Some questions about the Samples

Home › Forums › Discussions › Support › Some questions about the Samples

Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • March 12, 2009 at 12:21 pm #5276
    bakhtiar
    Participant

      Hello;

      Would you please advise me on the following questions about the filter sample:

      1- In m_ValidFields in static filters, there are only 3 predescribed values Data_Link_Layer_Valid, Networ_Link_Layer_Valid and Transport_Link_Layer_Valid which they are 1, 2 and 4 respectively.
      But sometimes it is set to 0, especially to pass all packets. What does 0 means?

      2- Why the network mask is 255.255.255.255? It was used when access to http://www.ntkernel.com website was blocked.
      3- How can I know how many packets been dropped?

      Kind regards

      March 17, 2009 at 11:30 am #6787
      Vadim Smirnov
      Keymaster

        1- In m_ValidFields in static filters, there are only 3 predescribed values Data_Link_Layer_Valid, Networ_Link_Layer_Valid and Transport_Link_Layer_Valid which they are 1, 2 and 4 respectively.
        But sometimes it is set to 0, especially to pass all packets. What does 0 means?

        It means that none of the validity fields is defined.

        2- Why the network mask is 255.255.255.255? It was used when access to http://www.ntkernel.com website was blocked.

        To block the particular IP address. If you use another mask you may block more than single IP.

        3- How can I know how many packets been dropped?

        All filters gather statistics of the packets for which filter did the action. You can query this statistics using API.

        March 17, 2009 at 5:55 pm #6788
        bakhtiar
        Participant

          Thanks SerpentFly;

          Is filtering occurs in NDIS level (driver) for incoming and outgoing packets or in intermediate buffer? Or it might be happen in both?
          If a packet is dropped, this packet can not be brought to intermediate buffer, is this right?

          Kind regards

        • Author
          Posts
        Viewing 3 posts - 1 through 3 (of 3 total)
        • You must be logged in to reply to this topic.