Winpkfil & Lhmoni giving different ip addresses on same

Home Forums Discussions Support Portal Winpkfil & Lhmoni giving different ip addresses on same

This topic contains 0 replies, has 1 voice, and was last updated by  Manpreet Singh 14 years, 7 months ago.

Viewing 1 post (of 1 total)
  • Author
  • #4874

    Manpreet Singh

    WinpkFilter and LHMonitor are giving different destination and source ip addresses on same packets.

    i.e if we compare the port addresses of the same packet captured by the both they are same, but on same packet their Ip addresses are different.

    I am using Tunnel mode in winpkfilter

    This is the part of code, using these variables

    tcphdr_ptr pTcp;
    LOG_INFO LogInfo;
    iphdr_ptr pIp;

    //they are equal
    LogInfo.m_RemoteAddress.m_Port == ntohs(pTcp->th_dport)
    LogInfo.m_LocalAddress.m_Port == ntohs(ptcp->th_sport)

    //but addresses are not
    LogInfo.m_RemoteAddress.m_Ip != pIp->ip_dst.S_un.S_addr
Viewing 1 post (of 1 total)

You must be logged in to reply to this topic.