I have a TDI Firewall, and it’s setup to filter \Device\Tcp and a few
others… On windows 2000, it works fine, but when installed on Windows
XP, it says it can’t find \Device\Tcp(the first device it looks for). Am I
missing something here? Is there a different syntax for XP?
I appologize if this is already in the list somewhere, but this is stressing
me out to the point where if it’s there, I’m just not looking for it
properly.
Thanks for all your help, it’s much appreciated.
Andrew
Obvious question: when your driver is loaded, is does \device\tcp
exist? Does the output of
!object \device
Show your device? Also, does the lm command list tcpip.sys as loaded?
d
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Andrew Nielsen
Sent: Saturday, March 26, 2005 4:55 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] \Device\Tcp
I have a TDI Firewall, and it’s setup to filter \Device\Tcp and a few
others… On windows 2000, it works fine, but when installed on
Windows
XP, it says it can’t find \Device\Tcp(the first device it looks for).
Am I
missing something here? Is there a different syntax for XP?
I appologize if this is already in the list somewhere, but this is
stressing
me out to the point where if it’s there, I’m just not looking for it
properly.
Thanks for all your help, it’s much appreciated.
Andrew
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@windows.microsoft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
The only debugger I use is SoftIce, and I’m not entirely sure how to use
those commands(since I do debugging with one computer only). But, the
Symbolic Link Viewer it comes with doesn’t list \Device\Tcp… then again,
it doesn’t even list it on this computer and I know it’s running.
Is there any other way I’d be able to figure that out?
Andrew
-----Original Message-----
From: “Doron Holan”
Reply-To: “Windows System Software Devs Interest List”
To: “Windows System Software Devs Interest List”
Subject: RE: [ntdev] \Device\Tcp
Obvious question: when your driver is loaded, is does \device\tcp
exist? Does the output of
!object \device
Show your device? Also, does the lm command list tcpip.sys as loaded?
d
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Andrew Nielsen
Sent: Saturday, March 26, 2005 4:55 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] \Device\Tcp
I have a TDI Firewall, and it’s setup to filter \Device\Tcp and a few
others… On windows 2000, it works fine, but when installed on
Windows
XP, it says it can’t find \Device\Tcp(the first device it looks for).
Am I
missing something here? Is there a different syntax for XP?
I appologize if this is already in the list somewhere, but this is
stressing
me out to the point where if it’s there, I’m just not looking for it
properly.
Thanks for all your help, it’s much appreciated.
Andrew
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@windows.microsoft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com
My appologies, it’s late and I didn’t think to look first… tcpip.sys is
loaded, but I’m still not sure how to check to see if \Device\Tcp exists.
It’s not a matter of load order, 'cause it was through SoftIce that I came
across this error.
Andrew
From: “Andrew Nielsen”
Reply-To: “Windows System Software Devs Interest List”
To: “Windows System Software Devs Interest List”
Subject: RE: [ntdev] \Device\Tcp
The only debugger I use is SoftIce, and I’m not entirely sure how to use
those commands(since I do debugging with one computer only). But, the
Symbolic Link Viewer it comes with doesn’t list \Device\Tcp… then again,
it doesn’t even list it on this computer and I know it’s running.
Is there any other way I’d be able to figure that out?
Andrew
-----Original Message-----
From: “Doron Holan”
Reply-To: “Windows System Software Devs Interest List”
To: “Windows System Software Devs Interest List”
Subject: RE: [ntdev] \Device\Tcp
Obvious question: when your driver is loaded, is does \device\tcp
exist? Does the output of
!object \device
Show your device? Also, does the lm command list tcpip.sys as loaded?
d
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Andrew Nielsen
Sent: Saturday, March 26, 2005 4:55 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] \Device\Tcp
I have a TDI Firewall, and it’s setup to filter \Device\Tcp and a few
others… On windows 2000, it works fine, but when installed on
Windows
XP, it says it can’t find \Device\Tcp(the first device it looks for).
Am I
missing something here? Is there a different syntax for XP?
I appologize if this is already in the list somewhere, but this is
stressing
me out to the point where if it’s there, I’m just not looking for it
properly.
