部的 IPv6 位址。
action - 針對任何符合篩選器的流量採取行動。
exempt: 符合的流量不需要 IPsec 保護。
block: 封鎖符合的流量。
範例:

add filter publicprefix=3ffe:401d:1f00::/64 action=block
add filter
[[publicprefix=][/]]
[[internalprefix=][/]]
[action=]exempt|block

Adds IPsec DoS Protection IPv6 filter configuration.

Parameters:

Tag Value
publicprefix - Public host IPv6 address or subnet (optional). If not specified,
the filter will match all public IPv6 addresses.

internalprefix - Internal host IPv6 address or subnet (optional). If not specified,
the filter will match all internal IPv6 addresses.

action - Action to take for any traffic that matches the filter.
exempt: Don't require matching traffic to be IPsec protected.
block: Block matching traffic.

Examples:

add filter publicprefix=3ffe:401d:1f00::/64 action=block

5200刪除 IPsec DoS Protection 設定。
 Deletes IPsec DoS Protection configuration.
5201刪除 IPsec DoS Protection 介面設定。
 Deletes IPsec DoS Protection interface configuration.
5202
delete interface [name=]

刪除 IPsec DoS Protection 介面設定。

參數:

標記 值
name - 介面好記的名稱。

範例:

delete interface "Local Area Connection"
delete interface name="Local Area Connection"
delete interface [name=]

Deletes IPsec DoS Protection interface configuration.

Parameters:

Tag Value
name - Friendly name of the interface.

Examples:

delete interface "Local Area Connection"
delete interface name="Local Area Connection"

5210刪除 IPsec DoS Protection 允許的金鑰處理模組設定。
 Deletes IPsec DoS Protection allowed keying module configuration.
5211
delete allowedkeyingmodule
[name=]ikev1|ikev2|authip
[[internalprefix=][/]]

刪除 IPsec DoS Protection 允許的金鑰處理模組設定。

參數:

標記 值
name - 不允許的 IPsec 金鑰處理模組名稱。
ikev1: IKEv1 金鑰處理模組。
ikev2: IKEv2 金鑰處理模組。
authip: AuthIP 金鑰處理模組。

internalprefix - 不應允許金鑰處理模組的內部主機 IPv6 位址或子網路
(可省略)。如果未指定，所有的內部 IPv6 位址都將允許它。

範例:

delete allowedkeyingmodule ikev1
delete allowedkeyingmodule name=ikev1
delete allowedkeyingmodule ikev1 3ffe:401d:1f00:baa::1
delete allowedkeyingmodule
[name=]ikev1|ikev2|authip
[[internalprefix=][/]]

Deletes IPsec DoS Protection allowed keying module configuration.

Parameters:

Tag Value
name - Name of an IPsec keying module to disallow.
ikev1: The IKEv1 keying module.
ikev2: The IKEv2 keying module.
authip: The AuthIP keying module.

internalprefix - Internal host IPv6 address or subnet for which the keying
module should be disallowed (optional). If not specified, it
will be disallowed for all internal IPv6 addresses.

Examples:

delete allowedkeyingmodule ikev1
delete allowedkeyingmodule name=ikev1
delete allowedkeyingmodule ikev1 3ffe:401d:1f00:baa::1

5220刪除 IPsec DoS Protection IPv6 篩選器設定。
 Deletes IPsec DoS Protection IPv6 filter configuration.
5221
delete filter
[[publicprefix=][/]]
[[internalprefix=][/]]

刪除 IPsec DoS Protection IPv6 篩選器設定。

參數:

標記 值
publicprefix - 公用主機 IPv6 位址或子網路 (可省略)。這必須與使用對應
的 add 命令所指定的 publicprefix 相同。

internalprefix - 內部主機 IPv6 位址或子網路 (可省略)。這必須與使用對應
的 add 命令所指定的 internalprefix 相同。

範例:

delete filter 3ffe:401d:1f00::/64
delete filter publicprefix=3ffe:401d:1f00::/64
delete filter
[[publicprefix=][/]]
[[internalprefix=][/]]

Deletes IPsec DoS Protection IPv6 filter configuration.

Parameters:

Tag Value
publicprefix - Public host IPv6 address or subnet (optional). This must be
same as the publicprefix specified with the corresponding
add command.

internalprefix - Internal host IPv6 address or subnet (optional). This must be
same as the internalprefix specified with the corresponding
add command.

