NPF structures and definitions
[NPF driver internals manual]


Data Structures
struct	packet_file_header
	Header of a libpcap dump file. More...
struct	sf_pkthdr
	Header associated to a packet in the driver's buffer when the driver is in dump mode. Similar to the bpf_hdr structure, but simpler. More...
struct	_PACKET_OID_DATA
	Structure containing an OID request. More...
struct	_INTERNAL_REQUEST
	Stores an OID request. More...
struct	_PACKET_RESERVED
	Contains a NDIS packet. More...
struct	_DEVICE_EXTENSION
	Port device extension. More...
struct	__CPU_Private_Data
	Kernel buffer of each CPU. More...
struct	_OPEN_INSTANCE
	Contains the state of a running instance of the NPF driver. More...
struct	PacketHeader
	Structure prepended to each packet in the kernel buffer pool. More...
Defines
#define	MAX_REQUESTS 32
	Maximum number of simultaneous IOCTL requests.
#define	Packet_ALIGNMENT sizeof(int)
	Alignment macro. Defines the alignment size.
#define	Packet_WORDALIGN(x) (((x)+(Packet_ALIGNMENT-1))&~(Packet_ALIGNMENT-1))
	even multiple of Packet_ALIGNMENT.
#define	KERNEL_EVENT_NAMESPACE L"\\BaseNamedObjects\\"
#define	MODE_CAPT 0x0
	Capture working mode.
#define	MODE_STAT 0x1
	Statistical working mode.
#define	MODE_MON 0x2
	Kernel monitoring mode.
#define	MODE_DUMP 0x10
	Kernel dump working mode.
#define	IMMEDIATE 1
	Immediate timeout. Forces a read call to return immediately.
#define	NDIS_FLAGS_SKIP_LOOPBACK_W2K 0x400
	This is an undocumented flag for NdisSetPacketFlags() that allows to disable loopback reception.
#define	TCPDUMP_MAGIC 0xa1b2c3d4
	Libpcap magic number. Used by programs like tcpdump to recognize a driver's generated dump file.
#define	PCAP_VERSION_MAJOR 2
	Major libpcap version of the dump file. Used by programs like tcpdump to recognize a driver's generated dump file.
#define	PCAP_VERSION_MINOR 4
	Minor libpcap version of the dump file. Used by programs like tcpdump to recognize a driver's generated dump file.
#define	NPF_DISABLE_LOOPBACK 1
	Tells the driver to drop the packets sent by itself. This is usefult when building applications like bridges.
#define	NPF_ENABLE_LOOPBACK 2
	Tells the driver to capture the packets sent by itself.
#define	C_ASSERT(a)
#define	RESERVED(_p) ((PPACKET_RESERVED)((_p)->ProtocolReserved))
	Macro to obtain a NDIS_PACKET from a PACKET_RESERVED.
#define	TRANSMIT_PACKETS 256
	of packets that can be transmitted at the same time or with a single call to NdisSendPackets.
#define	EXIT_SUCCESS(quantity)
	Macro used in the I/O routines to return the control to user-mode with a success status.
#define	EXIT_FAILURE(quantity)
	Macro used in the I/O routines to return the control to user-mode with a failure status.
Typedefs
typedef struct _PACKET_OID_DATA	PACKET_OID_DATA
typedef struct _PACKET_OID_DATA *	PPACKET_OID_DATA
typedef struct _INTERNAL_REQUEST	INTERNAL_REQUEST
typedef struct _INTERNAL_REQUEST *	PINTERNAL_REQUEST
typedef struct _PACKET_RESERVED	PACKET_RESERVED
typedef struct _PACKET_RESERVED *	PPACKET_RESERVED
typedef struct _DEVICE_EXTENSION	DEVICE_EXTENSION
typedef struct _DEVICE_EXTENSION *	PDEVICE_EXTENSION
typedef struct __CPU_Private_Data	CpuPrivateData
typedef struct _OPEN_INSTANCE	OPEN_INSTANCE
typedef struct _OPEN_INSTANCE *	POPEN_INSTANCE
Enumerations
enum	ADAPTER_BINDING_STATUS { ADAPTER_UNBOUND, ADAPTER_BOUND, ADAPTER_UNBINDING }
Functions
	C_ASSERT (sizeof(PACKET_OID_DATA)==12)
Variables
ULONG	g_NCpu
NDIS_HANDLE	g_NdisProtocolHandle
struct time_conv	G_Start_Time
UINT	g_SendPacketFlags

Define Documentation

#define C_ASSERT ( a )

Definition at line 129 of file Packet.h.

#define EXIT_FAILURE ( quantity )

Value:

Irp->IoStatus.Information=quantity;\
    Irp->IoStatus.Status = STATUS_UNSUCCESSFUL;\
    IoCompleteRequest(Irp, IO_NO_INCREMENT);\
    return STATUS_UNSUCCESSFUL;\

Macro used in the I/O routines to return the control to user-mode with a failure status.