Thanks for all your help, it’s much appreciated.
Andrew
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@windows.microsoft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@hotmail.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
In soft-ice do:
“device tcp” to check if \Device\Tcp exists.
“driver tcpip” to check if tcpip.sys is loaded.
Shahar
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Andrew Nielsen
Sent: Sunday, March 27, 2005 6:14 AM
To: Windows System Software Devs Interest List
Subject: RE: [ntdev] \Device\Tcp
The only debugger I use is SoftIce, and I’m not entirely sure how to use
those commands(since I do debugging with one computer only). But, the
Symbolic Link Viewer it comes with doesn’t list \Device\Tcp… then again,
it doesn’t even list it on this computer and I know it’s running.
Is there any other way I’d be able to figure that out?
Andrew
-----Original Message-----
From: “Doron Holan”
Reply-To: “Windows System Software Devs Interest List”
To: “Windows System Software Devs Interest List”
Subject: RE: [ntdev] \Device\Tcp
Obvious question: when your driver is loaded, is does \device\tcp exist?
Does the output of
!object \device
Show your device? Also, does the lm command list tcpip.sys as loaded?
d
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Andrew Nielsen
Sent: Saturday, March 26, 2005 4:55 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] \Device\Tcp
I have a TDI Firewall, and it’s setup to filter \Device\Tcp and a few
others… On windows 2000, it works fine, but when installed on
Windows
XP, it says it can’t find \Device\Tcp(the first device it looks for).
Am I
missing something here? Is there a different syntax for XP?
I appologize if this is already in the list somewhere, but this is stressing
me out to the point where if it’s there, I’m just not looking for it
properly.
Thanks for all your help, it’s much appreciated.
Andrew
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@windows.microsoft.com To
unsubscribe send a blank email to xxxxx@lists.osr.com
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@safend.com To unsubscribe
send a blank email to xxxxx@lists.osr.com
Andrew Nielsen wrote:
is loaded, but I’m still not sure how to check to see if \Device\Tcp
exists.
Try using one of the following utilities:
objdir (in the ddk lst time I checked)
GUI Object Viewer from OSR Online
http://www.osronline.com/article.cfm?article=42
DeviceTree from OSR Online:
http://www.osronline.com/article.cfm?article=97
May I respectfully suggest that, if you insist on using SoftIce (which I
do not recommend), you learn how to load kernel debugger extension DLLs.
(you CAN do it… and most of them will even work). You will find the
extra assistance they provide to be extermely useful. Consider how much
fun you will have typing !analyze -v when your system crashes.
Peter
OSR
Thanks for the advice, I’ll see what I can do.
I just got WinDbg to do a local kernel debug, and when I type “lm” tcpip.sys
isn’t listed… but when I typed !drivers, it is listed and when I used the
“drivers.exe” tool in the DDK, it’s listed there aswell. With TCP/IP
installed, shouldn’t tcpip.sys be loaded while windows is booting?
From: “Peter Viscarola (OSR)”
Reply-To: “Windows System Software Devs Interest List”
To: “Windows System Software Devs Interest List”
Subject: Re:[ntdev] \Device\Tcp
Date: Sun, 27 Mar 2005 12:05:26 -0500
Andrew Nielsen wrote:
>is loaded, but I’m still not sure how to check to see if \Device\Tcp
>exists.
Try using one of the following utilities:
1) objdir (in the ddk lst time I checked)
2) GUI Object Viewer from OSR Online
http://www.osronline.com/article.cfm?article=42
3) DeviceTree from OSR Online:
http://www.osronline.com/article.cfm?article=97
May I respectfully suggest that, if you insist on using SoftIce (which I do
not recommend), you learn how to load kernel debugger extension DLLs. (you
CAN do it… and most of them will even work). You will find the extra
assistance they provide to be extermely useful. Consider how much fun you
will have typing !analyze -v when your system crashes.
Peter
OSR
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@hotmail.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
You must be using an old version of the debugger, since “!drivers” is no
longer supported.
Try typing “.reload” and THEN doing an “lm” and you should see it, since
all of these tools are using the same information source.
