[Winpcap-users] Windows 8

[Gianluca Varenni]

There are advantages and disadvantages in using a filter driver, one of them is that all of a sudden we become an inline driver (=if something gets broken, you might lose network connectivity), and I'm not 100% that using a lightweight driver will all of a sudden solve all the other problems (I haven't experimented too much with that).

GV

-----Original Message-----
From: winpcap-users-bounces at winpcap.org [mailto:winpcap-users-bounces at winpcap.org] On Behalf Of Guy Harris
Sent: Wednesday, January 30, 2013 2:39 PM
To: winpcap-users at winpcap.org
Subject: Re: [Winpcap-users] Windows 8


On Jan 30, 2013, at 2:12 PM, Gianluca Varenni <Gianluca.Varenni at riverbed.com> wrote:

> The advantages of migrating to NDIS6 would be
> - probably better performance (but it's not guaranteed) and in general avoiding to go thru the thunking layer between NDIS5 (what we currently use) and NDIS6
> - support for RT (although I'm not sure if just supporting NDIS6 would be enough)
> - cleanup of the driver sources

-acting as a lightweight filter driver, which might (again) allow capturing on PPP devices and might avoid the weirdness where the vendor description of some devices is the vendor description of some intermediate driver (e.g., "Microsoft" or "Sun" being the name of the device)?  The NetMon driver in NT 6.x is, I think, a lightweight filter driver.
_______________________________________________
Winpcap-users mailing list
Winpcap-users at winpcap.org
https://www.winpcap.org/mailman/listinfo/winpcap-users