Yes, it is the most reliable approach. However, I don’t remember this
problem when developed IM driver for 3.51 and NT4; NetMon reported modified
packets on machine with IM driver. Maybe things changed with NDIS filter
technology. For w2k and XP I only developed filters for RAS traffic and
there was NetMon reliable – NdisWan creates special NetMon adapter and
modified packets can be captured there.
Best regards,
Michal Vodicka
STMicroelectronics Design and Application s.r.o.
[michal.vodicka@st.com, http:://www.st.com]
From: xxxxx@NAI.com[SMTP:xxxxx@NAI.com]
Reply To: xxxxx@lists.osr.com
Sent: Monday, July 21, 2003 11:31 PM
To: xxxxx@lists.osr.com
Subject: [ntdev] Re: Windows Error: “The Specified network name is no
longer available”.Run NetMon or Sniffer Or EthReal on another machine which is on the same
subnet/hub. If you have a switch you may not see all packets, so the key
is use hub for sniffing traffic.-Srin.
> -----Original Message-----
> From: James Antognini [mailto:xxxxx@mindspring.nospam.com]
> Sent: Monday, July 21, 2003 2:19 PM
> To: Windows System Software Developers Interest List
> Subject: [ntdev] Re: Windows Error: “The Specified network name is no
> longer available”.
>
> I agree NetMon is essential. Unfortunately, if one is modifying
packets,
> it appears – at least if the IM driver is based on passthru – that
> NetMon sees packets before the IM’s Send function and after the IM’s
> Receive function. That can be quite confusing.
>
> Is there a way to ensure NetMon reports what was sent over the wire?
>
> –
> If replying by e-mail, please remove “nospam.” from the address.
>
> James Antognini
> Windows DDK MVP
>
>
>
> —
> You are currently subscribed to ntdev as: xxxxx@nai.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
You are currently subscribed to ntdev as: michal.vodicka@st.com
To unsubscribe send a blank email to xxxxx@lists.osr.com