Sniffer blocking the IP traffic

NTDEV
1

Hello

I am developing a lowest level Ndis Driver for Infiniband adpater. So far
the Driver is working good and stable with IP traffic. The problem is that
the moment I use packet sniffer (like ethereal etc), network traffic
stops, although the sniffer is detecting the packets correctly.

In this case driver is receiving packets from the wire and indicating it
to Ndis. Sniffer show those packets as valid packets with the correct data
like correct MAC and IP headers. But after that my driver’s
Sendpacketshandler is not getting called, as a result driver is not
sending anything.

Any idea what could be missing?

Thanks in advance

  • Vipul
    PS : I don’t have much knowledge about how sniffer acts but I guess they
    are based on intermediate driver.
2

Hi Vipul,

This is the problem of MAC address. so just look at that, when you indicate that packet to NDIS Stack.

 

Good Luck,



From: “Vipul Jain”

>Reply-To: “Windows System Software Devs Interest List”
>To: “Windows System Software Devs Interest List”
>Subject: [ntdev] Sniffer blocking the IP traffic
>Date: Tue, 16 Dec 2003 20:12:32 -0500
>
>Hello
>
>I am developing a lowest level Ndis Driver for Infiniband adpater. So far
>the Driver is working good and stable with IP traffic. The problem is that
>the moment I use packet sniffer (like ethereal etc), network traffic
>stops, although the sniffer is detecting the packets correctly.
>
>In this case driver is receiving packets from the wire and indicating it
>to Ndis. Sniffer show those packets as valid packets with the correct data
>like correct MAC and IP headers. But after that my driver’s
>Sendpacketshandler is not getting called, as a result driver is not
>sending anything.
>
>Any idea what could be missing?
>
>Thanks in advance
>- Vipul
>PS : I don’t have much knowledge about how sniffer acts but I guess they
>are based on intermediate driver.
>
>
>
>
>
>
>—
>Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256
>
>You are currently subscribed to ntdev as: xxxxx@hotmail.com
>To unsubscribe send a blank email to xxxxx@lists.osr.com

Find an old friend. Rediscover old joys! Reconnect across the miles & the years.

3

On Tue, 2003-12-16 at 19:12, Vipul Jain wrote:

Hello

I am developing a lowest level Ndis Driver for Infiniband adpater. So far
the Driver is working good and stable with IP traffic. The problem is that
the moment I use packet sniffer (like ethereal etc), network traffic
stops, although the sniffer is detecting the packets correctly.

In this case driver is receiving packets from the wire and indicating it
to Ndis. Sniffer show those packets as valid packets with the correct data
like correct MAC and IP headers. But after that my driver’s
Sendpacketshandler is not getting called, as a result driver is not
sending anything.

Any idea what could be missing?

Sounds to me like a bindings problem. How are your bindings set up in
your INF? Do they match up with the sniffer’s IM driver (if that’s what
they use)? Ethereal is a protocol driver I think, for what that’s
worth.

I’d connect to it with WinDbg and look at bindings with
!ndiskd.miniports and !ndiskd.protocols.

Good luck.

-sd

4

Thanks Yogi and Steve. It helped.

It was the issue of incorrect MAC addresses.

  • Vipul