group__npf__include.html

winpcap文档

<p>
IOCTL code: get the capture stats. 
<p>
This command returns to the application the number of packets received and the number of packets dropped by an instance of the driver. 
<p>
Definition at line <a class="el" href="Packet_8h-source.html#l00100">100</a> of file <a class="el" href="Packet_8h-source.html">Packet.h</a>.
</div>
</div><p>
<a class="anchor" name="g874d333aca88363bc6fdcb3e8b1af05b"></a><!-- doxytag: member="Packet.h::BIOCISDUMPENDED" ref="g874d333aca88363bc6fdcb3e8b1af05b" args="" -->
<div class="memitem">
<div class="memproto">
      <table class="memname">
        <tr>
          <td class="memname">#define BIOCISDUMPENDED&nbsp;&nbsp;&nbsp;7411          </td>
        </tr>
      </table>
</div>
<div class="memdoc">

<p>
IOCTL code: Get the status of the kernel dump process. 
<p>
This command returns TRUE if the kernel dump is ended, i.e if one of the limits set with BIOCSETDUMPLIMITS (amount of bytes or number of packets) has been reached. 
<p>
Definition at line <a class="el" href="Packet_8h-source.html#l00197">197</a> of file <a class="el" href="Packet_8h-source.html">Packet.h</a>.
</div>
</div><p>
<a class="anchor" name="ge02ae71d6fe0bfb4b600f8027dc90ba3"></a><!-- doxytag: member="Packet.h::BIOCISETLOBBEH" ref="ge02ae71d6fe0bfb4b600f8027dc90ba3" args="" -->
<div class="memitem">
<div class="memproto">
      <table class="memname">
        <tr>
          <td class="memname">#define BIOCISETLOBBEH&nbsp;&nbsp;&nbsp;7410          </td>
        </tr>
      </table>
</div>
<div class="memdoc">

<p>
IOCTL code: set the loopback behavior. 
<p>
This IOCTL sets the loopback behavior of the driver with packets sent by itself: capture or drop. 
<p>
Definition at line <a class="el" href="Packet_8h-source.html#l00204">204</a> of file <a class="el" href="Packet_8h-source.html">Packet.h</a>.
</div>
</div><p>
<a class="anchor" name="g5a0ab3231052ff323817e288dab2f127"></a><!-- doxytag: member="Packet.h::BIOCQUERYOID" ref="g5a0ab3231052ff323817e288dab2f127" args="" -->
<div class="memitem">
<div class="memproto">
      <table class="memname">
        <tr>
          <td class="memname">#define BIOCQUERYOID&nbsp;&nbsp;&nbsp;2147483652          </td>
        </tr>
      </table>
</div>
<div class="memdoc">

<p>
IOCTL code: get an OID value. 
<p>
This IOCTL is used to perform an OID get operation on the NIC driver. 
<p>
Definition at line <a class="el" href="Packet_8h-source.html#l00145">145</a> of file <a class="el" href="Packet_8h-source.html">Packet.h</a>.
</div>
</div><p>
<a class="anchor" name="gc50830dc08762383dcb203a66e5c853d"></a><!-- doxytag: member="Packet.h::BIOCSENDPACKETSNOSYNC" ref="gc50830dc08762383dcb203a66e5c853d" args="" -->
<div class="memitem">
<div class="memproto">
      <table class="memname">
        <tr>
          <td class="memname">#define BIOCSENDPACKETSNOSYNC&nbsp;&nbsp;&nbsp;9032          </td>
        </tr>
      </table>
</div>
<div class="memdoc">