Examples:

delete filter 3ffe:401d:1f00::/64
delete filter publicprefix=3ffe:401d:1f00::/64

5300設定 IPsec DoS Protection 資訊。
 Sets IPsec DoS Protection information.
5301設定 IPsec DoS Protection DSCP 標示設定。
 Sets IPsec DoS Protection DSCP marking configuration.
5302
set dscp
[type=]ipsecauthenticated|ipsecunauthenticated|icmpv6|filtered|default
[value=]|disable

設定 IPsec DoS Protection DCSP 標示設定。

參數:

標示 值
type - 指定 DSCP 標示的輸入流量類型。
ipsecauthenticated: 驗證的 IPv6 IPsec 流量。
ipsecunauthenticated: 未驗證的 IPv6 IPsec 流量。
icmpv6: ICMPv6 流量。
filtered: 篩選器豁免的 IPv6 流量。
default: 預設封鎖的豁免的流量。

value - DCSP 值，用以在流量類別的前 6 個位元中標示，或是在對應流量的 IP 標
頭內的 TOS 欄位中標示。
: 必須是
set dscp
[type=]ipsecauthenticated|ipsecunauthenticated|icmpv6|filtered|default
[value=]|disable

Sets IPsec DoS Protection DSCP marking configuration.

Parameters:

Tag Value
type - Type of inbound traffic for which the DSCP marking is being specified.
ipsecauthenticated: Authenticated IPv6 IPsec traffic.
ipsecunauthenticated: Unauthenticated IPv6 IPsec traffic.
icmpv6: ICMPv6 traffic.
filtered: Filter exempted IPv6 traffic.
default: Default-block exempted traffic.

value - DCSP value to mark in the top 6 bits of the traffic class or TOS
field in the IP header of corresponding traffic.
: Must be
5310設定 IPsec DoS Protection 其他設定。
 Sets IPsec DoS Protection miscellaneous configuration.
5311
set miscellaneous
[[stateidletimeout=]]
[[peripratelimitidletimeout=]]
[[maxentries=]]
[[maxperipratelimitqueues=]]
[[defaultblock=]enable|disable]

設定 IPsec DoS Protection 雜項設定。

參數:

標記 值
stateidletimeout - 非使用狀態逾時 (秒)(可省略)。
: 必須是 0 和 : 必須是 0 與 : 必須是 0 與 : 必須是 0 與
set miscellaneous
[[stateidletimeout=]]
[[peripratelimitidletimeout=]]
[[maxentries=]]
[[maxperipratelimitqueues=]]
[[defaultblock=]enable|disable]

Sets IPsec DoS Protection miscellaneous configuration.

Parameters:

Tag Value
stateidletimeout - State inactivity timeout in seconds (optional).
: Must be 0 and : Must be 0 and : Must be 0 and : Must be 0 and
5320設定 IPsec DoS Protection 速率限制設定。
 Sets IPsec DoS Protection rate limit configuration.
5321
set ratelimit
[type=]ipsecauthenticated|ipsecunauthenticated|ipsecunauthenticatedperip|
icmpv6|filtered|default
[value=]|disable

設定 IPsec DoS Protection 速率限制設定。

參數:

標記 值
type - 指定速率限制的輸入流量類型。
ipsecauthenticated: 驗證的 IPv6 IPsec 流量。
預設停用的速率限制。
ipsecunauthenticated: 未驗證的 IPv6 IPsec 流量。
預設的速率限制是 102400 位元組/秒。
ipsecunauthenticatedperip: 未驗證的 IPv6 IPsec 流量的每個內部
IP 位址速率限制。
預設的速率限制是 10240 位元組/秒。
icmpv6: ICMPv6 流量。此流量類型的預設速率限
制是 10240 位元組/秒。
filtered: 篩選器豁免的 IPv6 流量。
預設速率限制是 102400 位元組/秒。
default: 預設封鎖豁免的流量。
預設速率限制是 102400 位元組/秒。

value - 速率限制值 (位元組/秒)。
: 必須是 0 且
set ratelimit
[type=]ipsecauthenticated|ipsecunauthenticated|ipsecunauthenticatedperip|
icmpv6|filtered|default
[value=]|disable

Sets IPsec DoS Protection rate limit configuration.

