>So I suspected correctly. This of course would entice one to ask: how is one >supposed to write a low level kernel driver without having it break the next >time the kernel is patched, but I suppose such question is out of scope.
You're not supposed to write one, ever. On Solaris device drivers need to adhere to the DDI/DDK interfaces; this guarantees binary compatibility from one release to the next. So a Solaris 2.6 driver still works on Solaris 10 with the proviso that you now need a 64 bit driver as well. The needs of ipfilter/pfil are not adequately covered by the proper interfaces, so it hacked its way in and then you get into the trouble ipfilter got itself into: kernel patchlevel dependence. Casper
