TDI Driver problem

[lblanquet]

Hello,

I’m currently studying the feasability of using a TDI filter in order to analyse HTTP packets for monitoring purposes.
I’ve downloaded and installed a version of “Local Network Monitor API” product.
The samples ran OK (Dual Core – XP SP2)
But I ran into problems with a MySQL application (Server + client running on localhost) :

Select with large returned dataset : blocked,
Select with small returned data work OK.

These problems disappear when I desinstall the product.
Some hints ?

Best regards,

Laurent.

[Vadim Smirnov]

I can see only two possibilities:

1) Incorrect set of filters loaded
2) Software conflict with some third party firewall application

It is difficult to say what was the exact reason. To avoid software conflict possibility I would recommend running the same configuration on the freshly installed OS without firewall/anti virus software because the last one can include own TDI filter which interfere LNM.

[lblanquet]

Hi,

Thanks for fast answer.
The system I’ve used has not antivirus or firewall software.
I would like to know about this problem, because the goal of this project is to install the software on client / server system in large companies.
Do you think it’s realistic ?
Can I send you a dump of my system configuration in order to make a diagnostic ?

Best regards, Laurent.

[Vadim Smirnov]

I know at least several widely used software products which use LNM engine. At least one of them is used for database monitoring. So I would say this is realistic.

Try using Local Network Monitor to avoid the possibility that you use incorrect filters combination.

[lblanquet]

Hi,

I’ve done the following :

1 – Install “Local Network Monitor”
2 – Rebooted
3 – Tried some MySQL queries.

Result : Large requests do not work

4 – Unactivated “ntTdiDr” driver
5 – Rebooted

Result : Large requests work

Can I send you a snapshot of my system configuration (winmsd output) ?

Best regards, Laurent.

[Vadim Smirnov]

Looks like some sort of software conflict. Please e-mail winmsd output to support(at)ntkernel.com, it may shed some light.

[Vadim Smirnov]

I have checked your software configuration and I would say that you have a pretty large amount of various low level network software and among other things there is neofltr_600_12507 Juniper Networks TDI Filter Driver (NEOFLTR_600_12507). This can be a reason for software conflict. As you may noticed we try to fix incompatibilities with 3rd party TDI filters (like the latest 2.2.5 release was relative to compatibility with TDI filter from McAfee). Of course the best approach would taking a fresh OS installation and adding software until the problem appears.

[lblanquet]

Hi Vadim,

I’ve the following :

– Uninstall Juniper TDI drivers
– Install “Local Network Monitor” driver

=> Testing : Everything OK

– Install Juniper

=> Testing : Problems with mySQL large queries

If Juniper’s driver is loaded witout NTKernel’s driver the tests are OK as well.
So .. what can be done to insure compatibility with Juniper’s driver ?

Best regards,

Laurent.

[Author]

Posts