Parameters:

Tag Value
type - Type of inbound traffic for which the rate limit is being specified.
ipsecauthenticated: Authenticated IPv6 IPsec traffic.
Rate limit disabled by default.
ipsecunauthenticated: Unauthenticated IPv6 IPsec traffic.
Default rate limit is 102400 bytes/sec.
ipsecunauthenticatedperip: Per internal IP address rate limit for
unauthenticated IPv6 IPsec traffic.
Default rate limit is 10240 bytes/sec.
icmpv6: ICMPv6 traffic. Default rate limit for
this traffic type is 10240 bytes/sec.
filtered: Filter exempted IPv6 traffic.
Default rate limit is 102400 bytes/sec.
default: Default-block exempted traffic.
Default rate limit is 102400 bytes/sec.

value - Value of the rate limit in bytes/sec.
: Must be 0 and
5400顯示 IPsec DoS Protection 資訊。
 Displays IPsec DoS Protection information.
5401顯示 IPsec DoS Protection 介面設定。
 Displays IPsec DoS Protection interface configuration.
5402
show interface
[[type=]public|internal]

顯示 IPsec DoS Protection 介面設定。

參數:

標記 值
type - 介面類型 (可省略)。
public: 顯示面向公用網路的介面。
internal: 顯示面向內部網路的介面。

範例:

show interface
show interface public
show interface type=public
show interface
[[type=]public|internal]

Displays IPsec DoS Protection interface configuration.

Parameters:

Tag Value
type - Interface type (optional).
public: Show interfaces facing public network.
internal: Show interfaces facing internal network.

Examples:

show interface
show interface public
show interface type=public

5403公用介面: Public interfaces:
5404內部介面: Internal interfaces:
5410顯示 IPsec DoS Protection 金鑰處理模組設定。
 Displays IPsec DoS Protection keying module configuration.
5411
show allowedkeyingmodule

顯示 IPsec DoS Protection 允許的金鑰處理模組設定。

參數: 無
show allowedkeyingmodule

Displays IPsec DoS Protection allowed keying module configuration.

Parameters: none

5412允許的金鑰處理模組 (internalprefix - 金鑰處理模組清單):
 Allowed keying modules (internalprefix - keying module list):
5420顯示 IPsec DoS Protection DSCP 標示設定。
 Displays IPsec DoS Protection DSCP marking configuration.
5421
show dscp
[[type=]ipsecauthenticated|ipsecunauthenticated|icmpv6|filtered|default]

顯示 IPsec DoS Protection DSCP 標示設定。

參數:

標記 值
type - 應該顯示 DSCP 標示的輸入流量類型
(可省略)。如果未指定，將會顯示所有的類型。
ipsecauthenticated: 驗證的 IPv6 IPsec 流量。
ipsecunauthenticated: 未驗證的 IPv6 IPsec 流量。
icmpv6: ICMPv6 流量。
filtered: 篩選器豁免的 IPv6 流量。
default: 預設封鎖豁免的流量。

範例:

show dscp
show dscp ipsecunauthenticated
show dscp type=ipsecunauthenticated
show dscp
[[type=]ipsecauthenticated|ipsecunauthenticated|icmpv6|filtered|default]

Displays IPsec DoS Protection DSCP marking configuration.

Parameters:

Tag Value
type - Type of inbound traffic for which the DSCP marking should be displayed
(optional). If not specified, all types will be displayed.
ipsecauthenticated: Authenticated IPv6 IPsec traffic.
ipsecunauthenticated: Unauthenticated IPv6 IPsec traffic.
icmpv6: ICMPv6 traffic.
filtered: Filter exempted IPv6 traffic.
default: Default-block exempted traffic.

Examples:

show dscp
show dscp ipsecunauthenticated
show dscp type=ipsecunauthenticated

5422驗證的 IPv6 IPsec DSCP: %1!s!
 Authenticated IPv6 IPsec dscp: %1!s!
5423未驗證的 IPv6 IPsec DSCP: %1!s!
 Unauthenticated IPv6 IPsec dscp: %1!s!
5424ICMPv6 DSCP: %1!s!
 ICMPv6 dscp: %1!s!
5425IPv6 篩選器豁免的 DSCP: %1!s!
 IPv6 filter exempted dscp: %1!s!
5426預設封鎖豁免的 DSCP: %1!s!
 Default-block exempted dscp: %1!s!
5430顯示 IPsec DoS Protection 其他設定。
 Displays IPsec DoS Protection miscellaneous configuration.
5431
show miscellaneous

顯示 IPsec DoS Protection 其他設定。

參數: 無
show miscellaneous

Displays IPsec DoS Protection miscellaneous configuration.

