Why Netvmini is not collecting all the packets

NTDEV
1

Hi frnds,

I installed the Netvmini winddk sample(virtual n/w adapter).
when i tried to capture packets by ethereal or wireshark through this netvmini(after installed name displayed as Microsofts packet scheduler) as interface i am able to see collecting only Broadcast packets. Why its not collecting other ethernet packets…?

IS there anything i need to change in .inf file so as to collect all packets ?

expecting asap…

2

I don’t have a lot of experience with the netvmini sample itself, but
I have a virtual ethernet miniport that works fine in Wireshark.
There’s no special code required to support it.

Just out of curiosity, how are you testing? How are you generating
packets for indication? Etc…

On May 31, 2007, at 5:10 AM, xxxxx@yahoo.co.in wrote:

Hi frnds,

I installed the Netvmini winddk sample(virtual n/w adapter).
when i tried to capture packets by ethereal or wireshark
through this netvmini(after installed name displayed as Microsofts
packet scheduler) as interface i am able to see collecting only
Broadcast packets. Why its not collecting other ethernet packets…?

IS there anything i need to change in .inf file so as to collect
all packets ?

expecting asap…

Questions? First check the Kernel Driver FAQ at http://
www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

3

Which kind of packets is the netvmini sample driver generating?

Is Wireshark set to capture into promiscuous or non promiscuous mode?

Have a nice day
GV

----- Original Message -----
From:
To: “Windows System Software Devs Interest List”
Sent: Thursday, May 31, 2007 3:10 AM
Subject: [ntdev] Why Netvmini is not collecting all the packets

> Hi frnds,
>
> I installed the Netvmini winddk sample(virtual n/w adapter).
> when i tried to capture packets by ethereal or wireshark through this
> netvmini(after installed name displayed as Microsofts packet scheduler) as
> interface i am able to see collecting only Broadcast packets. Why its not
> collecting other ethernet packets…?
>
> IS there anything i need to change in .inf file so as to collect all
> packets ?
>
> expecting asap…
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer

4

Hi frnds,

I installed the Netvmini winddk sample(virtual n/w adapter).
when i tried to capture packets by ethereal or wireshark through this
netvmini(after installed name displayed as Microsofts packet scheduler) as
interface i am able to see collecting only Broadcast packets. Why its not
collecting other ethernet packets…?

IS there anything i need to change in .inf file so as to collect all packets ?

What i Did:
Installed Netvmini driver as virtual Network adapter and restarted my machine . Then if i run ethereal or wireshark i am able to see new adapter list as Microsoft’s Packets scheduler in the Capture Interfaces options.

Then i tried to capture Network packets through this interface,i am able to see only DHCP broadcast alone ie i am not able to see other TCP and other multicast packets.
I noticed that this interface listening on autoconfiguration IP address…

can anyone tell me why?

Hi Steve Dispensa,
U said u r having virtual ethernert miniport, can i give my own packets instead of captured network packets and give it to ethereal or wireshark. But i need to do in the driver part itself.

Is this possible …

5

It looks like your interface is trying to DHCP an address. If you
just want to see packets in wireshark, ive your virtual miniport a
static IP, like 1.1.1.1 / 255.255.255.0, and then open a prompt and
ping 1.1.1.2. You should see ARPs, which, of course, are still
broadcasts. If you want to see unicasts, you have to create a static
arp entry for your desired destination.

Obviously, you’re not going to see any *inbound* packets, unless I’m
mis-rememberhing how netvmini works, and unless you write code to
generate some packets in netvmini.

In summary: it sounds like netvmini is working fine.

-sd

On May 31, 2007, at 11:57 PM, xxxxx@yahoo.co.in wrote:

Hi frnds,

I installed the Netvmini winddk sample(virtual n/w adapter).
when i tried to capture packets by ethereal or wireshark
through this
netvmini(after installed name displayed as Microsofts packet
scheduler) as
interface i am able to see collecting only Broadcast packets. Why
its not
collecting other ethernet packets…?

IS there anything i need to change in .inf file so as to collect
all packets ?

What i Did:
Installed Netvmini driver as virtual Network adapter and
restarted my machine . Then if i run ethereal or wireshark i am
able to see new adapter list as Microsoft’s Packets scheduler in
the Capture Interfaces options.

Then i tried to capture Network packets through this interface,i
am able to see only DHCP broadcast alone ie i am not able to see
other TCP and other multicast packets.
I noticed that this interface listening on autoconfiguration IP
address…

can anyone tell me why?

Hi Steve Dispensa,
U said u r having virtual ethernert miniport, can i give
my own packets instead of captured network packets and give it to
ethereal or wireshark. But i need to do in the driver part itself.

Is this possible …

Questions? First check the Kernel Driver FAQ at http://
www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer