Watching tcp/ip packet

[John A]

Hi, i made a TDI filter driver using VToolsD and i'm receiving tdi
events. I need to see the info that is gonna be dispatched. The
tdisend hook function is:

MySend(
PTDI_REQUEST req,
USHORT Flags,
UINT SendLength,
PNDIS_BUFFER buf
)

Can I see the info in any of this parameters?? if not how can i
accomplish this??

Tnx

[Jeff Henkels]

If your intent is to look at TCP/IP packets, as your subject line indicates,
you'll want an NDIS driver, not a TDI filter. Take a look at Winpcap
(http://winpcap.polito.it) for an example of such a driver; combine this
with Ethereal and you'll be able to see everything.

Post by John A
Hi, i made a TDI filter driver using VToolsD and i'm receiving tdi
events. I need to see the info that is gonna be dispatched. The
MySend(
PTDI_REQUEST req,
USHORT Flags,
UINT SendLength,
PNDIS_BUFFER buf
)
Can I see the info in any of this parameters?? if not how can i
accomplish this??
Tnx

[John A]

in NT i can see the data with a TDI filter driver, but i don't know
what does it mean the parameters in TdiSend hook routine