Regards,
Tony
Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Andrew Nielsen
Sent: Sunday, March 27, 2005 3:46 PM
To: ntdev redirect
Subject: Re:[ntdev] \Device\Tcp
Thanks for the advice, I’ll see what I can do.
I just got WinDbg to do a local kernel debug, and when I type “lm”
tcpip.sys
isn’t listed… but when I typed !drivers, it is listed and when I used
the
“drivers.exe” tool in the DDK, it’s listed there aswell. With TCP/IP
installed, shouldn’t tcpip.sys be loaded while windows is booting?
From: “Peter Viscarola (OSR)”
Reply-To: “Windows System Software Devs Interest List”
To: “Windows System Software Devs Interest List”
Subject: Re:[ntdev] \Device\Tcp
Date: Sun, 27 Mar 2005 12:05:26 -0500
Andrew Nielsen wrote:
>is loaded, but I’m still not sure how to check to see if \Device\Tcp
>exists.
Try using one of the following utilities:
1) objdir (in the ddk lst time I checked)
2) GUI Object Viewer from OSR Online
http://www.osronline.com/article.cfm?article=42
3) DeviceTree from OSR Online:
http://www.osronline.com/article.cfm?article=97
May I respectfully suggest that, if you insist on using SoftIce (which I
do
not recommend), you learn how to load kernel debugger extension DLLs.
(you
CAN do it… and most of them will even work). You will find the extra
assistance they provide to be extermely useful. Consider how much fun
you
will have typing !analyze -v when your system crashes.
Peter
OSR
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@hotmail.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
Well, tcpip is listed after I typed “.reload”… So, what am I missing
here…?
Andrew
From: “Tony Mason”
Reply-To: “Windows System Software Devs Interest List”
To: “Windows System Software Devs Interest List”
Subject: RE: [ntdev] \Device\Tcp
Date: Sun, 27 Mar 2005 15:53:48 -0500
You must be using an old version of the debugger, since “!drivers” is no
longer supported.
Try typing “.reload” and THEN doing an “lm” and you should see it, since
all of these tools are using the same information source.
Regards,
Tony
Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Andrew Nielsen
Sent: Sunday, March 27, 2005 3:46 PM
To: ntdev redirect
Subject: Re:[ntdev] \Device\Tcp
Thanks for the advice, I’ll see what I can do.
I just got WinDbg to do a local kernel debug, and when I type “lm”
tcpip.sys
isn’t listed… but when I typed !drivers, it is listed and when I used
the
“drivers.exe” tool in the DDK, it’s listed there aswell. With TCP/IP
installed, shouldn’t tcpip.sys be loaded while windows is booting?
From: “Peter Viscarola (OSR)”
Reply-To: “Windows System Software Devs Interest List”
To: “Windows System Software Devs Interest List”
Subject: Re:[ntdev] \Device\Tcp
Date: Sun, 27 Mar 2005 12:05:26 -0500
Andrew Nielsen wrote:
>is loaded, but I’m still not sure how to check to see if \Device\Tcp
>exists.
Try using one of the following utilities:
1) objdir (in the ddk lst time I checked)
2) GUI Object Viewer from OSR Online
http://www.osronline.com/article.cfm?article=42
3) DeviceTree from OSR Online:
http://www.osronline.com/article.cfm?article=97
May I respectfully suggest that, if you insist on using SoftIce (which I
do
not recommend), you learn how to load kernel debugger extension DLLs.
(you
CAN do it… and most of them will even work). You will find the extra
assistance they provide to be extermely useful. Consider how much fun
you
will have typing !analyze -v when your system crashes.
Peter
OSR
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@hotmail.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com
Andrew Nielsen wrote:
Well, tcpip is listed after I typed “.reload”… So, what am I missing
here…?
You’re down a rathole, and missing whether or not the device object
named previously (\device\tcp) is present.
Please see my previous suggestions. You will the have the answer
within, oh, two minutes.
