none
Source code for RNDIS Miniport/protocol/filter driver RRS feed

  • Question

  • Hi Experts,

    I explored through few sample codes provided for miniport drivers.

    Is there source code used for the RNDIS driver available in MSDN ?

    I am bit curious to see and learn the way of implementation !!


    lyf4sci

    Thursday, October 2, 2014 1:13 PM

Answers

  • No there is no source available for RNDIS.  The principal is you build your device to the specification and it just works.


    Don Burn Windows Filesystem and Driver Consulting Website: http://www.windrvr.com

    Thursday, October 2, 2014 1:15 PM

All replies

  • No there is no source available for RNDIS.  The principal is you build your device to the specification and it just works.


    Don Burn Windows Filesystem and Driver Consulting Website: http://www.windrvr.com

    Thursday, October 2, 2014 1:15 PM
  • Hi Don,

    Thanks for the reply.

    Is it possible to see the trace prints of the RNDIS driver using event viewer or message analyzer ?

    Also is it possible to insert a proprietary driver (protocol/filter) in between the existing RNDIS driver which projects as the network adapter ?

    Regards,

    Lyf


    lyf4sci

    Wednesday, October 8, 2014 6:57 AM
  • I am not the best expert on this, but some questions first:

    1.  Are you trying to insert a driver above RNDIS or below?  Either should be possible, but the level of documentation on what is going on will be different.

    2.  What is the "real problem" you are trying to solve?


    Don Burn Windows Filesystem and Driver Consulting Website: http://www.windrvr.com

    Wednesday, October 8, 2014 5:07 PM
  • To enable the debug spew you'll need to use WinDbg to deposit a value into a control variable that controls the amount of spew. To find the name of the control variable, use the 'X' command, such as "x rndismp6!*debug*" or "x rndismpx!*dbg*". Then used the 'E' command to deposit a value, such as "ED rndismpx!debugflags 0xffffffff", where debugflags comes from the result of the 'X' command.

    I would also recommend using Message Analyzer to allow you to see the packets.

    You cannot insert a filter directly below the RNDIS miniport, but you can achieve the same effect using the Windows Filtering Platform to catch all outgoing and incoming packets.

     -Brian


    Azius Developer Training www.azius.com Windows device driver, internals, security, & forensics training and consulting. Blog at www.azius.com/blog

    Wednesday, October 8, 2014 8:56 PM
    Moderator
  • Hi Don,

    Thanks for reply.

    For your questions,

    1. To trace the packets sent over RNDIS.

    2. I would like to establish the control path to the my android phone like switching ON and OFF the data connection using OID's from windows API's whereas the RNDIS provides the data path alone. Correct me if my perception is wrong.

    Regards,

    Lyf


    lyf4sci

    Thursday, October 9, 2014 5:36 PM