AW: Network adapter disappear after long test with my filter driver

My filter driver uses the “FilterOidRequest“ function from the PassThru WDK sample without any changes.
OID requests (mainly OID request type == NdisRequestQueryStatistics).
Since I am using the PassThru sample from the WDK, I don’t know if the adapter is in the promiscuous mode. Where can I check this?

Von: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] Im Auftrag von Paul
Gesendet: Mittwoch, 13. Januar 2016 16:40
An: Windows System Software Devs Interest List
Betreff: Re: [ntdev] Network adapter disappear after long test with my filter driver

Have you verified you are handling all Oid requests (if any) properly? Are you putting the adapter into promiscuous mode?

On Wed, Jan 13, 2016 at 9:49 AM, > wrote:
Hello,

I actually develop a NDIS filter driver for shaping the outgoing traffic to certain rules.
The traffic shaper works fine as long as I perform some short time tests using iperf or similar tools. But running long-time tests (sending a huge amount of traffic using iperf, approx 30-45 minutes) I experience the following issue:
Within the Windows task manager network tab no network adapters are shown. The same holds for running ipconfig.
Nevertheless, all network interfaces are still shown in Control Panel\Network and Internet\Network Connections.

Uninstalling the filter driver does not solve this issue. Finally after rebooting the PC, the network interfaces/adapters are shown again.

I have no idea what’s the reason for this issue? How does Windows internally query for the network adapters (ipconfig, task manager)?

I am not sure if the following information is useful but…:
My filter driver manages a list of all filter instances. I also added an IOCTL to enumerate all network interfaces and additional information to each interface by issuing various additional IOCTL calls. This still works fine…

Does anyone has an idea what could be the cause of this issue or how to debug it?

Thanks in advance!


NTDEV is sponsored by OSR

Visit the list online at: http:

MONTHLY seminars on crash dump analysis, WDF, Windows internals and software drivers!
Details at http:

To unsubscribe, visit the List Server section of OSR Online at http:

— NTDEV is sponsored by OSR Visit the list online at: MONTHLY seminars on crash dump analysis, WDF, Windows internals and software drivers! Details at To unsubscribe, visit the List Server section of OSR Online at</http:></http:></http:>