Hi, I am an c/c++ application developer. I would like to expose more in
network driver and gain some inside experience. Please forgive me if those
question looks like dummy.

here is the first task I created for myself.

I want to intercept the packet from NIC, and response with another packet.
How can I achieve this?
1. I read msdn ddk doc and searched on internet, and feel a miniport driver
will server my task just right. Please comment on this.
2. Is miniport driver performance/response better than IM / TDI driver?
3. Which ref books are popular and easy to follow? pls enumerate some of
them.
4. Is there some open source for packet interception I can borrow?

Thank you very much for your help!

John

Re: development of network driver: newbie question by Stephan

Stephan
Fri Dec 14 05:31:34 PST 2007

Hmm, an NDIS miniport driver talks to the network hardware directly,
so you need to be at a higher level.

So what you probably need to write is an NDIS protocol driver. Here
you can receive and send packets to/from the network.

[If you instead want to *filter* or modify network traffic that goes
to/from other protocols like the TCP/IP network stack, then you choice
would be to write an NDIS Filter intermediate driver.]

No books on NDIS out there, sorry. All you basically get is the DDK/
WDK along with documentation and sample code. There is of course also
www.ndis.com by MVP Thomas F. Divine and this forum.

Get the WDK here:

http://www.microsoft.com/whdc/devtools/ddk/

Documentation is included as "online help", but also available
actually online here:

http://msdn2.microsoft.com/en-us/library/
> Win32 and COM Development
> Windows Driver Kit

Stephan
---
On Dec 14, 10:43 am, "john" <johnli1...@hotmail.com> wrote:
> Hi, I am an c/c++ application developer. I would like to expose more in
> network driver and gain some inside experience. Please forgive me if those
> question looks like dummy.
>
> here is the first task I created for myself.
>
> I want to intercept the packet from NIC, and response with another packet.
> How can I achieve this?
> 1. I read msdn ddk doc and searched on internet, and feel a miniport driver
> will server my task just right. Please comment on this.
> 2. Is miniport driver performance/response better than IM / TDI driver?
> 3. Which ref books are popular and easy to follow? pls enumerate some of
> them.
> 4. Is there some open source for packet interception I can borrow?
>
> Thank you very much for your help!
>
> John

Re: development of network driver: newbie question by Maxim

Maxim
Fri Dec 14 09:07:43 PST 2007

NDIS IM is a solution.

For Vista only, you can also use NDIS6 LightWeight Filter.

--
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
maxim@storagecraft.com
http://www.storagecraft.com

"john" <johnli1995@hotmail.com> wrote in message
news:yfs8j.30251$lD6.5945@newssvr27.news.prodigy.net...
> Hi, I am an c/c++ application developer. I would like to expose more in
> network driver and gain some inside experience. Please forgive me if those
> question looks like dummy.
>
> here is the first task I created for myself.
>
> I want to intercept the packet from NIC, and response with another packet.
> How can I achieve this?
> 1. I read msdn ddk doc and searched on internet, and feel a miniport driver
> will server my task just right. Please comment on this.
> 2. Is miniport driver performance/response better than IM / TDI driver?
> 3. Which ref books are popular and easy to follow? pls enumerate some of
> them.
> 4. Is there some open source for packet interception I can borrow?
>
> Thank you very much for your help!
>
> John
>
>