Could this be implemented with an NDIS or TDI driver?

From: Bill Paxman (william.paxman_at_siliconboston.com)
Date: 04/09/04


Date: 9 Apr 2004 11:14:40 -0700

Hello Windows experts,

I have UNIX development experience but am a Windows newbie. I've been
asked to find out the feasability of creating a Windows client that
does the following:

* Sits above TCP/UDP, but below the applications
* Is able to write to disk all TCP or UDP traffic on selected ports
* Is able to read the payload of a TCP or UDP packet
* Is able to read from the file system
* Is able to delete selected TCP or UDP traffic so that the host
  applications do not see it.
* Is able to pass selected TCP or UDP traffic to the host applications
* Is able to generate new TCP or UDP packets (i.e. packets that did
  not enter this node from the network) that will be sent to
  applications on this host.
* Is able to generate TCP or UDP traffic destined for another host
* Maintains state between invocations

In addition, if there is VPN software already on this host, is there a
way of ensuring that the client we want to develop sits on top of the
VPN software so that it sees only the decrypted traffic?

What I have learned so far suggests this might be possible with:

1. A combination of an NDIS intermediate driver and application, or
2. A combination of a TDI driver and an application

Will either one of these work? If not, is there some other way of
doing this? If this is possible, we will certainly get experienced
professional help in implementing this. Thanks in advance for any
pointers.

Bill



Relevant Pages

  • Could this be implemented with an NDIS or TDI driver?
    ... asked to find out the feasability of creating a Windows client that ... * Sits above TCP/UDP, but below the applications ... Is able to write to disk all TCP or UDP traffic on selected ports ... Is able to pass selected TCP or UDP traffic to the host applications ...
    (microsoft.public.win32.programmer.kernel)
  • Re: Could this be implemented with an NDIS or TDI driver?
    ... Maxim Shatskih, Windows DDK MVP ... but below the applications ... > * Is able to write to disk all TCP or UDP traffic on selected ports ... > * Is able to pass selected TCP or UDP traffic to the host applications ...
    (microsoft.public.win32.programmer.kernel)
  • Re: Could this be implemented with an NDIS or TDI driver?
    ... Maxim Shatskih, Windows DDK MVP ... but below the applications ... > * Is able to write to disk all TCP or UDP traffic on selected ports ... > * Is able to pass selected TCP or UDP traffic to the host applications ...
    (microsoft.public.development.device.drivers)
  • Re: The beauty of TCP/IP
    ... > so why would you 'almost certainly be using TCP'? ... Applications with round-trips (i.e., they wait on a response from the ... > hops in UDP is critical assumes that all hops have the same latency, ... So yeah, of course latency ...
    (comp.lang.java.programmer)
  • re: xhost: cannot connect to X server
    ... clients can connect from any host ... When I telnet from a Slackware client to the remote host running Lenny + ... accept incoming TCP + X ... removed KDE and installed Gnome, ...
    (Debian-User)