The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.
Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/
Let's say you are interested in a certain flow, and you define that flow with a 5 tuple (srcIp, srcPort, dstIp, dstPort, Protocol)
My questions are:
Let's say a flow dies in a normal way, for example the other ends a RESET ACK packet, how to get notified of this, other than parsing the packets ourselves?
How to get notified when a connection dies in a abnormal way, for example the other end loses connection due to cable problems, therefore doesn't notify our end (server).
|Upcoming OSR Seminars|
|OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!|
|Internals & Software Drivers||15 November 2021||Live, Online|
|Writing WDF Drivers||TBD||Live, Online|
|Developing Minifilters||7 February 2022||Live, Online|
|Kernel Debugging||21 March 2022||Live, Online|