Hi,
I’ve wrote the TCP filter driver. It attaches to \Tcp device, intercepts
TDI_SEND requests and analyze the data buffer for HTTP GET command. If the
user works thru the proxy server everything works fine -> i can see
commands like “GET www.osr.com/forum.html”. But if the user works from
direct IP I can see only “GET /forum.html”. I’d like to ask how can I get
IP address for the connection? I mean other side IP address? Can I
enumerate connection object? May I do it under IRQL_DISPATCH?
Thanks for help,
Anton
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
You’re going to have to filter connection attempts and match the
connection objects with send requests.
-----Original Message-----
From: xxxxx@hotmail.com
[mailto:xxxxx@hotmail.com]
Sent: Monday, November 05, 2001 8:00 PM
To: NT Developers Interest List
Subject: [ntdev] HTTP GET request
Hi,
I’ve wrote the TCP filter driver. It attaches to \Tcp device, intercepts
TDI_SEND requests and analyze the data buffer for HTTP GET command. If the
user works thru the proxy server everything works fine -> i can see
commands like “GET www.osr.com/forum.html”. But if the user works from
direct IP I can see only “GET /forum.html”. I’d like to ask how can I get
IP address for the connection? I mean other side IP address? Can I
enumerate connection object? May I do it under IRQL_DISPATCH?
Thanks for help,
Anton
You are currently subscribed to ntdev as: xxxxx@xetron.com
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
Try TDI_QUERY_ADDRESS_INFO.
Max
----- Original Message -----
From:
To: “NT Developers Interest List”
Sent: Tuesday, November 06, 2001 3:00 PM
Subject: [ntdev] HTTP GET request
> Hi,
>
> I’ve wrote the TCP filter driver. It attaches to \Tcp device, intercepts
> TDI_SEND requests and analyze the data buffer for HTTP GET command. If the
> user works thru the proxy server everything works fine -> i can see
> commands like “GET www.osr.com/forum.html”. But if the user works from
> direct IP I can see only “GET /forum.html”. I’d like to ask how can I get
> IP address for the connection? I mean other side IP address? Can I
> enumerate connection object? May I do it under IRQL_DISPATCH?
>
> Thanks for help,
> Anton
>
> —
> You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>
—
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
Hi,
That’s what I do now. But keeping track of all connection attempts seems to
be far from the best idea - too slowly…
Thanks for help,
Anton
On 11/06/01, ““Parton, Charles W.” ” wrote:
> You’re going to have to filter connection attempts and match the
> connection objects with send requests.
>
> -----Original Message-----
> From: xxxxx@hotmail.com
> [mailto:xxxxx@hotmail.com]
> Sent: Monday, November 05, 2001 8:00 PM
> To: NT Developers Interest List
> Subject: [ntdev] HTTP GET request
>
>
> Hi,
>
> I’ve wrote the TCP filter driver. It attaches to \Tcp device, intercepts
> TDI_SEND requests and analyze the data buffer for HTTP GET command. If the
> user works thru the proxy server everything works fine -> i can see
> commands like “GET www.osr.com/forum.html”. But if the user works from
> direct IP I can see only “GET /forum.html”. I’d like to ask how can I get
> IP address for the connection? I mean other side IP address? Can I
> enumerate connection object? May I do it under IRQL_DISPATCH?
>
> Thanks for help,
> Anton
>
> —
> You are currently subscribed to ntdev as: xxxxx@xetron.com
> To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>
> —
> You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
> To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
—
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
Hi Max,
I’ve tried. It seems to return local IP address, not remote one. Did you
tried this call yourself or this is just your suggestion?
Thanks for help!
Anton
On 11/07/01, ““Maxim S. Shatskih” ” wrote:
> Try TDI_QUERY_ADDRESS_INFO.
