Vadim Smirnov

Forum Replies Created

Viewing 15 posts - 946 through 960 (of 1,496 total)
  • Author
    Posts
  • in reply to: Implementing Custom Subsystem == ? #6609
    Vadim Smirnov
    Keymaster

      Since officially MS does provide tools for extending Windows with new subsystems the task looks very non trivial (if possible at all without having the access to the complete source code).

      in reply to: WinpkFilter sample in Visual Basic 6.0 #6615
      Vadim Smirnov
      Keymaster

        Among VB samples in WinpkFilter package you can find PassThru. This is basic sample to filter (drop, pass, modify) the network packets.

        in reply to: Capturing double copies in VirtNet Adapter #6604
        Vadim Smirnov
        Keymaster

          May be the reason is in the loopback packet indication. You see packet twice, one time when it is sent and second time when it is indicated back by NDIS (loopback indication) to installed protocols. This is just a version, because I have no idea how you emulate packets on VirtNet.

          in reply to: Error when installing Internet Gateway #6603
          Vadim Smirnov
          Keymaster

            Internet Gateway can be installed on Windows XP in two variants, with NDIS hooking driver or NDIS IM driver. As I can see from log you have chosen to install NDIS IM driver, however have not you installed WinpkFilter run time before on this system? Or Internet Gateway with NDIS hooking driver selected?

            in reply to: winpkfilter – Vista x64 SP1 compatible? #6601
            Vadim Smirnov
            Keymaster

              Testing WinpkFilter 3.0.4 on Windows Vista x64 SP1 have not discovered any problems.

              Probably you have experienced some software conflict or installation went wrong because of Driver Signing policy.

              in reply to: need to get access to imports section of ntkernl.exe #6602
              Vadim Smirnov
              Keymaster

                What do you actually mean under “access”? Address? If so then you have to parse PE header as usual to get imports table address.

                in reply to: winpkfilter – Vista x64 SP1 compatible? #6599
                Vadim Smirnov
                Keymaster

                  Could you please clarify what version of WinpkFilter you have been using on Vista x64?

                  in reply to: VIRTNET – PC X PC #6594
                  Vadim Smirnov
                  Keymaster

                    Since this is a virtual network interface you can’t connect two systems with it, but you can emulate the connection between two VirtNet adapters with WinpkFilter. However, you will need some real transport between you computers (another network adapter, direct cable connection, bluetooth or etc…)

                    in reply to: How to redirect the blocked ip to the desired page?? #6596
                    Vadim Smirnov
                    Keymaster

                      1. How can we redirect the ip which is browsing the restricted websites to the desired page. Though our program blocks the website but it is unable to redirect the page.

                      You can’t redirect connections using existing LNM API, it would require an additional kernel level extension. Actually redirects are far easier implemented using WinpkFilter.

                      2. We connected two PC via LAN wire and gave internet connection to one of them(gateway). We are accessing the internet on another PC via the previous one. But the data of the non-gateway PC is encrypted and hence we are unable to monitor its requests.

                      The only correct way I can see is installing your software on gateway system and monitoring the Internet connection with WinpkFilter. LNM API does not have access to the routed packets.

                      in reply to: Local Network Monitor API and BSOD #6582
                      Vadim Smirnov
                      Keymaster

                        The problem is fixed in 2.2.6. Thanks again for reporting this.

                        in reply to: Where can I find these files #6593
                        Vadim Smirnov
                        Keymaster

                          How do other people get these files?

                          Commercial licenses of WinpkFilter are also available and do include all required redistributables.

                          in reply to: Only a few sync-packets detected #6589
                          Vadim Smirnov
                          Keymaster

                            Only packets containing data reach TDI level.

                            in reply to: Where can I find these files #6591
                            Vadim Smirnov
                            Keymaster

                              Quote from WinpkFilter run-time license:

                              WinpkFilter 3.0 Runtime Libraries is provided as freeware for private (non commercial), or educational (including non-profit organization) use.It may not be distributed for profit, nor may it be included in products or otherwise distributed by commercial entities to their clients or customers without the prior written permission of the author.

                              So basically WinpkFilter run-time is not supposed to be used for creating redistributable WinpkFilter based software and therefore does not install all redistributable components.

                              in reply to: Port to PID map #6586
                              Vadim Smirnov
                              Keymaster

                                What’s about your WinpkFilter – Framework?

                                WinpkFilter operates at the NDIS level and can’t associate packet with PID without any additional information.

                                I just saw your Local Network Monitor API, that seems to be the right stuff?

                                You are right, Local Network Monitor API can be used for this.

                                in reply to: Port to PID map #6584
                                Vadim Smirnov
                                Keymaster

                                  TDI filter, LSP, AFD filter are the most common options.

                                Viewing 15 posts - 946 through 960 (of 1,496 total)