C++ Create a handle to a NdisProt driver

Question

I try to write to a NdisProt driver and send raw ethernet packets. I imported some C++ comands to my C# program, so that I can access the driver. When I try to open a handle to the driver I always get a invalid handle. I already tried it with just "NdisProt" as the path, but it didn't solve it. Do you have any suggestions why i get a invalid handle?

private bool OpenDriver()
{
    // User the CreateFile API to open a handle to the file
    this.m_iHandle = CreateFile("\\\\.\\NdisProt,
    GENERIC_WRITE | GENERIC_READ, 0, 0, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, 0);

    // Check to see if we got a valid handle
    if ((int)m_iHandle <= 0)
    {
        // If not, then return false and reset the handle to 0
        this.m_iHandle = IntPtr.Zero;
        return false;
    }

If you now any other solutions to send raw ethernet packets in a C# program please let me know.

Thanks for any help!

And check error by GetLastError (see https://learn.microsoft.com/en-us/windows/desktop/seccrypto/retrieving-error-messages) — isnullxbh, Aug 27 '18 at 11:26
Unfortunatly it does not fix the problem, when run VS as admin. — LeoBiel, Aug 27 '18 at 12:00
An invalid HANDLE has the integer value -1, so that's what you need to check against rather than any non-positive value — Carsten Hansen, Aug 28 '18 at 09:18

score 1 · Accepted Answer · answered Aug 31 '18 at 07:13

Update: I just solved the problem by adding another manifest, so that the application is run as admin.

The solution with the NDIS Driver did still not work so I searched for another solution. I found the SharpPcap library. With that library I am able to modify the packets I want to send e.g. change the Destination-MAC-Adress.

Thanks for your answers!

score 0 · Answer 2 · answered Aug 27 '18 at 11:37

0

If you now any other solutions to send raw ethernet packets in a C# program please let me know.

What about Socket class?

Constructor:

public Socket (System.Net.Sockets.SocketType socketType, System.Net.Sockets.ProtocolType protocolType),

where socketType can take the next value: SocketType.Raw

answered Aug 27 '18 at 11:37

isnullxbh

807
13
20

I just want to send packets with a source MAC-Address, a destination MAC-Address and some random data. I guess it is not possible with raw sockets. – LeoBiel Aug 27 '18 at 11:48
@LeoBiel, ok, you are right. It require to import system C-libraries. – isnullxbh Aug 27 '18 at 11:59
@LeoBiel, please, check this: https://www.codeproject.com/Articles/5292/Raw-Ethernet-Packet-Sending – isnullxbh Aug 27 '18 at 12:00
thats the basis (codeproject.com/Articles/5292/Raw-Ethernet-Packet-Sending) I'm working on, but I can not get a handle to the ndis driver – LeoBiel Aug 27 '18 at 12:05
@LeoBiel, so, you should check error (as I said earlier) by GetLastError – isnullxbh Aug 27 '18 at 12:07
Is there any example how to use GetLastError? – LeoBiel Aug 27 '18 at 12:36
@LeoBiel, for example: if (INVALID_HANDLE_VALUE == (this.m_iHanle = CreateFile(...)) { DWORD lastErr = GetLastError(); } – isnullxbh Aug 27 '18 at 12:39
To retrieve error description: https://stackoverflow.com/a/17387176/6266408 – isnullxbh Aug 27 '18 at 12:40

score 0 · Answer 3 · answered Aug 28 '18 at 06:32

If you now any other solutions to send raw ethernet packets in a C# program please let me know.

You can import functions from Windows Winsock library and use SOCK_RAW flag when creating a socket.

int sock = socket(AF_INET, SOCK_RAW, IPPROTO_UDP);

C++ Create a handle to a NdisProt driver

3 Answers3