How to parse Packet ?

NTDEV
1

Hi,all
i am using passthru intermediate driver (ntddk\src\network\ndis\passthru)
now i want to intercept the packet ie,. i want to find which protocol(tcp
information) is sending the packet and what data it contains.
can any one help please

thanks
/m

Get free email and a permanent address at http://www.netaddress.com/?N=1

You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com

2

Read the RFC documents on the web which describe TCP/IP detaily.

----- Original Message -----
From: “shiva mallu”
To: “NT Developers Interest List”
Sent: Monday, April 30, 2001 4:31 PM
Subject: [ntdev] How to parse Packet ?

Hi,all
i am using passthru intermediate driver (ntddk\src\network\ndis\passthru)
now i want to intercept the packet ie,. i want to find which protocol(tcp
information) is sending the packet and what data it contains.
can any one help please

thanks
/m

____________________________________________________________________
Get free email and a permanent address at http://www.netaddress.com/?N=1

—
You are currently subscribed to ntdev as: xxxxx@storagecraft.com
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com

—
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com

3

The NDIS Packet discussion may help you get a better idea of how NDIS
packets are constructed in memory. See the URL:

http:

After you understand that, use the RFCs as Maxim suggested to understand the
structure of the specific kinds of packets that you are interested in.

Regards,

Thomas F. Divine

PCAUSA - Toolkits & Resources For Network Software Developers
NDIS Protocol - NDIS Intermediate - TDI Client
http: - http:

----- Original Message -----
From: shiva mallu
To: NT Developers Interest List
Sent: Monday, April 30, 2001 8:31 AM
Subject: [ntdev] How to parse Packet ?

Hi,all
i am using passthru intermediate driver (ntddk\src\network\ndis\passthru)
now i want to intercept the packet ie,. i want to find which protocol(tcp
information) is sending the packet and what data it contains.
can any one help please

—
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com</http:></http:></http:>

4

Hi ,

In ndis im driver you get packet which contains ethernet header
( If physical media is ethernet) followed by ip header or any other
equivalent protocol header.

If you walk through the ip header you will be known whether following is the
tcp or udp header .

you will get Better idea if you analyse first 100 bytes of each packet IM
receives or sends by dumping to the debugger

Chakrapani.
----- Original Message -----
From: “shiva mallu”
To: “NT Developers Interest List”
Sent: Monday, April 30, 2001 6:01 PM
Subject: [ntdev] How to parse Packet ?

Hi,all
i am using passthru intermediate driver (ntddk\src\network\ndis\passthru)
now i want to intercept the packet ie,. i want to find which protocol(tcp
information) is sending the packet and what data it contains.
can any one help please

thanks
/m

____________________________________________________________________
Get free email and a permanent address at http://www.netaddress.com/?N=1

—
You are currently subscribed to ntdev as: xxxxx@procsys.com
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com

—
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com