Hi, The alteration is in the npf.sys driver (the pcap driver), in the write.c file of the source. It can be easely copied into the driver folder. In the write.c file, add the function call
NdisSetPacketFlags(pPacket, NDIS_FLAGS_SKIP_LOOPBACK); // to the NTSTATUS PacketWrite(IN PDEVICE_OBJECT DeviceObject, IN PIRP Irp) function, just before the packet is sent with the NdisSend(&Status, Open->AdapterHandle, pPacket); function. - Jesper -----Original Message----- From: David [mailto:[EMAIL PROTECTED]] Sent: onsdag, juli 03, 2002 02:24 To: [EMAIL PROTECTED] Subject: Fw: [WinPcap-users] I would like write data on one interface but do want to read it Jensen, The alteration you have done, It is in the driver ? or in the program that call the driver ? David ----- Original Message ----- From: "Jesper Munkholm Jensen (JMJ)" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, June 28, 2002 6:49 AM Subject: RE: [WinPcap-users] I would like write data on one interface but do want to read it > Hi, > > This helping hand came at the right time for me! The alterations > mentioned, > works fine on WinXp and Win2K. I'm working on a project and had to make the > alterations to continue using WinPCap. I have to document how the change was > made in my project, and for that reason create a step by step manual. The > documentation known to you at the present should be enough, should you > however have any problem making the alteration I'll be happy to assist any > way posible. > > Jesper Munkholm > > -----Original Message----- > From: Loris Degioanni [mailto:[EMAIL PROTECTED]] > Sent: 26. juni 2002 16:56 > > To: [EMAIL PROTECTED] > > Subject: Re: [WinPcap-users] I would like write data on one interface > > but do want to read it > > > > > > In this case, look at > > http://www.mail-archive.com/winpcap-users@winpcap.polito.it/msg00064.html. > > > > loris > > > > ----- Original Message ----- > > From: "David" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Cc: <[EMAIL PROTECTED]> > > Sent: Wednesday, June 26, 2002 4:28 PM > > Subject: Re: [WinPcap-users] I would like write data on one interface but > do > > want to read it > > > > > > > I am working in promiscous mode, I hear all packets for one interface > > > and them I send them from another interface. > > > > > > So I can not use the BPF filter. because I send packets with any mac > > > address, > > > > > > It is like a bridge application. I am doing a software to hear all the > > > packets, > > > they modify any of them and then send all the packets to the other > > > interface. > > > > > > > > > David > > > > > > > You can set a BPF filter that drops everything, or only the packets > with > > > the > > > > source MAC of your interface. > > > > See the windump manual (http://windump.polito.it/docs/) for details > > about > > > > filtering expressions. > > > > > > > > Loris > > > > > > > > > Hello, > > > > > > > > > > I am doing one application to read data of one interface card a then > > > > > sending to another interface. > > > > > > > > > > I did it but i had problems. The problem is that the date wrote in > one > > > > > interface is read it again in this interface. > > > > > > > > > > I woul like to know if is it possible to filter my own data wrote, I > > don > > > > > want to read it. > > > > > > > > > > > > > > > I built a mac address table to avoid this. > > > > > > > > > > David > > > > > > > > > > > > > > > > > > > >