Parameters: none

5432狀態閒置逾時 (秒): %1!u!
 State idle timeout (seconds): %1!u!
5433每個 IP 位址速率限制佇列閒置逾時 (秒): %1!u!
 Per IP address rate limit queue idle timeout (seconds): %1!u!
5434最大的狀態項目數目: %1!u!
 Maximum number of state entries: %1!u!
5435每個 IP 位址速率限制佇列的最大數目: %1!u!
 Maximum number of per IP address rate limit queues: %1!u!
5436預設封鎖: %1!s!
 Default block: %1!s!
5440顯示 IPsec DoS Protection 速率限制設定。
 Displays IPsec DoS Protection rate limit configuration.
5441
show ratelimit
[[type=]ipsecauthenticated|ipsecunauthenticated|ipsecunauthenticatedperip|
icmpv6|filtered|default]

顯示 IPsec DoS Protection 速率限制設定。

參數:

標記 值
type - 應該顯示速率限制的流量類型 (可省略)。
如果未指定，將會顯示所有的類型。
ipsecauthenticated: 驗證的 IPv6 IPsec 流量。
ipsecunauthenticated: 未驗證的 IPv6 IPsec 流量。
ipsecunauthenticatedperip: 未驗證的 IPv6 IPsec 流量之每個內部
IP 位址速率限制。
icmpv6: ICMPv6 流量。
filtered: 篩選器豁免的 IPv6 流量。
default: 預設封鎖豁免的流量。

範例:

show ratelimit
show ratelimit ipsecunauthenticated
show ratelimit type=ipsecunauthenticated
show ratelimit
[[type=]ipsecauthenticated|ipsecunauthenticated|ipsecunauthenticatedperip|
icmpv6|filtered|default]

Displays IPsec DoS Protection rate limit configuration.

Parameters:

Tag Value
type - Type of traffic for which the rate limit should be displayed (optional).
If not specified, all types will be displayed.
ipsecauthenticated: Authenticated IPv6 IPsec traffic.
ipsecunauthenticated: Unauthenticated IPv6 IPsec traffic.
ipsecunauthenticatedperip: Per internal IP address rate limit for
unauthenticated IPv6 IPsec traffic.
icmpv6: ICMPv6 traffic.
filtered: Filter exempted IPv6 traffic.
default: Default-block exempted traffic.

Examples:

show ratelimit
show ratelimit ipsecunauthenticated
show ratelimit type=ipsecunauthenticated

5442驗證的 IPv6 IPsec 速率限制 (位元組/秒): %1!s!
 Authenticated IPv6 IPsec rate limit (bytes/sec): %1!s!
5443未驗證的 IPv6 IPsec 速率限制 (位元組/秒): %1!s!
 Unauthenticated IPv6 IPsec rate limit (bytes/sec): %1!s!
5444未驗證的 IPv6 IPsec 每個 IP 位址速率限制 (位元組/秒): %1!s!
 Unauthenticated IPv6 IPsec per IP address rate limit (bytes/sec): %1!s!
5445ICMPv6 速率限制 (位元組/秒): %1!s!
 ICMPv6 rate limit (bytes/sec): %1!s!
5446IPv6 篩選器豁免的速率限制 (位元組/秒): %1!s!
 IPv6 filter exempted rate limit (bytes/sec): %1!s!
5447預設封鎖豁免的速率限制 (位元組/秒): %1!s!
 Default-block exempted rate limit (bytes/sec): %1!s!
5450顯示 IPsec DoS Protection 狀態項目。
 Displays IPsec DoS Protection state entries.
5451
show state
[[publicprefix=][/]]
[[internalprefix=][/]]

顯示符合指定條件的 IPsec DoS Protection 中之所有狀態項目。

參數:

標記 值
publicprefix - 公用主機 IPv6 位址或子網路 (可省略)。如果未指定，將符合
所有公用的 IPv6 位址。

internalprefix - 內部主機 IPv6 位址或子網路 (可省略)。如果未指定，將符合
所有內部的 IPv6 位址。

範例:
Show state
Show state publicprefix=3ffe::/16
Show state internalprefix=3ffe:401d:1f00:baa::1
show state
[[publicprefix=][/]]
[[internalprefix=][/]]

Displays all state entries inside IPsec DoS Protection that match specified criteria.

