hook ndis under win2k (from osr)

Diviner — Fri, 26 May 2006 02:22:00 GMT

ntdev member 4031

xxxxxx@mail.ru

Join Date:

Posts To This List: 36

http://www.osronline.com/showThread.cfm?link=22589

hook ndis under win2k

Hello!!! I have such question When i dynamically load my driver i just call NdisRegisterProtocol And NdisOpenAdapter after this i have NdisBindingHandle(pointer to _NDIS_OPEN_BLOCK) in this structure i find PNDIS_ADAPTER_BLOCK (but if you open miniport i find that its PNDIS_MINIPORT_BLOCK) and finally we have list of NDIS_M_OPEN_BLOCK(such name i found in DDK for nt 4.0) this structure has field FakeOpen - this is real _NDIS_OPEN_BLOCK (here i modify SendHandler,RecieveHandler and other) So structure of NDIS_M_OPEN_BLOCK in windows 2000 different and not documented . May be somebody know how i can find it I here something about TrueVector technology in firewall is this the same thing or not? --- You are currently subscribed to ntdev as: $subst('Recip.EmailAddr') To unsubscribe send a blank email to leave-ntdev-$subst('Recip.MemberIDChar')@lists.osr.com

Message 2 of 2

23 Jan 02 07:01

Vadim V. Smirnov

xxxxxx@pcausa.com

Join Date: 28 Sep 2001

Posts To This List: 52

RE: hook ndis under win2k

Hi, Alex Take a look http://www.ntndis.com/articles/firewalleng.htm . Hope it will shed some light, there is also short look inside TrueVector. BR, Vadim -----Original Message----- From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com]On Behalf Of Alex Jones Sent: Wednesday, January 23, 2002 2:19 PM To: NT Developers Interest List Subject: [ntdev] hook ndis under win2k Hello!!! I have such question When i dynamically load my driver i just call NdisRegisterProtocol And NdisOpenAdapter after this i have NdisBindingHandle(pointer to _NDIS_OPEN_BLOCK) in this structure i find PNDIS_ADAPTER_BLOCK (but if you open miniport i find that its PNDIS_MINIPORT_BLOCK) and finally we have list of NDIS_M_OPEN_BLOCK(such name i found in DDK for nt 4.0) this structure has field FakeOpen - this is real _NDIS_OPEN_BLOCK (here i modify SendHandler,RecieveHandler and other) So structure of NDIS_M_OPEN_BLOCK in windows 2000 different and not documented . May be somebody know how i can find it I here something about TrueVector technology in firewall is this the same thing or not? --- You are currently subscribed to ntdev as: xxxxx@pcausa.com To unsubscribe send a blank email to leave-ntdev-$subst('Recip.MemberIDChar')@lists.osr.com --- You are currently subscribed to ntdev as: $subst('Recip.EmailAddr') To unsubscribe send a blank email to leave-ntdev-$subst('Recip.MemberIDChar')@lists.osr.com