Query TCP/IP info in kernel

NTDEV
1

Hi Friends,

Does anyone know how to retrieve ARP Table, and routing table information in
kernel? I know I can do it by using IP Help Functions in user space. But how
to do it in kernel, especially ARP table?

Thanks in advance.
Elton

2

I’ve asked this question before and did not receive any answers. There
is some sort of API using IOCTLS (MS L2TP implementation uses it) but as
far as I know it is not documented. I ended up writing a user mode app
to make the changes to the routing table that I needed.

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Li Dong
Sent: Tuesday, April 06, 2004 6:04 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] Query TCP/IP info in kernel

Hi Friends,

Does anyone know how to retrieve ARP Table, and routing table
information in kernel? I know I can do it by using IP Help
Functions in user space. But how to do it in kernel,
especially ARP table?

Thanks in advance.
Elton

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

3

It’s something that I would like to have more information. I thought that
ARP table was saved in the registry. But, after a while of search, I didn’t
find anything. I think that the information was saved somewhere in the RAM
memory and lost when the system is shut down.

I don’t know where could I find any information or docs to know where the
ARP table is saved and which system layer handles this table.

Any information about routing table too? Is there any routing table in a PC
NIC card or is it only present in a physical router?

Regards

Christian

----- Original Message -----
From: “Chapman Mays”
To: “Windows System Software Devs Interest List”
Sent: Tuesday, April 06, 2004 8:47 AM
Subject: RE: [ntdev] Query TCP/IP info in kernel

> I’ve asked this question before and did not receive any answers. There
> is some sort of API using IOCTLS (MS L2TP implementation uses it) but as
> far as I know it is not documented. I ended up writing a user mode app
> to make the changes to the routing table that I needed.
>
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com] On Behalf Of Li Dong
> > Sent: Tuesday, April 06, 2004 6:04 AM
> > To: Windows System Software Devs Interest List
> > Subject: [ntdev] Query TCP/IP info in kernel
> >
> >
> > Hi Friends,
> >
> > Does anyone know how to retrieve ARP Table, and routing table
> > information in kernel? I know I can do it by using IP Help
> > Functions in user space. But how to do it in kernel,
> > especially ARP table?
> >
> > Thanks in advance.
> > Elton
> >
> >
> > —
> > Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
>
>
> —
> Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@mcdi.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>

4

> Any information about routing table too? Is there any routing table in a PC

NIC card or is it only present in a physical router?

In IP stack software.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

5

On Tue, 2004-04-06 at 07:47, Chapman Mays wrote:

I’ve asked this question before and did not receive any answers. There
is some sort of API using IOCTLS (MS L2TP implementation uses it) but as
far as I know it is not documented. I ended up writing a user mode app
to make the changes to the routing table that I needed.

A user-mode app/service really is the best way to do this. You don’t
want to rely on an undocumented interface like this - because it’s so
encapsulated, it’s even more able to change than most undocumented
stuff…

-sd

6

BTW, ARP table gets updated ( as per specs) every 30 sec, and even if kernel
mode
software wants to know, at any give point in time, it is not a bad idea to
have
a krnl to usr call out. to get to the table from usr and passdown to krnl.

-pro

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com]On Behalf Of CG
Sent: Tuesday, April 06, 2004 5:57 AM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] Query TCP/IP info in kernel

It’s something that I would like to have more information. I thought that
ARP table was saved in the registry. But, after a while of search, I didn’t
find anything. I think that the information was saved somewhere in the RAM
memory and lost when the system is shut down.

I don’t know where could I find any information or docs to know where the
ARP table is saved and which system layer handles this table.

Any information about routing table too? Is there any routing table in a PC
NIC card or is it only present in a physical router?

Regards

Christian

----- Original Message -----
From: “Chapman Mays”
To: “Windows System Software Devs Interest List”
Sent: Tuesday, April 06, 2004 8:47 AM
Subject: RE: [ntdev] Query TCP/IP info in kernel

> I’ve asked this question before and did not receive any answers. There
> is some sort of API using IOCTLS (MS L2TP implementation uses it) but as
> far as I know it is not documented. I ended up writing a user mode app
> to make the changes to the routing table that I needed.
>
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com] On Behalf Of Li Dong
> > Sent: Tuesday, April 06, 2004 6:04 AM
> > To: Windows System Software Devs Interest List
> > Subject: [ntdev] Query TCP/IP info in kernel
> >
> >
> > Hi Friends,
> >
> > Does anyone know how to retrieve ARP Table, and routing table
> > information in kernel? I know I can do it by using IP Help
> > Functions in user space. But how to do it in kernel,
> > especially ARP table?
> >
> > Thanks in advance.
> > Elton
> >
> >
> > —
> > Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
>
>
> —
> Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@mcdi.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>

—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: xxxxx@garlic.com
To unsubscribe send a blank email to xxxxx@lists.osr.com