>
> Max
>
> ----- Original Message -----
> From:
> To: “NT Developers Interest List”
> Sent: Tuesday, November 06, 2001 3:00 PM
> Subject: [ntdev] HTTP GET request
>
>
> > Hi,
> >
> > I’ve wrote the TCP filter driver. It attaches to \Tcp device, intercepts
> > TDI_SEND requests and analyze the data buffer for HTTP GET command. If the
> > user works thru the proxy server everything works fine -> i can see
> > commands like “GET www.osr.com/forum.html”. But if the user works from
> > direct IP I can see only “GET /forum.html”. I’d like to ask how can I get
> > IP address for the connection? I mean other side IP address? Can I
> > enumerate connection object? May I do it under IRQL_DISPATCH?
> >
> > Thanks for help,
> > Anton
> >
> > —
> > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> >
>
>
> —
> You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
> To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
—
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
Sorry. I used TDI_QUERY_ADDRESS_INFO to determine the local address after the wildcard bind().
For remote address, I used the:
- caller specified one - for connect().
- TdiClientEventConnect parameter - for listen()/accept().
So, maybe the filter is the only way.
Max
----- Original Message -----
From:
To: “NT Developers Interest List”
Sent: Wednesday, November 07, 2001 8:46 AM
Subject: [ntdev] Re: HTTP GET request
> Hi Max,
>
> I’ve tried. It seems to return local IP address, not remote one. Did you
> tried this call yourself or this is just your suggestion?
>
> Thanks for help!
>
> Anton
>
> On 11/07/01, ““Maxim S. Shatskih” ” wrote:
> > Try TDI_QUERY_ADDRESS_INFO.
> >
> > Max
> >
> > ----- Original Message -----
> > From:
> > To: “NT Developers Interest List”
> > Sent: Tuesday, November 06, 2001 3:00 PM
> > Subject: [ntdev] HTTP GET request
> >
> >
> > > Hi,
> > >
> > > I’ve wrote the TCP filter driver. It attaches to \Tcp device, intercepts
> > > TDI_SEND requests and analyze the data buffer for HTTP GET command. If the
> > > user works thru the proxy server everything works fine -> i can see
> > > commands like “GET www.osr.com/forum.html”. But if the user works from
> > > direct IP I can see only “GET /forum.html”. I’d like to ask how can I get
> > > IP address for the connection? I mean other side IP address? Can I
> > > enumerate connection object? May I do it under IRQL_DISPATCH?
> > >
> > > Thanks for help,
> > > Anton
> > >
> > > —
> > > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> > >
> >
> >
> > —
> > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>
> —
> You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>
—
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
The correct way to do this is to look for header line that starts with Host:
Thus
GET /forum.html HTTP/1.1\r\n
…
Host: www.osr.com\r\n
…
\r\n
would define the set of headers. Just using the destination IP will not
work for servers that “virtual” host multiple domains.
Jon
----- Original Message -----
From: “Maxim S. Shatskih”
To: “NT Developers Interest List”
Sent: Wednesday, November 07, 2001 3:56 PM
Subject: [ntdev] Re: HTTP GET request
> Sorry. I used TDI_QUERY_ADDRESS_INFO to determine the local address after
the wildcard bind().
> For remote address, I used the:
> - caller specified one - for connect().
> - TdiClientEventConnect parameter - for listen()/accept().
>
> So, maybe the filter is the only way.
>
> Max
>
> ----- Original Message -----
> From:
> To: “NT Developers Interest List”
> Sent: Wednesday, November 07, 2001 8:46 AM
> Subject: [ntdev] Re: HTTP GET request
>
>
> > Hi Max,
> >
> > I’ve tried. It seems to return local IP address, not remote one. Did you
> > tried this call yourself or this is just your suggestion?
> >
> > Thanks for help!
> >
> > Anton
> >
> > On 11/07/01, ““Maxim S. Shatskih” ” wrote:
> > > Try TDI_QUERY_ADDRESS_INFO.
> > >
> > > Max
> > >
> > > ----- Original Message -----
> > > From:
> > > To: “NT Developers Interest List”
> > > Sent: Tuesday, November 06, 2001 3:00 PM
> > > Subject: [ntdev] HTTP GET request
> > >
> > >
> > > > Hi,
> > > >
> > > > I’ve wrote the TCP filter driver. It attaches to \Tcp device,
intercepts
> > > > TDI_SEND requests and analyze the data buffer for HTTP GET command.
