[kchuang]

@kchuang wrote:

@SerpentFly wrote:

There are more and more devices (4G or 3G broadband USB stick) coming out with different types and I want to let WinPkFilter to see the packets from them.

These devices normally has wan or ethernet (if vendor provides ethernet emulation software) media type. Since Windows 7 new media type was added (Mobile Brodband stack) named ppip. All these media types are supported by WinpkFilter drivers.

Besides, when we use WinpkFilter to access ppip media type devices, it seems the devices are unable to connect to the internet. Does WinpkFilter block the usage of ppip devices?

[kchuang]

@SerpentFly wrote:

There are more and more devices (4G or 3G broadband USB stick) coming out with different types and I want to let WinPkFilter to see the packets from them.

These devices normally has wan or ethernet (if vendor provides ethernet emulation software) media type. Since Windows 7 new media type was added (Mobile Brodband stack) named ppip. All these media types are supported by WinpkFilter drivers.

Thanks for your response. Currently, we have problems to catch packets from ppip media type. When we use “GetTcpipBoundAdaptersInfo” function from the sample code (adapter list), it seems the adapter with ppip media type doesn’t show up. What should we modify to show adapter with ppip media type?

Thanks!

[kchuang]

If I want to update the filter intermediate driver, do I have to delete all the cached inf/pnf files?
Is any one able to tell me how to locate the filter intermediate driver in windows/inf folder? It seems no matter we uninstall or re-install wpkfilter, these cached files won’t be removed. So we have to locate these inf/pnf files and try to delete them. Any idea what library or function i can refer to?

Thanks!

[kchuang]

Are there any ways that can show all the drivers’ lower range? There are more and more devices (4G or 3G broadband USB stick) coming out with different types and I want to let WinPkFilter to see the packets from them. I can set up as “no lower” type in filtermediatype but that will filter all the devices which I prefer not doing. Any idea what I can do?

Thanks!

[kchuang]

This time I try to take “ethernet” out of filtermediatype in .inf file. But in my proc, I still see packets go through ethernet adapter. Any idea?

[kchuang]

Hi

I am trying to capture packets from vmware virtual network adapter and modified the WinpkFilter NDIS IM driver as you recommended:

HKR, NdiInterfaces, FilterMediaTypes, , “nolower, ethernet, wan”

However, I cannot see the vmware virtual network adapter in my proc. I am thinking my proc supposes to show vmware network adapter as long as I put nolower in the filtermediatype. Am I correct? If I am correct, why my proc still cannot see vmware network adapter? Any suggestions?

Thanks!

[Author]

Posts