Parameters:

Tag Value
publicprefix - Public host IPv6 address or subnet (optional). If not
specified, all public IPv6 addresses will be matched.

internalprefix - Internal host IPv6 address or subnet (optional). If not
specified, all internal IPv6 addresses will be matched.

Examples:
Show state
Show state publicprefix=3ffe::/16
Show state internalprefix=3ffe:401d:1f00:baa::1

5452
IPsec DoS Protection 狀態項目 (有 %1!u! 個項目)
----------------------------------------------------------------------------
IPsec DoS Protection state entries (There are %1!u! entries)
----------------------------------------------------------------------------
5453公用主機 IPv6 位址: %1!s!
 Public host IPv6 address: %1!s!
5454內部主機 IPv6 位址: %1!s!
 Internal host IPv6 address: %1!s!
5455此狀態允許的輸入 IPv6 IPsec 封包總數: %1!I64u!
 Total inbound IPv6 IPsec packets allowed on this state: %1!I64u!
5456此狀態允許的輸出 IPv6 IPsec 封包總數: %1!I64u!
 Total outbound IPv6 IPsec packets allowed on this state: %1!I64u!
5457自從狀態建立經過的時間 (秒): %1!u!
 Time elapsed since state creation (seconds): %1!u!
5460顯示 IPsec DoS Protection 統計資料。
 Displays IPsec DoS Protection statistics.
5461
show statistics

顯示 IPsec DoS Protection 統計資料。

參數: 無
show statistics

Displays IPsec DoS Protection statistics.

Parameters: none

5462建立的狀態項目總數: %1!I64u!
 Total state entries created: %1!I64u!
5463目前的狀態項目: %1!I64u!
 Current state entries: %1!I64u!
5464目前每個 IP 位址速率限制佇列: %1!I64u!
 Current per IP address rate limit queues: %1!I64u!
5465輸入允許的未驗證 IPv6 IPsec 封包總數: %1!I64u!
 Total inbound allowed unauthenticated IPv6 IPsec packets: %1!I64u!
5466因為速率限制而捨棄之輸入未驗證的 IPv6 IPsec 封包總數: %1!I64u!
 Total inbound unauthenticated IPv6 IPsec packets discarded due to rate limit: %1!I64u!
5467因為每個 IP 位址速率限制而捨棄之輸入未驗證的 IPv6 IPsec 封包總數: %1!I64u!
 Total inbound unauthenticated IPv6 IPsec packets discarded due to per IP address rate limit: %1!I64u!
5468因為其他理由而捨棄之輸入未驗證的 IPv6 IPsec 封包總數: %1!I64u!
 Total inbound unauthenticated IPv6 IPsec packets discarded due to other reasons: %1!I64u!
5469輸入允許的已驗證 IPv6 IPsec 封包總數: %1!I64u!
 Total inbound allowed authenticated IPv6 IPsec packets: %1!I64u!
5470因為速率限制而捨棄之輸入已驗證的 IPv6 IPsec 封包總數: %1!I64u!
 Total inbound authenticated IPv6 IPsec packets discarded due to rate limit: %1!I64u!
5471因為其他原因而捨棄之輸入已驗證的 IPv6 IPsec 封包總數: %1!I64u!
 Total inbound authenticated IPv6 IPsec packets discarded due to other reasons: %1!I64u!
5472輸入已允許的 ICMPv6 封包總數: %1!I64u!
 Total inbound allowed ICMPv6 packets: %1!I64u!
5473因為速率限制而捨棄之輸入 ICMPv6 封包總數: %1!I64u!
 Total inbound ICMPv6 packets discarded due to rate limit: %1!I64u!
5474輸入允許的篩選器豁免的 IPv6 封包總數: %1!I64u!
 Total inbound allowed filter exempted IPv6 packets: %1!I64u!
5475因為速率限制而捨棄之輸入篩選器豁免的 IPv6 封包總數: %1!I64u!
 Total inbound filter exempted IPv6 packets discarded due to rate limit: %1!I64u!
5476輸入篩選器封鎖的 IPv6 封包總數: %1!I64u!
 Total inbound filter blocked IPv6 packets: %1!I64u!
5477輸入允許的預設封鎖豁免的封包總數: %1!I64u!
 Total inbound allowed default-block exempted packets: %1!I64u!
5478因為速率限制而捨棄之輸入預設封鎖豁免的封包總數: %1!I64u!
 Total inbound default-block exempted packets discarded due to rate limit: %1!I64u!
5479輸入預設封鎖捨棄的封包總數: %1!I64u!
 Total inbound default-block discarded packets: %1!I64u!
5480顯示 IPsec DoS Protection IPv6 篩選器設定。
 Displays IPsec DoS Protection IPv6 filter configuration.
5481
show filter

