[Winpcap-users] provide a message from a program

[Steffen Röttig]

> Steffen,
>
> I'm not sure I understood your question completely.
>
> Are you looking for some way to inject packets back in the protocol
> stack of the machine, instead of transmitting them on the network?
I get from an external program packets. My job is to realize a method wherewith these packets can analyze with an packet sniffer.
I'm thinking of two solutions:

First: in the "WinPcap 3.1 Developer's Pack" is an project-example calls sendpack. 
In this project is used the function "int pcap_sendpacket(pcap_t *p, const u_char *buf, int size)" 
and a nic to send a packet. This packet can be analazed with a sniffer like wireshark, paketyzer or visualsniffer.

Second: i write a visual ndis miniport driver which get the packets from the external programm. 
This virtual ndis miniport can i select in the sniffer and i have the same effect.

I think that the complexity of the first solution (in case it is possible) is fewer than to write a virtual driver. 
But the second solution is finer, because of the own selection of the nic and it is freelance of the versions from wincap.

>
> If so, WinPcap cannot do that, as it's a protocol driver. In order to
> do that, you need to use some NDIS virtual miniport (or intermediate)
> driver.
>
> What are you trying to achieve exactly?
>
> Have a nice day
> GV
>
But my question for my decision is... 
It is really so easy to send packets with winpcap so that a sniffer displays the data? Because all answers of my issue didn't contain this solution and all said that i should have to write a virtual ndis miniport.

TIA 
Regards 
steffen