<p>
IOCTL code: Send a buffer containing multiple packets to the network, ignoring the timestamps. 
<p>
Command used to send a buffer of packets in a single system call. Every packet in the buffer is preceded by a <a class="el" href="structsf__pkthdr.html">sf_pkthdr</a> structure. The timestamps of the packets are ignored, i.e. the packets are sent as fast as possible. The <a class="el" href="group__NPF__code.html#g9a97dd25ae757da4bfed3723a4eb4bce">NPF_BufferedWrite()</a> function is invoked to send the packets. 
<p>
Definition at line <a class="el" href="Packet_8h-source.html#l00171">171</a> of file <a class="el" href="Packet_8h-source.html">Packet.h</a>.
</div>
</div><p>
<a class="anchor" name="gb4d41e91e460bb101ef8ddb622a8e010"></a><!-- doxytag: member="Packet.h::BIOCSENDPACKETSSYNC" ref="gb4d41e91e460bb101ef8ddb622a8e010" args="" -->
<div class="memitem">
<div class="memproto">
      <table class="memname">
        <tr>
          <td class="memname">#define BIOCSENDPACKETSSYNC&nbsp;&nbsp;&nbsp;9033          </td>
        </tr>
      </table>
</div>
<div class="memdoc">

<p>
IOCTL code: Send a buffer containing multiple packets to the network, considering the timestamps. 
<p>
Command used to send a buffer of packets in a single system call. Every packet in the buffer is preceded by a <a class="el" href="structsf__pkthdr.html">sf_pkthdr</a> structure. The timestamps of the packets are used to synchronize the write, i.e. the packets are sent to the network respecting the intervals specified in the <a class="el" href="structsf__pkthdr.html">sf_pkthdr</a> structure assiciated with each packet. <a class="el" href="group__NPF__code.html#g9a97dd25ae757da4bfed3723a4eb4bce">NPF_BufferedWrite()</a> function is invoked to send the packets. 
<p>
Definition at line <a class="el" href="Packet_8h-source.html#l00181">181</a> of file <a class="el" href="Packet_8h-source.html">Packet.h</a>.
</div>
</div><p>
<a class="anchor" name="g71817d3a52bf0ec819934a5f688a172c"></a><!-- doxytag: member="Packet.h::BIOCSETBUFFERSIZE" ref="g71817d3a52bf0ec819934a5f688a172c" args="" -->
<div class="memitem">
<div class="memproto">
      <table class="memname">
        <tr>
          <td class="memname">#define BIOCSETBUFFERSIZE&nbsp;&nbsp;&nbsp;9592          </td>
        </tr>
      </table>
</div>
<div class="memdoc">

<p>
IOCTL code: set kernel buffer size. 
<p>
This IOCTL is used to set a new size of the circular buffer associated with an instance of NPF. When a BIOCSETBUFFERSIZE command is received, the driver frees the old buffer, allocates the new one and resets all the parameters associated with the buffer in the OPEN_INSTANCE structure. The currently buffered packets are lost. 
<p>
Definition at line <a class="el" href="Packet_8h-source.html#l00080">80</a> of file <a class="el" href="Packet_8h-source.html">Packet.h</a>.
</div>
</div><p>
<a class="anchor" name="gc8b51f8abae12f57a2ea8e8e4c0cd53c"></a><!-- doxytag: member="Packet.h::BIOCSETDUMPFILENAME" ref="gc8b51f8abae12f57a2ea8e8e4c0cd53c" args="" -->
<div class="memitem">
<div class="memproto">
      <table class="memname">
        <tr>
          <td class="memname">#define BIOCSETDUMPFILENAME&nbsp;&nbsp;&nbsp;9029          </td>
        </tr>
      </table>
</div>
<div class="memdoc">

<p>
IOCTL code: set the name of a the file used by kernel dump mode. 
<p>
This command opens a file whose name is contained in the IOCTL buffer and associates it with current NPf instance. The dump thread uses it to copy the content of the circular buffer to file. If a file was already opened, the driver closes it before opening the new one. 
<p>
Definition at line <a class="el" href="Packet_8h-source.html#l00154">154</a> of file <a class="el" href="Packet_8h-source.html">Packet.h</a>.
</div>
</div><p>
<a class="anchor" name="g3205efe3271948f253c4da5abf0e12c6"></a><!-- doxytag: member="Packet.h::BIOCSETDUMPLIMITS" ref="g3205efe3271948f253c4da5abf0e12c6" args="" -->
<div class="memitem">
<div class="memproto">
      <table class="memname">
        <tr>
          <td class="memname">#define BIOCSETDUMPLIMITS&nbsp;&nbsp;&nbsp;9034          </td>
        </tr>
      </table>
</div>
<div class="memdoc">

