#include <stdarg.h>
#include <ntddk.h>
#include <ntiologc.h>
#include <ndis.h>
#include "debug.h"
#include "packet.h"
#include "win_bpf.h"
Go to the source code of this file.
Functions | |
NTSTATUS | NPF_OpenDumpFile (POPEN_INSTANCE Open, PUNICODE_STRING fileName, BOOLEAN Append) |
Creates the file that will receive the packets when the driver is in dump mode. | |
NTSTATUS | NPF_StartDump (POPEN_INSTANCE Open) |
Starts dump to file. | |
VOID | NPF_DumpThread (POPEN_INSTANCE Open) |
NTSTATUS | NPF_SaveCurrentBuffer (POPEN_INSTANCE Open) |
Saves the content of the packet buffer to the file associated with current instance. | |
NTSTATUS | NPF_CloseDumpFile (POPEN_INSTANCE Open) |
Closes the dump file associated with an instance of the driver. | |
NTSTATUS | PacketDumpCompletion (PDEVICE_OBJECT DeviceObject, PIRP Irp, PVOID Context) |
VOID | NPF_WriteDumpFile (PFILE_OBJECT FileObject, PLARGE_INTEGER Offset, ULONG Length, PMDL Mdl, PIO_STATUS_BLOCK IoStatusBlock) |
Writes a block of packets on the dump file. |
|
Closes the dump file associated with an instance of the driver.
Definition at line 470 of file dump.c. References _OPEN_INSTANCE::DumpFileHandle, _OPEN_INSTANCE::DumpFileName, _OPEN_INSTANCE::DumpFileObject, _OPEN_INSTANCE::DumpOffset, NPF_OpenDumpFile(), and NPF_SaveCurrentBuffer(). Referenced by NPF_Close(), NPF_IoControl(), and NPF_UnbindAdapter(). |
|
Definition at line 274 of file dump.c. References _OPEN_INSTANCE::DumpEvent, _OPEN_INSTANCE::DumpLimitReached, _OPEN_INSTANCE::DumpOffset, NPF_SaveCurrentBuffer(), and _OPEN_INSTANCE::Size. |
|
Creates the file that will receive the packets when the driver is in dump mode.
Definition at line 45 of file dump.c. References _OPEN_INSTANCE::DumpFileHandle, and _OPEN_INSTANCE::DumpFileObject. Referenced by NPF_CloseDumpFile(), and NPF_IoControl(). |
|
Saves the content of the packet buffer to the file associated with current instance.
Definition at line 312 of file dump.c. References _OPEN_INSTANCE::DumpFileObject, _OPEN_INSTANCE::DumpLimitReached, _OPEN_INSTANCE::DumpOffset, _OPEN_INSTANCE::MaxDumpBytes, NPF_WriteDumpFile(), and _OPEN_INSTANCE::ReadEvent. Referenced by NPF_CloseDumpFile(), and NPF_DumpThread(). |
|
Starts dump to file.
Definition at line 153 of file dump.c. References _OPEN_INSTANCE::DumpFileHandle, _OPEN_INSTANCE::DumpFileObject, _OPEN_INSTANCE::DumpOffset, _OPEN_INSTANCE::DumpThreadHandle, _OPEN_INSTANCE::DumpThreadObject, packet_file_header::linktype, packet_file_header::magic, _OPEN_INSTANCE::Medium, PCAP_VERSION_MAJOR, PCAP_VERSION_MINOR, packet_file_header::sigfigs, packet_file_header::snaplen, TCPDUMP_MAGIC, packet_file_header::thiszone, packet_file_header::version_major, and packet_file_header::version_minor. Referenced by NPF_IoControl(). |
|
Writes a block of packets on the dump file.
Definition at line 531 of file dump.c. Referenced by NPF_SaveCurrentBuffer(). |
|
|
documentation. Copyright (c) 2002-2003 Politecnico di Torino. All rights reserved.