network call interception in windows

NTDEV
1

i have chosen ndis to do packet inspection in my application. but again, windows ddk hasnt provided any ndis 6.0 passthru, they say its replaced.

how can i use same passthru driver in windows xp, vista and 7.

i can use ndisgetversion to determine the version, but how do i know what are the considerations to be taken and differences between these three regarding ndis passthru.

can anybody help.
thanks

2

See the WDK NDIS/filter sample.

Thomas F. Divine

From:
Sent: Thursday, November 12, 2009 8:45 AM
To: “Windows System Software Devs Interest List”
Subject: [ntdev] network call interception in windows

> i have chosen ndis to do packet inspection in my application. but again,
> windows ddk hasnt provided any ndis 6.0 passthru, they say its replaced.
>
> how can i use same passthru driver in windows xp, vista and 7.
>
> i can use ndisgetversion to determine the version, but how do i know what
> are the considerations to be taken and differences between these three
> regarding ndis passthru.
>
> can anybody help.
> thanks
>
>
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer

3

can i use ndis filter with window xp or ndis im passthru in windows vista.
is there any compatible solution.

4

i am using protinstall from ndis.com to install my ndis lightweight filter on windows vista. i changed the inf file name.
do i need to change something else ???
what shd i do with pnp id.?

i am getting this err msg, can anybody help.

INF Path: C:\ndistry\netlwf.inf
PnpID: MS_NDISPROT
Error 0x800f0203: Couldn’t install the network component.

Possible cause:

There is no driver selected for the device information set or element.
Error 0x800f0203: InstallSpecifiedComponent

Possible cause:

There is no driver selected for the device information set or element.

5

You can use a NDIS 5 Intermediate (IM) driver on Windows XP, Windows Vista
and later. However, use of a NDIS 6 Lightweight Filter (LWF) on Vista and
later Windows platforms is a better solution - especially on server
platforms.

NDIS 6 LWFs are only supported on Vista and later Windows platforms. Cannot
be used on Windows XP.

Good luck,

Thomas F. Divine

From:
Sent: Friday, November 13, 2009 2:18 AM
To: “Windows System Software Devs Interest List”
Subject: RE:[ntdev] network call interception in windows

> can i use ndis filter with window xp or ndis im passthru in windows vista.
> is there any compatible solution.
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer

6

>i am using protinstall from ndis.com to install my ndis lightweight filter on windows vista. i changed >the inf file name.

do i need to change something else ???
Have you already installed ndis filter sample ( netlwf ) from WDK? If you have, you need to do delete netlwf.inf file and possible OEM???.inf, which could be createdby using netlwf.inf file, from Windows/inf directory . You also should check your *.inf file to be sure that you don’t have information from previous netlwf.inf of WDK, like name of sys file and etc.

Igor Sharovar