Re: How to set NIC to promiscuous mode from FilterHook driver

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

He is probably referring to this tyoe of Filter Hook, documented in
MSDN at URL:

http://msdn.microsoft.com/en-us/library/ms802735.aspx

Thomas F. Divine

On May 12, 5:59 pm, "Alireza Dabagh [MS]" <a...@xxxxxxxxxxxxxxxxxxxx>
wrote:
I did not understand exactly what your component is. "Filter hook driver"
could mean one of those nasty virus like drivers that take a shortcut by
hijacking NDIS and TCPIP entry points. It could also mean an NDIS IM filter
(or lightweight filter for NDIS 6 and higher) drivers written to spec or it
could be something else. If your driver is hijacking NDIS/TCPIP entry
points, please disregard my mail. Unfortunately many people on this
newsgroup will help you nevertheless. I can't.

If your object is to see packets sent to the other interfaces on the
network -from- this machine, then just look at them on the transmit path.

If you want to see packets sent to the other interfaces connected to the
same switch then read on.

You set a NIC to promiscuous mode by sending a set_packet_filter OID to the
NIC. (you need to be a NDIS protocol or lightweight driver to do this ). But
that will not help you. Any switch worth the box it came in, will not allow
you to see "packets destined to other machines in the network" just because
you set the NIC to promiscuous mode (with the exception of being connected
to a "mirror" port).

-ali

--
This posting is provided "AS IS" with no warranties, and confers no rights..

<vasanthara...@xxxxxxxxxxxxx> wrote in message

news:e37c994c-0a95-45bb-9e25-b0f59256a490@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> Hi !

I want to receive all packets in my filter hook driver and do
filtering the TCP packets which matches a particular destination
address in the network. So, I wrote a filter hook driver and is
working fine. Now,  I want to get packets destined to other machines
also in the network, from my filter hook driver. How can I set the NIC
to promiscuous mode so that I shall receive other packets also in my
PacketFilterExtension function.

Is it possible? If so, how can I set it?

Please help.

thanks in advance,

regards,
vasanth.

.

Relevant Pages

  • Re: How to troubleshoot why ath0 cant connect to a passwordless wireless network?
    ... I asked similar question here before, somebody asked me to downgrade atheros driver to one particular lower version. ... You seem to say your network is open. ... It can be used to identify where packets are lost in the hierarchy. ... When in doubt c&p real output; describing a problem often causes useful info to be left out. ...
    (freebsd-hackers)
  • Re: Max Packet Size in Kernel
    ... Do you mean that you're developing a driver for a network ... whose packets are limited to 256 bytes, or do you mean something else? ... > so setting MTU to 256 might be a violation of IP. ...
    (comp.os.linux.development.system)
  • Re: netif_stop_queue does not cause higher layers to suspend
    ... self-written network driver. ... interface) that wraps all incoming packets into UDP packets. ... stop of the TX queue to the upper network layers? ...
    (comp.os.linux.development.system)
  • Re: how to generate UDP packets within a Network Device Driver?
    ... > we have implemented a Network Device Driver and we want to generate ... > UDP packets from the DD and forward them using netif_rx to the User Space. ... file descriptor in user space to a network interface. ...
    (comp.os.linux.development.system)
  • Re: Sending millions of packets
    ... I vote with Ken Wickes on a bug. ... Some adapter driver authors use bytes instead of packets, ... > Still a network traffic analyzer is worth a look if you are worried. ...
    (microsoft.public.windowsxp.network_web)