IOCTL_TCP_QUERY_INFORMATION_EX does not return LISTENING Sockets

I have a TDI Client that sends down TDI_LISTEN IRPs to TCPIP.sys for
setting up sockets in server mode as opposed to registering a
TDI_EVENT_CONNECT handler like AFD.sys does. Everything works fine,
except one weired problem.

When utilites like sysinternals TcpView.exe or Microsoft's own
netstat.exe sends down a IOCTL_TCP_QUERY_INFORMATION_EX to TCPIP.sys
with the following parameters :

toi_entity.tei_entity=CO_TL_ENTITY
toi_entity.tei_instance=0
toi_class=INFO_CLASS_PROTOCOL
toi_type=INFO_TYPE_PROVIDER
toi_id=TCP_MIB_TABLE_ID

the sockets that have the LISTEN_IRP pending are never returned in the
MIB Table ( i.e. array of MIB_TCPROW structures).

I have tried to trace down the problem in tcpip!TdiQueryInformationEx
but haven't been successful yet ?

Is this a bug in MS TCPIP.sys's handling of
IOCTL_TCP_QUERY_INFORMATION_EX under Win2K/WinXP ?

Has anyone encountered this before ?

Thanks in advance for any answers,
[Page Fault/KiTrap0E_at_yahoo.com]

Maxim
Sat Feb 07 21:23:04 CST 2004

Since AFD does not use TDI_LISTEN, I would recommend you to not do this
either.

Probably the TCP stack is just not tested well in this non-standard mode.

--
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
maxim@storagecraft.com
http://www.storagecraft.com


"Page Fault" <KiTrap0E@yahoo.com> wrote in message
news:f97633b3.0402060011.174d8c43@posting.google.com...
> I have a TDI Client that sends down TDI_LISTEN IRPs to TCPIP.sys for
> setting up sockets in server mode as opposed to registering a
> TDI_EVENT_CONNECT handler like AFD.sys does. Everything works fine,
> except one weired problem.
>
> When utilites like sysinternals TcpView.exe or Microsoft's own
> netstat.exe sends down a IOCTL_TCP_QUERY_INFORMATION_EX to TCPIP.sys
> with the following parameters :
>
> toi_entity.tei_entity=CO_TL_ENTITY
> toi_entity.tei_instance=0
> toi_class=INFO_CLASS_PROTOCOL
> toi_type=INFO_TYPE_PROVIDER
> toi_id=TCP_MIB_TABLE_ID
>
> the sockets that have the LISTEN_IRP pending are never returned in the
> MIB Table ( i.e. array of MIB_TCPROW structures).
>
> I have tried to trace down the problem in tcpip!TdiQueryInformationEx
> but haven't been successful yet ?
>
> Is this a bug in MS TCPIP.sys's handling of
> IOCTL_TCP_QUERY_INFORMATION_EX under Win2K/WinXP ?
>
> Has anyone encountered this before ?
>
> Thanks in advance for any answers,
> [Page Fault/KiTrap0E_at_yahoo.com]