NDIS中间层驱动程序接口，以C＃ [英] NDIS Intermediate driver interface to C#

问题描述

我开发什么本质上是一个专门的防火墙应用程序。该解决方案需要32位和64位兼容。我公司希望保持目前的程序界面，这是写在C＃

I'm developing what is essentially a specialized firewall application. The solution needs to be 32 and 64-bit compatible. My company wants to keep the current program interface, which is written in C#.

我需要的是这样的：一个方式来监控和操纵系统上的所有网络流量。我的研究使我相信，一个NDIS（网络驱动程序接口规范）中间层驱动程序是要走的路。如果我可以写这种在C＃中，伟大的车手，但我不知道这是可能的。最起码，我需要在C＃中任何语言编写驱动程序的界面。

What I need is this: a way to monitor and manipulate all network traffic on the system. My research has led me to believe that a NDIS (Network Driver Interface Specification) Intermediate driver is the way to go. If I can write this kind of driver in C#, great, but I'm not sure that's possible. At the very least, I need an interface in C# to a driver written in any language.

我找到了一个很好的资源在线在题为系列文章创建一扩展微软的PassThru NDIS中间层驱动程序：

I found a great resource online for creating one in a series of articles entitled "Extending the Microsoft PassThru NDIS Intermediate Driver":

1. 的第1部分 - 添加的DeviceIoControl接口


2. 的第2部分 - 两个IP封锁NDIS驱动IM


3. 的第3部分 - 支持Windows XP 64-Bit Edition的

1. Part 1 - Adding a DeviceIoControl Interface
2. Part 2 - Two IP Address Blocking NDIS IM Drivers
3. Part 3 - Supporting Windows XP 64-Bit Edition

然而，它的日期是（2003）。在我投资的阅读和学习它有什么要说的，我要确保我没有浪费我的时间。

However, it is dated (2003). Before I invest in reading and learning what it has to say, I want to make sure I'm not wasting my time.

有没有更好的方法来做到这一点？是否有讲解过程比上面的文章更好任何开源项目或文章？难道我甚至在球场？ 。请帮助

Is there a better way to do this? Are there any open source projects or articles that explain the process better than the articles above? Am I even in the ballpark? Help please.

推荐答案

有来自同一作者的另一页，标题为 Windows网络数据和包过滤，提供简要介绍了可用于筛选的Microsoft Windows平台上的网络数据和网络数据包的各种技术

There's another page from the same author, titled Windows Network Data and Packet Filtering, which provides "a brief introduction to various techniques that can be used to filter network data and network packets on the Microsoft Windows platforms".

它提到其他选项，例如： TDI flter驱动程序和用户模式的网络数据过滤，这可能适合而是取决于你是否确实的要处理的所有的网络系统上的流量。

It mentions others options, e.g. "TDI flter driver" and "User-Mode Network Data Filtering", which may suit instead, depending on whether you really want to manipulate all the network traffic on the system.

这篇关于NDIS中间层驱动程序接口，以C＃的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！