Best option for packet filtering

NTDEV
1

Hi,

Could someone point the pros and cons of using the following drivers
for packet filtering ?!

  • the ip device
  • the ip filter device

Tks in advance.

2

One small point to consider is that you won’t see packets in either of these
locations - at least not the Ethernet headers.

Thomas F. Divine

“Fabio Arrebola” wrote in message news:xxxxx@ntdev…
Hi,

Could someone point the pros and cons of using the following drivers
for packet filtering ?!
- the ip device
- the ip filter device

Tks in advance.

3

Hi,

Tks Thomas, but I’m not planning to handle data link layer stuff …
just filtering transport and network layer protocols.

Tks in advance.

4

Hi Fabio,

Have a look at:

  1. TDI Filter Driver
  2. Ndis Intermediate Filter driver

Beyers

On 9/15/05, Fabio Arrebola wrote:
>
> Hi,
>
> Tks Thomas, but I’m not planning to handle data link layer stuff …
> just filtering transport and network layer protocols.
>
> Tks in advance.
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>

5

Hi,

Tks for your reply Beyers, but I’m already aware of the techniques you
have listed (TDI and NDIS).
I just want to know which is the best option (if possible doing a
comparison … like pros & cons), using the driver \Device\Ip or
the driver \Device\IPFILTERDRIVER ?!

Tks in advance.