Forum Replies Created
-
Posts
-
then you can see,i can list adapts but i can get any packet;
[attachment=1:2639f4z2]001.gif[/attachment:2639f4z2]
then look at my other server show:
[attachment=1:2639f4z2]001.gif[/attachment:2639f4z2]
it is very clear to see many packet in and out. so we should not be had the WaitForSingleObject to be waited
bad! sometimes ago i had found this, i thought i had made a mistake for myself.
the six bytes is payload
the fucked virus software,gethostbyaddr is a normal function. but the silly virus software still hook it.
i can get the 20 bytes from the gethostbyaddr,then jmp to the aftter 20 bytes! 🙂
i had solved this problem! i compile the ndisapi.cpp to bcb format static lib.
in the cpp file,the _stricmp should be replace with _tcsicmp,so u can compile it. using is in bcb,u can throw out of the ndisapi.dll
oh,bad,the board,i saw which is russion language,i can not known how to upload the ndislib.rar (bcb version)
and,can two application(two thread) can both to open the driver?(SetAdapterMode,SetPacketEven)!
===============================================
talk about the winpkfilter to block the packet. in your sample,we known,we can do nothing with the packet if we dont need the packet. but if we need it,we can send it to MSTCP or sendit to adpatch. another thing is,we can constructure a pakcet and sendit to mstcp etc! use other words,we can cache the PETH_REQUEST packet,want for a moment, i sent it out. in fact, the times i had use the api.ReadPacket read other packet for many times! is there a circus buffer in ndisrd.sys???=================================================
MSTCP_FLAG_FILTER_DIRECT by default it is setting on or off?
