-----------------------------------------------------------

New Message on cochindotnet

-----------------------------------------------------------
From: LimneshA
Message 1 in Discussion

Thanks JK for your reply   A few months back i wrote a small TCP hooking VxD using 
Winasm and 98DDK. I hooked tdi_connect, tdi_receive, tdi_send etc...It was a dynamic 
VxD. I was trying to make my VC++ frontend to scan the buffer in tdi_receive. The IP 
and Port address i got was correct from tdi_connect but, but the buffer got through 
tdi_receive never contained any valid data.   Tdi_ReceiveHook is ----------Hook 
Procedure----------------- push ebp
mov ebp, esp
pushfd
pushad 
mov edi, [ebp+10H]     --------------NDIS struct pointer
mov edi, [edi+04H]      --------------pointer to data in NDIS struct 
------------------------edi  i suppose should be received data pointer--------------- 
----------transfer edi contents to VC++ frontend------------------ -------------Pop 
stuff---------------------------------------------- -------------return 
stuff--------------------------------------------   1) Was it the correct approach? 2) 
Is there any encryption behind it?   the real problem was that i had no other guidence 
except Izelon tutorials which comes along with winasm. 98DDK documentation was too 
bad. So i dont know if the code is correct.       3) Can any one suggest a good 
documentation for 98DDK......................... 4) How can i get an NT/2000 DDK? (I 
dont have an MSDN subscription)

-----------------------------------------------------------

To stop getting this e-mail, or change how often it arrives, go to your E-mail 
Settings.
http://groups.msn.com/cochindotnet/_emailsettings.msnw

Need help? If you've forgotten your password, please go to Passport Member Services.
http://groups.msn.com/_passportredir.msnw?ppmprop=help

For other questions or feedback, go to our Contact Us page.
http://groups.msn.com/contact

If you do not want to receive future e-mail from this MSN group, or if you received 
this message by mistake, please click the "Remove" link below. On the pre-addressed 
e-mail message that opens, simply click "Send". Your e-mail address will be deleted 
from this group's mailing list.
mailto:[EMAIL PROTECTED]

Reply via email to