If the
> > > > user works thru the proxy server everything works fine -> i can see
> > > > commands like “GET www.osr.com/forum.html”. But if the user works
from
> > > > direct IP I can see only “GET /forum.html”. I’d like to ask how can
I get
> > > > IP address for the connection? I mean other side IP address? Can I
> > > > enumerate connection object? May I do it under IRQL_DISPATCH?
> > > >
> > > > Thanks for help,
> > > > Anton
> > > >
> > > > —
> > > > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > > > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> > > >
> > >
> > >
> > > —
> > > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> >
> > —
> > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> >
>
>
> —
> You are currently subscribed to ntdev as: xxxxx@conclusive.com
> To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
—
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
Is this line mandatory?
----- Original Message -----
From: “Jon Shallow”
To: “NT Developers Interest List”
Sent: Wednesday, November 07, 2001 7:11 PM
Subject: [ntdev] Re: HTTP GET request
> The correct way to do this is to look for header line that starts with Host:
> Thus
>
> GET /forum.html HTTP/1.1\r\n
> …
> Host: www.osr.com\r\n
> …
> \r\n
>
> would define the set of headers. Just using the destination IP will not
> work for servers that “virtual” host multiple domains.
>
> Jon
> ----- Original Message -----
> From: “Maxim S. Shatskih”
> To: “NT Developers Interest List”
> Sent: Wednesday, November 07, 2001 3:56 PM
> Subject: [ntdev] Re: HTTP GET request
>
>
> > Sorry. I used TDI_QUERY_ADDRESS_INFO to determine the local address after
> the wildcard bind().
> > For remote address, I used the:
> > - caller specified one - for connect().
> > - TdiClientEventConnect parameter - for listen()/accept().
> >
> > So, maybe the filter is the only way.
> >
> > Max
> >
> > ----- Original Message -----
> > From:
> > To: “NT Developers Interest List”
> > Sent: Wednesday, November 07, 2001 8:46 AM
> > Subject: [ntdev] Re: HTTP GET request
> >
> >
> > > Hi Max,
> > >
> > > I’ve tried. It seems to return local IP address, not remote one. Did you
> > > tried this call yourself or this is just your suggestion?
> > >
> > > Thanks for help!
> > >
> > > Anton
> > >
> > > On 11/07/01, ““Maxim S. Shatskih” ” wrote:
> > > > Try TDI_QUERY_ADDRESS_INFO.
> > > >
> > > > Max
> > > >
> > > > ----- Original Message -----
> > > > From:
> > > > To: “NT Developers Interest List”
> > > > Sent: Tuesday, November 06, 2001 3:00 PM
> > > > Subject: [ntdev] HTTP GET request
> > > >
> > > >
> > > > > Hi,
> > > > >
> > > > > I’ve wrote the TCP filter driver. It attaches to \Tcp device,
> intercepts
> > > > > TDI_SEND requests and analyze the data buffer for HTTP GET command.
> If the
> > > > > user works thru the proxy server everything works fine -> i can see
> > > > > commands like “GET www.osr.com/forum.html”. But if the user works
> from
> > > > > direct IP I can see only “GET /forum.html”. I’d like to ask how can
> I get
> > > > > IP address for the connection? I mean other side IP address? Can I
> > > > > enumerate connection object? May I do it under IRQL_DISPATCH?
> > > > >
> > > > > Thanks for help,
> > > > > Anton
> > > > >
> > > > > —
> > > > > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > > > > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> > > > >
> > > >
> > > >
> > > > —
> > > > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > > > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> > >
> > > —
> > > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> > >
> >
> >
> > —
> > You are currently subscribed to ntdev as: xxxxx@conclusive.com
> > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>
>
> —
> You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>
—
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
The Host tag isn’t mandatory and doesn’t exist for HTTP/1.0.
