Some questions about the Samples

Home Forums Discussions Support Portal Some questions about the Samples

This topic contains 2 replies, has 2 voices, and was last updated by  bakhtiar 8 years, 6 months ago.

Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • #5276

    bakhtiar
    Participant

    Hello;

    Would you please advise me on the following questions about the filter sample:

    1- In m_ValidFields in static filters, there are only 3 predescribed values Data_Link_Layer_Valid, Networ_Link_Layer_Valid and Transport_Link_Layer_Valid which they are 1, 2 and 4 respectively.
    But sometimes it is set to 0, especially to pass all packets. What does 0 means?

    2- Why the network mask is 255.255.255.255? It was used when access to http://www.ntkernel.com website was blocked.
    3- How can I know how many packets been dropped?

    Kind regards

    #6787

    Vadim Smirnov
    Moderator

    1- In m_ValidFields in static filters, there are only 3 predescribed values Data_Link_Layer_Valid, Networ_Link_Layer_Valid and Transport_Link_Layer_Valid which they are 1, 2 and 4 respectively.
    But sometimes it is set to 0, especially to pass all packets. What does 0 means?

    It means that none of the validity fields is defined.

    2- Why the network mask is 255.255.255.255? It was used when access to http://www.ntkernel.com website was blocked.

    To block the particular IP address. If you use another mask you may block more than single IP.

    3- How can I know how many packets been dropped?

    All filters gather statistics of the packets for which filter did the action. You can query this statistics using API.

    #6788

    bakhtiar
    Participant

    Thanks SerpentFly;

    Is filtering occurs in NDIS level (driver) for incoming and outgoing packets or in intermediate buffer? Or it might be happen in both?
    If a packet is dropped, this packet can not be brought to intermediate buffer, is this right?

    Kind regards

Viewing 3 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.