So, I have a working win2k3 driver that replaces the windows smb server. It’s a tdi driver, inserts itself above netbt, attaches to \Device\Netbiossmb, and everything’s happy. I get all smb traffic over port 445 and respond to it myself. I need to move this forward to 2k8r2, and after a fair amount of reading and playing around I’m still having issues. \Device\Netbiossmb no longer exists, I haven’t been able to find its replacement (if one exists). I’ve looked at both wsk and wfp and while I’m certainly new at this, from what I’ve found so far there seem to be issues with both - not necessarily show stopping, but ugliness I’d like to avoid.
Does anyone have any suggestions about how to go about this? Is there still somewhere I can sit above the tcp/ip stack and intercept and reply to all smb packets? Should I be looking more at wfp and wsk (if so I have a bunch of questions / issues with each)? Thanks.