[aty]

Thank you very much for the information SerpentFly.

aty

[aty]

SerpenFly

Thank you very much for the reply. Your tip helped me find out that I simply forgot to process non-IP packets (see line 17 in the code…).

I guess that at some point, lack of ARP/RARP functionality hanged up the LAN.

Regarding MTU: As far as I know, windows default MTU for ethernet adapters is 1500. I always attach a 20 bytes key to outgoing UDP packets.
Can I conclude from this that I might have a problem only with packets whose total length is 1480 bytes or more ?

Another question:
Can I catch packets that are directed either to 127.0.0.1 or to the local IP ? are those packets passed down the TCP stack or are they redirected by Windows back to the application at higher levels ?

Thanks again,
aty

[aty]

Just thought to mentioned that I’m using the runtime libraries that are available at the web site (hxxp://www.ntoskrnl.com/downloads/winpkflt_rtx86.zip).

Could it be related (are those runtimes limited) ?

Many thanks,
aty

[aty]

Thanks a lot 🙂

aty

p.s: It would be very useful if the checksum calculation methods (IP/TCP/UDP) will be included in future versions of the WinpkFilter DLL – add to the wish-list.

[Author]

Posts