-----Original Message-----
From: Maxim S. Shatskih [mailto:xxxxx@storagecraft.com]
Sent: Wednesday, November 07, 2001 12:38 PM
To: NT Developers Interest List
Subject: [ntdev] Re: HTTP GET request
Is this line mandatory?
----- Original Message -----
From: “Jon Shallow”
To: “NT Developers Interest List”
Sent: Wednesday, November 07, 2001 7:11 PM
Subject: [ntdev] Re: HTTP GET request
> The correct way to do this is to look for header line that starts with
Host:
> Thus
>
> GET /forum.html HTTP/1.1\r\n
> …
> Host: www.osr.com\r\n
> …
> \r\n
>
> would define the set of headers. Just using the destination IP will not
> work for servers that “virtual” host multiple domains.
>
> Jon
> ----- Original Message -----
> From: “Maxim S. Shatskih”
> To: “NT Developers Interest List”
> Sent: Wednesday, November 07, 2001 3:56 PM
> Subject: [ntdev] Re: HTTP GET request
>
>
> > Sorry. I used TDI_QUERY_ADDRESS_INFO to determine the local address
after
> the wildcard bind().
> > For remote address, I used the:
> > - caller specified one - for connect().
> > - TdiClientEventConnect parameter - for listen()/accept().
> >
> > So, maybe the filter is the only way.
> >
> > Max
> >
> > ----- Original Message -----
> > From:
> > To: “NT Developers Interest List”
> > Sent: Wednesday, November 07, 2001 8:46 AM
> > Subject: [ntdev] Re: HTTP GET request
> >
> >
> > > Hi Max,
> > >
> > > I’ve tried. It seems to return local IP address, not remote one. Did
you
> > > tried this call yourself or this is just your suggestion?
> > >
> > > Thanks for help!
> > >
> > > Anton
> > >
> > > On 11/07/01, ““Maxim S. Shatskih” ” wrote:
> > > > Try TDI_QUERY_ADDRESS_INFO.
> > > >
> > > > Max
> > > >
> > > > ----- Original Message -----
> > > > From:
> > > > To: “NT Developers Interest List”
> > > > Sent: Tuesday, November 06, 2001 3:00 PM
> > > > Subject: [ntdev] HTTP GET request
> > > >
> > > >
> > > > > Hi,
> > > > >
> > > > > I’ve wrote the TCP filter driver. It attaches to \Tcp device,
> intercepts
> > > > > TDI_SEND requests and analyze the data buffer for HTTP GET
command.
> If the
> > > > > user works thru the proxy server everything works fine -> i can
see
> > > > > commands like “GET www.osr.com/forum.html”. But if the user works
> from
> > > > > direct IP I can see only “GET /forum.html”. I’d like to ask how
can
> I get
> > > > > IP address for the connection? I mean other side IP address? Can I
> > > > > enumerate connection object? May I do it under IRQL_DISPATCH?
> > > > >
> > > > > Thanks for help,
> > > > > Anton
> > > > >
> > > > > —
> > > > > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > > > > To unsubscribe send a blank email to
leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> > > > >
> > > >
> > > >
> > > > —
> > > > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > > > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> > >
> > > —
> > > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> > >
> >
> >
> > —
> > You are currently subscribed to ntdev as: xxxxx@conclusive.com
> > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>
>
> —
> You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>
—
You are currently subscribed to ntdev as: xxxxx@xetron.com
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
—
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
Yes - for HTTP/1.1 - optional for HTTP/1.0 - but then you cannot host
multiple domains on one IP address with HTTP/1.0
[CodeRed et al “forgot” to put in the “Host:” entry…]
----- Original Message -----
From: “Maxim S. Shatskih”
To: “NT Developers Interest List”
Sent: Wednesday, November 07, 2001 5:37 PM
Subject: [ntdev] Re: HTTP GET request
> Is this line mandatory?
