Max/basil00_WinDivert
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 21 Wiki Activity
291 Commits 5 Branches 21 Tags
eth_layer
Commit Graph
18 Commits
Author SHA1 Message Date
basil00 54153c425b Add WinDivert support for matching ARP packets. 2023-02-19 07:39:58 +08:00
basil00 b83e7413be Add an ETHERNET layer to WinDivert. 
Adds a new ETHERNET layer to WinDivert.  This
layer is similar to the NETWORK layers in that
packets can be blocked/modified/injected.  This
change requires Windows 8 or newer.
 2019-12-20 09:09:57 +08:00
basil00 cedb929873 Bug fixes. 
- Fix broken WinDivertCondExecFilter().  This
  caused some callouts to be needlessly installed.
- Fix broken WinDivertByteSwap128().
- Rename "Ipv6" -> "IPv6" to keep API consistent.
- Samples now use correct MTU.
 2019-06-15 07:31:56 +08:00
basil00 5d62e2a938 Add a Visual Studio build system (fix #118). 
Currently the VS build system targets VS2015, but
may also work for later versions (not tested).
To use:
- Download & install VS2015.
- Install WDK.
- Open a Developer Command Prompt.
- Run the msvc-build.bat script.
 2019-04-19 09:52:36 +08:00
basil00 8fcb4313b6 WinDivert 2.0 API, service & documentation fixes. 
- Make WinDivertRecv() and WinDivertSend() arg
  ordering match the Ex versions.
- Put the WinDivertHelperParsePacket() protocol
  arg after the IP headers.
- WinDivert service handling is now protected by
  a mutex.
- Debug the "uninstall" command for windivertctl.
  It can now uninstall the WinDivert driver &
  not leave the WinDivert service in a "pending"
  state.
- Document WinDivert performance tips.
 2019-03-04 08:42:34 +08:00
basil00 32c5aa90f4 Redesign the WinDivert IOCTL interface. 
The idea is to make future versions of the
WinDivert DLL compatible with older SYS and vice
versa.

The interface has also been streamlined so less
system calls are required when the handle is first
opened.
 2019-02-23 09:38:18 +08:00
basil00 e33cc74527 Remove overlapped I/O from streamdump. 
This just complicated the sample.  Furthermore,
it was unclear if the implementation was correct
anyway.
 2019-02-21 09:13:31 +08:00
basil00 ab50ffebd5 Minor API improvements. 
- addr.Pseudo*Checksum flags replaced by simpler
  addr.*Checksum flags.
- WinDivertHelperParsePacket() can now handle
  batched packets.
- WinDivertHelperParsePacket() can now return the
  transport protocol.
- WinDivertHelperCalcChecksums() can now handle
  batched packets.
- WinDivertHelperCalcChecksums() now sets address
  checksum flags that were calculated.
- A bunch of WINDIVERT_* macros have been moved
  to windivert.h for windivert_device.h.
 2019-02-17 11:08:10 +08:00
basil00 4f7ff88664 Add batched recv/send to WinDivert (#156). 
This change allows multiple packets to be
received/sent at once, reducing overheads.  To
exploit this feature, applications need to use
the WinDivertRecvEx()/WinDivertSendEx()
functions with the new addrLen parameter.  The
passthru example has been modified to use
batching.

The DEBUG flag has been retired since it
conflicts with batching, and was not very
useful anyway.
 2018-11-03 08:40:34 +08:00
basil00 6250568974 Add a new FLOW layer into WinDivert. 
Adds a new WINDIVERT_LAYER_FLOW layer that can:
- Track when flows are established
- Track when existing flows are deleted
 2018-09-30 09:07:16 +08:00
basil00 822dca9c3f Use snprintf() instead of sprintf_s(). 
The latter does not seem to work for MINGW.
 2018-07-03 09:37:14 +08:00
basil00 6ac22c1650 Retire MSVC-2012 and (non-driver) WDDK builds. 
The new MINGW build should be compatible with all
major compilers, including Visual Studio 201X.
 2018-07-02 19:23:49 +08:00
basil00 1543e958e6 Dual-license WinDivert under the LGPLv3 and GPLv2. 
This allows projects that are strictly "GPLv2
only" to use WinDivert without licensing issues.
See the FSF's compatibility matrix here:
https://www.gnu.org/licenses/gpl-faq.en.html

This change does not affect existing projects
that can continue to use the LGPLv3 as before.

Also, bump the WinDivert version to 1.4.1.
 2018-04-04 18:41:45 +08:00
basil00 aea3a3a858 Add support for pseudo IP/TCP/UDP checksums. 
Most NIC cards support checksum offloading,
meaning that it is not necessary to calculate the
full IP/TCP/UDP checksums for injected packets.
WINDIVERT_ADDRESS has been extended to include 3
extra flags that indicate if the packet has full
or pseudo checksums.  This is a WIP.
 2017-11-09 22:11:13 +08:00
basil00 135e084ef7 Minor bugfix (streamdump). 2016-01-31 19:42:06 +08:00
basil00 3386987f6a Fix compilation of streamdump for MSVC. 2016-01-31 17:21:44 +08:00
basil00 7cfc3e2e72 Further integrate the streamdump sample. 
Untested.
 2016-01-19 10:57:47 +08:00
basil00 eda0a86589 Add a new sample program: streamdump 
Streamdump demonstrates how to handle streams using WinDivert.

This is a WIP.
 2016-01-11 10:36:10 +08:00