Thank you for your accurate answer,
for the best clarity of intention we are implementing PRP, a layer 2 redundancy protocol,
and we already have a software for Linux that we are porting to Windows.
The software use libpcap for capturing RAW packets on the physical interface and a TUN/TAP to
create a virtual interface to which it forward the “manipulated” packets transparently.
To implement PRP (adding a suffix at level 2) and to mitigate libpcap+TUN/TAP performance issues, would you still suggest us to use NDIS LWF?
We prefer a solution without writing code for kernel space but only in user space, can we still use NDIS LWF?
Thanks anyway for the precious suggestion,
Giulio