Definition at line 356 of file Packet.h.

#define EXIT_SUCCESS ( quantity )

Value:

Irp->IoStatus.Information=quantity;\
    Irp->IoStatus.Status = STATUS_SUCCESS;\
    IoCompleteRequest(Irp, IO_NO_INCREMENT);\
    return STATUS_SUCCESS;\

Macro used in the I/O routines to return the control to user-mode with a success status.

Definition at line 350 of file Packet.h.

#define IMMEDIATE 1

Immediate timeout. Forces a read call to return immediately.

Definition at line 83 of file Packet.h.

#define KERNEL_EVENT_NAMESPACE L"\\BaseNamedObjects\\"

Definition at line 73 of file Packet.h.

#define MAX_REQUESTS 32

Maximum number of simultaneous IOCTL requests.

Definition at line 67 of file Packet.h.

#define MODE_CAPT 0x0

Capture working mode.

Definition at line 77 of file Packet.h.

#define MODE_DUMP 0x10

Kernel dump working mode.

Definition at line 80 of file Packet.h.

#define MODE_MON 0x2

Kernel monitoring mode.

Definition at line 79 of file Packet.h.

#define MODE_STAT 0x1

Statistical working mode.

Definition at line 78 of file Packet.h.

#define NDIS_FLAGS_SKIP_LOOPBACK_W2K 0x400

This is an undocumented flag for NdisSetPacketFlags() that allows to disable loopback reception.

Definition at line 85 of file Packet.h.

#define NPF_DISABLE_LOOPBACK 1

Tells the driver to drop the packets sent by itself. This is usefult when building applications like bridges.

Definition at line 94 of file Packet.h.

#define NPF_ENABLE_LOOPBACK 2

Tells the driver to capture the packets sent by itself.

Definition at line 95 of file Packet.h.

#define Packet_ALIGNMENT sizeof(int)

Alignment macro. Defines the alignment size.

Definition at line 69 of file Packet.h.

#define Packet_WORDALIGN ( x ) (((x)+(Packet_ALIGNMENT-1))&~(Packet_ALIGNMENT-1))

even multiple of Packet_ALIGNMENT.

Alignment macro. Rounds up to the next

Definition at line 70 of file Packet.h.

#define PCAP_VERSION_MAJOR 2

Major libpcap version of the dump file. Used by programs like tcpdump to recognize a driver's generated dump file.

Definition at line 90 of file Packet.h.

#define PCAP_VERSION_MINOR 4

Minor libpcap version of the dump file. Used by programs like tcpdump to recognize a driver's generated dump file.

Definition at line 91 of file Packet.h.

#define RESERVED ( _p ) ((PPACKET_RESERVED)((_p)->ProtocolReserved))

Macro to obtain a NDIS_PACKET from a PACKET_RESERVED.

Definition at line 185 of file Packet.h.

#define TCPDUMP_MAGIC 0xa1b2c3d4

Libpcap magic number. Used by programs like tcpdump to recognize a driver's generated dump file.

Definition at line 89 of file Packet.h.

#define TRANSMIT_PACKETS 256

of packets that can be transmitted at the same time or with a single call to NdisSendPackets.

Maximum number of packets in the transmit packet pool. This value is an upper bound to the number

Definition at line 345 of file Packet.h.

Typedef Documentation

typedef struct __CPU_Private_Data CpuPrivateData

typedef struct _DEVICE_EXTENSION DEVICE_EXTENSION

typedef struct _INTERNAL_REQUEST INTERNAL_REQUEST

typedef struct _OPEN_INSTANCE OPEN_INSTANCE

typedef struct _PACKET_OID_DATA PACKET_OID_DATA

typedef struct _PACKET_RESERVED PACKET_RESERVED

typedef struct _DEVICE_EXTENSION * PDEVICE_EXTENSION

typedef struct _INTERNAL_REQUEST * PINTERNAL_REQUEST

typedef struct _OPEN_INSTANCE * POPEN_INSTANCE

typedef struct _PACKET_OID_DATA * PPACKET_OID_DATA

typedef struct _PACKET_RESERVED * PPACKET_RESERVED

Enumeration Type Documentation

enum ADAPTER_BINDING_STATUS

Enumerator:

ADAPTER_UNBOUND
ADAPTER_BOUND
ADAPTER_UNBINDING

Definition at line 320 of file Packet.h.

Function Documentation

C_ASSERT ( sizeof(PACKET_OID_DATA) = =12 )

Variable Documentation

ULONG g_NCpu

NDIS_HANDLE g_NdisProtocolHandle

UINT g_SendPacketFlags

struct time_conv G_Start_Time

NPF structures and definitions [NPF driver internals manual]

Data Structures

Defines

Typedefs

Enumerations