Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.

RE: Re: [ntdev] NdisSendNetBufferLists Windows 8.1 Mux

Jeffrey_Tippet_[MSFT]Jeffrey_Tippet_[MSFT] Member - All Emails Posts: 541
> So why not manage and migrate *all* bindings (including LWFs) in that operation?

NetCfg won’t let you remove WFP_Lower, if I recall correctly. The INetCfgBindingPath::Enable call will appear to succeed, but not actually remove it. This and nwifi are hardcoded, the first for security and the second because MUX drivers designed for XP would get horribly confused if they blindly removed nwifi.

WFP_Lower doesn’t even look at the datapath, by default. Perhaps you’ve installed some third party software that includes a WFP callout? If you look at !ndiskd.filter on a default OS configuration, you can see that the filter’s datapath is in “bypass mode”, which means that NDIS doesn’t even let the filter see the packets. If WFP_Lower is dropping packets, then somehow your system is not in that default configuration.

0: kd> !ndiskd.filter ffffe00123ea9c70


Microsoft Virtual Ethernet Adapter (NDIS 6.30)-WFP Native MAC Layer LightWeight Filter-0000

State Running
Datapath Bypass mode
Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Upcoming OSR Seminars
Developing Minifilters 29 July 2019 OSR Seminar Space
Writing WDF Drivers 23 Sept 2019 OSR Seminar Space
Kernel Debugging 21 Oct 2019 OSR Seminar Space
Internals & Software Drivers 18 Nov 2019 Dulles, VA