To be perfectly honest, I find it sorta scary that a kernel dev doesn’t
know how to determine if a device object of a given name exists at any
given point in time in the system. Sorta like somebody driving a car not
knowing how to read a street sign. You may get where you need to, but…
Peter
OSR
Peter Viscarola wrote:
“To be perfectly honest, I find it sorta scary that a kernel dev doesn’t
know how to determine if a device object of a given name exists at any given
point in time in the system. Sorta like somebody driving a car not knowing
how to read a street sign. You may get where you need to, but…”
Speaking metaphorically, I may not know how to read the street signs… but
is there something wrong with knowing how many streets to go and whether or
not to turn left or right?
Either way, I’m learning how to do this… and what better way to learn how
to read street signs, than with someone in the passanger seat teaching you
as you go? I always figured, with in reason, that’s what Forums and
Mailinglists and so on were used for…
From: “Peter Viscarola (OSR)”
Reply-To: “Windows System Software Devs Interest List”
To: “Windows System Software Devs Interest List”
Subject: Re:[ntdev] \Device\Tcp
Date: Sun, 27 Mar 2005 18:38:57 -0500
Andrew Nielsen wrote:
>Well, tcpip is listed after I typed “.reload”… So, what am I missing
>here…?
>
You’re down a rathole, and missing whether or not the device object named
previously (\device\tcp) is present.
Please see my previous suggestions. You will the have the answer within,
oh, two minutes.
To be perfectly honest, I find it sorta scary that a kernel dev doesn’t know
how to determine if a device object of a given name exists at any given
point in time in the system. Sorta like somebody driving a car not knowing
how to read a street sign. You may get where you need to, but…
Peter
OSR
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@hotmail.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
As someone pointed out, the command for SoftICE is “driver” or
“device”. Quite simple. If you don’t have the book, just type
“help” and both commands will appear under the group “Display
System Information”. No big deal, and it tells you right there
and then, in one line, inside the debugger.
Neither Objdir, nor the GUI Object Viewer, nor DeviceTree, help
much if the target machine is stopped and you want to find a
driver or a device while you’re single stepping through code.
Note, Windbg is a two machine system, so, it’ll be nice to find
a remote object directory utility, that runs on a host system
and dumps the frigs of the target.
Alberto.
----- Original Message -----
From: “Peter Viscarola (OSR)”
Newsgroups: ntdev
To: “Windows System Software Devs Interest List”
Sent: Sunday, March 27, 2005 12:05 PM
Subject: Re:[ntdev] \Device\Tcp
> Andrew Nielsen wrote:
>> is loaded, but I’m still not sure how to check to see if
>> \Device\Tcp exists.
>
> Try using one of the following utilities:
>
> 1) objdir (in the ddk lst time I checked)
>
> 2) GUI Object Viewer from OSR Online
> http://www.osronline.com/article.cfm?article=42
>
> 3) DeviceTree from OSR Online:
> http://www.osronline.com/article.cfm?article=97
>
> May I respectfully suggest that, if you insist on using
> SoftIce (which I do not recommend), you learn how to load
> kernel debugger extension DLLs. (you CAN do it… and most of
> them will even work). You will find the extra assistance they
> provide to be extermely useful. Consider how much fun you
> will have typing !analyze -v when your system crashes.
>
> Peter
> OSR
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@ieee.org
> To unsubscribe send a blank email to
> xxxxx@lists.osr.com
Alberto Moreira wrote:
Neither Objdir, nor the GUI Object Viewer, nor DeviceTree, help much if
the target machine is stopped and you want to find a driver or a device
while you’re single stepping through code.
We’re not talking about that case here, though, right?
Note, Windbg is a two machine
system, so, it’ll be nice to find a remote object directory utility,
that runs on a host system and dumps the frigs of the target.
That’s called a kernel debugger extension, Alberto. And they already
exist and work with SoftICE. Well, they work most of the time.
Peter
OSR
> “drivers.exe” tool in the DDK, it’s listed there aswell. With TCP/IP
installed, shouldn’t tcpip.sys be loaded while windows is booting?
Try to use TdiRegisterPnPHandlers, this will allow you to receive notifications
on TCPIP load and on IP addresses arrival/removal.