顯示 IPsec DoS Protection IPv6 篩選器設定。

參數: 無
show filter

Displays IPsec DoS Protection IPv6 filter configuration.

Parameters: none

5482IPv6 篩選器 (publicprefix internalprefix - action): IPv6 filters (publicprefix internalprefix - action):
5490顯示 IPsec DoS Protection 設定、統計資料與狀態項目。
 Displays IPsec DoS Protection configuration, statistics and state entries.
5491
show all

顯示 IPsec DoS Protection 設定、統計資料與狀態項目。

參數: 無
show all

Displays IPsec DoS Protection configuration, statistics and state entries.

Parameters: none

5492
IPsec DoS Protection 設定參數
----------------------------------------------------------------------------
IPsec DoS Protection configuration parameters
----------------------------------------------------------------------------
5493
IPsec DoS Protection 統計資料
----------------------------------------------------------------------------
IPsec DoS Protection statistics
----------------------------------------------------------------------------
5500

EXIF

File Name:nshwfp.dll.mui
Directory:%WINDIR%\WinSxS\amd64_microsoft-windows-n..-security.resources_31bf3856ad364e35_10.0.15063.0_zh-tw_c2cc4ade61f4f736\
File Size:42 kB
File Permissions:rw-rw-rw-
File Type:Win32 DLL
File Type Extension:dll
MIME Type:application/octet-stream
Machine Type:Intel 386 or later, and compatibles
Time Stamp:0000:00:00 00:00:00
PE Type:PE32
Linker Version:14.10
Code Size:0
Initialized Data Size:41984
Uninitialized Data Size:0
Entry Point:0x0000
OS Version:10.0
Image Version:10.0
Subsystem Version:6.0
Subsystem:Windows GUI
File Version Number:10.0.15063.0
Product Version Number:10.0.15063.0
File Flags Mask:0x003f
File Flags:(none)
File OS:Windows NT 32-bit
Object File Type:Dynamic link library
File Subtype:0
Language Code:Chinese (Traditional)
Character Set:Unicode
Company Name:Microsoft Corporation
File Description:Windows 篩選平台 Netsh 協助程式
File Version:10.0.15063.0 (WinBuild.160101.0800)
Internal Name:nshwfp.dll
Legal Copyright:© Microsoft Corporation. All rights reserved.
Original File Name:nshwfp.dll.mui
Product Name:Microsoft® Windows® Operating System
Product Version:10.0.15063.0
Directory:%WINDIR%\WinSxS\wow64_microsoft-windows-n..-security.resources_31bf3856ad364e35_10.0.15063.0_zh-tw_cd20f5309655b931\

What is nshwfp.dll.mui?

nshwfp.dll.mui is Multilingual User Interface resource file that contain Chinese (Traditional) language for file nshwfp.dll (Windows 篩選平台 Netsh 協助程式).

File version info

File Description:Windows 篩選平台 Netsh 協助程式
File Version:10.0.15063.0 (WinBuild.160101.0800)
Company Name:Microsoft Corporation
Internal Name:nshwfp.dll
Legal Copyright:© Microsoft Corporation. All rights reserved.
Original Filename:nshwfp.dll.mui
Product Name:Microsoft® Windows® Operating System
Product Version:10.0.15063.0
Translation:0x404, 1200