SPI/DPI

Home Forums Discussions Support Portal SPI/DPI

Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • #5142
    alex_s
    Participant

    Does winpkt implement SPI and DPI in any way ?

    #6470
    Vadim Smirnov
    Moderator

    Does winpkt implement SPI and DPI in any way ?

    Stateful Packet Inspection? WinpkFilter is a library which takes packet from kernel level and delivers to user mode where you can implement SPI, DPI or whatever you want. It does not implement packet inspection itself.

    #6471
    alex_s
    Participant

    @SerpentFly wrote:

    Does winpkt implement SPI and DPI in any way ?

    Stateful Packet Inspection? WinpkFilter is a library which takes packet from kernel level and delivers to user mode where you can implement SPI, DPI or whatever you want. It does not implement packet inspection itself.

    It’s OK. But what may happen in case a packet is twisted in a way ? For example wrong packet length or something like that. Can a twisted packet cause BSOD, for example ? (It is rather DPI than SPI I think).

    #6472
    Vadim Smirnov
    Moderator

    But what may happen in case a packet is twisted in a way ? For example wrong packet length or something like that. Can a twisted packet cause BSOD, for example ? (It is rather DPI than SPI I think).

    WinpkFilter driver checks validity of buffers supplied by user, but it does not take care about the packet content. So you can send absolutely anything if modules below and above WinpkFilter accept this.

Viewing 4 posts - 1 through 4 (of 4 total)
  • You must be logged in to reply to this topic.