[Winpcap-users] Windows 10 support for WinPcap

[Mark Pizzolato - Winpcap-Users]

The inverted call model might be useful in an abstract way to get notified of a media
state change, however, the question then comes back to how to convey that detail
to the application which is using the libpcap APIs.

Since the only APIs that an application which already has a pcap session opened
is using are: pcap_next_ex, pcap_dispatch, pcap_loop and possibly
pcap_sendpacket

pcap_next_ex, pcap_dispatch and pcap_loop are defined to return -1 on an error.
Is media state change an error?
                Is media offline an error?

pcap_sendpacket is defined to return -1 if a packet wasn’t successfully sent.
                It would seem that returning -1 when the media is offline makes sense

I don’t know for sure how WinPcap behaves under these conditions, but it
seems that it npcap should reliably report errors under the media offline state.
Is there a reason it can’t?

From: winpcap-users-bounces at winpcap.org [mailto:winpcap-users-bounces at winpcap.org] On Behalf Of Jiyang Hu
Sent: Thursday, February 4, 2016 11:18 AM
To: winpcap-users at winpcap.org
Subject: Re: [Winpcap-users] Windows 10 support for WinPcap

@Sven: you need something called - Inverted Call Model

The Inverted Call Model in KMDF - OSR<https://www.osr.com/nt-insider/2013-issue1/inverted-call-model-kmdf/>





[cid:image001.jpg at 01D15F42.F88F5BC0]<https://www.osr.com/nt-insider/2013-issue1/inverted-call-model-kmdf/>











The Inverted Call Model in KMDF - OSR<https://www.osr.com/nt-insider/2013-issue1/inverted-call-model-kmdf/>
One of the most common questions we see from students, clients, and new Windows driver Read more


View on www.osr.com<https://www.osr.com/nt-insider/2013-issue1/inverted-call-model-kmdf/>

Preview by Yahoo







On Thursday, February 4, 2016 12:49 PM, Sven Kerschbaum <svkers at gmail.com> wrote:

@Yang: It is not possible to get notifications of media state changes by the API which you proposed in your previous post. It provides only notifications about IP table changes.
Am 04.02.2016 16:31 schrieb "Sven Kerschbaum" <svkers at gmail.com<mailto:svkers at gmail.com>>:
Hi Yang,

thanks for providing me the detailed information about Npcap. I will definitively have a look at it and try it.

Cheers,
SK


2016-02-04 13:04 GMT+01:00 食肉大灰兔V5 <hsluoyz at gmail.com<mailto:hsluoyz at gmail.com>>:
Hi Sven,

Npcap (https://github.com/nmap/npcap) has better performance because of NDIS 6. It also has several new features:


I actually didn't add a function about making user software getting notified about media state changes. From my knowledge I don't know there's any support of such a function in libpcap. libpcap is an interface standard followed by WinPcap/Npcap. However, I think you can do it using native Windows APIs (like Receiving Notification of Network Events in https://msdn.microsoft.com/en-us/library/windows/desktop/aa366334(v=vs.85).aspx). And if you have any improvement advice about Npcap, I will consider it:)


Cheers,
Yang

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.winpcap.org/pipermail/winpcap-users/attachments/20160204/0cae9bfc/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 662 bytes
Desc: image001.jpg
URL: <http://www.winpcap.org/pipermail/winpcap-users/attachments/20160204/0cae9bfc/attachment-0001.jpg>