Hi,
I am concerned only about Devicetcp.
And my query is on direct handlers.
Just to clarify my query:
A TDI client can get pointer to tcpip’s direct send handler using ioctl IOCTL_TDI_QUERY_DIRECT_SEND_HANDLER.
Using this function pointer it can directly pass data to tcpip, bypassing all filter drivers.
I have captured this ioctl from TDI clients and hooked the tcpip direct handler.
I want to know if there are more such IOCTLS for Devicetcp, that I need to capture such that no data is bypassed my filter driver.