samedi 18 avril 2015

Windows NDIS driver reordering



I have an NDIS 6 filter driver running on Windows 8. It gets an attach call from the ethernet adapter and all works fine with it.

But, we have a virtual direct access IPv6 adapter called as 'IP-HTTPS tunnel adapter', which sits above us in the driver stack. I came to this conclusion because I am getting the tunneled packets (which is the output of iphttps tunnel) as input to my filter driver.

This is how a part of my inf file looks like:



[Inst_Ndi]
HKR, Ndi,Service,,"rbtnfd_srv"
HKR, Ndi,CoServices,0x00010000,"rbtnfd_srv"
HKR, Ndi,HelpText,,%rbtnfd_help_text%
HKR, Ndi,FilterClass,, scheduler
HKR, Ndi,FilterType,0x00010001,0x00000002
HKR, Ndi\Interfaces,UpperRange,,"noupper"
HKR, Ndi\Interfaces,LowerRange,,"nolower"
HKR, Ndi\Interfaces, FilterMediaTypes,,"ethernet, wan, ndiswan, ppip, jnprncva"
HKR, Ndi,FilterRunType, 0x00010001, 1 ;this filter must run before any protocol can bind to the below miniport

I am not sure if there is anyway for me to put my filter driver before the ip-https interface so that I can receive the packets before it gets tunneled. It would be great if you could provide a way to do it !


Thanks in advance.


Aucun commentaire:

Enregistrer un commentaire