>
> ----- Original Message -----
> From: “Jon Shallow”
> To: “NT Developers Interest List”
> Sent: Wednesday, November 07, 2001 7:11 PM
> Subject: [ntdev] Re: HTTP GET request
>
>
> > The correct way to do this is to look for header line that starts with
Host:
> > Thus
> >
> > GET /forum.html HTTP/1.1\r\n
> > …
> > Host: www.osr.com\r\n
> > …
> > \r\n
> >
> > would define the set of headers. Just using the destination IP will not
> > work for servers that “virtual” host multiple domains.
> >
> > Jon
> > ----- Original Message -----
> > From: “Maxim S. Shatskih”
> > To: “NT Developers Interest List”
> > Sent: Wednesday, November 07, 2001 3:56 PM
> > Subject: [ntdev] Re: HTTP GET request
> >
> >
> > > Sorry. I used TDI_QUERY_ADDRESS_INFO to determine the local address
after
> > the wildcard bind().
> > > For remote address, I used the:
> > > - caller specified one - for connect().
> > > - TdiClientEventConnect parameter - for listen()/accept().
> > >
> > > So, maybe the filter is the only way.
> > >
> > > Max
> > >
> > > ----- Original Message -----
> > > From:
> > > To: “NT Developers Interest List”
> > > Sent: Wednesday, November 07, 2001 8:46 AM
> > > Subject: [ntdev] Re: HTTP GET request
> > >
> > >
> > > > Hi Max,
> > > >
> > > > I’ve tried. It seems to return local IP address, not remote one. Did
you
> > > > tried this call yourself or this is just your suggestion?
> > > >
> > > > Thanks for help!
> > > >
> > > > Anton
> > > >
> > > > On 11/07/01, ““Maxim S. Shatskih” ” wrote:
> > > > > Try TDI_QUERY_ADDRESS_INFO.
> > > > >
> > > > > Max
> > > > >
> > > > > ----- Original Message -----
> > > > > From:
> > > > > To: “NT Developers Interest List”
> > > > > Sent: Tuesday, November 06, 2001 3:00 PM
> > > > > Subject: [ntdev] HTTP GET request
> > > > >
> > > > >
> > > > > > Hi,
> > > > > >
> > > > > > I’ve wrote the TCP filter driver. It attaches to \Tcp device,
> > intercepts
> > > > > > TDI_SEND requests and analyze the data buffer for HTTP GET
command.
> > If the
> > > > > > user works thru the proxy server everything works fine -> i can
see
> > > > > > commands like “GET www.osr.com/forum.html”. But if the user
works
> > from
> > > > > > direct IP I can see only “GET /forum.html”. I’d like to ask how
can
> > I get
> > > > > > IP address for the connection? I mean other side IP address? Can
I
> > > > > > enumerate connection object? May I do it under IRQL_DISPATCH?
> > > > > >
> > > > > > Thanks for help,
> > > > > > Anton
> > > > > >
> > > > > > —
> > > > > > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > > > > > To unsubscribe send a blank email to
leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> > > > > >
> > > > >
> > > > >
> > > > > —
> > > > > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > > > > To unsubscribe send a blank email to
leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> > > >
> > > > —
> > > > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > > > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> > > >
> > >
> > >
> > > —
> > > You are currently subscribed to ntdev as: xxxxx@conclusive.com
> > > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> >
> >
> > —
> > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> >
>
>
> —
> You are currently subscribed to ntdev as: xxxxx@conclusive.com
> To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
—
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
Hi Jon, Max and others,
Gettting IP from TDI_CONNECT and whole HTTP request body does not matter
what version of HTTP 1.0 or 1.1 is running from TDI_SEND works for me just
great.
Thanks to everybody!
Anton
On 11/07/01, ““Jon Shallow” ” wrote:
> Yes - for HTTP/1.1 - optional for HTTP/1.0 - but then you cannot host
> multiple domains on one IP address with HTTP/1.0
>
> [CodeRed et al “forgot” to put in the “Host:” entry…]
>
> ----- Original Message -----
> From: “Maxim S. Shatskih”
> To: “NT Developers Interest List”
> Sent: Wednesday, November 07, 2001 5:37 PM
> Subject: [ntdev] Re: HTTP GET request
>
>
> > Is this line mandatory?
