Pseudo Driver

NTDEV
1

Hi All

What is pseudo driver for win XP?

Thanks in Advance.

2

shobhit shingla wrote:

Hi All

What is pseudo driver for win XP?

“Pseudo” means “similar to” or “something like”. So, a “pseudo driver”
might be something that acts like a driver but isn’t necessarily a
driver. For example, I’ve written simulated video capture drivers that
look like a driver to DirectShow but are actually just user-mode DLLs.
I’d call that a “pseudo-driver”.

Where did you read this? If you tell us the context, we can give you a
more specific meaning.

–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.

3

Actually i want to write a pseudo driver to capture all the packets from
TCP/IP stack of win XP.

Want kind of pseudo driver it can be?

Thanks in advance

On 6/1/07, Tim Roberts wrote:
>
> shobhit shingla wrote:
> > Hi All
> >
> > What is pseudo driver for win XP?
>
> “Pseudo” means “similar to” or “something like”. So, a “pseudo driver”
> might be something that acts like a driver but isn’t necessarily a
> driver. For example, I’ve written simulated video capture drivers that
> look like a driver to DirectShow but are actually just user-mode DLLs.
> I’d call that a “pseudo-driver”.
>
> Where did you read this? If you tell us the context, we can give you a
> more specific meaning.
>
> –
> Tim Roberts, xxxxx@probo.com
> Providenza & Boekelheide, Inc.
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>

4

You probably want an NDIS IM driver. Look at the passthru sample in
the WDK, and read about IM drivers in the WDK and on www.ndis.com.

-Steve

On Jun 3, 2007, at 12:30 AM, shobhit shingla wrote:

Actually i want to write a pseudo driver to capture all the packets
from TCP/IP stack of win XP.

Want kind of pseudo driver it can be?

Thanks in advance

On 6/1/07, Tim Roberts wrote:
> shobhit shingla wrote:
> > Hi All
> >
> > What is pseudo driver for win XP?
>
> “Pseudo” means “similar to” or “something like”. So, a “pseudo
> driver”
> might be something that acts like a driver but isn’t necessarily a
> driver. For example, I’ve written simulated video capture drivers
> that
> look like a driver to DirectShow but are actually just user-mode DLLs.
> I’d call that a “pseudo-driver”.
>
> Where did you read this? If you tell us the context, we can give
> you a
> more specific meaning.
>
> –
> Tim Roberts, xxxxx@probo.com
> Providenza & Boekelheide, Inc.
>
>
> —
> Questions? First check the Kernel Driver FAQ at http://
> www.osronline.com/article.cfm?id=256
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>
> — Questions? First check the Kernel Driver FAQ at http://
> www.osronline.com/article.cfm?id=256 To unsubscribe, visit the List
> Server section of OSR Online at http://www.osronline.com/page.cfm?
> name=ListServer

5

NDIS IM Driver is actual Driver.
I want a pseudo driver for my project.

6

On Jun 3, 2007, at 10:54 PM, xxxxx@gmail.com wrote:

NDIS IM Driver is actual Driver.
I want a pseudo driver for my project.

Could you elaborate? I’m not sure I understand what you want. What is
a pseudo driver, and why do you want one?

-Steve

7

Is there any method on windows XP SP2 to block packets from TCP/IP Stack
other than writing an NDIS IM Driver.Raw sockets are not disabled on XP SP2.

On 6/4/07, Steve Dispensa wrote:
>
>
> On Jun 3, 2007, at 10:54 PM, xxxxx@gmail.com wrote:
>
> > NDIS IM Driver is actual Driver.
> > I want a pseudo driver for my project.
>
> Could you elaborate? I’m not sure I understand what you want. What is
> a pseudo driver, and why do you want one?
>
> -Steve
>
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>

8

Whoever introduced the term “pseudo-driver” needs to be shot. As far as I know there isn’t any such thing.

You must either:

1.) Learn how to write Windows drivers and write a driver that accomplishes your goals.

  • OR -

2.) Hire someone to do the work for you.

Your questions suggest that you need at the very least to study the Windows network architecture a lot more. Study the DDK documents. Study the DDK samples. Study all of them. Take a course on Windows kernel-mode development. Buy books. That’s what we have done.

Only then will you be able to determine what must be done.

Several of us on this list have probably written drivers very similar to what you are probably trying to do. However, I doubt that it is possible to describe how to accomplish your goals in newsgroup postings.

Study until you know how the problem needs to be solved.

Thomas F. Divine

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:bounce-288919-
xxxxx@lists.osr.com] On Behalf Of xxxxx@gmail.com
Sent: Sunday, June 03, 2007 11:55 PM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] Pseudo Driver

NDIS IM Driver is actual Driver.
I want a pseudo driver for my project.

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

9

Nothing else is both reliable and documented.

-Steve

On Jun 3, 2007, at 11:25 PM, shobhit shingla wrote:

Is there any method on windows XP SP2 to block packets from TCP/IP
Stack other than writing an NDIS IM Driver.Raw sockets are not
disabled on XP SP2.

On 6/4/07, Steve Dispensa wrote:
> On Jun 3, 2007, at 10:54 PM, xxxxx@gmail.com wrote:
>
> > NDIS IM Driver is actual Driver.
> > I want a pseudo driver for my project.
>
> Could you elaborate? I’m not sure I understand what you want. What is
> a pseudo driver, and why do you want one?
>
> -Steve
>
>
>
> —
> Questions? First check the Kernel Driver FAQ at http://
> www.osronline.com/article.cfm?id=256
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>
> — Questions? First check the Kernel Driver FAQ at http://
> www.osronline.com/article.cfm?id=256 To unsubscribe, visit the List
> Server section of OSR Online at http://www.osronline.com/page.cfm?
> name=ListServer

10

See the article “Extending the Passthru NDI IM Driver” at the old WD-3 site,
http://www.wd-3.com.

There are three parts to the article. Two are in the archives. (See link at
the top of the WD-3 page.).

Good luck,

Thomas F. Divine

From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of shobhit shingla
Sent: Monday, June 04, 2007 12:26 AM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] Pseudo Driver

Is there any method on windows XP SP2 to block packets from TCP/IP Stack
other than writing an NDIS IM Driver.Raw sockets are not disabled on XP SP2.

On 6/4/07, Steve Dispensa wrote:

On Jun 3, 2007, at 10:54 PM, xxxxx@gmail.com wrote:

> NDIS IM Driver is actual Driver.
> I want a pseudo driver for my project.

Could you elaborate? I’m not sure I understand what you want. What is
a pseudo driver, and why do you want one?

-Steve

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

— Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256 To unsubscribe, visit the List
Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

11

Why two threads on the same subject ???

-pro

NDIS IM Driver is actual Driver.
I want a pseudo driver for my project.

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

12

xxxxx@gmail.com wrote:

NDIS IM Driver is actual Driver.
I want a pseudo driver for my project.

No, you don’t. You are misunderstanding the terms. I’m sure the person
who gave you this assignment simply meant “a driver that doesn’t drive
real hardware”. An NDIS IM driver qualifies for that.

–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.