Questions tagged [ndis]

NDIS is a programming framework for low-level network drivers on Microsoft Windows

Network Driver Interface Specification (NDIS) is a driver development framework on Microsoft Windows. NDIS supports several types of drivers:

  • Network Interface Card (NIC) drivers
  • Layer 2 filter drivers
  • Layer 3 protocol drivers (like IPv6)
  • NIC aggregation drivers (like LBFO, or virtual switches)

Learn more about NDIS on MSDN.

228 questions
2
votes
1 answer

Can I Create a VPN application without Virtual miniport driver?

I want to create a simple VPN like with User application. I went though different VPN application software. I can see most of them uses a Miniport Virtual adapter for example: OpenVPN use Windows TAP driver. Another VPN software uses both miniport…
tech_123
  • 90
  • 1
  • 10
2
votes
1 answer

How to set and query multicast address for NDIS Virtual miniport driver?

I want to add multicast support on virtual Miniport driver . I have a filter driver binds over each physical NIC . As per Microsoft document https://msdn.microsoft.com/en-us/library/windows/hardware/ff569073(v=vs.85).aspx I stared to add support…
user2986042
  • 1,098
  • 2
  • 16
  • 37
2
votes
1 answer

Wireshark doesn't show interface when ndis miniport driver installed

Wireshark doesn't show the Ethernet interface after the miniport driver is installed. Wireshark shows "No interfaces found". But Microsoft Message Analyzer and NetMon can locate the adapter interface and show the captured packets. But if I restart…
2
votes
0 answers

Is it possible to have two filter drivers in one binary on Windows?

I have a filter (light-weight filter, LWF) driver that captures the packets from all the adapters. The FilterClass is compression, the same with official ndislwf example. This setting will bind the filter above Native Wifi Filter. However, this…
hsluoyz
  • 2,739
  • 5
  • 35
  • 59
2
votes
1 answer

How to enable 802.11 monitor mode (DOT11_OPERATION_MODE_NETWORK_MONITOR) in a NDIS 6 filter driver?

I have ported WinPcap to a NDIS 6 filter driver: https://github.com/nmap/npcap. But it still doesn't support capturing all 802.11 native packets (like control and management frames are not captured). I noticed there is a way setting…
hsluoyz
  • 2,739
  • 5
  • 35
  • 59
2
votes
1 answer

NdisMGetBusData function returns zero

I'm trying to develop NDIS6.0 based mini-port driver on WEC7 (Windows Embedded Compact 7) for a PCIe network card. In MPInitialize function when I try to read PCI config space using function NdisMGetBusData, It is returning zero. From documentation,…
Keshava GN
  • 4,195
  • 2
  • 36
  • 47
2
votes
1 answer

Was compatibility for NDIS 5.x drivers removed in Windows 10?

I have an NDIS 5.x Passthru driver that was adapted from this sample. Obviously NDIS 6 has been available for quite some time, rendering 5.x obsolete, but backward compatibility has allowed the driver to continue to run in up to and including…
jeffm
  • 3,120
  • 1
  • 34
  • 57
2
votes
0 answers

Is it possible to capture all loopback packets on Windows using WFP callouts?

I am a developer of WinPcap, a famous packet capturing and sending software under Windows. I have ported WinPcap to NDIS 6 Light-Weight Filter technique, but it still doesn't support loopback packets (such as packets sent to and received from…
hsluoyz
  • 2,739
  • 5
  • 35
  • 59
2
votes
1 answer

Understanding NDIS virtual miniport driver

I have built and installed the netvmini on windows 7/8. And Im able to ping from one IP to the other. But I have some doubts with respect to its functionality which are listed below: In which layer does the driver get placed w.r.t OSI layers. Does…
Reena Cyril
  • 417
  • 4
  • 11
2
votes
2 answers

NDIS or TDI for packet redirection to a local proxy

I need to develop a transparent filter to redirect outgoing HTTP packets to a local proxy, to do transparent content filtering. Which is the best technology to do it, TDI or NDIS IM? My main constraint is to avoid conflicts with antivirus software,…
Enrico Detoma
  • 3,159
  • 3
  • 37
  • 53
2
votes
2 answers

windows NDIS intermediate (IM) driver installation programmatically

I am learning windows NDIS Intermediate(IM) driver development.I am getting problem in installation . I always need to install it manually. My question is how can i do NDIS intermediate (IM) driver installation programmatically Regards Navaneeth
Navaneeth
  • 607
  • 2
  • 9
  • 19
2
votes
1 answer

Installing the filter driver programmatically?

I am trying to write C++ code programmatically installing NDIS 6.0 lightweight filter driver. After reviewing WinDDK, online examples and MSDN documentation I ended up with the code sample below. ************** hr = InstallSpecifiedComponent( …
arya2arya
  • 291
  • 2
  • 21
2
votes
2 answers

Why NdisFRegisterFilterDriver failed with NDIS_STATUS_FAILURE under Windows 8?

everyone. I am developing a NDIS 6 filter driver (LWF). the NdisFRegisterFilterDriver call in the DriverEntry routine failed with NDIS_STATUS_FAILURE. This only happens to Win8 x86, the driver can normally run under Win7 x86. It is so strange. I…
hsluoyz
  • 2,739
  • 5
  • 35
  • 59
2
votes
2 answers

Is it possible to capture localhost packets (127.0.0.1 as destination) in NDIS layer?

I am developing an NDIS 6 filter driver of Win7 and Win8 for WinPcap and Nmap. As you know, Nmap is a network scanner. A requirement of Nmap is to capture localhost packets like "ping 127.0.0.1", so that Nmap can test the local machine itself, too.…
hsluoyz
  • 2,739
  • 5
  • 35
  • 59
2
votes
1 answer

how to call NdisOpenAdapterEx or the alternative outside the ProtocolBindAdapter routine?

I am porting the famous packet capture software -- WinPcap from NDIS 5.0 to NDIS 6.x. I tried to translate every NDIS 5.0 function to its 6.0 version. In WinPcap sourcecode function NdisOpenAdapter is called by NPF_OpenAdapter in Openclos.c. I…
hsluoyz
  • 2,739
  • 5
  • 35
  • 59
1 2
3
15 16