So I'm writting a lightweight filter driver and I need it to be able to parse frames and positively identify IPV4/IPV6 packet types.
I was able to get it working pretty well on simulated Ethernet on a VM, and I started to look into how to implement it for Wifi and other media types.
However when I attached to a Wifi Adapter, I was surprised to learn that I am actually attaching to Medium803_2 which is Ethernet ? So I went down the rabbit hole of figuring out what the hell does UpperRange, LowerRange, FilterMediaTypes and MediumType means, and the more I tried to read about them the more confused I got.
NDIS docs are really unclear what all of these means (for a person that had nothing to do with Ndis previously).
Can I rely on all Wifi adapters I attach to being Medium803_2 and giving me Ethernet frames instead of Wifi frames ?
What about other types of network adapters, will those also be Ethernetmedium ? Will they also give me ethernet frames?
What the hell are those "Wan Miniport" things I get to attach to ?
Can someone explain how all these mediums stackup and how that translates to what frames I need to parse in NET_BUFFER packets?
It looks like you're new here. If you want to get involved, click one of these buttons!
|Upcoming OSR Seminars|
|OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!||Kernel Debugging||30 Mar 2020||OSR Seminar Space|
|Developing Minifilters||20 Apr 2020||LIVE ONLINE|
|Writing WDF Drivers||11 May 2020||LIVE ONLINE|
|Internals & Software Drivers||28 Sept 2020||Dulles, VA|