How to control loopback packets.

Home Forums Discussions Support Portal How to control loopback packets.

This topic contains 3 replies, has 2 voices, and was last updated by  Vadim Smirnov 8 years, 11 months ago.

Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
  • #5330



    I want to control loopback packets using WinpkFilter.

    So, I added a flag MSTCP_FLAG_LOOPBACK_FILTER for SetAdaptersStartupMode().

    But I can’t capture loopback packets.

    Is there something different than other packets to do for loopback?


    Vadim Smirnov

    If you mean localhost packets (an example, two applications communicating via Winsock and running on the same system) then these packets are processed internally by TCP/IP and never reach NDIS layer. So you can’t use WinpkFilter to control these packets. However, you can use Local Network Monitor, which is based on TDI filter driver and allows to intercept localhost data transfers.



    Thanks to your reply.

    I use Winpkfilter in local network.

    I have some questions about how to capture loopback packets.

    In struct _STATIC_FILTER, I use FILTER_PACKET_REDIRECT flag for m_FilterAction. Is it right?

    What is data in m_NetworkFilter.m_IPv4.m_ValidFields when I capture loopback packets?


    Thank you again.


    Vadim Smirnov

    Are you sure that you need these kind of loopback packets? In WinpkFilter context loopback packets are the packets indicated by NDIS layer to bound protocols in response of outgoing packet from one of the bound protocols. An example, TCP/IP sends a packet without NDIS_FLAGS_DONT_LOOPBACK. In this case packets does not only go out on the network media, but normally it is also indicated back to protocol layer as it would be received from the network. Some additional information on loopback packets you can find here

Viewing 4 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.