and,can two application(two thread) can both to open the driver?(SetAdapterMode,SetPacketEven)!
===============================================
talk about the winpkfilter to block the packet. in your sample,we known,we can do nothing with the packet if we dont need the packet. but if we need it,we can send it to MSTCP or sendit to adpatch. another thing is,we can constructure a pakcet and sendit to mstcp etc! use other words,we can cache the PETH_REQUEST packet,want for a moment, i sent it out. in fact, the times i had use the api.ReadPacket read other packet for many times! is there a circus buffer in ndisrd.sys???
=================================================
MSTCP_FLAG_FILTER_DIRECT by default it is setting on or off?