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com
It’s not clear to me what’s the specific case. I’m just pointing
out that in real-world debugging situations the target’s often
stopped, so, whatever’s of use in debugging must either run
remotely from the host or it must be independent of the OS
services on the target. Also, a remote utility is quite
different from a debugger extension in that I may want to be
able to run it without having the debugger installed on the
target.
Alberto.
----- Original Message -----
From: “Peter Viscarola (OSR)”
Newsgroups: ntdev
To: “Windows System Software Devs Interest List”
Sent: Sunday, March 27, 2005 8:03 PM
Subject: Re:[ntdev] \Device\Tcp
> Alberto Moreira wrote:
>>
>> Neither Objdir, nor the GUI Object Viewer, nor DeviceTree,
>> help much if the target machine is stopped and you want to
>> find a driver or a device while you’re single stepping
>> through code.
>
> We’re not talking about that case here, though, right?
>
>> Note, Windbg is a two machine system, so, it’ll be nice to
>> find a remote object directory utility, that runs on a host
>> system and dumps the frigs of the target.
>>
>
> That’s called a kernel debugger extension, Alberto. And they
> already exist and work with SoftICE. Well, they work most of
> the time.
>
> Peter
> OSR
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@ieee.org
> To unsubscribe send a blank email to
> xxxxx@lists.osr.com
Actually, the system isn’t stopped when the error occurs. The driver just
unloads itself, and that’s that. The reason I came here for help, is
because I figured that any system with TCP/IP installed would have
\Device\Tcp… But, so far on 2 XP Test Machines, the same error has
occured.
As Maxim S. Shatskih Suggested, I’m going to try TdiRegisterTnTHandlers…
but, is there anything else I should know…? In every 2K system I’ve
tested it on, this error hasn’t come up… just on XP.
Thanks
Andrew
From: “Alberto Moreira”
Reply-To: “Windows System Software Devs Interest List”
To: “Windows System Software Devs Interest List”
Subject: Re: Re:[ntdev] \Device\Tcp
Date: Mon, 28 Mar 2005 10:09:56 -0500
It’s not clear to me what’s the specific case. I’m just pointing out that in
real-world debugging situations the target’s often stopped, so, whatever’s
of use in debugging must either run remotely from the host or it must be
independent of the OS services on the target. Also, a remote utility is
quite different from a debugger extension in that I may want to be able to
run it without having the debugger installed on the target.
Alberto.
----- Original Message ----- From: “Peter Viscarola (OSR)”
Newsgroups: ntdev
To: “Windows System Software Devs Interest List”
Sent: Sunday, March 27, 2005 8:03 PM
Subject: Re:[ntdev] \Device\Tcp
>Alberto Moreira wrote:
>>
>>Neither Objdir, nor the GUI Object Viewer, nor DeviceTree, help much if
>>the target machine is stopped and you want to find a driver or a device
>>while you’re single stepping through code.
>
>We’re not talking about that case here, though, right?
>
>>Note, Windbg is a two machine system, so, it’ll be nice to find a remote
>>object directory utility, that runs on a host system and dumps the frigs
>>of the target.
>>
>
>That’s called a kernel debugger extension, Alberto. And they already exist
>and work with SoftICE. Well, they work most of the time.
>
>Peter
>OSR
>
>—
>Questions? First check the Kernel Driver FAQ at
>http://www.osronline.com/article.cfm?id=256
>
>You are currently subscribed to ntdev as: xxxxx@ieee.org
>To unsubscribe send a blank email to xxxxx@lists.osr.com
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@hotmail.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
Andrew Nielsen wrote:
Actually, the system isn’t stopped when the error occurs. The driver
just unloads itself, and that’s that. The reason I came here for
help, is because I figured that any system with TCP/IP installed would
have \Device\Tcp… But, so far on 2 XP Test Machines, the same error
has occured.
Did you try the loadorder tool from sysinternals? Your driver may start
before tcpip.
Did you set the service’s Group registry value to PNP_TDI?
