Reply To: kernel mode = yes, Application mode = ?

[Vadim Smirnov]

What environment do you use for the development? There is a C header file iphlp.h which has some sample protocol header definitions (IP header, TCP header, UDP header and etc…). If you are using Delphi then you can use the ones below:

TIPHeaderPtr = ^TIPHeader;

TIPHeader = packed record

VerLen: Byte;   //HL

TOS: Byte;

TotalLen: Word;

Identifer: Word;

FragOffsets: Word;

TTL: Byte;

Protocol: Byte;

CheckSum: Word;

SourceIp: DWORD;

DestIp: DWORD;

// Options: DWORD;

end;



TTCPHeaderPtr = ^TTCPHeader;

TTCPHeader = packed record

SourcePort:Word;

DestPort:Word;

SequenceNumber:DWord;

AcknowledgementNumber:DWord;

Offset:Byte; //only left 4 bits. Header length in 32-bit segments

Flags:Byte;

Window:Word;

Checksum:Word;  //includes speudo header instead of TCP header.

UrgentPointer:Word;

end;



pTCPData: PChar; 

And probably it makes sense for you to look at this topic:
http://ntkernel.com/forum/viewtopic.php?t=114

We are trying to provide as good support as we can 🙄