About NDIS

NTDEV
1

Hi

I have to check the IP address and the port number, source and dest both,
in a particular packet. I think I would have to use the NdisQueryPacket
and NdisQueryBuffer to get the necessary packet details. But I want to
know how exactly can I get the IP address and port address out of the
buffer. What are the bytes which represent them. Is there any other way
out??..for example using “Private” structure for the packet.

Looking forward to some insights.
Thank you
Arijit

2

As for finding the IP, you can look at the Extended Passthru(search Google
or Yahoo). It is a perfect example for checking the IP Address. As for
port, I imagine it’s not too far off from that.

From: “Arijit Bhattacharyya”
Reply-To: “Windows System Software Devs Interest List”
To: “Windows System Software Devs Interest List”
Subject: [ntdev] About NDIS

Hi

I have to check the IP address and the port number, source and dest both,
in a particular packet. I think I would have to use the NdisQueryPacket
and NdisQueryBuffer to get the necessary packet details. But I want to
know how exactly can I get the IP address and port address out of the
buffer. What are the bytes which represent them. Is there any other way
out??..for example using “Private” structure for the packet.

Looking forward to some insights.
Thank you
Arijit

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

3

The NDIS.com site has some information that may be helpful. See teh “NDIS
Packet Discussion” at:

http://www.ndis.com/papers/default.htm

Good luck,

Thomas F. Divine
http://www.rawether.net

“Arijit Bhattacharyya” wrote in message
news:xxxxx@ntdev…
Hi

I have to check the IP address and the port number, source and dest both,
in a particular packet. I think I would have to use the NdisQueryPacket
and NdisQueryBuffer to get the necessary packet details. But I want to
know how exactly can I get the IP address and port address out of the
buffer. What are the bytes which represent them. Is there any other way
out??..for example using “Private” structure for the packet.

Looking forward to some insights.
Thank you
Arijit

4

The IP header layout is described in RFC 793.

From NDIS’s point of view, it is “data”, located in the first buffer.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

----- Original Message -----
From: “Arijit Bhattacharyya”
To: “Windows System Software Devs Interest List”
Sent: Monday, August 23, 2004 8:10 PM
Subject: [ntdev] About NDIS

> Hi
>
> I have to check the IP address and the port number, source and dest both,
> in a particular packet. I think I would have to use the NdisQueryPacket
> and NdisQueryBuffer to get the necessary packet details. But I want to
> know how exactly can I get the IP address and port address out of the
> buffer. What are the bytes which represent them. Is there any other way
> out??..for example using “Private” structure for the packet.
>
> Looking forward to some insights.
> Thank you
> Arijit
>
> —
> Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>