Andrei
As Maxim S. Shatskih Suggested, I’m going to try
TdiRegisterTnTHandlers… but, is there anything else I should
know…? In every 2K system I’ve tested it on, this error hasn’t come
up… just on XP.Thanks
AndrewFrom: “Alberto Moreira”
> Reply-To: “Windows System Software Devs Interest List”
>
> To: “Windows System Software Devs Interest List”
> Subject: Re: Re:[ntdev] \Device\Tcp
> Date: Mon, 28 Mar 2005 10:09:56 -0500
>
> It’s not clear to me what’s the specific case. I’m just pointing out
> that in real-world debugging situations the target’s often stopped,
> so, whatever’s of use in debugging must either run remotely from the
> host or it must be independent of the OS services on the target. Also,
> a remote utility is quite different from a debugger extension in that
> I may want to be able to run it without having the debugger installed
> on the target.
>
>
> Alberto.
>
>
> ----- Original Message ----- From: “Peter Viscarola (OSR)”
>
> Newsgroups: ntdev
> To: “Windows System Software Devs Interest List”
> Sent: Sunday, March 27, 2005 8:03 PM
> Subject: Re:[ntdev] \Device\Tcp
>
>
>> Alberto Moreira wrote:
>>
>>>
>>> Neither Objdir, nor the GUI Object Viewer, nor DeviceTree, help much
>>> if the target machine is stopped and you want to find a driver or a
>>> device while you’re single stepping through code.
>>
>>
>> We’re not talking about that case here, though, right?
>>
>>> Note, Windbg is a two machine system, so, it’ll be nice to find a
>>> remote object directory utility, that runs on a host system and
>>> dumps the frigs of the target.
>>>
>>
>> That’s called a kernel debugger extension, Alberto. And they already
>> exist and work with SoftICE. Well, they work most of the time.
>>
>> Peter
>> OSR
>>
>> —
>> Questions? First check the Kernel Driver FAQ at
>> http://www.osronline.com/article.cfm?id=256
>>
>> You are currently subscribed to ntdev as: xxxxx@ieee.org
>> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@hotmail.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@bitdefender.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
–
Ignorance more frequently begets confidence than does knowledge.
— Charles Darwin
–
This message was scanned for spam and viruses by BitDefender.
For more information please visit http://linux.bitdefender.com/
I’d say that my Driver is loading before TCP/IP, but considering it still
doesn’t find \Device\Tcp even after the computer has completely loaded…
it’s something else… but I’ll keep that in mind for future problems.
Yes, I did set the service’s registry value to PNP_TDI, I make sure it’s put
in after TCP/IP…
Andrew
From: Andrei Zlate-Podani
Reply-To: “Windows System Software Devs Interest List”
To: “Windows System Software Devs Interest List”
Subject: Re: [ntdev] \Device\Tcp
Date: Tue, 29 Mar 2005 10:03:35 +0300
Andrew Nielsen wrote:
>Actually, the system isn’t stopped when the error occurs. The driver just
>unloads itself, and that’s that. The reason I came here for help, is
>because I figured that any system with TCP/IP installed would have
>\Device\Tcp… But, so far on 2 XP Test Machines, the same error has
>occured.
Did you try the loadorder tool from sysinternals? Your driver may start
before tcpip.
Did you set the service’s Group registry value to PNP_TDI?
Andrei
>
>As Maxim S. Shatskih Suggested, I’m going to try TdiRegisterTnTHandlers…
>but, is there anything else I should know…? In every 2K system I’ve
>tested it on, this error hasn’t come up… just on XP.
>
>Thanks
>Andrew
>
>From: “Alberto Moreira”
>Reply-To: “Windows System Software Devs Interest List”
>
>To: “Windows System Software Devs Interest List”
>Subject: Re: Re:[ntdev] \Device\Tcp
>Date: Mon, 28 Mar 2005 10:09:56 -0500
>
>It’s not clear to me what’s the specific case. I’m just pointing out that
>in real-world debugging situations the target’s often stopped, so,
>whatever’s of use in debugging must either run remotely from the host or it
>must be independent of the OS services on the target. Also, a remote
>utility is quite different from a debugger extension in that I may want to
>be able to run it without having the debugger installed on the target.
>
>
>Alberto.