> >
> > ----- Original Message -----
> > From: “Jon Shallow”
> > To: “NT Developers Interest List”
> > Sent: Wednesday, November 07, 2001 7:11 PM
> > Subject: [ntdev] Re: HTTP GET request
> >
> >
> > > The correct way to do this is to look for header line that starts with
> Host:
> > > Thus
> > >
> > > GET /forum.html HTTP/1.1\r\n
> > > …
> > > Host: www.osr.com\r\n
> > > …
> > > \r\n
> > >
> > > would define the set of headers. Just using the destination IP will not
> > > work for servers that “virtual” host multiple domains.
> > >
> > > Jon
> > > ----- Original Message -----
> > > From: “Maxim S. Shatskih”
> > > To: “NT Developers Interest List”
> > > Sent: Wednesday, November 07, 2001 3:56 PM
> > > Subject: [ntdev] Re: HTTP GET request
> > >
> > >
> > > > Sorry. I used TDI_QUERY_ADDRESS_INFO to determine the local address
> after
> > > the wildcard bind().
> > > > For remote address, I used the:
> > > > - caller specified one - for connect().
> > > > - TdiClientEventConnect parameter - for listen()/accept().
> > > >
> > > > So, maybe the filter is the only way.
> > > >
> > > > Max
> > > >
> > > > ----- Original Message -----
> > > > From:
> > > > To: “NT Developers Interest List”
> > > > Sent: Wednesday, November 07, 2001 8:46 AM
> > > > Subject: [ntdev] Re: HTTP GET request
> > > >
> > > >
> > > > > Hi Max,
> > > > >
> > > > > I’ve tried. It seems to return local IP address, not remote one. Did
> you
> > > > > tried this call yourself or this is just your suggestion?
> > > > >
> > > > > Thanks for help!
> > > > >
> > > > > Anton
> > > > >
> > > > > On 11/07/01, ““Maxim S. Shatskih” ” wrote:
> > > > > > Try TDI_QUERY_ADDRESS_INFO.
> > > > > >
> > > > > > Max
> > > > > >
> > > > > > ----- Original Message -----
> > > > > > From:
> > > > > > To: “NT Developers Interest List”
> > > > > > Sent: Tuesday, November 06, 2001 3:00 PM
> > > > > > Subject: [ntdev] HTTP GET request
> > > > > >
> > > > > >
> > > > > > > Hi,
> > > > > > >
> > > > > > > I’ve wrote the TCP filter driver. It attaches to \Tcp device,
> > > intercepts
> > > > > > > TDI_SEND requests and analyze the data buffer for HTTP GET
> command.
> > > If the
> > > > > > > user works thru the proxy server everything works fine -> i can
> see
> > > > > > > commands like “GET www.osr.com/forum.html”. But if the user
> works
> > > from
> > > > > > > direct IP I can see only “GET /forum.html”. I’d like to ask how
> can
> > > I get
> > > > > > > IP address for the connection? I mean other side IP address? Can
> I
> > > > > > > enumerate connection object? May I do it under IRQL_DISPATCH?
> > > > > > >
> > > > > > > Thanks for help,
> > > > > > > Anton
> > > > > > >
> > > > > > > —
> > > > > > > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > > > > > > To unsubscribe send a blank email to
> leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> > > > > > >
> > > > > >
> > > > > >
> > > > > > —
> > > > > > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > > > > > To unsubscribe send a blank email to
> leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> > > > >
> > > > > —
> > > > > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > > > > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> > > > >
> > > >
> > > >
> > > > —
> > > > You are currently subscribed to ntdev as: xxxxx@conclusive.com
> > > > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> > >
> > >
> > > —
> > > You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> > > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
> > >
> >
> >
> > —
> > You are currently subscribed to ntdev as: xxxxx@conclusive.com
> > To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>
>
> —
> You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
> To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com
—
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com