<p>
IOCTL code: Set the dump file limits. 
<p>
This IOCTL sets the limits (maximum size and maximum number of packets) of the dump file created when the driver works in dump mode. 
<p>
Definition at line <a class="el" href="Packet_8h-source.html#l00189">189</a> of file <a class="el" href="Packet_8h-source.html">Packet.h</a>.
</div>
</div><p>
<a class="anchor" name="g31c73f09a27bb38a6040a5841096576a"></a><!-- doxytag: member="Packet.h::BIOCSETEVENTHANDLE" ref="g31c73f09a27bb38a6040a5841096576a" args="" -->
<div class="memitem">
<div class="memproto">
      <table class="memname">
        <tr>
          <td class="memname">#define BIOCSETEVENTHANDLE&nbsp;&nbsp;&nbsp;7920          </td>
        </tr>
      </table>
</div>
<div class="memdoc">

<p>
This IOCTL passes the read event HANDLE allocated by the user (packet.dll) to kernel level. 
<p>
Parameter: HANDLE Parameter size: sizeof(HANDLE). If the caller is 32 bit, the parameter size is 4 bytes, even if sizeof(HANDLE) at kernel level is 8 bytes. That's why in this IOCTL code handler we detect a 32bit calling process and do the necessary thunking.<p>
TODO GV:I will go to hell for this ugly IOCTL definition. We should use CTL_CODE!! 
<p>
Definition at line <a class="el" href="Packet_8h-source.html#l00215">215</a> of file <a class="el" href="Packet_8h-source.html">Packet.h</a>.
</div>
</div><p>
<a class="anchor" name="gf85f500f68404076ac60ffe6e08818da"></a><!-- doxytag: member="Packet.h::BIOCSETF" ref="gf85f500f68404076ac60ffe6e08818da" args="" -->
<div class="memitem">
<div class="memproto">
      <table class="memname">
        <tr>
          <td class="memname">#define BIOCSETF&nbsp;&nbsp;&nbsp;9030          </td>
        </tr>
      </table>
</div>
<div class="memdoc">

<p>
IOCTL code: set packet filtering program. 
<p>
This IOCTL sets a new packet filter in the driver. Before allocating any memory for the new filter, the bpf_validate() function is called to check the correctness of the filter. If this function returns TRUE, the filter is copied to the driver's memory, its address is stored in the bpfprogram field of the OPEN_INSTANCE structure associated with current instance of the driver, and the filter will be applied to every incoming packet. This command also empties the circular buffer used by current instance to store packets. This is done to avoid the presence in the buffer of packets that do not match the filter. 
<p>
Definition at line <a class="el" href="Packet_8h-source.html#l00092">92</a> of file <a class="el" href="Packet_8h-source.html">Packet.h</a>.
</div>
</div><p>
<a class="anchor" name="gbf9a4779fd5281607510edc8b5d766dd"></a><!-- doxytag: member="Packet.h::BIOCSETOID" ref="gbf9a4779fd5281607510edc8b5d766dd" args="" -->
<div class="memitem">
<div class="memproto">
      <table class="memname">
        <tr>
          <td class="memname">#define BIOCSETOID&nbsp;&nbsp;&nbsp;2147483648          </td>
        </tr>
      </table>
</div>
<div class="memdoc">

<p>
IOCTL code: set an OID value. 
<p>
This IOCTL is used to perform an OID set operation on the NIC driver. 
<p>
Definition at line <a class="el" href="Packet_8h-source.html#l00138">138</a> of file <a class="el" href="Packet_8h-source.html">Packet.h</a>.
</div>
</div><p>
<a class="anchor" name="ga827e3441e3f84abc7df5e30fcee96d1"></a><!-- doxytag: member="Packet.h::BIOCSMINTOCOPY" ref="ga827e3441e3f84abc7df5e30fcee96d1" args="" -->
<div class="memitem">
<div class="memproto">
      <table class="memname">