The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.
Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/
This is not specifically "kernel-mode-only" related, but I am hoping there are some networking experts out here to help out with this question...
What causes invalid entries in the ARP cache? Also, why would they not be removed through an 'arp -d' command?
I have a root-enumerated NDIS 6 miniport that seems to run fine. For our testing purposes, I install 2 instances on my system. During our tests, I see 4 ARP requests from Adapter A and an ARP reply from adapter B, and then after a few seconds, this pattern repeats. When I look at the ARP cache, indeed, the ARP request was never resolved for that interface, and that entry remains invalid.
Any idea why an ARP request would never get resolved?
Thanks in advance!
|Upcoming OSR Seminars|
|OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!|
|Writing WDF Drivers||7 Dec 2020||LIVE ONLINE|
|Internals & Software Drivers||25 Jan 2021||LIVE ONLINE|
|Developing Minifilters||8 March 2021||LIVE ONLINE|