I am developing an intermediate for the purpose of adding the failover functionality in the network. My initial task is to open two physical NICs and capture the packets in the Protocol driver's receive handler. I am facing an issue where after setting the packet filter, NDIS is not calling the receive handler function where I get the packets received by the NIC. In wireshark, I see some arp packets are received by the NIC. There is one workaround I found If I disable and re-enable the adapters NDIS is calling the receive handler.
Note:- I am not initializing any mini ports here.
I would like to know why is it so,
1. Opened the adapter
2. Set the packet filter with the value 0x0F which includes (unicast, multicast, broadcast)
It looks like you're new here. If you want to get involved, click one of these buttons!
|Upcoming OSR Seminars|
|Developing Minifilters||29 July 2019||OSR Seminar Space|
|Writing WDF Drivers||23 Sept 2019||OSR Seminar Space|
|Kernel Debugging||21 Oct 2019||OSR Seminar Space|
|Internals & Software Drivers||18 Nov 2019||Dulles, VA|