>
>
>----- Original Message ----- From: “Peter Viscarola (OSR)”
>
>Newsgroups: ntdev
>To: “Windows System Software Devs Interest List”
>Sent: Sunday, March 27, 2005 8:03 PM
>Subject: Re:[ntdev] \Device\Tcp
>
>
>>Alberto Moreira wrote:
>>
>>>
>>>Neither Objdir, nor the GUI Object Viewer, nor DeviceTree, help much if
>>>the target machine is stopped and you want to find a driver or a device
>>>while you’re single stepping through code.
>>
>>
>>We’re not talking about that case here, though, right?
>>
>>>Note, Windbg is a two machine system, so, it’ll be nice to find a remote
>>>object directory utility, that runs on a host system and dumps the frigs
>>>of the target.
>>>
>>
>>That’s called a kernel debugger extension, Alberto. And they already
>>exist and work with SoftICE. Well, they work most of the time.
>>
>>Peter
>>OSR
>>
>>—
>>Questions? First check the Kernel Driver FAQ at
>>http://www.osronline.com/article.cfm?id=256
>>
>>You are currently subscribed to ntdev as: xxxxx@ieee.org
>>To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
>
>—
>Questions? First check the Kernel Driver FAQ at
>http://www.osronline.com/article.cfm?id=256
>
>You are currently subscribed to ntdev as: xxxxx@hotmail.com
>To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
>
>—
>Questions? First check the Kernel Driver FAQ at
>http://www.osronline.com/article.cfm?id=256
>
>You are currently subscribed to ntdev as: xxxxx@bitdefender.com
>To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
–
Ignorance more frequently begets confidence than does knowledge.
— Charles Darwin
–
This message was scanned for spam and viruses by BitDefender.
For more information please visit http://linux.bitdefender.com/
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@hotmail.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
Andrew,
Maxim’s approach here is a very good one for being notified of transports
and ‘networks’ as they come and go via PnP.
If you driver loads after TCPIP.SYS is loaded (which, it probably does
anyway) your PnP handler will be called immediately (from within the
registration of the PnP handler) for any transports that have already
registered (like \Device\Tcp).
One small ‘gotcha’ you should be aware of is that if you were to be clever
and load your driver before TCPIP.SYS loads and register for TDI PnP
notifications, that when you receive notification for “\Device\Tcp” you will
find that you cannot actually open it! This is apparently because the
device object is created as a ‘legacy’ style device object during
DriverEntry of TCPIP.SYS and the system has not actually marked it as ready
for use when it is registered with TDI. It does not become ready for use
until after TCPIP!DriverEntry returns and the IO system makes the (legacy)
device objects available. In this case, you would have to be even more
dilligent and retry (perhaps on a work item) attaching to the device object
until the system unwinds enough to make it available.
Good Luck,
Dave Cattley
Consulting Engineer
Systems Software Development
“Maxim S. Shatskih” wrote in message
news:xxxxx@ntdev…
>> “drivers.exe” tool in the DDK, it’s listed there aswell. With TCP/IP
>> installed, shouldn’t tcpip.sys be loaded while windows is booting?
>
> Try to use TdiRegisterPnPHandlers, this will allow you to receive
> notifications
> on TCPIP load and on IP addresses arrival/removal.
>
> Maxim Shatskih, Windows DDK MVP
> StorageCraft Corporation
> xxxxx@storagecraft.com
> http://www.storagecraft.com
>
>
Andrew,
You may have tried this already but I mention it for completeness. Make
your driver dependent on TCPIP.SYS to ensure that TCPIP.SYS is started
completely before your driver will start. Also, either make sure you *do
not* have a load order value set or make sure that the load order specifies
it to be loaded *after* TCPIP.SYS. Lastly, make sure your start phase is
correct (as in System or Automatic but *not* Boot).
Good Luck,
Dave Cattley
Consulting Engineer
Systems Software Development
“Andrew Nielsen” wrote in message
news:xxxxx@ntdev…
> I’d say that my Driver is loading before TCP/IP, but considering it still
> doesn’t find \Device\Tcp even after the computer has completely loaded…
> it’s something else… but I’ll keep that in mind for future problems.
>
> Yes, I did set the service’s registry value to PNP_TDI, I make sure it’s
> put in after TCP/IP…
>
> Andrew
>