Questions tagged [ndis]

NDIS is a programming framework for low-level network drivers on Microsoft Windows

Network Driver Interface Specification (NDIS) is a driver development framework on Microsoft Windows. NDIS supports several types of drivers:

  • Network Interface Card (NIC) drivers
  • Layer 2 filter drivers
  • Layer 3 protocol drivers (like IPv6)
  • NIC aggregation drivers (like LBFO, or virtual switches)

Learn more about NDIS on MSDN.

228 questions
0
votes
2 answers

antivirus NDIS filter removal

On our 1200 windows clients we are using KES 10 antivirus. By error on some desktop workstation we installed the firewall component "klim6". We need a silent uninstall. Not found within Kaspersky tools. Which is the working and proper way…
Massimo
  • 3,171
  • 3
  • 28
  • 41
0
votes
1 answer

How to retrieve mac address from registry during NDIS?

I am trying to pass AddressChnage test case in WHQL test for my virtual miniport driver . During the test i can see the error log like : Check network addresses on the test adapter after modifying the registry with new network address…
user2986042
  • 1,098
  • 2
  • 16
  • 37
0
votes
1 answer

Filter Drive is not loaded - Startup

I have configured my filter driver start type as SERVICE_SYSTEM_START in .inf file, Installed the filter driver manually using the instructions on the Light weight filter driver sample, rebooted the virtual machine to know if my driver is loaded. in…
Rami
  • 5
  • 3
0
votes
1 answer

Local IP of NIC - Light Weight Filter Driver

How do we retrieve the Local Ip address set of the NIC in NDIS 6. I will be doing some IP header modifications on the received Ethernet Frames, so will be looking for local ip of NIC card that my Filter Attached to.
Rami
  • 5
  • 3
0
votes
1 answer

Network Layer address - in LWF

I need to know the Network Address of the NIC in Light Weight Filter Driver, I find "OID_GEN_NETWORK_LAYER_ADDRESSES" that gives Network Layer Address, but MSDN documentation says it is Miniport Driver, Is there a way we can retrieve the Network…
Rami
  • 5
  • 3
0
votes
1 answer

Windows NDIS filter driver

I am writing a NDIS filter driver for windows. When I examine NBL flags, say NDIS_NBL_FLAGS_IS_IPV4,it doesn't seem to have set, nor does any other flags of NblFlags field? Which driver in the stack sets these values?
Nidhi D
  • 3
  • 4
0
votes
1 answer

LWF status when LAN Wire disconnected or re-connected

In Miniport drivers we have two status indications(NDIS_STATUS_MEDIA_CONNECT/NDIS_STATUS_MEDIA_DISCONNECT) to know whether LAN is disconnected or not. Can we use the same indications in LWF to know the status of Media associated with LAN. I have two…
Rami
  • 5
  • 3
0
votes
1 answer

Difference between Return and receive handlers Light Weight Filters

I wanted to find out the differences between ReturnNetBufferListsHandler and ReceiveNetBufferListsHandler, When does NDIS call these call backs. I have light weight filter which will modify the receiving and send packets on the NIC.
Rami
  • 5
  • 3
0
votes
1 answer

Mux Intermediate Driver vs Filter Driver

We have Filter Intermediate Driver implemented in NDIS 5.x (Miniport, Protocol), Since support for this has been removed in NDIS 6.x. I am planning to covert my filter intermediate driver to Mux Intermediate driver with 1 to 1 relationship. I wanted…
Rami
  • 5
  • 3
0
votes
1 answer

Need help for windows 10 support for my NDIS 5.1 IM driver

we are using a open source NDIS IM driver(5.1) which is working fine in windows 7 machine but when we tried in Windows 10 machine its not loading. Driver : ipfw+dummynet Ipfw web site : http://info.iet.unipi.it/~luigi/dummynet/ Source Code :…
0
votes
0 answers

Porting Ndis5 driver to Ndis6

I'm porting a driver from Windows XP to Windows 10 (big leap!). I am following the MSDN article on how to port the driver but some things are missing. I need to know what replaces: TransferDataCompleteHandler ResetCompleteHandler…
0
votes
1 answer

error MSB3073: The command "staticdv.exe /devenv /check" exited with code -1

I have a NDIS 6 filter driver. It is a packet capture driver based on the official ndislwf example. The whole project is open sourced on this GitHub repo. npf.sln can be opened via Visual Studio 2015. My problem is the Static Driver Verifier (SDV)…
hsluoyz
  • 2,739
  • 5
  • 35
  • 59
0
votes
1 answer

How to know ipv4 or ipv6 from NDIS packet buffer?

I am getting packets from NDIS filter SendnetBufferList routine . Inside that I am accepting the buffer after filtering that buffer . In case of NdisMedium802_3 medium , getting packet with Ethernet header (Ethernet frames) . So i can easily…
0
votes
1 answer

How to determine whether a 802.11 raw packet has FCS (4bytes) in a NDIS 6 filter driver?

I have a NDIS 6 filter driver working on Windows Vista and later systems. I have bound it below NativeWiFi Filter so I can see 802.11 packets instead of fake Ethernet packets. And I have set the NDIS_PACKET_TYPE_802_11_RAW_DATA and…
hsluoyz
  • 2,739
  • 5
  • 35
  • 59
0
votes
0 answers

Compare NDIS_STRING case-insensitively at IRQL = DISPATCH_LEVEL?

I have a NDIS 6 filter driver. And I need to compare two NDIS_STRING in a case-insensitive manner at IRQL = DISPATCH_LEVEL. I know the RtlEqualUnicodeString function can compare strings in a case-insensitive manner. But it's only callable at…
hsluoyz
  • 2,739
  • 5
  • 35
  • 59