Yes, that is correct. In other words, each protocol driver is presented with its own logical copy of each inbound packet such that one protocol driver may not intercept or modify the same packet that is presented to the other protocol drivers.
Check out the sites that I recommended. They have some good information. ----- Original Message ----- From: sathvanth subramaniam <[EMAIL PROTECTED]> Date: Fri, 20 Dec 2002 09:07:42 +0530 To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> Subject: RE: [WinPcap-users] Am i doing it right? > Hi brad, > Do u mean to say that i cannot intercept packets with the PROTOCOL DRIVERS? > > > sathvanth > > -----Original Message----- > From: Contrac Prog [mailto:[EMAIL PROTECTED]] > Sent: Thursday, December 19, 2002 9:21 PM > To: [EMAIL PROTECTED] > Subject: Re: [WinPcap-users] Am i doing it right? > > > No, this will not work. Winpcap is an NDIS protocol driver, as is TCP/IP. > Winpcap is a peer to TCP/IP - NDIS submits each network packet to all > protocols bound to NDIS. > > Therefore, you cannot modify the packet that NDIS presents to TCP/IP. You > would need to squeeze between NDIS and TCP/IP in order to modify the > packets. You might want to look at www.pcausa.com and www.ntndis.com. > > Good luck, > > Brad > > ----- Original Message ----- > From: sathvanth subramaniam <[EMAIL PROTECTED]> > Date: Thu, 19 Dec 2002 15:38:10 +0530 > To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> > Subject: [WinPcap-users] Am i doing it right? > > > hi, > > I am trying to make some small changes in the winpcap source ,Please tell > > me if i am doing anything wrong. > > This is what i intend to do. > > In the packet read ,where the packets are read into the kernel buffer i > > would like to capture the packets and modify some headers. > > I do not want to copy things to a user buffer,instead after modifyign the > > packets i want it to proceed to the TCP stack...Will this work? > > Please let me know of your suggestions, > > > > Regards, > > sathvanth > > > > > > ================================================================== > > This is the WinPcap users list. It is archived at > > http://www.mail-archive.com/[email protected]/ > > > > To unsubscribe use > > mailto: [EMAIL PROTECTED]?body=unsubscribe > > ================================================================== > > -- > __________________________________________________________ > Sign-up for your own FREE Personalized E-mail at Mail.com > http://www.mail.com/?sr=signup > > Meet Singles > http://corp.mail.com/lavalife > > > > ================================================================== > This is the WinPcap users list. It is archived at > http://www.mail-archive.com/[email protected]/ > > To unsubscribe use > mailto: [EMAIL PROTECTED]?body=unsubscribe > ================================================================== > > > ================================================================== > This is the WinPcap users list. It is archived at > http://www.mail-archive.com/[email protected]/ > > To unsubscribe use > mailto: [EMAIL PROTECTED]?body=unsubscribe > ================================================================== -- __________________________________________________________ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup Meet Singles http://corp.mail.com/lavalife ================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[email protected]/ To unsubscribe use mailto: [EMAIL PROTECTED]?body=unsubscribe ==================================================================
